Edit tour

Windows Analysis Report
https://offfryfjtht767755433.webflow.io/

Overview

General Information

Sample URL:	https://offfryfjtht767755433.webflow.io/
Analysis ID:	1590402
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

AI detected suspicious Javascript

Connects to several IPs in different countries

Detected clear text password fields (password is not hidden)

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4284 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 --field-trial-handle=2512,i,3008821820161670398,12908520785371167314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://offfryfjtht767755433.webflow.io/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-14T01:13:20.287295+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	53448	52.211.89.170	443	TCP
2025-01-14T01:13:39.295551+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	53666	96.46.186.61	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://offfryfjtht767755433.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

AI detected phishing page

Source: https://offfryfjtht767755433.webflow.io/

Joe Sandbox AI: Score: 9 Reasons: The brand AT&T is a well-known telecommunications company., The URL 'offfryfjtht767755433.webflow.io' does not match the legitimate domain 'att.com'., The domain 'webflow.io' is a platform for web design and hosting, which can be used by anyone to create websites, making it suspicious for a brand like AT&T., The subdomain 'offfryfjtht767755433' is nonsensical and does not relate to AT&T, which is a common tactic in phishing to confuse users., The presence of input fields for sensitive information like 'Username or email, or mobile' and 'Password' on a non-legitimate domain increases the risk of phishing. DOM: 1.0.pages.csv

AI detected suspicious Javascript

Source: 0.30.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://43187c8ffbbc76326c593e2ad756bd83.safeframe... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The combination of these factors indicates a high likelihood of malicious intent, potentially for phishing or other malicious activities.

Source: https://offfryfjtht767755433.webflow.io/

HTTP Parser: <input type="text"... for password input

Source: https://offfryfjtht767755433.webflow.io/	HTTP Parser: Number of links: 0
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&specId=yidregsimplified&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Number of links: 1
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&intl=us&context=reg	HTTP Parser: Number of links: 1

Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Base64 decoded: o=2&type=1&code=1928&tl=43200

Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Iframe src: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1#config=%7B%22positions%22%3A%5B%7B%22adUnitPath%22%3A%22%2F22888152279%2Fus%2Fylogin%2Fmain%2Fdt%2Fus_ylogin_main_dt_full_screen%22%2C%22adLocation%22%3A%22full_screen%22%2C%22size%22%3A%5B%5B1440%2C1024%5D%2C%5B%22fluid%22%5D%5D%2C%22div%22%3A%22gpt-passback%22%7D%5D%2C%22pageUrl%22%3A%22https%3A%2F%2Flogin.yahoo.com%22%2C%22headerBidder%22%3Atrue%2C%22yahooPrebid%22%3Atrue%2C%22geoCountryCode%22%3A%22US%22%2C%22npa%22%3Afalse%2C%22limited%22%3Afalse%2C%22targetingConfig%22%3A%7B%22lang%22%3A%22en-US%22%2C%22bucket%22%3A%22mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%22%2C%22spaceId%22%3A%22794200123%22%2C%22adLocation%22%3A%22full_screen%22%2C%22age%22%3A%220%22%2C%22gender%22%3A%220%22%2C%22colo%22%3A%22bf1%22%2C%22lu%22%3A%220%22%2C%22site%22%3A%22login%22%2C%22device%22%3A%22desktop%22%2C%22region%22%3A%22us%22%2C%22pageOrigin%22%3A%22https%3A%2F%2Flogin.yahoo.com%22%2C%22AXIds%22%3A%22%22%2C%22tblaId%22%3A%22%22%7D%2C%22headerBidderConfig%22%3A%7B%22host%22%3A%22login.yahoo.com%22%2C%22pblob%22%3A%22lu%3A0%7C%7C794200123%7C%7C%22%2C%22buckets%22%3A%5B%22mbr-whatsapp-ac%22%2C%22mbr-passkey-unr-reg%22%2C%22mbr-whatsapp-nac%22%5D%2C%22limited%22%3Afalse%2C%22cobrand%22%3A%22%22%2C%22lang%22%3A%22en-US%22%2C%22site%22%3A%22yahoo_login%22%2C%22region%22%3A%22us%22%2C%22adLocation%22%3A%22full_screen%22%7D%7D
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Iframe src: https://gps-aa.ybp.yahoo.com/bid/yoo/adslot/13885/?pa=1
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Iframe src: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1#config=%7B%22positions%22%3A%5B%7B%22adUnitPath%22%3A%22%2F22888152279%2Fus%2Fylogin%2Fmain%2Fdt%2Fus_ylogin_main_dt_full_screen%22%2C%22adLocation%22%3A%22full_screen%22%2C%22size%22%3A%5B%5B1440%2C1024%5D%2C%5B%22fluid%22%5D%5D%2C%22div%22%3A%22gpt-passback%22%7D%5D%2C%22pageUrl%22%3A%22https%3A%2F%2Flogin.yahoo.com%22%2C%22headerBidder%22%3Atrue%2C%22yahooPrebid%22%3Atrue%2C%22geoCountryCode%22%3A%22US%22%2C%22npa%22%3Afalse%2C%22limited%22%3Afalse%2C%22targetingConfig%22%3A%7B%22lang%22%3A%22en-US%22%2C%22bucket%22%3A%22mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%22%2C%22spaceId%22%3A%22794200123%22%2C%22adLocation%22%3A%22full_screen%22%2C%22age%22%3A%220%22%2C%22gender%22%3A%220%22%2C%22colo%22%3A%22bf1%22%2C%22lu%22%3A%220%22%2C%22site%22%3A%22login%22%2C%22device%22%3A%22desktop%22%2C%22region%22%3A%22us%22%2C%22pageOrigin%22%3A%22https%3A%2F%2Flogin.yahoo.com%22%2C%22AXIds%22%3A%22%22%2C%22tblaId%22%3A%22%22%7D%2C%22headerBidderConfig%22%3A%7B%22host%22%3A%22login.yahoo.com%22%2C%22pblob%22%3A%22lu%3A0%7C%7C794200123%7C%7C%22%2C%22buckets%22%3A%5B%22mbr-whatsapp-ac%22%2C%22mbr-passkey-unr-reg%22%2C%22mbr-whatsapp-nac%22%5D%2C%22limited%22%3Afalse%2C%22cobrand%22%3A%22%22%2C%22lang%22%3A%22en-US%22%2C%22site%22%3A%22yahoo_login%22%2C%22region%22%3A%22us%22%2C%22adLocation%22%3A%22full_screen%22%7D%7D
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Iframe src: https://gps-aa.ybp.yahoo.com/bid/yoo/adslot/13885/?pa=1
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Iframe src: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1#config=%7B%22positions%22%3A%5B%7B%22adUnitPath%22%3A%22%2F22888152279%2Fus%2Fylogin%2Fmain%2Fdt%2Fus_ylogin_main_dt_full_screen%22%2C%22adLocation%22%3A%22full_screen%22%2C%22size%22%3A%5B%5B1440%2C1024%5D%2C%5B%22fluid%22%5D%5D%2C%22div%22%3A%22gpt-passback%22%7D%5D%2C%22pageUrl%22%3A%22https%3A%2F%2Flogin.yahoo.com%22%2C%22headerBidder%22%3Atrue%2C%22yahooPrebid%22%3Atrue%2C%22geoCountryCode%22%3A%22US%22%2C%22npa%22%3Afalse%2C%22limited%22%3Afalse%2C%22targetingConfig%22%3A%7B%22lang%22%3A%22en-US%22%2C%22bucket%22%3A%22mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%22%2C%22spaceId%22%3A%22794200123%22%2C%22adLocation%22%3A%22full_screen%22%2C%22age%22%3A%220%22%2C%22gender%22%3A%220%22%2C%22colo%22%3A%22bf1%22%2C%22lu%22%3A%220%22%2C%22site%22%3A%22login%22%2C%22device%22%3A%22desktop%22%2C%22region%22%3A%22us%22%2C%22pageOrigin%22%3A%22https%3A%2F%2Flogin.yahoo.com%22%2C%22AXIds%22%3A%22%22%2C%22tblaId%22%3A%22%22%7D%2C%22headerBidderConfig%22%3A%7B%22host%22%3A%22login.yahoo.com%22%2C%22pblob%22%3A%22lu%3A0%7C%7C794200123%7C%7C%22%2C%22buckets%22%3A%5B%22mbr-whatsapp-ac%22%2C%22mbr-passkey-unr-reg%22%2C%22mbr-whatsapp-nac%22%5D%2C%22limited%22%3Afalse%2C%22cobrand%22%3A%22%22%2C%22lang%22%3A%22en-US%22%2C%22site%22%3A%22yahoo_login%22%2C%22region%22%3A%22us%22%2C%22adLocation%22%3A%22full_screen%22%7D%7D
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Iframe src: https://gps-aa.ybp.yahoo.com/bid/yoo/adslot/13885/?pa=1
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Iframe src: https://tsdtocl.com
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: Iframe src: https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Flogin.yahoo.com%2F%3F.src%3Dym%26pspid%3D159600001%26activity%3Dmail-direct%26.lang%3Den-US%26.intl%3Dus%26.done%3Dhttps%253A%252F%252Fmail.yahoo.com%252Fd%252Ffolders%252F4%253Freason%253Dinvalid_cred%2526guce_referrer%253DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%2526guce_referrer_sig%253DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&axids=gam%3Dy-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A%26dv360%3DeS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B%26ydsp%3Dy-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A%26tbla%3Dy-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1

Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: <input type="password" .../> found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&specId=yidregsimplified&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: <input type="password" .../> found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&intl=us&context=reg	HTTP Parser: <input type="password" .../> found

Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No favicon

Source: https://offfryfjtht767755433.webflow.io/	HTTP Parser: No <meta name="author".. found
Source: https://offfryfjtht767755433.webflow.io/	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&specId=yidregsimplified&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&specId=yidregsimplified&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&intl=us&context=reg	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&intl=us&context=reg	HTTP Parser: No <meta name="author".. found

Source: https://offfryfjtht767755433.webflow.io/	HTTP Parser: No <meta name="copyright".. found
Source: https://offfryfjtht767755433.webflow.io/	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&specId=yidregsimplified&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&specId=yidregsimplified&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&intl=us&context=reg	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&intl=us&context=reg	HTTP Parser: No <meta name="copyright".. found

Source: unknown

Network traffic detected: IP country count 13

Source: global traffic

TCP traffic: 192.168.2.4:53370 -> 162.159.36.2:53

Source: global traffic

DNS traffic detected: number of DNS queries: 111

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:53448 -> 52.211.89.170:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:53666 -> 96.46.186.61:443

Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.196
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: offfryfjtht767755433.webflow.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6783bca3840111e5424ee986/css/offfryfjtht767755433.webflow.e98bb735c.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6783bca3840111e5424ee986/js/webflow.967b2dfec747eeb055e813a1fe43b230.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6783bca3840111e5424ee986 HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://offfryfjtht767755433.webflow.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6783bca3840111e5424ee986/6783bddc64c839548aaca1bf_ATT%20LOGOM.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6783bca3840111e5424ee986/js/webflow.967b2dfec747eeb055e813a1fe43b230.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6783bca3840111e5424ee986/6783bddc64c839548aaca1bf_ATT%20LOGOM.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6783bca3840111e5424ee986 HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90196aba2c860f98&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90196aba2c860f98&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1400638156:1736810115:4fgdCy3Y0sO6QOVyobUg6DnFEglnskOp8hAFVBcFeMA/90196aba2c860f98/azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/90196aba2c860f98/1736813573973/a06144902a6c58b64de639719de67546b8e64059a1cbaa1e1fc3336cf23c78e7/KPAFIp1G787jD7r HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/90196aba2c860f98/1736813573974/hdlLq_AxuGYOldi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/90196aba2c860f98/1736813573974/hdlLq_AxuGYOldi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1400638156:1736810115:4fgdCy3Y0sO6QOVyobUg6DnFEglnskOp8hAFVBcFeMA/90196aba2c860f98/azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/form/6783bca3840111e5424ee986 HTTP/1.1Host: webflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/folders/4?reason=invalid_cred&guce_referrer=aHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8&guce_referrer_sig=AQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_ HTTP/1.1Host: mail.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_ HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://offfryfjtht767755433.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
Source: global traffic	HTTP traffic detected: GET /wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/rapid-3.53.39.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/bundle.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
Source: global traffic	HTTP traffic detected: GET /cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bw/fonts/yahoo-sans-cr4-vf.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/rapid-3.53.39.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bw/fonts/centra-no2-bold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/bundle.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
Source: global traffic	HTTP traffic detected: GET /sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 HTTP/1.1Host: gpt.mail.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://login.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /nq/nr/taboolajs/taboola/cmp_utils_1.3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.2.29.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2my0; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A
Source: global traffic	HTTP traffic detected: GET /nq/nr/taboolajs/taboola/cmp_utils_1.3.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nq/nr/js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://login.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2my0; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.2.29.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d1tqrs7vz94d9k/script.js HTTP/1.1Host: cadmus.script.acConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/yahoo_login-us-desktop.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://login.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B
Source: global traffic	HTTP traffic detected: GET /aaq/prebid/prebid-2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nq/nr/js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/bp-yahoo_login.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2my0; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202501070101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d1tqrs7vz94d9k/script.js HTTP/1.1Host: cadmus.script.acConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/yahoo_login-us-desktop.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0:19e7~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A; IDSYNC="19cw~2my0:19e0~2my0"
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://login.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0:19e7~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/bp-yahoo_login.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logads?adType=gam&delay=timeout&spid=794200123 HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6ZxzI835pgoSVfSt2tQD_6cNDQfuvk5_qK81EmQDohRp5_tzoNput9Plo52VjHhSBuneg6FmTTVn1PIR2bv2tZ.TtW2cJuLhfcMMaew838G9na2qRR84ZloUXT7D3lsJNbKQM7MurXuP92puyLxGbrHU4ttSFLOeazoV.bEPSOHxjOAvbHK4A-~A; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A
Source: global traffic	HTTP traffic detected: GET /aaq/prebid/prebid-2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/did-004f/any?duid=dc5154c516e8--01jhh2gj4yxpk5wqcxcx9fqbp1&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.gpt.mail.yahoo.net&pu=https%3A%2F%2Flogin.yahoo.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202501070101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://login.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logads?adType=gam&delay=timeout&spid=794200123 HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6ZxzI835pgoSVfSt2tQD_6cNDQfuvk5_qK81EmQDohRp5_tzoNput9Plo52VjHhSBuneg6FmTTVn1PIR2bv2tZ.TtW2cJuLhfcMMaew838G9na2qRR84ZloUXT7D3lsJNbKQM7MurXuP92puyLxGbrHU4ttSFLOeazoV.bEPSOHxjOAvbHK4A-~A; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tsdtocl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /tag/opus-frame.html?referrer=https%3A%2F%2Flogin.yahoo.com%2F%3F.src%3Dym%26pspid%3D159600001%26activity%3Dmail-direct%26.lang%3Den-US%26.intl%3Dus%26.done%3Dhttps%253A%252F%252Fmail.yahoo.com%252Fd%252Ffolders%252F4%253Freason%253Dinvalid_cred%2526guce_referrer%253DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%2526guce_referrer_sig%253DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&axids=gam%3Dy-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A%26dv360%3DeS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B%26ydsp%3Dy-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A%26tbla%3Dy-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1736813596061&did=did-004f&se=e30&duid=dc5154c516e8--01jhh2gj4yxpk5wqcxcx9fqbp1&tv=8.51.0&pu=https%3A%2F%2Flogin.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.gpt.mail.yahoo.net HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0"
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0"
Source: global traffic	HTTP traffic detected: GET /OpenRTB/TaboolaHB/auction?publisher=1676624 HTTP/1.1Host: display.bidder.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1736813596061&did=did-004f&se=e30&duid=dc5154c516e8--01jhh2gj4yxpk5wqcxcx9fqbp1&tv=8.51.0&pu=https%3A%2F%2Flogin.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.gpt.mail.yahoo.net HTTP/1.1Host: rp.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7; lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7
Source: global traffic	HTTP traffic detected: GET /cookie_sync HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /openrtb2/auction HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0:19e7~2my0"
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0:19e7~2my0"
Source: global traffic	HTTP traffic detected: GET /lr_sync HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19
Source: global traffic	HTTP traffic detected: GET /ups/58746/sync?ui=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
Source: global traffic	HTTP traffic detected: GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
Source: global traffic	HTTP traffic detected: GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
Source: global traffic	HTTP traffic detected: GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-NImngKVE2pHO0hoKEqPekNGLH6DhGNV06_g-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admax/bid/partners/YPBJS HTTP/1.1Host: c2shb-oao.ssp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202214988&yho=y-725Nbs9E2p6CLtAKFBw7Q6Hpx9rmFJpwp_s-~A HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202501070101&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://gpt.mail.yahoo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /tag/opus-frame.html?referrer=https%3A%2F%2Fgpt.mail.yahoo.net%2Fsandbox%3Fclient%3Dlogin%26version%3D0.1%26limited%3D0%26headerBidder%3D1%26haq%3D1%26benji%3D1%23config%3D%257B%2522positions%2522%253A%255B%257B%2522adUnitPath%2522%253A%2522%252F22888152279%252Fus%252Fylogin%252Fmain%252Fdt%252Fus_ylogin_main_dt_full_screen%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522size%2522%253A%255B%255B1440%252C1024%255D%252C%255B%2522fluid%2522%255D%255D%252C%2522div%2522%253A%2522gpt-passback%2522%257D%255D%252C%2522pageUrl%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522headerBidder%2522%253Atrue%252C%2522yahooPrebid%2522%253Atrue%252C%2522geoCountryCode%2522%253A%2522US%2522%252C%2522npa%2522%253Afalse%252C%2522limited%2522%253Afalse%252C%2522targetingConfig%2522%253A%257B%2522lang%2522%253A%2522en-US%2522%252C%2522bucket%2522%253A%2522mbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%2522%252C%2522spaceId%2522%253A%2522794200123%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522age%2522%253A%25220%2522%252C%2522gender%2522%253A%25220%2522%252C%2522colo%2522%253A%2522bf1%2522%252C%2522lu%2522%253A%25220%2522%252C%2522site%2522%253A%2522login%2522%252C%2522device%2522%253A%2522desktop%2522%252C%2522region%2522%253A%2522us%2522%252C%2522pageOrigin%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522AXIds%2522%253A%2522%2522%252C%2522tblaId%2522%253A%2522%2522%257D%252C%2522headerBidderConfig%2522%253A%257B%2522host%2522%253A%2522login.yahoo.com%2522%252C%2522pblob%2522%253A%2522lu%253A0%257C%257C794200123%257C%257C%2522%252C%2522buckets%2522%253A%255B%2522mbr-whatsapp-ac%2522%252C%2522mbr-passkey-unr-reg%2522%252C%2522mbr-whatsapp-nac%2522%255D%252C%2522limited%2522%253Afalse%252C%2522cobrand%2522%253A%2522%2522%252C%2522lang%2522%253A%2522en-US%2522%252C%2522site%2522%253A%2522yahoo_login%2522%252C%2522region%2522%253A%2522us%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%257D%257D&tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&axids=gam%3Dy-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A%26dv360%3DeS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B%26ydsp%3Dy-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A%26tbla%3Dy-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accep
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=conversant&uid=AQAJC9JjqkKwxQIg3ULfAQEBAQEBAQCVYylcFQEBAJVjKVwV&expiration=1736900000&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19
Source: global traffic	HTTP traffic detected: GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=60147287448872733550594916507824635591
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=218993205127000050435&gdpr=&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2417d054-2ba1-4d51-a183-4333e652c96e; TDCPM=CAEYBSgCMgsIzuO6vN-O2j0QBTgB
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1557141662676483&correlator=519642126984560&eid=31089448%2C95332149%2C31088251%2C83321073%2C31089253&output=ldjh&gdfp_req=1&vrg=202501070101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cylogin%2Cmain%2Cdt%2Cus_ylogin_main_dt_full_screen&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=320x50%7C1440x1024&fluid=height&ifi=1&sfv=1-0-40&fsfs=1&fsbs=1&eri=5&sc=1&cookie_enabled=1&cdm=gpt.mail.yahoo.net&abxe=1&dt=1736813599931&adxs=-12245933&adys=-12245933&biw=-12245933&bih=-12245933&isw=1440&ish=1024&scr_x=-12245933&scr_y=-12245933&ucis=asgd039bvznl&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Flogin.yahoo.com&loc=https%3A%2F%2Fgpt.mail.yahoo.net%2Fsandbox%3Fclient%3Dlogin%26version%3D0.1%26limited%3D0%26headerBidder%3D1%26haq%3D1%26benji%3D1%23config%3D%257B%2522positions%2522%253A%255B%257B%2522adUnitPath%2522%253A%2522%252F22888152279%252Fus%252Fylogin%252Fmain%252Fdt%252Fus_ylogin_main_dt_full_screen%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522size%2522%253A%255B%255B1440%252C1024%255D%252C%255B%2522fluid%2522%255D%255D%252C%2522div%2522%253A%2522gpt-passback%2522%257D%255D%252C%2522pageUrl%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522headerBidder%2522%253Atrue%252C%2522yahooPrebid%2522%253Atrue%252C%2522geoCountryCode%2522%253A%2522US%2522%252C%2522npa%2522%253Afalse%252C%2522limited%2522%253Afalse%252C%2522targetingConfig%2522%253A%257B%2522lang%2522%253A%2522en-US%2522%252C%2522bucket%2522%253A%2522mbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%2522%252C%2522spaceId%2522%253A%2522794200123%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522age%2522%253A%25220%2522%252C%2522gender%2522%253A%25220%2522%252C%2522colo%2522%253A%2522bf1%2522%252C%2522lu%2522%253A%25220%2522%252C%2522site%2522%253A%2522login%2522%252C%2522device%2522%253A%2522desktop%2522%252C%2522region%2522%253A%2522us%2522%252C%2522pageOrigin%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522AXIds%2522%253A%2522%2522%252C%2522tblaId%2522%253A%2522%2522%257D%252C%2522headerBidderConfig%2522%253A%257B%2522host%2522%253A%2522login.yahoo.com%2522%252C%2522pblob%2522%253A%2522lu%253A0%257C%257C794200123%257C%257C%2522%252C%2522buckets%2522%253A%255B%2522mbr-whatsapp-ac%2522%252C%2522mbr-passkey-unr-reg%2522%252C%2522mbr-whatsapp-nac%2522%255D%252C%2522limited%2522%253Afalse%252C%2522cobrand%2522%253A%2522%2522%252C%2522lang%2522%253A%2522en-US%2522%252C%2522site%2522%253A%2522yahoo_login%2522%252C%2522region%2522%253A%2522us%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%257D%257D&top=login.yahoo.com&vis=1&psz=0x0&msz=0x0&fws=256&ohw=0&topics=3&tps=3&htps=1
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202501070101&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/js/car.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveAccept: application/javascriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=70693F37AADC071D
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=conversant&uid=AQAJC9JjqkKwxQIg3ULfAQEBAQEBAQCVYylcFQEBAJVjKVwV&expiration=1736900000&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifX19
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=60147287448872733550594916507824635591; dpm=60147287448872733550594916507824635591
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=218993205127000050435&gdpr=&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=ttd&uid=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent= HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifX19
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=70693F37AADC071D
Source: global traffic	HTTP traffic detected: GET /api/user/image/62ce79e7dd15099534ae5e04?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&redirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkueez%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24%7BuserId%7D HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2/232/runner.html HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1557141662676483&correlator=519642126984560&eid=31089448%2C95332149%2C31088251%2C83321073%2C31089253&output=ldjh&gdfp_req=1&vrg=202501070101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cylogin%2Cmain%2Cdt%2Cus_ylogin_main_dt_full_screen&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=320x50%7C1440x1024&fluid=height&ifi=1&sfv=1-0-40&fsfs=1&fsbs=1&eri=5&sc=1&cookie_enabled=1&cdm=gpt.mail.yahoo.net&abxe=1&dt=1736813599931&adxs=-12245933&adys=-12245933&biw=-12245933&bih=-12245933&isw=1440&ish=1024&scr_x=-12245933&scr_y=-12245933&ucis=asgd039bvznl&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Flogin.yahoo.com&loc=https%3A%2F%2Fgpt.mail.yahoo.net%2Fsandbox%3Fclient%3Dlogin%26version%3D0.1%26limited%3D0%26headerBidder%3D1%26haq%3D1%26benji%3D1%23config%3D%257B%2522positions%2522%253A%255B%257B%2522adUnitPath%2522%253A%2522%252F22888152279%252Fus%252Fylogin%252Fmain%252Fdt%252Fus_ylogin_main_dt_full_screen%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522size%2522%253A%255B%255B1440%252C1024%255D%252C%255B%2522fluid%2522%255D%255D%252C%2522div%2522%253A%2522gpt-passback%2522%257D%255D%252C%2522pageUrl%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522headerBidder%2522%253Atrue%252C%2522yahooPrebid%2522%253Atrue%252C%2522geoCountryCode%2522%253A%2522US%2522%252C%2522npa%2522%253Afalse%252C%2522limited%2522%253Afalse%252C%2522targetingConfig%2522%253A%257B%2522lang%2522%253A%2522en-US%2522%252C%2522bucket%2522%253A%2522mbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%2522%252C%2522spaceId%2522%253A%2522794200123%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522age%2522%253A%25220%2522%252C%2522gender%2522%253A%25220%2522%252C%2522colo%2522%253A%2522bf1%2522%252C%2522lu%2522%253A%25220%2522%252C%2522site%2522%253A%2522login%2522%252C%2522device%2522%253A%2522desktop%2522%252C%2522region%2522%253A%2522us%2522%252C%2522pageOrigin%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522AXIds%2522%253A%2522%2522%252C%2522tblaId%2522%253A%2522%2522%257D%252C%2522headerBidderConfig%2522%253A%257B%2522host%2522%253A%2522login.yahoo.com%2522%252C%2522pblob%2522%253A%2522lu%253A0%257C%257C794200123%257C%257C%2522%252C%2522buckets%2522%253A%255B%2522mbr-whatsapp-ac%2522%252C%2522mbr-passkey-unr-reg%2522%252C%2522mbr-whatsapp-nac%2522%255D%252C%2522limited%2522%253Afalse%252C%2522cobrand%2522%253A%2522%2522%252C%2522lang%2522%253A%2522en-US%2522%252C%2522site%2522%253A%2522yahoo_login%2522%252C%2522region%2522%253A%2522us%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%257D%257D&top=login.yahoo.com&vis=1&psz=0x0&msz=0x0&fws=256&ohw=0&topics=3&tps=3&htps=1
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=ttd&uid=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent= HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifSwidHRkIjp7InVpZCI6IjI0MTdkMDU0LTJiYTEtNGQ1MS1hMTgzLTQzMzNlNjUyYzk2ZSIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIyLjMzOTYwMTMxMVoifX19
Source: global traffic	HTTP traffic detected: GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /aaq/puc/creative.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-xandr%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/yahoo?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkargo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssyiuIC-Yc_tzOyEwUUgSElb4wEMTpRHGPisjd7Fbctotn6RdObjkzo2Hw0MZEfrx7PSKX9q-hG6iRQddhjWyCQ4sd2NoSDq9TdjY8khv0rfhCjFuwrVLFkU5xACg_4FqyWHbsDsc8zHGi57unPSazx2FDQFzoC4DX-TIMObj0rGO7wsrx5dzrQGdkJqfVvZnHxoEZdzzF27IF0mYBmll_IDoVo3ake4O5iIuWL9_HbF398Wsz9hXvHuOMuxtyHfUzKOrES5YNuY1uivDlCJnF5vS2F-YPGL_7y1Fobi13SFb-8FzjoDiAkKLhx8Vytqdj_TPaSl8wjJty3JPs_3-4Api0zDmmPMDoI8dnNYpaQhw72vfP-biN_j-3SNMfeb6NMnebU41qwhN1NhlsYgk1mhTMzlIkDww91TIa01OZV9zb0d1K_aTXvSiB4IxO5_5UomEVfQjHZ1tFGaMlGuqYY5cvbhnJB&sai=AMfl-YQGsXakW6IvTYFHYQ7gGfTjPRgIG8-sA2it2hEOflxl5WxTqbX6ucxnwg7V093sNHQ89DfbKp6fe2YseGOa3B2azYRQhtEzd7vJ9nU7JpPuzW2meNUu239QlbEhnK_yg5F4maH-4mjbEk-MsDwNWg&sig=Cg0ArKJSzNQIdCFwEvtqEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.kueezrtb.com%252Fapi%252Fcookie%253FpartnerId%253Dkueez-xandr%2526userId%253D%2524UID%2526gdpr%253D0%2526gdpr_consent%253D%2526us_privacy%253D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=jGGehehR8QxTF2SvEKQ8gNnjIYZ0sx68VFKygcUwXYPEy1WI-jrFYhVHCtpoxXhV5yd8fwKDt5pbid5fVh81kgvaUlVRDQgm5NExphKy8-0.; receive-cookie-deprecation=1; uuid2=3372432284170253134
Source: global traffic	HTTP traffic detected: GET /aaq/puc/creative.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logads?adType=gam&delay=13197&spid=794200123 HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6ZxzI835pgoSVfSt2tQD_6cNDQfuvk5_qK81EmQDohRp5_tzoNput9Plo52VjHhSBuneg6FmTTVn1PIR2bv2tZ.TtW2cJuLhfcMMaew838G9na2qRR84ZloUXT7D3lsJNbKQM7MurXuP92puyLxGbrHU4ttSFLOeazoV.bEPSOHxjOAvbHK4A-~A; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/yahoo?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkargo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=def46077-c79d-0195-5d6d-7af61e67c0a8
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /libtrc/yahoomailloginen-headerbidding/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /2.0/json/yahoomailloginen-headerbidding/recommendations.notify-win-nurl?app.type=desktop&app.apikey=0208da576d71919bb5ac9ecf5d1b67100bb52c21&response.id=__9931da41fd42fc200525d8e4e1de2eea__40f9390f914fde32c7b61466a93387b1__%7E%7EV1%7E%7E-3495429243288887471%7E%7EmF71SyMFpRHCp1HFBpWo6IyW1E_iyYMYqT0LaguzxEfpZyC7dGVdvKnSHsaHrNsFqPTW8wjc3e4dIvQTJ_LPHG-15pTKcuNBty4hmDPn5m6dn4VohJoI3GZ5LZos9pCAjxfAtsj75Zm6PzSBS4yNyYA1MzMrrjmGLD41byTZY9lz8LOyx8jNEAOcYGn2Toi253WZ-0A5yJvJSwB54E1qFryvhmW4JF0Gm3vlJUXSh_3Q9TvpdT8vSHpg7Jw6EWZIxBCX-AilB-B7iVLJlwPWvCMufPc283TrCkKZvJjhwSFCXAR4BoXKTLntqhGANHbtzetzfiE-skgsidjAuBnkVQ__text&response.session=v2_c6d286ca3179fb6a91cab0760cea66f1_7ace7fe0-0abd-410f-a642-598ce2a8780b-tucte7f319d_1736813597_1736813597_CIi3jgYQ0KpmGJu3so6bkI6E4QEgASgBMOEBOJGkDkDVpg9I2YjXA1D1A1gAYABoxIbm7PuHsLpscAGAAQA&view.external-id=5eaf3efca587ad&vpb=EgRTQ09EGMDZBCDgkQYqCVRhYm9vbGFIQjDyp6GRxjI6GXVzLnRhYm9vbGFzeW5kaWNhdGlvbi5jb21CBzE2NzY2MjRKHnlhaG9vbWFpbGxvZ2luZW4taGVhZGVyYmlkZGluZ1IPbG9naW4ueWFob28uY29tYJCdBGoJVGFib29sYUhCcgRob21leAGCAVxsb2dpbi55YWhvby5jb21fUDE2NzY2MjRfUzE2NzY2MjRfVFlhaG9vIExvZ2luIC0gTWFpbiAtIERlc2t0b3AgLSBGdWxsX1NjcmVlbl9XMTQ0MF9IMTAyNF9OMYoBAnVz&idf=false&idfs=true&idfkfc=true&wp=0.9007&obp=fd9da6f33f1dd98a&it=TaboolaHB&cu=USD&viperAppType=SCOD&route=US%3AUS%3AV HTTP/1.1Host: api.archive-digger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=kueez-xandr&userId=3372432284170253134&gdpr=0&gdpr_consent=&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=8a942ec5-27a9-1928-d76f-71229861b328; vdz_r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkueez%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D8a942ec5-27a9-1928-d76f-71229861b328; vdzj1_af568f45=VXU129pqa3agG3KfxQlIBAEEVCSJBOERCYlJHUgQAUXYAc1VLCUdGVAtTVHQCLl9OWEZTTRFXVHdVf1RKXUJGV1cDBSEEc1JNWhJIWVFDS2UFeFEZD0EXVQIABHEHeVFMDUhHBwsEBSURZ0ROChQXBQFUVXIHKVEZWxJBU1VQUnQFflBaFVJHUgQAUXZSeVIbDRZDAAIDUHFQfFMaDxZTTRFXUiZWfgMcD0dBBwJWV34ELgJIDkBIUwVDS2UFeFEZD0ITUQIABHEHeVFMDUhHBwpRU3ARZ0ROCxZEVgsAX39WKANKD0NEAwVYBncAfVNaFVJHUgQFV3YHfF8bCkZDUwJWBCZQKl5IWEdTTRFXVHBSfgMbXUNCUQRWUn8BeFVJXEgUBwdDS2UFfFdPARQQUVIEVXdVe1MdCBZIAAcEUSQRZ0ROCxQVWFBSVX4BLlZMX0dDWFVZBH8HclZaFVJHUgZXBXUBegdIDBUXU1VZU3ZSfFFBAUhTTRFXVHBSfVZICkEQAgVVVXAHf15OX0hIUQJDS2UFeAVLWxNGWFVZUXUAKlNJChVJB1ACXnIRZ0ROCkMSVgUEUXAHfVNJDkcQAgsHAyUKLldaFVJHUgFZBiEHL1EeWBFCVgcDUHRWeVNLWxVTTRFXVHBSfVYbX0QSVVVTBnZRfFAbDkUTVwVDS2UFeFEZDBUXUAcCUyEBKlcaDkYSVgZVAXERZ0RODxUQWFcCXyUKc1VBW0NJBVcFVCUFeAVaFVJHUgQAUXQHL1IbDRZDAAIDUHFQfFBJXUhTTRFXVHBSfgAaWkNCUQRWUn8BeFVJXElHWQVDS2UFfQJPCUAVWQVTUCQFKlceAUQTBwIAAnERZ0ROCkcQVwFZAnZSKFBMC0dFVQtXAX4Df1RaFVJHV1JXVHVVKARLDEJCUwJWAnUFclRLC0hTTRFXVHRSclFKCBVAVlACUndQfwJNDhETBQdDS2UFeFEZDEhAWQIABHEHeVFMDUhHBwAEAXQRZ0ROCkcQVFVSBHNQfwBKWEETVgUCUHIHLQRaFVJHV1dXAXNVeVBKDhNHAAIHX3NRKVAaWhVTTRFXU3dXKl9NX0NGWQBWBHUDcl5NDRUTUgZDS2UFeFEZDBZEVQIABHEHeVFMDUhHBwtTV3ERZ0ROChRDVVYAViELfVRLWEVAUlZQX3YGKFVaFVJHUgQAUiJRf1cZWkZFUwRVU38FLV5JX0RTPB9DACNDOURCQlIYEnY0RX1VKgoLXFxTBlcRFWUJaVZaFVIWBUMTJChdOAMWTVJLQxFNRTJAGxQRTxESGBFbRWUfaQEISVJLQ3cjJgYRZ0QfSQAiCFdDXWUeekRUGwIUBVoTAiRHaVxaUQQFEUBbSGhDKRVWQBEZDlxPBCheZBUdTQUYBQwDDiNXLhRFUgUUBElHACNDOVtIHxcVEUE%2BBChdOAMWTU1XBkMRWgNxCideXgABPkAIA3oeekAeBBlXFFoFWmNIPhUdSzkVHBEcS2VaOC8VWBcUQwkVFTJWZ0QbVh4fBFAVDihdAgJaA1JHU1AEUH5WfAIcCEVBWApUVHNSLlMdCURTTRECCDJdP0RCCQ0%3D
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssyiuIC-Yc_tzOyEwUUgSElb4wEMTpRHGPisjd7Fbctotn6RdObjkzo2Hw0MZEfrx7PSKX9q-hG6iRQddhjWyCQ4sd2NoSDq9TdjY8khv0rfhCjFuwrVLFkU5xACg_4FqyWHbsDsc8zHGi57unPSazx2FDQFzoC4DX-TIMObj0rGO7wsrx5dzrQGdkJqfVvZnHxoEZdzzF27IF0mYBmll_IDoVo3ake4O5iIuWL9_HbF398Wsz9hXvHuOMuxtyHfUzKOrES5YNuY1uivDlCJnF5vS2F-YPGL_7y1Fobi13SFb-8FzjoDiAkKLhx8Vytqdj_TPaSl8wjJty3JPs_3-4Api0zDmmPMDoI8dnNYpaQhw72vfP-biN_j-3SNMfeb6NMnebU41qwhN1NhlsYgk1mhTMzlIkDww91TIa01OZV9zb0d1K_aTXvSiB4IxO5_5UomEVfQjHZ1tFGaMlGuqYY5cvbhnJB&sai=AMfl-YQGsXakW6IvTYFHYQ7gGfTjPRgIG8-sA2it2hEOflxl5WxTqbX6ucxnwg7V093sNHQ89DfbKp6fe2YseGOa3B2azYRQhtEzd7vJ9nU7JpPuzW2meNUu239QlbEhnK_yg5F4maH-4mjbEk-MsDwNWg&sig=Cg0ArKJSzNQIdCFwEvtqEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /pagead/sodar?id=sodar2&v=232&t=2&li=gpt_m202501070101&jk=1557141662676483&bg=!-Pul-7TNAAYsEuUeDBI7ADQBe5WfOHAAi2VAuxWGrQLhl6-8LsrgdslAO-EpqSf0h05DtXd68NmuzUy92I_eDS-FDuRxAgAAAMpSAAAACGgBB34ANhkmFEog6PobvdSW4PXNWAO_CHadVDqBzYhNog8aBMu6M7X80-kq6IGAJM7CHnNlozRUckI5owoAYzs56-1GeT6IZfdmkxKviFhqdnrvdUYmJbJ4cstq8LYPMcD69DN-xldJN1VIm9RdionmcM2HtUKncgYnUoQA8hKs_E1j0d7NS2BrRPgOCk69AslPwycq2FeD1AVyiJ7EAGTUIpkCtnf6fxJrYS09DVX02tMy4cu5LbbKFG7jaaClRck0pzi273ReUrh4M9caG17nzvPYD5djwfCvbCsQh-spEUMJToFoF55gUwKxAAsfs48U-UBZ4WeKi0jLSqajrvvWE2Q2faYtyaQiQxKboAXj_0hAQoAqBEc7taZse_2ZIy0JEkd0LTu7fbDtVE3E4-KVCcsW3T0VxkA6iC3gZHirobJdo3WqCPF0dWEyRqgdlC0tftfIy41CxeAl6pWbBaHxwRFipUOKUuKhPJJKTS6r1-dFjoBXpIVIywkPndcyquWr3gCGrH6UlrgwQchRC5RGDlBnw_o696L6_mCF3DzSrg0Qik4Y2go3_YHtQwNQoAlpWRvtzl5FSNxPR3h82OTMA57wXhWeZ5QncA-ICBislv2KSHHTeK_wa_KO1-E9V6ZPjb0cz45HZEzdA79lLduhJO5ZQcbEE0A6s62YNUHEddYJn_zbwoKt3LW6OKph7-SIAcrxv-spZV5wrkOjNFut3Y9SsWbevVIZLK38mm8xypStjbiGXOwRk9k-kCu-DcpdjCtc_g9Triv0jpauFM9q4SXzwZjG1IwuWPeniFeeFeGpBepxm8pxEzvVrmum22yGBlXtyrWdmg2xUVfKwU1bQOmUrnzlFu7eJY7yy34JwTOT5L5wYZdl9Xs34uABosNm2uaqdkw_kxqiPnYWR-K7Q734VP_7SPOxjVarefsnoqLUx60llBHTLdJenbm6TPxgDjFCak6sZ31iq6vG5FsZy04Ud3APsqzDBOrxglen7oLz3hW4aNyzKTW8MUh6taI55hsOzQPFMCB082BrvlH8R48wKEEMEXxxDvBcApPvIHdW9Upj_8GMP5vEKmwSJDGxxqnY5Kp9bP4N9xHa7_y7FmJDOuQxpVqol0gdHLa7tA843ifpOx_cQ7w HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logads?adType=gam&delay=13197&spid=794200123 HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6ZxzI835pgoSVfSt2tQD_6cNDQfuvk5_qK81EmQDohRp5_tzoNput9Plo52VjHhSBuneg6FmTTVn1PIR2bv2tZ.TtW2cJuLhfcMMaew838G9na2qRR84ZloUXT7D3lsJNbKQM7MurXuP92puyLxGbrHU4ttSFLOeazoV.bEPSOHxjOAvbHK4A-~A; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=M5VPZ6FP-1Y-IDHF&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifSwidHRkIjp7InVpZCI6IjI0MTdkMDU0LTJiYTEtNGQ1MS1hMTgzLTQzMzNlNjUyYzk2ZSIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIzLjQzMTI1NjI3M1oifX19
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=162110&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-pubmatic%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync?cs=1&type=pbs&ovsid=setstatuscode&bidder=medianet&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dmedianet%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%3Cvsid%3E HTTP/1.1Host: hbx.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/yahoomailloginen-headerbidding/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; abLdr=26
Source: global traffic	HTTP traffic detected: GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; abLdr=26
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /taboola/image/fetch/c_crop%2Cf_jpg%2Cq_auto%2Ce_sharpen%2Car_2.0000%2Cw_1000%2Cx_0%2Cy_28/c_fill%2Cw_100%2Ch_50/https%3A//cdn.taboola.com/libtrc/static/thumbnails/5d000774fbee3ea8d1c41472e38a533e.png HTTP/1.1Host: images.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=162110&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-pubmatic%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%23PMUID&rdf=1 HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirectuser?sid=GET_SID_FROM_ZETA&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dzeta_global_ssp%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DBUYERUID HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=medianet&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3798152066406142000V10 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifSwicnViaWNvbiI6eyJ1aWQiOiJNNVZQWjZGUC0xWS1JREhGIiwiZXhwaXJlcyI6IjIwMjUtMDEtMjhUMDA6MTM6MjUuOTM4NDM1MDI1WiJ9LCJ0dGQiOnsidWlkIjoiMjQxN2QwNTQtMmJhMS00ZDUxLWExODMtNDMzM2U2NTJjOTZlIiwiZXhwaXJlcyI6IjIwMjUtMDEtMjhUMDA6MTM6MjMuNDMxMjU2MjczWiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; abLdr=26
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; abLdr=26
Source: global traffic	HTTP traffic detected: GET /taboola/image/fetch/c_crop%2Cf_jpg%2Cq_auto%2Ce_sharpen%2Car_2.0000%2Cw_1000%2Cx_0%2Cy_28/c_fill%2Cw_100%2Ch_50/https%3A//cdn.taboola.com/libtrc/static/thumbnails/5d000774fbee3ea8d1c41472e38a533e.png HTTP/1.1Host: images.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /?uid=7ace7fe0-0abd-410f-a642-598ce2a8780b-tucte7f319d HTTP/1.1Host: cds.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=MENEOTM0QjItRTJEOC00N0UyLUJEQUItODQzODBDQTNEOTY0&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsu-ARNkFiqrjQ5PUTcGWYX_QSy5SLiektThchlbXo6oH4_YZEn_Q-mWvVnarSgr7XwvyTkSQ8iZ1JXsEO3-sustuBqDPmyQuLOOkC0IeS6M1RrXA7fvcNxj-aOkG1ITUvvjK-tcD45DI8hmDzIzUxHd2OMO-iabzYSB0tW82wvXcJyCB4n-Xh_oKn3KonVzFkGd6iwmsmw39RnEDJ9-06wLvFK304U-R1aPkqvvcoPvpUzdmZo3gGLvrKMto4uQ6t22XQZPcwKDIXUjGh3AGlxbm4jlxeN_K0oONx7kheZlBqRkQk5rDJW6gkq_SKxsFOQyIF7e2jEsbKdkkw7nFx0TKfGKmTS_mh8rc603FuTKRkVF91wzNpEnIvaCqO2y0QWyicGuyiCtcCXyMj-EV_Dhs9JtD8ifQIyTQtgQ5X_nTMzmlQLJ6_pEDExqViJUFul9A6Jt3f90NZGy-4a7MMJrqVEJZyFq__Q&sai=AMfl-YQUW2_ssaFCrx5esZMyRk7g8TVMbHWIyKsL6w7Qw72K6FGl_DsYSVnIF2LcInQYlBAqkSwX2lweO98w7WLfL7HoaXSWsDFxeDn6Y1iioPuykW8k2MpIiwxhoH1py6ZMJfkBSMz1CNj70C7nqQE69Q&sig=Cg0ArKJSzGseeSP6pMKHEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=medianet&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3798152066406142000V10 HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifSwibWVkaWFuZXQiOnsidWlkIjoiMzc5ODE1MjA2NjQwNjE0MjAwMFYxMCIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjI3LjU2Njc5MDg2N1oifSwicnViaWNvbiI6eyJ1aWQiOiJNNVZQWjZGUC0xWS1JREhGIiwiZXhwaXJlcyI6IjIwMjUtMDEtMjhUMDA6MTM6MjUuOTM4NDM1MDI1WiJ9LCJ0dGQiOnsidWlkIjoiMjQxN2QwNTQtMmJhMS00ZDUxLWExODMtNDMzM2U2NTJjOTZlIiwiZXhwaXJlcyI6IjIwMjUtMDEtMjhUMDA6MTM6MjMuNDMxMjU2MjczWiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsu-ARNkFiqrjQ5PUTcGWYX_QSy5SLiektThchlbXo6oH4_YZEn_Q-mWvVnarSgr7XwvyTkSQ8iZ1JXsEO3-sustuBqDPmyQuLOOkC0IeS6M1RrXA7fvcNxj-aOkG1ITUvvjK-tcD45DI8hmDzIzUxHd2OMO-iabzYSB0tW82wvXcJyCB4n-Xh_oKn3KonVzFkGd6iwmsmw39RnEDJ9-06wLvFK304U-R1aPkqvvcoPvpUzdmZo3gGLvrKMto4uQ6t22XQZPcwKDIXUjGh3AGlxbm4jlxeN_K0oONx7kheZlBqRkQk5rDJW6gkq_SKxsFOQyIF7e2jEsbKdkkw7nFx0TKfGKmTS_mh8rc603FuTKRkVF91wzNpEnIvaCqO2y0QWyicGuyiCtcCXyMj-EV_Dhs9JtD8ifQIyTQtgQ5X_nTMzmlQLJ6_pEDExqViJUFul9A6Jt3f90NZGy-4a7MMJrqVEJZyFq__Q&sai=AMfl-YQUW2_ssaFCrx5esZMyRk7g8TVMbHWIyKsL6w7Qw72K6FGl_DsYSVnIF2LcInQYlBAqkSwX2lweO98w7WLfL7HoaXSWsDFxeDn6Y1iioPuykW8k2MpIiwxhoH1py6ZMJfkBSMz1CNj70C7nqQE69Q&sig=Cg0ArKJSzGseeSP6pMKHEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEPtECesBHvHgwF-oqfNIX9c&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; SyncRTB4=1738022400%3A220; ipc=162110^https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-pubmatic%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%23PMUID^1^0; pi=162110:2; KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; chkChromeAb67Sec=1
Source: global traffic	HTTP traffic detected: GET /match?bidder=1&buyeruid=5124322335218922830&r=Cid1YS1kNDQwMTNkZC1lMzM5LTNkYWEtODg5Ni1iZDhiZDE1MzMzMDYiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQ0NDAxM2RkLWUzMzktM2RhYS04ODk2LWJkOGJkMTUzMzMwNjICASY4AQ== HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zeta-ssp-user-id=ua-d44013dd-e339-3daa-8896-bd8bd1533306
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; SyncRTB4=1738022400%3A220; ipc=162110^https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-pubmatic%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%23PMUID^1^0; pi=162110:2; KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; chkChromeAb67Sec=1; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; PugT=1736813608
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID&ld=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /api/cookie?gdpr=0&gdpr_consent=&partnerId=kueez-pubmatic&us_privacy=&userId=0CD934B2-E2D8-47E2-BDAB-84380CA3D964 HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=8a942ec5-27a9-1928-d76f-71229861b328; vdz_r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkueez%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D8a942ec5-27a9-1928-d76f-71229861b328; vdzj1_af568f45=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%2BHjRhKFhGAlwZOCBYFGt5d0xRFQwPKXpWVy0lY01JSQsLLWQBSHt6eEFRQghfLXgFTH0nYFZIU1oFJSdSGT0qOhotFRtQaX8FGSx0bBFTFV1bfnkOQ3xwYRUBRFxaf2sbWCAwHBkFFlxIcT1FDyw%2B
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIgAIQ6ImikcYyCgoIoQEQ6ImikcYyCgoI4gEQ6ImikcYyCgoI5gEQ6ImikcYyCgoIhwIQ6ImikcYyCgkIOhDoiaKRxjIKCQgbEOiJopHGMgoKCIwCEOiJopHGMgoKCL8CEOiJopHGMgoJCF8Q6ImikcYy; tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2417d054-2ba1-4d51-a183-4333e652c96e; TDCPM=CAEYBSABKAIyCwjO47q8347aPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /s/88342?bidder_id=246498&bidder_uuid=2285659547512489711723 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7
Source: global traffic	HTTP traffic detected: GET /cksync?cs=45&type=ku&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-medinet%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D=%3Cvsid%3E HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798152066406142000V10; data-pbs=setstatuscode~~1
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/2285659547512489711723?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=2417d054-2ba1-4d51-a183-4333e652c96e&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /um?ssp=pbs&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dcadent_aperture_mx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D%24UID HTTP/1.1Host: cs.emxdgt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjI4NTY1OTU0NzUxMjQ4OTcxMTcyMw%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjI4NTY1OTU0NzUxMjQ4OTcxMTcyMw%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEA7Gptvyo16ZLTKOkZ2Uy4s&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=kueez-medinet&gdpr=0&gdpr_consent=&us_privacy=&userId==3798152066406142000V10 HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=8a942ec5-27a9-1928-d76f-71229861b328; vdz_r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkueez%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D8a942ec5-27a9-1928-d76f-71229861b328; vdzj1_af568f45=7gF14G8M6sfHjJpfYdXPBo9VwESJg84A0RjP3pxC3pXRVd7UnlDVm5TbX8KfgVCA3FcK0ZEdUZudAgrAkFULFh9RgI7Bj5wAHkDEARxUihSSntSa3BZewcVUnkLKUZSa1NscwB7UEsDKghoXERvVzwhXH8DQVN8CH0RBDtUaiEJeAVFU35IZlJQalM5cQksBEcFfAx4EVc7U24kD3hURQBqRmhGUzgBbSJcewFDAHldeklRPABocAh0BEVEZEh8Q1E4UmolCHxXEFB8WH1EUmFSPn4IeQFRSmpceBZTblw5fwAoVRZUfll%2FElBgBWh0DngUX0R%2BWX0UVmhQb35bfgBBVHldKREFOFxoJg9vGlFQe10rRQM6AGt0CHoBRl56WXlBA2EBPnMaYRRFUXldchQHaQU9dQgrBkYDeQxzEVI8UjtlFG8AQQIsUylDVGBWPXcMKwFBXy5SKUhSYFR6axp7BUZQKlh4QQdpUT0hCisOR1cpXX1JXmFGdGUOfgESUHhaeUEHOlJsdQ95AktQLlJzQFd7SHpxCy4FEQV%2FUyxIUGtXOXIJflNLACsJc0VEdUZudAsuAUUDfl1%2BRlNoU28mW3VQFwRxD3tSSntSa3UALFBHAn8MKxFVblA6cAsoBEZVKg9oXERvV28mDn1VFVIrXixCB2gGb3FbegMRUH5IZlJQalM5cl0rB0cFfAx4EVc7U24kD3gCFVBqRmhGUDwFYSNbdVRKXntTKENePQA8dFp7BRBEZEh8Q1E4UmtzXHlVRwB6C3sSUW8Hb3EJKQ5RSmpceUcHbAI6JAt%2BBkRRfVJ4Q1VoAWFxAHsUX0R%2BXC5HVmkAYHEKelVFB3kMckQEP1U5Ig5vGlFQe10rRlRhAWkmW3sCQVF8XnJGAGBUbHUaYRRFUClceUIAOgZrcgp%2BBEJRLVh8SVRqVmBlFG8AQFUpU31CVzxVbyRbeAYQUixffREEPVB6axp7BUQHfVJ7SFc4B25zCnoCR15%2BDHkVAGpGdGUOfgESUy5ZKUQFbQJqJgkvAUUFf19%2BFgR7SHpxDikAFVIuWHxCUTpSOXZedQIRBH4IKRVEdUZucwgpV0pTLll9SFVuB2p3AXUDRwMqWX9SSntSa3BZeFBGUnkLKUZSa1NscwB7UEtUeFxoXERvVzx1DChXQgBwXHhDB2xVayIJdQdGBXtIZlJQalM5cl0vAkIHK1x%2BQlFtUGBxXnUHFVJqN2ZSBTYRNjMadwRfRC8OOgJEYx96LksIY1FcLgsmAwN1Rj8jSD8USUR4SGZSAT0UKgRXI0UWCDxIcFJEdUYtNGg%2FXwUHKxNoSkR7SHogSD0USUQMKAsxRHVGPzdIHl8XRHJIZ0FEdUYqIlwkRBYFPEhwUg4tECg0AmIZAwQ7RDMRDjYLdiRXIBkAAzwfIxRZOw08I10%2FCxgTLQ8wVgE9FCp6CGtRFxY6NSkfCCoBNjMFa1EDFnUuCDEnfwMoN2c%2BXxdbZVtsFlswQi0uXHASCBM7Dzg5AiRGJWsaPlMAFSEFJFJce1xtIw0oVEAHZQ4sRl90XGomXmAAQVRxR39FVWhRPnYKewIXU2pGaBMJNwo9JEwkWR0vLEhwUlBrBz1wASgBFwJ5X3pJX2xXbCZdeFNDUmpGaBkVEAk5IF1vDAcUPQ83
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-Nr2LhgJE2oS2kZireSyzw60MDHsqltuP_lhatOvd2Q--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7&vxii_pid=12&vxii_pid1=7006&vxii_rcid=57acb4e8-f7f1-46e8-a08e-d1ea493d83be&vxii_rmax=3 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjU3YWNiNGU4LWY3ZjEtNDZlOC1hMDhlLWQxZWE0OTNkODNiZSIsImwiOjE3MzY4MTM2MTE4OTQsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=2417d054-2ba1-4d51-a183-4333e652c96e&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEA7Gptvyo16ZLTKOkZ2Uy4s&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=triplelift&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=2285659547512489711723 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-96b851f9-7bb6-567e-717a-e943de1df0ac$ip$8.46.123.189&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjI4NTY1OTU0NzUxMjQ4OTcxMTcyMw%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-Nr2LhgJE2oS2kZireSyzw60MDHsqltuP_lhatOvd2Q--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-sovrn%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=brgeu23&ttd_tpi=1&TTD_PUID=57acb4e8-f7f1-46e8-a08e-d1ea493d83be HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2417d054-2ba1-4d51-a183-4333e652c96e; TDCPM=CAESFgoHc3Z4OXQ1MBILCIa30fTJjto9EAUYASABKAIyCwjWrdSh4I7aPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2285659547512489711723; tluidp=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-96b851f9-7bb6-567e-717a-e943de1df0ac$ip$8.46.123.189&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2285659547512489711723; tluidp=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AQAJZGqBFDYz0gIjtvVMAQEBAQEBAQCVYymPsAEBAJVjKY-w&expiration=1736900012&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2285659547512489711723; tluid=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=triplelift&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=2285659547512489711723 HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-sovrn%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%24UID&sovrn_retry=true HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_2NALZHVBdN2rf9Sla0IdII
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5015&vxii_pdid=2417d054-2ba1-4d51-a183-4333e652c96e HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjU3YWNiNGU4LWY3ZjEtNDZlOC1hMDhlLWQxZWE0OTNkODNiZSIsImwiOjE3MzY4MTM2MTI0NjgsInQiOjF9; sc=eyJpIjoiNTdhY2I0ZTgtZjdmMS00NmU4LWEwOGUtZDFlYTQ5M2Q4M2JlIiwic2lkIjoic2lkLTYzYTBhMGNhLWQyMGMtMTFlZi1iNTMwLTAyNDIwYWZmMGU2YyIsIm1zIjoyLCJ0cyI6MSwicHMiOjEsInNwIjo1MDE1LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTczNjgxMzYxMjQ2OSwiXyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AQAJZGqBFDYz0gIjtvVMAQEBAQEBAQCVYymPsAEBAJVjKY-w&expiration=1736900012&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2285659547512489711723; tluidp=2285659547512489711723
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=kueez-sovrn&gdpr=0&gdpr_consent=&us_privacy=&userId=J_2NALZHVBdN2rf9Sla0IdII HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=8a942ec5-27a9-1928-d76f-71229861b328; vdz_r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkueez%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D8a942ec5-27a9-1928-d76f-71229861b328; vdzj1_af568f45=aar15QQGqqW2Ekxb8NMaKnM3EAMjXCAZC0ACFW9XYmYmR0BkCnZYSFUPe3VTYmJ2FEhhU3NJVEAOfX0HZWN1FUNgBCEJGgQPdnlUMjN%2BSRN1HmddS1VZeHwHZWAmEkdjAHJfTFoOKHUEMzNlXVNhASENHFANfHhVM2YmExNnACNaTVEOe3tDfXNxQkY2BHQKSlZbeitTMGAlRkc0BXAJTgQaYm9XZDAiRBQzBHJbHlMPfnRWNDV3RkFuAHNJVEAOfXoAZ2MlQUA2UXNfSlUMenVXN2h3RUZ1HmddSgQNeXUAaWkiEhRlBHZeGlQBL31SZ2RlXVNhAXIPSFMMeXQCYmd1Q0BgUSQIGVoIL3pDfXNxQkY2ByAIHFELfnpWZGl1QkJmV30OHlYaYm9XZmBwSRU2AiQOSlJefngEYDd%2BEEUyBCZJVEAOfCkFaDJ0Q0hlV3VfHlUKdytZMmlzSEF1HmddS1cOLH9TYDB3RBQxACNTTFNZeXpYaWllXVNhAXIKTlIIfXwAMmdzQ0ZjBn1dHloBfnxDfXNxQhJkUCZcQQQAeH9SMGR2QhRvVCYIQVcaYm9XYmIkRkcyBHJfTlcJeXoAMmkhFRNuV3RJVEAOfX9ZMDdzFUYxUyRYT1ZaeX4EY2R0ExR1HmddS1VZeH0CN2UkRRdlU3QJT1RbeXgDZ2dlXVNhAXIKTQdef3kCZTd1EEA1BXMIT1cMKHtDfXNxRxQ2CyEIQAABdn5YM2J%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%2BQCAIDEACbCUVJSE0S154QicYVhtZJiIOfzIoHF4kVzEeEQYHLCQFNTQ1TBoiVyARXgVcPj9cYXcgFQElbSYEFhFdIDlcdzY3AUwTcAQqXgVIPhISODV6XEBxVHgCXhdRKnBFKiQ0FAMeVjhJBU4aPSgSIjgoH1NtEH1eHFddLH4AfDUhR0h6CncKHk8OfH9YfGRyQkBiVHRZTlZce29NczIoHx8yUTECFwxxKm9bc2d1EhRgCyBcHAYJe31YaGR0RRAyByBbTEAUbCQSGDwmFhR1CDEZDQdF
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=THROTLE HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
Source: global traffic	HTTP traffic detected: GET /isyn?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&s=pbs&cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D%24UID HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-openx%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=60463606&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SyncRTB4=1738022400%3A220; KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; PugT=1736813608; pi=162110:3; chkChromeAb67Sec=2
Source: global traffic	HTTP traffic detected: GET /ups/58691/cms?partner_id=THROTLE HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-openx%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=88be3b31-066d-4085-8aa1-4b5669453b8f\|1736813615
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=60463606&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; PugT=1736813608; chkChromeAb67Sec=3; pi=0:3; DPSync4=1738022400%3A197_219_226_227; SyncRTB4=1738022400%3A220_21_13_56_54_251_3_201_71%7C1738108800%3A35%7C1737417600%3A223
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=60awvF9lTWt1JTJGJTJGbUVhbW8lMkZLQnhxJTJGSzFSaWNncHplRmlHajQwQ1RxRSUyQkdEQkZncWpJVVlsT29CdTJkTyUyQlBRdUt0emlTa3lWOHU0d21OTUxIYjNmUGg1SnBtUkFnRmF5VllGU0VOejZud2tXeWVJZ3VxbUVoUEZSOFVZZlRlVlAxQTVzZg
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=DNk0suLYR-K9q4Q4DKPZZA%3D%3D&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /?partner=214&mapped=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=70693F37AADC071D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnF3zE2NB8DtFagt24dZhdM_TNOaIS8y-Nl_kVjJtDqK6IcwhsrueP5vKEcdE
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2417d054-2ba1-4d51-a183-4333e652c96e; TDCPM=CAESFgoHc3Z4OXQ1MBILCIa30fTJjto9EAUYASABKAIyCwj22aG24I7aPRAFOAFaB2JyZ2V1MjNgAg..
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/0CD934B2-E2D8-47E2-BDAB-84380CA3D964?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=kueez-openx&gdpr=0&gdpr_consent=&us_privacy=&userId=726c543e-587a-4868-967d-0791565f29c0 HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=8a942ec5-27a9-1928-d76f-71229861b328; vdz_r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkueez%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D8a942ec5-27a9-1928-d76f-71229861b328; vdzj1_af568f45=BbW15OTg9kEZHW1KLiiVNHYXWBkxNC0lQml2MktgfGMGD1p2YntkAXx7XFFkfGdWXFJzO351HWl6Wlkwe2ZVXVlybCw1Uy17UV1jLDZeAQlndmphAnwtX1gwe2UGWl1xaH9jBXN6D1EzLTZFFUlzaSwxVXl5W1xiLWMGWwl1aC5mBHh6XF90Y3ZRClwkbHk2A38vXQ9kLmUFDl0mbX01By1uRUtgejUCDA4hbH9nV3p7WVBhKjBXDlt8aH51HWl6Wl43eWYFCVokOX5jA3x4XVFgKW1XDVxndmphAy15XlE3d2wCWg53bHtiU311CFlleWFFFUlzaX8zAXp4XlA1fGJVC1pyOSk0UHN8CF50Y3ZRClwkby00VXh%2FWV5hemxVClh0P3AyV39uRUtgeGVQAQ8kaikyA3sqWVwzfjJeWF8gbCt1HWl6Ww0ydjdUC1J3P3hjV3x%2BUA9uLGxTAFtndmphAn56C1tkfjVXDA4jaC5vBXotXl5vd2xFFUlzaX82B3t8Wlg3LGJTC1xxbnBhV3N1WVh0Y3ZRCgh2OCtgCC10X1tlLmFWCg59PCs0CH5uRUtgfGcEDl0gbH9jB359Xl43LGwBXQl8P3l1HWl6WltuLjJTXVwjOylkBn8uXlozfWFUWw5ndmphAnwtX1k1KWAEDQ13O3k1Bn0vXlw0eWJFFUlzaX82BC4qWF01ezJVWFonbX40Bn54D190Y3ZRDw4kYyw0CSl1UVpvLWdfXQ8haSphAihuRUtgfGMGD1hxPnw0BS1%2BCFg0eGIEDl10PnB1HWl6Wl43ejIFWlh2an9gBHN%2BWlpnKm1RAV1ndmphBy97WVkyd2JVDghzO3kxCX8uD1g3KmJFFUlzaX82B3l0DFg3LGJTC1xxbnBhV3J8XVt0Y3ZRDwpzaXoxUil%2FXFtlfWVQXFlzY3pkA3NuRUtgfGcGAFx3ay1mBigvXFk1ezBSDgonPnx1HWl6Wl43emxWAVokOX5jA3x4XVFgKWcCX1hndmphAnwtXA9lLGAEDQ13O3k1Bn0vXlxiKTZFFUlzbCxhV38qW19keDdRWFojYnw1U30uCgx0Y3ZRDVshO3FiV3h7UVphLGZXAFNwbi01An5uRUtgfGMGDA1wbnk2Un14W15ie2xRX1N3an51HWl6Wg1kezEGCA19bHpkUH59Wgxnd2VSWlhndmphAnwtXAw0e2UGWl1xaH9jBXN6D1FnKWBFZEdnOSciXz9uU116bTMDSRlnYDN1WDgJPEtsKTULSg5peC8zQTluU0tmbXhFXg81KAs4XzgpBx10dXZFFUkwKRglWD0tChB0dXZFFUkiKjh1C2kIKygXbXhFXhs1CSEzE3FuRFh0Y3YVXA8sKC00RWl2SwEiOyQUA0RqKiokHzItAQY5YTcIVEQ2PzwiWC9zCwAyKzEVBAAwPy0tFywoGRtrf3IAXRs3BSs4XzgpBx1raTMXSVYBGAkWFyw8GTYlJjBaFFpjPHU%2BFz4lDVRyNCEUXBkMPjV1TGduGgwlPD0IV0l%2FeHBiVX4pC1o3YjABD1JoYno2V2Z6W1tvYmFSClpwPHllB38oXEt6bTcIVwUgOTw%2BXiUFDUtsbWJVWg5yYy1gVS99XFlvdmFUDQogby1nBWlgSwAlBjkGXg5nYDwlRC4x
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5038&vxii_pdid=y-MHrOuIRE2oTaqyLCz596Clm8WBgoZrbV_MOnYA--~A HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjU3YWNiNGU4LWY3ZjEtNDZlOC1hMDhlLWQxZWE0OTNkODNiZSIsImwiOjE3MzY4MTM2MTM4NjcsInQiOjJ9; sc=eyJpIjoiNTdhY2I0ZTgtZjdmMS00NmU4LWEwOGUtZDFlYTQ5M2Q4M2JlIiwic2lkIjoic2lkLTYzYTBhMGNhLWQyMGMtMTFlZi1iNTMwLTAyNDIwYWZmMGU2YyIsIm1zIjoyLCJ0cyI6MiwicHMiOjIsInNwIjo1MDM4LCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTczNjgxMzYxMzg2OH0=
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=pubmatic&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifSwibWVkaWFuZXQiOnsidWlkIjoiMzc5ODE1MjA2NjQwNjE0MjAwMFYxMCIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjI4LjYxMzQ3ODM0MloifSwicnViaWNvbiI6eyJ1aWQiOiJNNVZQWjZGUC0xWS1JREhGIiwiZXhwaXJlcyI6IjIwMjUtMDEtMjhUMDA6MTM6MjUuOTM4NDM1MDI1WiJ9LCJ0cmlwbGVsaWZ0Ijp7InVpZCI6IjIyODU2NTk1NDc1MTI0ODk3MTE3MjMiLCJleHBpcmVzIjoiMjAyNS0wMS0yOFQwMDoxMzozMy42NjgzOTM4MzVaIn0sInR0ZCI6eyJ1aWQiOiIyNDE3ZDA1NC0yYmExLTRkNTEtYTE4My00MzMzZTY1MmM5NmUiLCJleHBpcmVzIjoiMjAyNS0wMS0yOFQwMDoxMzoyMy40MzEyNTYyNzNaIn19fQ==
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=amx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=0d87eeaf-9194-43a3-83c9-092f09d73b30 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=jGGehehR8QxTF2SvEKQ8gNnjIYZ0sx68VFKygcUwXYPEy1WI-jrFYhVHCtpoxXhV5yd8fwKDt5pbid5fVh81kgvaUlVRDQgm5NExphKy8-0.; receive-cookie-deprecation=1; uuid2=3372432284170253134
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=jGGehehR8QxTF2SvEKQ8gNnjIYZ0sx68VFKygcUwXYPEy1WI-jrFYhVHCtpoxXhV5yd8fwKDt5pbid5fVh81kgvaUlVRDQgm5NExphKy8-0.; receive-cookie-deprecation=1; uuid2=3372432284170253134
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=7adbabc5-f70c-4330-663a-41af80c48659
Source: global traffic	HTTP traffic detected: GET /us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-sonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%5BUID%5D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=60awvF9lTWt1JTJGJTJGbUVhbW8lMkZLQnhxJTJGSzFSaWNncHplRmlHajQwQ1RxRSUyQkdEQkZncWpJVVlsT29CdTJkTyUyQlBRdUt0emlTa3lWOHU0d21OTUxIYjNmUGg1SnBtUkFnRmF5VllGU0VOejZud2tXeWVJZ3VxbUVoUEZSOFVZZlRlVlAxQTVzZg
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5038&vxii_pdid=y-MHrOuIRE2oTaqyLCz596Clm8WBgoZrbV_MOnYA--~A HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjU3YWNiNGU4LWY3ZjEtNDZlOC1hMDhlLWQxZWE0OTNkODNiZSIsImwiOjE3MzY4MTM2MTY0NDIsInQiOjN9; sc=eyJpIjoiNTdhY2I0ZTgtZjdmMS00NmU4LWEwOGUtZDFlYTQ5M2Q4M2JlIiwic2lkIjoic2lkLTY1ZmYwOGZmLWQyMGMtMTFlZi04ZGE5LTAyNDIwYTAwMDQ5YyIsIm1zIjoyLCJwcyI6Miwic3AiOjUwMzgsInBwIjoyLCJ0c2UiOjIsImx0c2UiOjE3MzY4MTM2MTM4Njh9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3372432284170253134&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; PugT=1736813608; pi=0:3; chkChromeAb67Sec=4; DPSync4=1738022400%3A245_197_219_226_227; SyncRTB4=1738022400%3A203_233_22_251_201_266_249_264_55_220_56_3_8_21_54_13_71_270%7C1738108800%3A35%7C1737417600%3A223%7C1737676800%3A63
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_CHSWVpjEUZg8mPrKDuKSw\|t
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=70693F37AADC071D
Source: global traffic	HTTP traffic detected: GET /sync/prebid?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dopenx%26uid%3D%24%7BUID%7D HTTP/1.1Host: rtb.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=88be3b31-066d-4085-8aa1-4b5669453b8f\|1736813615
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/0CD934B2-E2D8-47E2-BDAB-84380CA3D964?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191503&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dindex_rtb%26uid%3D HTTP/1.1Host: ssum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEPtECesBHvHgwF-oqfNIX9c&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; PugT=1736813608; pi=0:3; chkChromeAb67Sec=4; DPSync4=1738022400%3A245_197_219_226_227; SyncRTB4=1738022400%3A203_233_22_251_201_266_249_264_55_220_56_3_8_21_54_13_71_270%7C1738108800%3A35%7C1737417600%3A223%7C1737676800%3A63
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2417d054-2ba1-4d51-a183-4333e652c96e; TDCPM=CAESFgoHc3Z4OXQ1MBILCIa30fTJjto9EAUSFwoIcHVibWF0aWMSCwji8omnyo7aPRAFGAEgASgCMgsI8uiM1OCO2j0QBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dappnexus%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=jGGehehR8QxTF2SvEKQ8gNnjIYZ0sx68VFKygcUwXYPEy1WI-jrFYhVHCtpoxXhV5yd8fwKDt5pbid5fVh81kgvaUlVRDQgm5NExphKy8-0.; receive-cookie-deprecation=1; uuid2=3372432284170253134
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=158355&gdpr=0&gdpr_consent=&us_privacy=1YNN&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; PugT=1736813608; pi=0:3; chkChromeAb67Sec=4; DPSync4=1738022400%3A245_197_219_226_227; SyncRTB4=1738022400%3A203_233_22_251_201_266_249_264_55_220_56_3_8_21_54_13_71_270%7C1738108800%3A35%7C1737417600%3A223%7C1737676800%3A63
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-VD.axOpE2uXXm6wRWK.YDGiAbAlXD6g-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; PugT=1736813608; pi=0:3; chkChromeAb67Sec=4; DPSync4=1738022400%3A245_197_219_226_227; SyncRTB4=1738022400%3A203_233_22_251_201_266_249_264_55_220_56_3_8_21_54_13_71_270%7C1738108800%3A35%7C1737417600%3A223%7C1737676800%3A63
Source: global traffic	HTTP traffic detected: GET /sync?ssp=adaptmx&user_id=0d87eeaf-9194-43a3-83c9-092f09d73b30&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=0CDFF3D671C0498D8591EB76F05E8165
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dsovrn%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=J_2NALZHVBdN2rf9Sla0IdII
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; PugT=1736813608; pi=0:3; chkChromeAb67Sec=4; DPSync4=1738022400%3A245_197_219_226_227; SyncRTB4=1738022400%3A203_233_22_251_201_266_249_264_55_220_56_3_8_21_54_13_71_270%7C1738108800%3A35%7C1737417600%3A223%7C1737676800%3A63
Source: global traffic	HTTP traffic detected: GET /u?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Damx_com%26uid%3D HTTP/1.1Host: id.a-mx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=amx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=0d87eeaf-9194-43a3-83c9-092f09d73b30 HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=kueez-sonobi&gdpr=0&gdpr_consent=&us_privacy=&userId=270ea1cd-42bd-4e80-87ff-335aa6597c6b HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=8a942ec5-27a9-1928-d76f-71229861b328; vdz_r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkueez%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D8a942ec5-27a9-1928-d76f-71229861b328; vdzj1_af568f45=Xg412rXG7pHBXBA0UCXo3VgI8LD0wMhJvKXpxBEcpdGlxeQNmQm9wAkh6cWtzJAljE25lG1J%2BcWgkdQJnFmpwARQqID51eQRgETp%2BDxJqbnp0cgc0RGkhA0EpIW52cwdhRmBxUUgtIDpgbRJjQTwhU0J9cG12Iwc0EDp3BRZ5d2t0dAZ3XnpxBEcpdGkjcwQ2Rj51VkEqdW4hdgU3RD5lG1J%2BdzkndFUxRG93UUF%2FcmF1JFRlRWh%2BBUZqbnp0cgc0RGolB0EpIW52cwdhRmBxUUl4dm9gbRJjQD5yAEgpemAnIlVnRGtyVUZxI2hxdwV3XnpxBEcscml2dgk2QW51BUF%2FITkhIAhlE29lG1J%2BcW8jdFU2Fmt0B0d%2Fd2BwcgNkF2AiUURqbnp0dgFiSjwmBxEtcGgkcQUwQz5%2BVkQtdDtgbRJjQDwjDhN7cGFwJABhFG91DhZwIWB2eAB3XnpxBEV%2BIGpwcFFlRz0hBRZwdmkjdgdsSmBlG1J%2BcW8jdwBlQWkmVEZ8cG92dQhjFGB%2BB0Fqbnp0clNmEDtwDhZwdGpxIAVkQT1%2FURMre21gbRJjQWskAEYtdG92dwVkRW8mVEguJjp7JAF3XnpxBEJwIz52JQczEzl0AEQqdWsncwVmED1lG1J%2BcW8jdwA2FGwkAxZ6I2kgdgY2RW0lAUZqbnp0cgc0Rz0hBkQrdj5wIAE3RW4kAEV8JG5gbRJjRD0mDhQrejp7eQNsEGt%2FUxQscTp0clN3XnpxBEcpdGt2JQQ2Rj51VkEqdW4hdgZkFmBlG1J%2BcW8jdFY3EWt0B0d%2Fd2BwcgNkF2FxD0Zqbnp0d1RiQmgjD0Z6dTt0IAEzSmwlUUEpJ25gbRJjQW8mAUJwJ2kjIgZhQG9zA0h%2BJGFydQJ3XnpxARF%2BcWokIlJmR2p0BUF%2FJ2p0eAJmQGBlG1J%2BcWsjeAdnQz12ABMrd2ghdVRgRTklU0Rqbnp0cgc0R2B2D0EpIW52cwdhRmBxUUMtJGtgbRJjQW8mAhZ7IWwhdVZnE2klAEYrdW12J1J3XnpxARR%2BJGwkcwZnRTtxVkEuemwgIwY3ET1lG1J%2BdmgmIAlgFGtwD0N%2FIWpyeAhgRj0lBEVqbnp0cgc0Rz5yA0EpIW52cwdhRmBxUUh6cm5gbRJjQTx1AxUpcz56dwJmE212BBV5eml3IgN3XnpxBEcpdz0gdQE0EW5zBUd8dmB0JwhkFGxlalxqITc3L0R3SG1rFRcsMipge0t3GysCYlJyJDkuMlV5UD8jRwJqeHpyYxx3FTw3RTMnLCsnL0R3SHplG1I9MQgwKEY0ESFlDVJqbnolMUB3SHoDdTEJYHRgJkAlITEjFUpqb2lgbRInFzwuRRUrNnp4Y1ghBig0DV9nMjoxb0k0GjcoGRMnL3cxJEQgGzx4VRksJj0wfFsgFz09ERcsMip%2FcRYyFig1aBMnLCsnL0RoVD83R00MABkDZ1clAgc0XhR1b2lkJw08VC0uU01sOS0xJEIcFiVlSlxqMT0xMlk6HHp9FUh9Jm0nIwM0XzwhAUllemojJx1jQGp%2BGkV9cWl3JwFnRGwjAlJkYDstL14wESwuWB4BJnp4YwZnET1wDhV%2FJjxzdABsS210AxEtdz1ydRJ5UDE0fh0pJT1ge0QnBz06
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3372432284170253134 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJhbXgiOnsidWlkIjoiMGQ4N2VlYWYtOTE5NC00M2EzLTgzYzktMDkyZjA5ZDczYjMwIiwiZXhwaXJlcyI6IjIwMjUtMDEtMjhUMDA6MTM6MzYuNTE1NTY4NDEzWiJ9LCJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifSwibWVkaWFuZXQiOnsidWlkIjoiMzc5ODE1MjA2NjQwNjE0MjAwMFYxMCIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjI4LjYxMzQ3ODM0MloifSwicnViaWNvbiI6eyJ1aWQiOiJNNVZQWjZGUC0xWS1JREhGIiwiZXhwaXJlcyI6IjIwMjUtMDEtMjhUMDA6MTM6MjUuOTM4NDM1MDI1WiJ9LCJ0cmlwbGVsaWZ0Ijp7InVpZCI6IjIyODU2NTk1NDc1MTI0ODk3MTE3MjMiLCJleHBpcmVzIjoiMjAyNS0wMS0yOFQwMDoxMzozMy42NjgzOTM4MzVaIn0sInR0ZCI6eyJ1aWQiOiIyNDE3ZDA1NC0yYmExLTRkNTEtYTE4My00MzMzZTY1MmM5NmUiLCJleHBpcmVzIjoiMjAyNS0wMS0yOFQwMDoxMzoyMy40MzEyNTYyNzNaIn19fQ==
Source: global traffic	HTTP traffic detected: GET /setuid/magnite?uid=M5VPZ6FP-1Y-IDHF&gdpr=0&us_privacy=1YNN HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; pamuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; psd_amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; sd_amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=70693F37AADC071D
Source: global traffic	HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3Fus_privacy%3D1YNN%26A%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dindex_rtb%26uid%3D&gdpr=0&gdpr_consent=&s=191503&us_privacy=1YNN&C=1 HTTP/1.1Host: ssum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z4WsMUt3uXMAAHsDBQyuQAAA; CMPS=160; CMPRO=160
Source: global traffic	HTTP traffic detected: GET /cookie-sync/throtle? HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=openx&uid=62cc8ba7-1675-4c9b-bbfb-43ab8c39caff HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; pamuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30
Source: global traffic	HTTP traffic detected: GET /?partner=147&mapped=2417d054-2ba1-4d51-a183-4333e652c96e&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=2918bcc24b8c9259; done_redirects147=1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEPtECesBHvHgwF-oqfNIX9c&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; pi=0:3; chkChromeAb67Sec=4; DPSync4=1738022400%3A245_197_219_226_227; SyncRTB4=1738022400%3A203_233_22_251_201_266_249_264_55_220_56_3_8_21_54_13_71_270%7C1738108800%3A35%7C1737417600%3A223%7C1737676800%3A63; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; PugT=1736813616
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-VD.axOpE2uXXm6wRWK.YDGiAbAlXD6g-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; PugT=1736813616; SPugT=1736813616; SyncRTB4=1738022400%3A233_22_201_266_54_203_251_264_8_21_249_55_220_56_3_13_71_270%7C1738108800%3A35%7C1737676800%3A63%7C1737417600%3A223_15; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^2^0; pi=158355:3; chkChromeAb67Sec=5
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=adaptmx&user_id=0d87eeaf-9194-43a3-83c9-092f09d73b30&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=7308f09b-c23a-4c4d-9640-d9b4a396a3c0; c=1736813617; tuuid_lu=1736813617
Source: global traffic	HTTP traffic detected: GET /setuid?A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=appnexus&uid=3372432284170253134 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; pamuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=2737068515438964546 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; PugT=1736813616; SPugT=1736813616; SyncRTB4=1738022400%3A233_22_201_266_54_203_251_264_8_21_249_55_220_56_3_13_71_270%7C1738108800%3A35%7C1737676800%3A63%7C1737417600%3A223_15; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^2^0; pi=158355:3; chkChromeAb67Sec=5
Source: global traffic	HTTP traffic detected: GET /setuid?A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=sovrn&uid=J_2NALZHVBdN2rf9Sla0IdII HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; pamuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=kueez&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=8a942ec5-27a9-1928-d76f-71229861b328 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /setuid?A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=amx_com&uid= HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; pamuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; PugT=1736813616; SPugT=1736813616; SyncRTB4=1738022400%3A233_22_201_266_54_203_251_264_8_21_249_55_220_56_3_13_71_270%7C1738108800%3A35%7C1737676800%3A63%7C1737417600%3A223_15; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^2^0; pi=158355:3; chkChromeAb67Sec=5; KRTBCOOKIE_377=6810-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22918-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22926-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&23031-2417d054-2ba1-4d51-a183-4333e652c96e
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; PugT=1736813616; SPugT=1736813616; SyncRTB4=1738022400%3A233_22_201_266_54_203_251_264_8_21_249_55_220_56_3_13_71_270%7C1738108800%3A35%7C1737676800%3A63%7C1737417600%3A223_15; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^2^0; pi=158355:3; chkChromeAb67Sec=5
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3372432284170253134 HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?us_privacy=1YNN&A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=index_rtb&uid=Z4WsMUt3uXMAAHsDBQyuQAAA%26160 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; pamuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; _sv3_7=1
Source: global traffic	HTTP traffic detected: GET /cookie-sync/throtle?_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&specId=yidregsimplified&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_ HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6ZxzI835pgoSVfSt2tQD_6cNDQfuvk5_qK81EmQDohRp5_tzoNput9Plo52VjHhSBuneg6FmTTVn1PIR2bv2tZ.TtW2cJuLhfcMMaew838G9na2qRR84ZloUXT
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=43092&gdpr=0&consent=&callback_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D429%26user_id%3D%24%7BUSER_ID%7D%26ssp%3Dadaptmx%26expires%3D30%26user_group%3D%24%7BUSER_GROUP%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ads.betweendigital.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; SPugT=1736813616; SyncRTB4=1738022400%3A233_22_201_266_54_203_251_264_8_21_249_55_220_56_3_13_71_270%7C1738108800%3A35%7C1737676800%3A63%7C1737417600%3A223_15; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^2^0; pi=158355:3; chkChromeAb67Sec=5; KRTBCOOKIE_377=6810-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22918-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22926-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&23031-2417d054-2ba1-4d51-a183-4333e652c96e; KRTBCOOKIE_391=22924-2737068515438964546&KRTB&23231-2737068515438964546&KRTB&23263-2737068515438964546&KRTB&23481-2737068515438964546; PugT=1736813617
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0:18z8~2my0"
Source: global traffic	HTTP traffic detected: GET /setuid?A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=adform&uid=2624661274512804871 HTTP/1.1Host: sync.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; pamuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; _sv3_7=1; _sv3_13=1; _sv3_0=1; _sv3_3=1
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; SyncRTB4=1738022400%3A233_22_201_266_54_203_251_264_8_21_249_55_220_56_3_13_71_270%7C1738108800%3A35%7C1737676800%3A63%7C1737417600%3A223_15; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^2^0; pi=158355:3; chkChromeAb67Sec=5; KRTBCOOKIE_377=6810-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22918-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22926-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&23031-2417d054-2ba1-4d51-a183-4333e652c96e; KRTBCOOKIE_391=22924-2737068515438964546&KRTB&23231-2737068515438964546&KRTB&23263-2737068515438964546&KRTB&23481-2737068515438964546; PugT=1736813618; SPugT=1736813617
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; SPugT=1736813616; SyncRTB4=1738022400%3A233_22_201_266_54_203_251_264_8_21_249_55_220_56_3_13_71_270%7C1738108800%3A35%7C1737676800%3A63%7C1737417600%3A223_15; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^2^0; pi=158355:3; chkChromeAb67Sec=5; KRTBCOOKIE_377=6810-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22918-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22926-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&23031-2417d054-2ba1-4d51-a183-4333e652c96e; KRTBCOOKIE_391=22924-2737068515438964546&KRTB&23231-2737068515438964546&KRTB&23263-2737068515438964546&KRTB&23481-2737068515438964546; PugT=1736813618
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=88be3b31-066d-4085-8aa1-4b5669453b8f\|1736813615
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCCr2Ja8BjABOgT87-jmQgREL-eM.B3NPLcw65dMuAyUNHnuWtiWZA8F57uaUSgHjjFTphK4; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCCr2Ja8BjABOgT87-jmQgREL-eM.B3NPLcw65dMuAyUNHnuWtiWZA8F57uaUSgHjjFTphK4
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=e_52cf446a-5a2c-4fae-b38a-81f916a32883&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=e_52cf446a-5a2c-4fae-b38a-81f916a32883&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=7308f09b-c23a-4c4d-9640-d9b4a396a3c0; c=1736813617; tuuid_lu=1736813618
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=kueez&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=8a942ec5-27a9-1928-d76f-71229861b328 HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=jGGehehR8QxTF2SvEKQ8gNnjIYZ0sx68VFKygcUwXYPEy1WI-jrFYhVHCtpoxXhV5yd8fwKDt5pbid5fVh81kgvaUlVRDQgm5NExphKy8-0.; receive-cookie-deprecation=1; uuid2=3372432284170253134
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/show-v0.0.3.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=e_52cf446a-5a2c-4fae-b38a-81f916a32883 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_41ccebf8006740b487c2e; CDIPARTNERS=%7B%221%22%3A%2220250114%22%7D
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: ad.turn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=4155074921905256297
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=e_52cf446a-5a2c-4fae-b38a-81f916a32883 HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=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
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/show-v0.0.3.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/module/create/checkpassword?acrumb=3yAtVlvS&crumb=mA6BH500FAdDd1TvUJ39xA HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6ZxzI835pgoSVfSt2tQD_6cNDQfuvk5_qK81EmQDohRp5_tzoNput9Plo52VjHhSBuneg6FmTTVn1PIR2bv2tZ.TtW2cJuLhfcMMaew838G9na2qRR84ZloUXT7D3lsJNbKQM7MurXuP92puyLxGbrHU4ttSFLOeazoV.bEPSOHxjOAvbHK4A-~A\|B6786fdb3\|4r0TWlH.2To582bhIQm6f0j6OoP17EsCRhCGrBwHa9JaNKnXppjOi7GxxtF7.dyUtuL6qMSfT4zRZ4RoQOS3vb5x8Qk5XH6MP1Dv149UorCFLTiM2QLwgBWrCdG6ZnKJAtJeA1g6X0CzglMDOq6BQaho_Rf.iZs5BM8JtR9Pp718hBl347V4qQ3ryD.dvtwBOJnCMu.GwYOUFIHqyC7.gEei3XwzGwMdvToprF76mEZinS8DWD_nbBwxTwGT6owzoeHMOR03fzcB.smwoks5TSwKI7KdH7g9ryQEu_sOmO5QqdL1i0GlxIwE5UZMHD6MGSBF7yzDdrbGrq.u8oJhG3WR8moPLKJVH9ExFx6WgKsxUqbBJR7eA8WEeb4p_gen6etML63Ceb_44JPQu0tH4cI3UWIgGvcsw6clnbOfTYGZZVUM2SUVAqbYnx.q21.nnSDWqOfE4nRoqGZI3f5YlE08eyeZ1texAJOfcBTOvY5RLnnpO4gHoXe6pbc_AMgy3hXfF34nYU4Sb0mkYJ1Gp5_cBG.6C1deYcSmBrM5VxpHR1tfLpP38u3iaTbEXLHB1r4lQG8e99yKGgQw5_R2TCX2mHGM5oBmlJoxZ1uLRb_lgT1sud2NVUs4VfKAxQFFgRkpeafAYjzkAO2G4xOlKbFA7_.mlsfsv.G.TeqY5wUJnQprR2fGOhOsHk8Tns9yCbbhQJNy61as2tUYTkH2vbrd8XxzsCWmFrNcogO69BlaVYTxmha7VKjoZvY21KVlExzaA5vOwq0MpcFyk7LjSiTNZaBnPU4he3FxNSxpFP0DYg2SIRgVjBVeitouoTN1wp3hITMwo0zcip_Bp7F7RXgPKrxDQkhOWeXYhYqd1TljeSmGj3FLRdWOrErVtNSQhZOWo2f_8tzt5IsaGjpZe9VojabrLcwRV2WbQTASNjx98bYxxoGGXp26I0R_fFxfVQOLWAzzrj7Xon9Z04zWLewOCt4e4isjYYDLU6rsSw--~A
Source: global traffic	HTTP traffic detected: GET /usersync?b=dit&i=di_41ccebf8006740b487c2e HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_52cf446a-5a2c-4fae-b38a-81f916a32883
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=4155074921905256297&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; KRTBCOOKIE_377=6810-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22918-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22926-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&23031-2417d054-2ba1-4d51-a183-4333e652c96e; KRTBCOOKIE_391=22924-2737068515438964546&KRTB&23231-2737068515438964546&KRTB&23263-2737068515438964546&KRTB&23481-2737068515438964546; PugT=1736813618; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^1^0; chkChromeAb67Sec=6; SPugT=1736813618; SyncRTB4=1737676800%3A63%7C1737417600%3A2_223_15%7C1738108800%3A35%7C1738022400%3A249_55_56_71_251_264_203_266_54_21_220_13_201_8_3_270_233_22
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; KRTBCOOKIE_377=6810-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22918-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22926-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&23031-2417d054-2ba1-4d51-a183-4333e652c96e; KRTBCOOKIE_391=22924-2737068515438964546&KRTB&23231-2737068515438964546&KRTB&23263-2737068515438964546&KRTB&23481-2737068515438964546; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D0d87eeaf-9194-43a3-83c9-092f09d73b30%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^1^0; chkChromeAb67Sec=6; SPugT=1736813618; SyncRTB4=1737676800%3A63%7C1737417600%3A2_223_15%7C1738108800%3A35%7C1738022400%3A249_55_56_71_251_264_203_266_54_21_220_13_201_8_3_270_233_22; KRTBCOOKIE_22=14911-4155074921905256297&KRTB&23150-4155074921905256297&KRTB&23527-4155074921905256297&KRTB&23643-4155074921905256297; PugT=1736813622
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dpubmatic%26uid%3D0CD934B2-E2D8-47E2-BDAB-84380CA3D964 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=0CD934B2-E2D8-47E2-BDAB-84380CA3D964; KRTBCOOKIE_80=22987-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&16514-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23025-CAESEPtECesBHvHgwF-oqfNIX9c&KRTB&23386-CAESEPtECesBHvHgwF-oqfNIX9c; DPSync4=1738022400%3A245_197_219_226_227; KRTBCOOKIE_57=23339-3372432284170253134&KRTB&22776-3372432284170253134; KRTBCOOKIE_377=6810-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22918-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&22926-2417d054-2ba1-4d51-a183-4333e652c96e&KRTB&23031-2417d054-2ba1-4d51-a183-4333e652c96e; KRTBCOOKIE_391=22924-2737068515438964546&KRTB&23231-2737068515438964546&KRTB&23263-2737068515438964546&KRTB&23481-2737068515438964546; SPugT=1736813618; SyncRTB4=1737676800%3A63%7C1737417600%3A2_223_15%7C1738108800%3A35%7C1738022400%3A249_55_56_71_251_264_203_266_54_21_220_13_201_8_3_270_233_22; KRTBCOOKIE_22=14911-4155074921905256297&KRTB&23150-4155074921905256297&KRTB&23527-4155074921905256297&KRTB&23643-4155074921905256297; PugT=1736813622; pi=158355:3; chkChromeAb67Sec=7
Source: global traffic	HTTP traffic detected: GET /setuid?A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=pubmatic&uid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964 HTTP/1.1Host: sync.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; pamuid2=0d87eeaf-9194-43a3-83c9-092f09d73b30; _sv3_7=1; _sv3_13=1; _sv3_0=1; _sv3_3=1; _sv3_14=1; _sv3_2=1; _sv3_8=1
Source: global traffic	HTTP traffic detected: GET /wm/modern/images/fuji-spinner-1.0.1.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/modern/images/fuji-spinner-1.0.1.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo/contact-card-v0.0.2.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo/contact-card-v0.0.2.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/module/create/checkpassword?acrumb=3yAtVlvS&crumb=mA6BH500FAdDd1TvUJ39xA HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6ZxzI835pgoSVfSt2tQD_6cNDQfuvk5_qK81EmQDohRp5_tzoNput9Plo52VjHhSBuneg6FmTTVn1PIR2bv2tZ.TtW2cJuLhfcMMaew838G9na2qRR84ZloUXT7D3lsJNbKQM7MurXuP92puyLxGbrHU4ttSFLOeazoV.bEPSOHxjOAvbHK4A-~A\|B6786fdb3\|4r0TWlH.2To582bhIQm6f0j6OoP17EsCRhCGrBwHa9JaNKnXppjOi7GxxtF7.dyUtuL6qMSfT4zRZ4RoQOS3vb5x8Qk5XH6MP1Dv149UorCFLTiM2QLwgBWrCdG6ZnKJAtJeA1g6X0CzglMDOq6BQaho_Rf.iZs5BM8JtR9Pp718hBl347V4qQ3ryD.dvtwBOJnCMu.GwYOUFIHqyC7.gEei3XwzGwMdvToprF76mEZinS8DWD_nbBwxTwGT6owzoeHMOR03fzcB.smwoks5TSwKI7KdH7g9ryQEu_sOmO5QqdL1i0GlxIwE5UZMHD6MGSBF7yzDdrbGrq.u8oJhG3WR8moPLKJVH9ExFx6WgKsxUqbBJR7eA8WEeb4p_gen6etML63Ceb_44JPQu0tH4cI3UWIgGvcsw6clnbOfTYGZZVUM2SUVAqbYnx.q21.nnSDWqOfE4nRoqGZI3f5YlE08eyeZ1texAJOfcBTOvY5RLnnpO4gHoXe6pbc_AMgy3hXfF34nYU4Sb0mkYJ1Gp5_cBG.6C1deYcSmBrM5VxpHR1tfLpP38u3iaTbEXLHB1r4lQG8e99yKGgQw5_R2TCX2mHGM5oBmlJoxZ1uLRb_lgT1sud2NVUs4VfKAxQFFgRkpeafAYjzkAO2G4xOlKbFA7_.mlsfsv.G.TeqY5wUJnQprR2fGOhOsHk8Tns9yCbbhQJNy61as2tUYTkH2vbrd8XxzsCWmFrNcogO69BlaVYTxmha7VKjoZvY21KVlExzaA5vOwq0MpcFyk7LjSiTNZaBnPU4he3FxNSxpFP0DYg2SIRgVjBVeitouoTN1wp3hITMwo0zcip_Bp7F7RXgPKrxDQkhOWeXYhYqd1TljeSmGj3FLRdWOrErVtNSQhZOWo2f_8tzt5IsaGjpZe9VojabrLcwRV2WbQTASNjx98bYxxoGGXp26I0R_fFxfVQOLWAzzrj7Xon9Z04zWLewOCt4e4isjYYDLU6rsSw--~A

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: offfryfjtht767755433.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: webflow.com
Source: global traffic	DNS traffic detected: DNS query: mail.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: login.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: geo.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: geo.query.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ucs.query.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: y.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: consent.cmp.oath.com
Source: global traffic	DNS traffic detected: DNS query: opus.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: udc.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: guce.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: gpt.mail.yahoo.net
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: csp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: cadmus.script.ac
Source: global traffic	DNS traffic detected: DNS query: noa.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: i.clean.gg
Source: global traffic	DNS traffic detected: DNS query: pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: idx.liadm.com
Source: global traffic	DNS traffic detected: DNS query: api.taboola.com
Source: global traffic	DNS traffic detected: DNS query: tsdtocl.com
Source: global traffic	DNS traffic detected: DNS query: c2shb-oao.ssp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: display.bidder.taboola.com
Source: global traffic	DNS traffic detected: DNS query: rp.liadm.com
Source: global traffic	DNS traffic detected: DNS query: yahoo-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: uipus.semasio.net
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: sync.kueezrtb.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: api.archive-digger.com
Source: global traffic	DNS traffic detected: DNS query: image8.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: hbx.media.net
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: beacon.taboola.com
Source: global traffic	DNS traffic detected: DNS query: images.taboola.com
Source: global traffic	DNS traffic detected: DNS query: ssp.disqus.com
Source: global traffic	DNS traffic detected: DNS query: cds.taboola.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: eexsync.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: cs.media.net
Source: global traffic	DNS traffic detected: DNS query: cs.emxdgt.com
Source: global traffic	DNS traffic detected: DNS query: triplelift-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: prebid.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: u.openx.net
Source: global traffic	DNS traffic detected: DNS query: assets.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: image4.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: id.a-mx.com
Source: global traffic	DNS traffic detected: DNS query: rtb.openx.net
Source: global traffic	DNS traffic detected: DNS query: cm.adform.net
Source: global traffic	DNS traffic detected: DNS query: ssum.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: sync.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: pubmatic-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: simage4.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: rtb.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: ads.betweendigital.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1400638156:1736810115:4fgdCy3Y0sO6QOVyobUg6DnFEglnskOp8hAFVBcFeMA/90196aba2c860f98/azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3148sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 00:12:58 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: CXn6jnGc/yFkHSQ5RhUP5Q==$7lFG2J0YYzN9Fqtqn1J46w==Server: cloudflareCF-RAY: 90196ae00f308cee-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenvary: Origincontent-length: 0date: Tue, 14 Jan 2025 00:13:18 GMTx-envoy-upstream-service-time: 0server: ATSx-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*Referrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenvary: Origincontent-length: 0date: Tue, 14 Jan 2025 00:13:19 GMTx-envoy-upstream-service-time: 0server: ATSx-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*Referrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 00:13:20 GMTContent-Type: application/jsonContent-Length: 145Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundReferrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=15552000X-Content-Type-Options: nosniffX-Frame-Options: DENYX-XSS-Protection: 1; mode=blockAge: 0Pragma: no-cacheExpires: 0Cache-Control: no-cache, no-store, must-revalidateContent-Type: text/plain; charset=utf-8Content-Length: 9Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://ws.progrss.yahoo.com https://udc.yahoo.com https://jsapi.login.yahoo.com https://www.yahoo.com https://3p-udc.yahoo.com https://3p-geo.yahoo.com https://guce.yahoo.com/ https://ups.analytics.yahoo.com https://api.taboola.com/1.2/json/taboola-usersync/user.sync;default-src 'self' https://s.yimg.com https://s1.yimg.com https://login.yahoo.net;font-src https://s.yimg.com https://s1.yimg.com;frame-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com https://gpt.mail.yahoo.net/sandbox https://guce.oath.com/ https://opus.analytics.yahoo.com https://tsdtocl.com/ https://pfs.yahoo.com;img-src 'self' data: https://yahoo.com https://ct.yimg.com https://s.yimg.com https://s1.yimg.com https://tw.yimg.com https://geo.yahoo.com https://socialprofiles.zenfs.com https://.wc.yahoodns.net https://beap-bc.yahoo.com https://ws.progrss.yahoo.com https://log.fc.yahoo.com https://.ah.yahoo.com https://pr-bh.ybp.yahoo.com https://fbcdn.net https://scontent.xx.fbcdn.net https://z-m-scontent.xx.fbcdn.net https://graph.facebook.com https://data.mail.yahoo.com https://platform-lookaside.fbsbx.com https://www.yahoo.com https://3p-geo.yahoo.com;media-src https://.ah.yahoo.com https://s.yimg.com;object-src 'none';report-uri https://csp.yahoo.com/beacon/csp?src=mbr_account;script-src 'unsafe-inline' 'self' https://s.yimg.com https://s1.yimg.com https://jsapi.login.yahoo.com https://fc.yahoo.com https://e2e.fc.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://opus.analytics.yahoo.com/tag/opus.js https://consent.cmp.oath.com/cmp.js https://search.yahoo.com https://.search.yahoo.com 'nonce-bUcdPCg07zMw6JELDLL9Y+FdwR2Xtsxw/BftlrQZkdC0Q1ej' ;style-src * 'unsafe-inline'Vary: Accept-EncodingDate: Tue, 14 Jan 2025 00:13:42 GMTConnection: closeServer: ATSExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundReferrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=15552000X-Content-Type-Options: nosniffX-Frame-Options: DENYX-XSS-Protection: 1; mode=blockAge: 0Pragma: no-cacheExpires: 0Cache-Control: no-cache, no-store, must-revalidateContent-Type: text/plain; charset=utf-8Content-Length: 9Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://ws.progrss.yahoo.com https://udc.yahoo.com https://jsapi.login.yahoo.com https://www.yahoo.com https://3p-udc.yahoo.com https://3p-geo.yahoo.com https://guce.yahoo.com/ https://ups.analytics.yahoo.com https://api.taboola.com/1.2/json/taboola-usersync/user.sync;default-src 'self' https://s.yimg.com https://s1.yimg.com https://login.yahoo.net;font-src https://s.yimg.com https://s1.yimg.com;frame-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com https://gpt.mail.yahoo.net/sandbox https://guce.oath.com/ https://opus.analytics.yahoo.com https://tsdtocl.com/ https://pfs.yahoo.com;img-src 'self' data: https://yahoo.com https://ct.yimg.com https://s.yimg.com https://s1.yimg.com https://tw.yimg.com https://geo.yahoo.com https://socialprofiles.zenfs.com https://.wc.yahoodns.net https://beap-bc.yahoo.com https://ws.progrss.yahoo.com https://log.fc.yahoo.com https://.ah.yahoo.com https://pr-bh.ybp.yahoo.com https://fbcdn.net https://scontent.xx.fbcdn.net https://z-m-scontent.xx.fbcdn.net https://graph.facebook.com https://data.mail.yahoo.com https://platform-lookaside.fbsbx.com https://www.yahoo.com https://3p-geo.yahoo.com;media-src https://.ah.yahoo.com https://s.yimg.com;object-src 'none';report-uri https://csp.yahoo.com/beacon/csp?src=mbr_account;script-src 'unsafe-inline' 'self' https://s.yimg.com https://s1.yimg.com https://jsapi.login.yahoo.com https://fc.yahoo.com https://e2e.fc.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://opus.analytics.yahoo.com/tag/opus.js https://consent.cmp.oath.com/cmp.js https://search.yahoo.com https://.search.yahoo.com 'nonce-x6rgFFCUj6VNvNlCj27nP7+p+VZyvM4/k2WnSCMms8Ekoto1' ;style-src * 'unsafe-inline'Vary: Accept-EncodingDate: Tue, 14 Jan 2025 00:13:54 GMTConnection: closeServer: ATSExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"

Source: chromecache_279.2.dr, chromecache_221.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_141.2.dr, chromecache_117.2.dr, chromecache_208.2.dr, chromecache_169.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_141.2.dr, chromecache_208.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_163.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=0CD934B2-E2D8-4
Source: chromecache_196.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_253.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_136.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?&gdpr=
Source: chromecache_136.2.dr	String found in binary or memory: https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US
Source: chromecache_253.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=e_52cf446a-5a2c-4fae-b38a-81f916a32883&gdpr=0&gdpr_
Source: chromecache_253.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_253.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=
Source: chromecache_163.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&
Source: chromecache_163.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_248.2.dr, chromecache_181.2.dr	String found in binary or memory: https://c2shb-oao.ssp.yahoo.com/admax/bid/partners/YPBJS
Source: chromecache_143.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/6783bca3840111e5424ee986/6783bddc64c839548aaca1bf_ATT%20LOGOM.png
Source: chromecache_143.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/6783bca3840111e5424ee986/css/offfryfjtht767755433.webflow.e98bb73
Source: chromecache_143.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/6783bca3840111e5424ee986/js/webflow.967b2dfec747eeb055e813a1fe43b
Source: chromecache_143.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/favicon.ico
Source: chromecache_143.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_223.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/ifs.js
Source: chromecache_136.2.dr	String found in binary or memory: https://cm.adform.net/cookie?&gdpr=
Source: chromecache_253.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV81MmNmNDQ2YS01YTJjLTRmYWUtYjM4Y
Source: chromecache_163.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=DNk0suLYR-K9q4Q4DKPZZA%3D%3
Source: chromecache_163.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_196.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_253.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_196.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_143.2.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6783bca3840111e5424ee98
Source: chromecache_163.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_196.2.dr	String found in binary or memory: https://dsp-ap.eskimi.com/pixelGet?ex=50&gdpr=
Source: chromecache_196.2.dr	String found in binary or memory: https://dsp-cookie.adfarm1.adition.com/?ssp=9&gdpr=0&gdpr_consent=
Source: chromecache_161.2.dr, chromecache_233.2.dr, chromecache_240.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_240.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_161.2.dr, chromecache_233.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_240.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_161.2.dr, chromecache_233.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_233.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_161.2.dr, chromecache_233.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_238.2.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_279.2.dr, chromecache_221.2.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_238.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_201.2.dr	String found in binary or memory: https://github.com/yui/pure/blob/master/LICENSE.md
Source: chromecache_136.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f0
Source: chromecache_163.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_136.2.dr	String found in binary or memory: https://id.a-mx.com/u?&gdpr=
Source: chromecache_196.2.dr	String found in binary or memory: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCoo
Source: chromecache_136.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr=
Source: chromecache_143.2.dr	String found in binary or memory: https://mail.yahoo.com/d/folders/4?reason=invalid_cred&guce_referrer=aHR0cHM6Ly9hdHQteWFob28uYXR
Source: chromecache_253.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_163.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_253.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_134.2.dr, chromecache_198.2.dr	String found in binary or memory: https://mobileexchange.yahoo.com/dismiss
Source: chromecache_163.2.dr	String found in binary or memory: https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=0CD934B2-E2D8-47E2-BD
Source: chromecache_140.2.dr, chromecache_154.2.dr	String found in binary or memory: https://otrocamino.org/
Source: chromecache_161.2.dr, chromecache_233.2.dr, chromecache_240.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=colleague-executed&name=
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_240.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_161.2.dr, chromecache_233.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_203.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_240.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_161.2.dr, chromecache_233.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_248.2.dr, chromecache_181.2.dr	String found in binary or memory: https://pbs.yahoo.com/cookie_sync
Source: chromecache_190.2.dr, chromecache_248.2.dr, chromecache_181.2.dr, chromecache_183.2.dr	String found in binary or memory: https://pbs.yahoo.com/lr_sync
Source: chromecache_248.2.dr, chromecache_181.2.dr	String found in binary or memory: https://pbs.yahoo.com/openrtb2/auction
Source: chromecache_253.2.dr	String found in binary or memory: https://pbs.yahoo.com/setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=e_52cf44
Source: chromecache_196.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_163.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&gdpr_co
Source: chromecache_136.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr=
Source: chromecache_253.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_163.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/0CD934B2-E2D8-47E2-BDAB-84380CA3D964?gdpr=0&gdpr_consent=
Source: chromecache_169.2.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_190.2.dr, chromecache_183.2.dr	String found in binary or memory: https://rtb.openx.net/openrtbb/prebidjs
Source: chromecache_136.2.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?&gdpr=
Source: chromecache_190.2.dr, chromecache_183.2.dr	String found in binary or memory: https://s.seedtag.com/c/hb/bid
Source: chromecache_190.2.dr, chromecache_183.2.dr	String found in binary or memory: https://s.seedtag.com/se/hb/timeout
Source: chromecache_119.2.dr	String found in binary or memory: https://s.yimg.com/aaq/benji/benji-2.2.29.js
Source: chromecache_190.2.dr, chromecache_183.2.dr	String found in binary or memory: https://s.yimg.com/eh/prebid-config/bp
Source: chromecache_119.2.dr	String found in binary or memory: https://s.yimg.com/nq/nr/
Source: chromecache_119.2.dr	String found in binary or memory: https://s.yimg.com/nq/nr/js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js
Source: chromecache_119.2.dr	String found in binary or memory: https://s.yimg.com/nq/nr/taboolajs/taboola/cmp_utils_1.3.js
Source: chromecache_253.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_253.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_238.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_238.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_166.2.dr, chromecache_174.2.dr	String found in binary or memory: https://sketch.com
Source: chromecache_253.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_136.2.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatchredir?s=191503&gdpr=
Source: chromecache_196.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_196.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&gdpr_
Source: chromecache_253.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_190.2.dr, chromecache_183.2.dr	String found in binary or memory: https://sync.kueezrtb.com/api/sync/iframe/
Source: chromecache_190.2.dr, chromecache_183.2.dr	String found in binary or memory: https://sync.kueezrtb.com/api/sync/image/
Source: chromecache_253.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=
Source: chromecache_196.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_196.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912&gdpr=0&gdpr_consent=
Source: chromecache_253.2.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_233.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_161.2.dr, chromecache_233.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_223.2.dr	String found in binary or memory: https://trc.taboola.com/sg/prebidJS/1/cm
Source: chromecache_190.2.dr, chromecache_183.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/pd
Source: chromecache_163.2.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=0CD934B2-E2D8-47E2-BDAB-84380CA3
Source: chromecache_163.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_163.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&re
Source: chromecache_253.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_143.2.dr	String found in binary or memory: https://webflow.com
Source: chromecache_233.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_161.2.dr, chromecache_233.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googleadservices.com/.well-known/private-aggregation/report-shared-storage
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_117.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googletagservices.com/agrp/
Source: chromecache_136.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=adaptmx&user_id=0d87eeaf-9194-43a3-83c9-092f09d73b30&gdpr=
Source: chromecache_253.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_52cf446a-5a2c-4fae-b38a-81f916a32883&gdpr=0&gdpr_
Source: chromecache_196.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 53420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 53489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 53707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 53433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 53567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 53571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 53509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 53478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 53385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 53693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 53544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 53456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 53708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 53583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 53637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 53396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53603
Source: unknown	Network traffic detected: HTTP traffic on port 53428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53609
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53729
Source: unknown	Network traffic detected: HTTP traffic on port 53589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53607
Source: unknown	Network traffic detected: HTTP traffic on port 53463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53723
Source: unknown	Network traffic detected: HTTP traffic on port 53537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53722
Source: unknown	Network traffic detected: HTTP traffic on port 53514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53721
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53720
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53619
Source: unknown	Network traffic detected: HTTP traffic on port 53475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53730
Source: unknown	Network traffic detected: HTTP traffic on port 53628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53612
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53610
Source: unknown	Network traffic detected: HTTP traffic on port 53417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53625
Source: unknown	Network traffic detected: HTTP traffic on port 53709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53620
Source: unknown	Network traffic detected: HTTP traffic on port 53497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53621
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 53372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53515
Source: unknown	Network traffic detected: HTTP traffic on port 53590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 53710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 53429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 53485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53631
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 53605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53630
Source: unknown	Network traffic detected: HTTP traffic on port 53559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53632
Source: unknown	Network traffic detected: HTTP traffic on port 53503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 53409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53816
Source: unknown	Network traffic detected: HTTP traffic on port 53441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53810
Source: unknown	Network traffic detected: HTTP traffic on port 53501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53709
Source: unknown	Network traffic detected: HTTP traffic on port 53371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53828
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53715
Source: unknown	Network traffic detected: HTTP traffic on port 53431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53714
Source: unknown	Network traffic detected: HTTP traffic on port 53408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53717
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53712
Source: unknown	Network traffic detected: HTTP traffic on port 53513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53710
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53685
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53683
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53448
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53687
Source: unknown	Network traffic detected: HTTP traffic on port 53552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53570
Source: unknown	Network traffic detected: HTTP traffic on port 53598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53690
Source: unknown	Network traffic detected: HTTP traffic on port 53414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53699
Source: unknown	Network traffic detected: HTTP traffic on port 53402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53577
Source: unknown	Network traffic detected: HTTP traffic on port 53666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53462
Source: unknown	Network traffic detected: HTTP traffic on port 53472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53583
Source: unknown	Network traffic detected: HTTP traffic on port 53448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53581
Source: unknown	Network traffic detected: HTTP traffic on port 53723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53580
Source: unknown	Network traffic detected: HTTP traffic on port 53505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53586
Source: unknown	Network traffic detected: HTTP traffic on port 53381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53464
Source: unknown	Network traffic detected: HTTP traffic on port 53426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53469
Source: unknown	Network traffic detected: HTTP traffic on port 53644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53468
Source: unknown	Network traffic detected: HTTP traffic on port 53551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53589
Source: unknown	Network traffic detected: HTTP traffic on port 53667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53590
Source: unknown	Network traffic detected: HTTP traffic on port 53494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53594
Source: unknown	Network traffic detected: HTTP traffic on port 53471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53592
Source: unknown	Network traffic detected: HTTP traffic on port 53449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53470
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53591
Source: unknown	Network traffic detected: HTTP traffic on port 53506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53474
Source: unknown	Network traffic detected: HTTP traffic on port 53689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53478
Source: unknown	Network traffic detected: HTTP traffic on port 53517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53480
Source: unknown	Network traffic detected: HTTP traffic on port 53576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53481
Source: unknown	Network traffic detected: HTTP traffic on port 53392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53647
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53400
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53641
Source: unknown	Network traffic detected: HTTP traffic on port 53688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53765
Source: unknown	Network traffic detected: HTTP traffic on port 53401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53643
Source: unknown	Network traffic detected: HTTP traffic on port 53665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53419
Source: unknown	Network traffic detected: HTTP traffic on port 53515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53418

Source: classification engine

Classification label: mal60.phis.win@40/260@187/91

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 --field-trial-handle=2512,i,3008821820161670398,12908520785371167314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://offfryfjtht767755433.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 --field-trial-handle=2512,i,3008821820161670398,12908520785371167314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://offfryfjtht767755433.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://otrocamino.org/	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6783bca3840111e5424ee986	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	142.250.185.98	true	false	high
um.simpli.fi	35.204.201.36	true	false	high
tls13.taboola.map.fastly.net	151.101.65.44	true	false	high
ssum.casalemedia.com	104.18.27.193	true	false	high
i.clean.gg	34.95.69.49	true	false	high
eu-eb2.3lift.com	76.223.111.18	true	false	high
rtb.openx.net	35.186.253.211	true	false	high
crb.kargo.com	3.64.183.169	true	false	high
livepixel-production.bln.liveintent.com	44.195.149.119	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.1.44	true	false	high
mwzeom.zeotap.com	104.22.50.98	true	false	high
cm.g.doubleclick.net	172.217.18.2	true	false	high
idaas-ext.cph.liveintent.com	52.73.207.134	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	3.248.108.242	true	false	high
www.google.com	216.58.206.68	true	false	high
dcs-ups.g03.yahoodns.net	87.248.119.252	true	false	high
noa-atsv2.media.g03.yahoodns.net	188.125.72.139	true	false	high
prod.opus.aolp-ds-prd.aws.oath.cloud	65.9.66.17	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	high
match.prod.bidr.io	52.48.191.9	true	false	high
google.com	142.250.186.46	true	false	high
consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud	3.161.82.31	true	false	high
pagead-googlehosted.l.google.com	142.250.186.97	true	false	high
chidc2.outbrain.org	50.31.142.127	true	false	high
creativecdn.com	185.184.8.90	true	false	high
us-u.openx.net	34.98.64.218	true	false	high
nydc1.outbrain.org	70.42.32.31	true	false	high
uip.semasio.net	77.243.51.122	true	false	high
zeta-ssp-385516103.us-east-1.elb.amazonaws.com	98.84.205.158	true	false	high
m.deepintent.com	8.18.47.7	true	false	high
nld-prebid.a-mx.net	163.5.194.34	true	false	high
edge-prebid-cdn.g03.yahoodns.net	87.248.119.252	true	false	high
ep2.adtrafficquality.google	172.217.16.129	true	false	high
us-cds.taboola.com	141.226.224.32	true	false	high
pixel.onaudience.com	54.38.113.3	true	false	high
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	high
cs.media.net	2.23.240.30	true	false	high
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	3.254.223.93	true	false	high
presentation-ams1.turn.com	46.228.164.11	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud	52.18.154.142	true	false	high
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	high
cadmus.script.ac	104.18.22.145	true	false	high
offfryfjtht767755433.webflow.io	172.64.151.8	true	true	unknown
hbx.media.net	2.23.240.30	true	false	high
iad-2-sync.go.sonobi.com	69.166.1.67	true	false	high
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	high
u.openx.net	34.98.64.218	true	false	high
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	high
user-data-eu.bidswitch.net	35.214.136.108	true	false	high
blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	34.247.120.220	true	false	high
usersync.gumgum.com	34.247.233.198	true	false	high
rtb.gumgum.com	52.30.150.203	true	false	high
tsdtocl.com	151.101.1.44	true	false	high
bid-iad-static.yeahtargeter.com	47.253.61.56	true	false	high
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	high
spug-lhrc.pubmnet.com	185.64.190.81	true	false	high
id.a-mx.com	79.127.216.47	true	false	high
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.211.89.170	true	false	high
sync.srv.stackadapt.com	34.234.109.98	true	false	high
thrtle.com	34.233.219.14	true	false	high
ssp.ads.betweendigital.com	96.46.186.61	true	false	high
idx.cph.liveintent.com	34.194.178.247	true	false	high
sync.ipredictive.com	44.205.182.185	true	false	high
ep1.adtrafficquality.google	142.250.184.194	true	false	high
prod-rotation-v2.guce.aws.oath.cloud	34.253.93.164	true	false	high
aax-eu.amazon-adsystem.com	52.95.125.22	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
imgsync-amsfpairbc.pubmnet.com	198.47.127.18	true	false	high
ds-ats.member.g02.yahoodns.net	67.195.204.151	true	false	high
media-router-brb1.prod.media.g03.yahoodns.net	188.125.72.139	true	false	high
spug22000nf.pubmatic.com	185.64.189.114	true	false	high
d3e54v103j8qbb.cloudfront.net	18.244.20.40	true	false	high
geo-atsv2.media.g03.yahoodns.net	188.125.72.139	true	false	high
udc-ats.media.g03.yahoodns.net	188.125.72.139	true	false	high
webflow.com	52.4.175.122	true	false	high
proxy-euro-2-685782417.eu-central-1.elb.amazonaws.com	3.69.214.99	true	false	high
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false	high
cdn.prod.website-files.com	104.18.161.117	true	false	high
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	high
eexsync.com	80.77.87.108	true	false	high
ib.anycast.adnxs.com	37.252.173.215	true	false	high
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	high
hj5ozcalb.puzztake.com	198.199.89.209	true	false	high
uipus.semasio.net	50.57.31.206	true	false	high
yahoo-match.dotomi.com	unknown	unknown	false	high
api.archive-digger.com	unknown	unknown	false	high
sync.go.sonobi.com	unknown	unknown	false	high
prebid.a-mo.net	unknown	unknown	false	high
ucs.query.yahoo.com	unknown	unknown	false	high
pubmatic-match.dotomi.com	unknown	unknown	false	high
login.yahoo.com	unknown	unknown	false	high
consent.cmp.oath.com	unknown	unknown	false	high
241.42.69.40.in-addr.arpa	unknown	unknown	false	high
ssbsync.smartadserver.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
c1.adform.net	unknown	unknown	false	high
ads.pubmatic.com	unknown	unknown	false	high
simage4.pubmatic.com	unknown	unknown	false	high
mail.yahoo.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://s.yimg.com/bw/fonts/yahoo-sans-cr4-vf.woff2	false		high
https://ups.analytics.yahoo.com/ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external	false		high
https://s.yimg.com/eh/prebid-config/yahoo_login-us-desktop.json	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=4155074921905256297&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://match.prod.bidr.io/cookie-sync/throtle?_bee_ppp=1	false		high
https://prebid.a-mo.net/setuid/magnite?uid=M5VPZ6FP-1Y-IDHF&gdpr=0&us_privacy=1YNN	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=DNk0suLYR-K9q4Q4DKPZZA%3D%3D&gdpr=0&gdpr_consent=&google_cm	false		high
https://s.yimg.com/bw/fonts/centra-no2-bold.woff2	false		high
https://i.liadm.com/s/88342?bidder_id=246498&bidder_uuid=2285659547512489711723	false		high
https://b1sync.zemanta.com/usersync/gumgum/?puid=e_52cf446a-5a2c-4fae-b38a-81f916a32883&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__	false		high
https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-xandr%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent=	false		high
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1557141662676483&correlator=519642126984560&eid=31089448%2C95332149%2C31088251%2C83321073%2C31089253&output=ldjh&gdfp_req=1&vrg=202501070101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cylogin%2Cmain%2Cdt%2Cus_ylogin_main_dt_full_screen&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=320x50%7C1440x1024&fluid=height&ifi=1&sfv=1-0-40&fsfs=1&fsbs=1&eri=5&sc=1&cookie_enabled=1&cdm=gpt.mail.yahoo.net&abxe=1&dt=1736813599931&adxs=-12245933&adys=-12245933&biw=-12245933&bih=-12245933&isw=1440&ish=1024&scr_x=-12245933&scr_y=-12245933&ucis=asgd039bvznl&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Flogin.yahoo.com&loc=https%3A%2F%2Fgpt.mail.yahoo.net%2Fsandbox%3Fclient%3Dlogin%26version%3D0.1%26limited%3D0%26headerBidder%3D1%26haq%3D1%26benji%3D1%23config%3D%257B%2522positions%2522%253A%255B%257B%2522adUnitPath%2522%253A%2522%252F22888152279%252Fus%252Fylogin%252Fmain%252Fdt%252Fus_ylogin_main_dt_full_screen%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522size%2522%253A%255B%255B1440%252C1024%255D%252C%255B%2522fluid%2522%255D%255D%252C%2522div%2522%253A%2522gpt-passback%2522%257D%255D%252C%2522pageUrl%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522headerBidder%2522%253Atrue%252C%2522yahooPrebid%2522%253Atrue%252C%2522geoCountryCode%2522%253A%2522US%2522%252C%2522npa%2522%253Afalse%252C%2522limited%2522%253Afalse%252C%2522targetingConfig%2522%253A%257B%2522lang%2522%253A%2522en-US%2522%252C%2522bucket%2522%253A%2522mbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%2522%252C%2522spaceId%2522%253A%2522794200123%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522age%2522%253A%25220%2522%252C%2522gender%2522%253A%25220%2522%252C%2522colo%2522%253A%2522bf1%2522%252C%2522lu%2522%253A%25220%2522%252C%2522site%2522%253A%2522login%2522%252C%2522device%2522%253A%2522desktop%2522%252C%2522region%2522%253A%2522us%2522%252C%2522pageOrigin%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522AXIds%2522%253A%2522%2522%252C%2522tblaId%2522%253A%2522%2522%257D%252C%2522headerBidderConfig%2522%253A%257B%2522host%2522%253A%2522login.yahoo.com%2522%252C%2522pblob%2522%253A%2522lu%253A0%257C%257C794200123%257C%257C%2522%252C%2522buckets%2522%253A%255B%2522mbr-whatsapp-ac%2522%252C%2522mbr-passkey-unr-reg%2522%252C%2522mbr-whatsapp-nac%2522%255D%252C%2522limited%2522%253Afalse%252C%2522cobrand%2522%253A%2522%2522%252C%2522lang%2522%253A%2522en-US%2522%252C%2522site%2522%253A%2522yahoo_login%2522%252C%2522region%2522%253A%2522us%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%257D%257D&top=login.yahoo.com&vis=1&psz=0x0&msz=0x0&fws=256&ohw=0&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1736813590984&idt=4148&prev_scp=loc%3Dfull_screen%26ri%3D1%26hb_pb100%3Dfalse%26hb_crid%3D-3495429243288887471%26hb_adomain%3Dduckduckgo.com%26hb_format%3Dbanner%26hb_source%3Dclient%26hb_size%3D1440x1024%26hb_pb%3D0.90%26hb_adid%3D70795000262966%26hb_bidder%3Dtaboola&cust_params=bucket%3Dmbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%252Cdmi_consent_false%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3Dus%26site%3Dyahoo_login%26usercountry%3DUS%26spaceid%3D794200123%26url%3Dhttps%253A%252F%252Flogin.yahoo.com%26bka%3D0%26bkg%3D0%26hb_uid_mod%3Dliveintentid_on_not_enriched%26li-module-enabled%3Dt1-e0%26lr_env%3Dno-id%26sharedid%3Did%26lr_pairid%3Dno-id&adks=1818218935&frm=24&eoidce=1&td=1	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dappnexus%26uid%3D%24UID	false		high
https://login.yahoo.com/logads?adType=gam&delay=13197&spid=794200123	false		high
https://cadmus.script.ac/d1tqrs7vz94d9k/script.js	false		high
https://id.a-mx.com/u?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Damx_com%26uid%3D	false		high
https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent=	false		high
https://cs.media.net/cksync?cs=45&type=ku&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-medinet%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D=%3Cvsid%3E	false		high
https://x.bidswitch.net/sync?ssp=adaptmx&user_id=0d87eeaf-9194-43a3-83c9-092f09d73b30&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	false		high
https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsu-ARNkFiqrjQ5PUTcGWYX_QSy5SLiektThchlbXo6oH4_YZEn_Q-mWvVnarSgr7XwvyTkSQ8iZ1JXsEO3-sustuBqDPmyQuLOOkC0IeS6M1RrXA7fvcNxj-aOkG1ITUvvjK-tcD45DI8hmDzIzUxHd2OMO-iabzYSB0tW82wvXcJyCB4n-Xh_oKn3KonVzFkGd6iwmsmw39RnEDJ9-06wLvFK304U-R1aPkqvvcoPvpUzdmZo3gGLvrKMto4uQ6t22XQZPcwKDIXUjGh3AGlxbm4jlxeN_K0oONx7kheZlBqRkQk5rDJW6gkq_SKxsFOQyIF7e2jEsbKdkkw7nFx0TKfGKmTS_mh8rc603FuTKRkVF91wzNpEnIvaCqO2y0QWyicGuyiCtcCXyMj-EV_Dhs9JtD8ifQIyTQtgQ5X_nTMzmlQLJ6_pEDExqViJUFul9A6Jt3f90NZGy-4a7MMJrqVEJZyFq__Q&sai=AMfl-YQUW2_ssaFCrx5esZMyRk7g8TVMbHWIyKsL6w7Qw72K6FGl_DsYSVnIF2LcInQYlBAqkSwX2lweO98w7WLfL7HoaXSWsDFxeDn6Y1iioPuykW8k2MpIiwxhoH1py6ZMJfkBSMz1CNj70C7nqQE69Q&sig=Cg0ArKJSzGseeSP6pMKHEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl=	false		high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://u.openx.net/w/1.0/cm?cc=1&id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-openx%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%7BOPENX_ID%7D	false		high
https://thrtle.com/sync?vxii_pid=5015&vxii_pdid=2417d054-2ba1-4d51-a183-4333e652c96e	false		high
https://sync.kueezrtb.com/api/cookie?partnerId=kueez-sovrn&gdpr=0&gdpr_consent=&us_privacy=&userId=J_2NALZHVBdN2rf9Sla0IdII	false		high
https://pbs.yahoo.com/setuid?bidder=ttd&uid=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent=	false		high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202501070101/pubads_impl.js	false		high
https://sync.a-mo.net/setuid?A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=pubmatic&uid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964	false		high
https://simage4.pubmatic.com/AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid=	false		high
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=	false		high
https://ups.analytics.yahoo.com/ups/58739/cms?partner_id=BLKAI&orig=ono	false		high
https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gpt&tv=m202501070101&st=env	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6783bca3840111e5424ee986	false	Avira URL Cloud: safe	unknown
https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964	false		high
https://eb2.3lift.com/xuid?mid=2662&xuid=y-Nr2LhgJE2oS2kZireSyzw60MDHsqltuP_lhatOvd2Q--~A&dongle=0883	false		high
https://sync.a-mo.net/setuid?us_privacy=1YNN&A=0d87eeaf-9194-43a3-83c9-092f09d73b30&bidder=index_rtb&uid=Z4WsMUt3uXMAAHsDBQyuQAAA%26160	false		high
https://ssum.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3Fus_privacy%3D1YNN%26A%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dindex_rtb%26uid%3D&gdpr=0&gdpr_consent=&s=191503&us_privacy=1YNN&C=1	false		high
https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjI4NTY1OTU0NzUxMjQ4OTcxMTcyMw%3D%3D	false		high
https://uipus.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&sInitiator=external&gdpr=0&gdpr_consent=	false		high
https://ups.analytics.yahoo.com/ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=218993205127000050435&gdpr=&gdpr_consent=	false		high
https://thrtle.com/sync?vxii_pid=7006&vxii_pdid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7&us_privacy=1YN-	false		high
https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-sonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%5BUID%5D	false		high
https://udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200123&yhlCT=2&yhlBTMS=1736813588531&yhlClientVer=3.53.39&yhlRnd=cX2eGWESkNvvkYhG&yhlCompressed=0	false		high
https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png	false		high
https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&redir=true&gdpr=0&gdpr_consent=	false		high
https://sync.kueezrtb.com/api/cookie?partnerId=kueez-sonobi&gdpr=0&gdpr_consent=&us_privacy=&userId=270ea1cd-42bd-4e80-87ff-335aa6597c6b	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/90196aba2c860f98/1736813573974/hdlLq_AxuGYOldi	false		high
https://tsdtocl.com/	false		high
https://pbs.yahoo.com/setuid?bidder=rubicon&uid=M5VPZ6FP-1Y-IDHF&gdpr=0&us_privacy=1YNN	false		high
https://csp.yahoo.com/beacon/csp?src=mbr_account	false		high
https://cdn.prod.website-files.com/6783bca3840111e5424ee986/js/webflow.967b2dfec747eeb055e813a1fe43b230.js	false		high
https://eb2.3lift.com/ebda?sync=1&gdpr=0&gdpr_consent=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://image8.pubmatic.com/AdServer/ImgSync?p=162110&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-pubmatic%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%23PMUID	false		high
https://ups.analytics.yahoo.com/ups/58691/cms?partner_id=THROTLE	false		high
https://geo.yahoo.com/c?s=794200123&t=FxjdUAYHBLNBZOFi,0.2424368520244946&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fofffryfjtht767755433.webflow.io%2F&_K=3.53.39%05_a1s%03d%3DAQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA%26S%3DAQAAAmqD1uXgX4QvWdg0SC3mG3E%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04_bt%03rapid%04_src%03ym%04pspid%03159600001%04activity%03mail-direct%04_lang%03en-US%04_intl%03us%04_done%03https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_%04A_pr%03https%04A_tzoff%03-5%04A_sid%03VjfdDpDVlHD61ar9%04_w%03login.yahoo.com%2F%3F.src%3Dym%26pspid%3D159600001%26activity%3Dmail-direct%26.lang%3Den-US%26.intl%3Dus%04pt%03utility%04ver%03nodejs%04pg_name%03loginLanding%04gm_np%03yahoo%04src%03ym%04p_sec%03DEFAULT_SECTION%04p_subsec%03DEFAULT_SUBSECTION%04test%03mbr-whatsapp-ac%2Cmbr-enbl-commchnl-rev-trap-sess-ext%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cmbr-passkey-mgmt%04cause%03mail-direct%04src_id%03159600001%04pct%03signin%04milestone%03signin%04_ts%031736813617%04_ms%03583%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031&_C=elm%03link%04elmt%03secondary%04slk%03signup%04mKey%03signup%04intrctn%03click%04corActn%03click%04sec%03DEFAULT_SECTION%04_p%031	false		high
https://ep2.adtrafficquality.google/sodar/sodar2.js	false		high
https://consent.cmp.oath.com/cmp.js	false		high
https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEA7Gptvyo16ZLTKOkZ2Uy4s&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1	false		high
https://pixel.onaudience.com/?partner=214&mapped=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&gdpr_consent=	false		high
https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&specId=yidregsimplified&done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MENEOTM0QjItRTJEOC00N0UyLUJEQUItODQzODBDQTNEOTY0&gdpr=0&gdpr_consent=&google_cm	false		high
https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&redir=true&gdpr=0&gdpr_consent=&dcc=t	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent=	false		high
https://s.yimg.com/wm/mbr/images/yahoo/contact-card-v0.0.2.svg	false		high
https://opus.analytics.yahoo.com/tag/opus.js	false		high
https://noa.yahoo.com/p?s=794200123&t=1736813595955&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=yahoo_login&partner=&lang=en-US&region=us&device=desktop&colo=bf1&bucket=mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cdmi_consent_false&rid=unknown&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.2.29&prebidVersion=8.51.0&yahooPrebidVersion=2.0.47&type=YAHOO_PREBID_LIVEINTENT_TARGETING&hb_uid_mod=liveintentid_on_not_enriched	false		high
https://pr-bh.ybp.yahoo.com/sync/triplelift/2285659547512489711723?gdpr=0&gdpr_consent=	false		high
https://sync.kueezrtb.com/api/cookie?partnerId=kueez-xandr&userId=3372432284170253134&gdpr=0&gdpr_consent=&us_privacy=&gdpr=0&gdpr_consent=	false		high
https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_	false		high
https://cds.taboola.com/?uid=7ace7fe0-0abd-410f-a642-598ce2a8780b-tucte7f319d	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.googletagservices.com/agrp/	chromecache_117.2.dr, chromecache_169.2.dr	false		high
http://underscorejs.org	chromecache_279.2.dr, chromecache_221.2.dr	false		high
https://otrocamino.org/	chromecache_140.2.dr, chromecache_154.2.dr	false	Avira URL Cloud: safe	unknown
https://ep2.adtrafficquality.google	chromecache_233.2.dr	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	chromecache_253.2.dr	false		high
https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr=	chromecache_136.2.dr	false		high
https://webflow.com	chromecache_143.2.dr	false		high
https://pixel.onaudience.com/?partner=214&mapped=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&gdpr_co	chromecache_163.2.dr	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f0	chromecache_136.2.dr	false		high
https://s.seedtag.com/c/hb/bid	chromecache_190.2.dr, chromecache_183.2.dr	false		high
https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=	chromecache_196.2.dr	false		high
https://dsp-ap.eskimi.com/pixelGet?ex=50&gdpr=	chromecache_196.2.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_240.2.dr	false		high
https://dsp-cookie.adfarm1.adition.com/?ssp=9&gdpr=0&gdpr_consent=	chromecache_196.2.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_161.2.dr, chromecache_233.2.dr	false		high
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_238.2.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=DNk0suLYR-K9q4Q4DKPZZA%3D%3	chromecache_163.2.dr	false		high
https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=	chromecache_196.2.dr	false		high
https://ap.lijit.com/pixel?&gdpr=	chromecache_136.2.dr	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCoo	chromecache_196.2.dr	false		high
https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr=	chromecache_136.2.dr	false		high
https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P	chromecache_163.2.dr	false		high
https://sketch.com	chromecache_166.2.dr, chromecache_174.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_238.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.241.10.95	unknown	United States	16509	AMAZON-02US	false
3.161.82.31	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
65.9.66.17	prod.opus.aolp-ds-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
18.244.20.40	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.161.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
34.95.69.49	i.clean.gg	United States	15169	GOOGLEUS	false
44.195.149.119	livepixel-production.bln.liveintent.com	United States	14618	AMAZON-AESUS	false
77.243.51.122	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
185.64.190.81	spug-lhrc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
2.23.240.30	cs.media.net	European Union	8781	QA-ISPQA	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
70.42.32.31	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
79.127.216.47	id.a-mx.com	Czech Republic	9080	GINCzechRepublicEUCZ	false
52.4.175.122	webflow.com	United States	14618	AMAZON-AESUS	false
172.217.18.2	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.1.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.65.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
34.247.233.198	usersync.gumgum.com	United States	16509	AMAZON-02US	false
178.250.1.11	gum.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
47.253.61.56	bid-iad-static.yeahtargeter.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
212.82.100.140	unknown	United Kingdom	34010	YAHOO-IRDGB	false
198.199.89.209	hj5ozcalb.puzztake.com	United States	14061	DIGITALOCEAN-ASNUS	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
87.248.119.251	unknown	United Kingdom	203220	YAHOO-DEBDE	false
87.248.119.252	dcs-ups.g03.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
46.228.164.11	presentation-ams1.turn.com	United Kingdom	56396	TURNGB	false
185.64.189.114	spug22000nf.pubmatic.com	United Kingdom	62713	AS-PUBMATICUS	false
34.233.219.14	thrtle.com	United States	14618	AMAZON-AESUS	false
104.18.22.145	cadmus.script.ac	United States	13335	CLOUDFLARENETUS	false
34.194.178.247	idx.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
18.210.65.74	unknown	United States	14618	AMAZON-AESUS	false
172.217.16.129	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false
89.149.192.196	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
52.95.125.22	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
98.84.205.158	zeta-ssp-385516103.us-east-1.elb.amazonaws.com	United States	11351	TWC-11351-NORTHEASTUS	false
52.211.89.170	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.22.50.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.66	unknown	United States	15169	GOOGLEUS	false
34.247.120.220	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.185.98	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
50.31.142.127	chidc2.outbrain.org	United States	22075	AS-OUTBRAINUS	false
3.254.223.93	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.204.201.36	um.simpli.fi	United States	15169	GOOGLEUS	false
8.18.47.7	m.deepintent.com	United States	32662	GMCRUS	false
163.5.194.33	unknown	France	56339	EPITECHFR	false
172.64.151.8	offfryfjtht767755433.webflow.io	United States	13335	CLOUDFLARENETUS	true
163.5.194.34	nld-prebid.a-mx.net	France	56339	EPITECHFR	false
52.30.150.203	rtb.gumgum.com	United States	16509	AMAZON-02US	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
142.250.184.194	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
67.195.204.151	ds-ats.member.g02.yahoodns.net	United States	26101	YAHOO-3US	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
54.38.113.3	pixel.onaudience.com	France	16276	OVHFR	false
185.184.8.90	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
198.47.127.18	imgsync-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
52.48.191.9	match.prod.bidr.io	United States	16509	AMAZON-02US	false
65.9.66.44	unknown	United States	16509	AMAZON-02US	false
3.69.214.99	proxy-euro-2-685782417.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
52.73.207.134	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
34.234.109.98	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
3.64.183.169	crb.kargo.com	United States	16509	AMAZON-02US	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
34.253.93.164	prod-rotation-v2.guce.aws.oath.cloud	United States	16509	AMAZON-02US	false
37.252.173.215	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
69.166.1.67	iad-2-sync.go.sonobi.com	United States	27630	AS-XFERNETUS	false
185.89.210.82	unknown	Germany	29990	ASN-APPNEXUS	false
44.205.182.185	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
104.18.27.193	ssum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
124.146.153.170	unknown	Japan	2514	INFOSPHERENTTPCCommunicationsIncJP	false
74.119.117.16	widget.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
52.18.154.142	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud	United States	16509	AMAZON-02US	false
3.248.108.242	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
80.77.87.108	eexsync.com	United Kingdom	46636	NATCOWEBUS	false
35.186.253.211	rtb.openx.net	United States	15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
188.125.72.139	noa-atsv2.media.g03.yahoodns.net	United Kingdom	34010	YAHOO-IRDGB	false
151.101.129.44	unknown	United States	54113	FASTLYUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
3.161.82.108	unknown	United States	16509	AMAZON-02US	false
50.57.31.206	uipus.semasio.net	United States	19994	RACKSPACEUS	false
141.226.224.32	us-cds.taboola.com	Israel	200478	TABOOLA-ASIL	false
96.46.186.61	ssp.ads.betweendigital.com	United States	7979	SERVERS-COMUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590402
Start date and time:	2025-01-14 01:11:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://offfryfjtht767755433.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@40/260@187/91
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 172.217.16.206, 74.125.133.84, 142.250.181.238, 172.217.18.110, 142.250.186.46, 142.250.185.170, 216.58.206.42, 172.217.18.10, 142.250.185.106, 142.250.74.202, 142.250.186.42, 216.58.206.74, 142.250.185.74, 142.250.185.202, 142.250.186.74, 142.250.184.202, 172.217.16.202, 142.250.184.234, 142.250.185.138, 142.250.186.138, 172.217.23.106, 199.232.214.172, 2.23.77.188, 142.250.185.238, 142.250.184.238, 142.250.184.195, 142.250.181.234, 142.250.185.234, 142.250.186.106, 142.250.186.170, 142.250.186.34, 89.207.16.137, 216.58.206.78, 142.250.186.33, 172.217.23.98, 69.173.144.138, 69.173.144.165, 69.173.144.139, 193.0.160.131, 13.107.42.14, 204.79.197.237, 13.107.21.237, 64.158.223.140, 184.28.88.244, 104.19.159.19, 104.19.158.19, 37.157.4.29, 37.157.5.141, 37.157.5.132, 37.157.5.87, 37.157.4.28, 37.157.5.84, 37.157.2.230, 37.157.3.26, 37.157.2.233, 37.157.2.229, 37.157.2.228, 37.157.3.20, 63.215.202.140, 104.102.34.86, 172.217.16.195, 172.217.18.106, 142.2
Excluded domains from analysis (whitelisted): uipglob.trafficmanager.net, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, track.adformnet.akadns.net, track-eu.adformnet.akadns.net, e8960.e2.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, pubmatic.edgekey.net, digicertwc.rubiconproject.com.edgekey.net, a.rfihub.com.akadns.net, update.googleapis.com, www-linkedin-com.l-0005.l-msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, otelrules.azureedge.net, ctldl.windowsupdate.com, a-emea.rfihub.com.akadns.net, pagead2.googlesyndication.com, 43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, bfp.global.dual.dotomi.weighted.com.akadns.net, c.bing.com, tpc.googlesyndication.com, gstatic.com, e6603.g.akamaiedge.net, xandr-g-geo.trafficmanager.net, dual-a-0034.a
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://offfryfjtht767755433.webflow.io/

Input	Output
URL: https://offfryfjtht767755433.webflow.io Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://offfryfjtht767755433.webflow.io
URL: https://43187c8ffbbc76326c593e2ad756bd83.safeframe... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The combination of these factors indicates a high likelihood of malicious intent, potentially for phishing or other malicious activities." }
(new function _9168eb59_55ba_3984_5cb8_0503d4a2e303_cbe1bc76(){var c=['C2nYAxb0CW==','tKzo','Aw5PDa==','ywjVDxq6yMXHBMS=','jNu9','igLUia==','EhbT','psHCzcSPxhm=','y2zNlwv2ywW=','qK9ewq==','Dw5ZAgLMDa==','cIaGicbHDcbHyM91DdPZCMnKB2m6','Ahr0Chm6','ihWGC3rHy2S6ia==','Aw1Nw2fSDf0SihnWyw5BDgL0BgvD','C29YDa==','cMDLDebQyxzHC2nYAxb0oG==','rLjd','yMLKuMvXq291BNq=','FsKO','y2zNlwG5A2S=','yxbPrxzHBfDYyxa=','CgfYzw50rwXLBwvUDa==','cIaGicbHDcbHyM91DdPIBgfUAZO=','jMe9','Aw5ZCgvJDevYCM9Y','jNq9','CMvMCMvZAcbB','Bg9JywXoyw1L','Bg9JywXtDg9YywDL','ywn0Aw9Ux25HBwu=','zxz0lwG5A2SY','u2vJDxjPDhLfCNjVCG==','rg9JDw1LBNqUD3jPDgu=','CMvMzxjYzxi=','CxvLCNLtzwXLy3rVCG==','CgfYC2u=','uhjLr290y2HH','zxz0lw5MBG==','r0vu','ANnWlMLUAMvJDa==','zgf0ys13AwrNzxqTAwq=','y29UzMLNDxjHyMXL','Bwv0yvTODhrWlwvXDwL2psjdB250zw50lvnLy3vYAxr5lvbVBgLJEsjD','zhvYyxrPB24=','Aw5Zzxj0qMvMB3jL','ksKUCNvUka==','y3vZDg9Tzxjjza==','zxz0lwDNCW==','wfbnlK0=','tgLZDgvUzxiUD3jHCa==','ChjLDMvUDerLzMf1Bhq=','CMjVEa==','yxbPvxnLCNnJCMLWDa==','zg9JDw1LBNrfBgvTzw50','BNr2','Bwf0y2HLCW==','tuXqlLbcsLm=','DhjHy2vK','AhrTBerHDge=','BMf2AwDHDgu=','w0vFq1nqxsa=','Bxv0zwqG','ywn0Aw9Utg9Nrgf0yq==','Awq9','C2vUza==','BM9Kzvr5Cgu=','C2v0vgLTzw91Da==','sfrntfnJCMLWDevSzw1LBNq=','zNjVBunOyxjdB2rL','BMf2AwDHDgLVBG==','Dg9tDhjPBMC=','yxbPqxv0B3bSyxK=','BwfW','zxz0lxb3CJi=','DMfYihDYAxrLrM4Gpsb3Aw5KB3DBiG==','igLZig5VDcbLEhrLBNnPyMXL','zMfSC2u=','q1rj','ANn0Aw1LC3rHBxa=','x19JB25ZB2XLlMeK','lcbTAxnZzwq6ia==','w0vFtK9Fsf0=','Cg9PBNrLCKv2zw50CW==','D3jPDgvSBG==','lcbZAwDLEha6ia==','y3vYCMvUDe5Vzgu=','ywXSB3CTzM9YBxmGywXSB3CTCg9PBNrLCI1SB2nRigfSBg93lxbVChvWCYbHBgXVDY1WB3b1ChmTDg8TzxnJyxbLlxnHBMrIB3GGywXSB3CTC2fTzs1VCMLNAw4GywXSB3CTC2nYAxb0CYbHBgXVDY10B3aTBMf2AwDHDgLVBI1IEs11C2vYlwfJDgL2yxrPB24=','rfDs','sfrntefUy2HVCKvSzw1LBNq=','qvjfqsbcuIbdt0WGru1cruqGsfiGteLosYbqqvjbtsbtt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','y3jLyxrLsfrnterVy3vTzw50','CMv3CML0zq==','yMLUza==','zxz0lw5HDG==','Ahr0Chm6lY9JB2XSzwn0B3iTChHWANvVCdrRCs5WEc1JBg91zc5UzxqVyxbPl3yYl2nVBgXLy3rVCG==','pgHLywq+pc9OzwfKpJXIB2r5pJWVyM9KEt4=','sdLlsW==','y2XLyxjuAw1LB3v0','z2v0t3DUuhjVCgvYDhLezxnJCMLWDg9Y','jMjHpq==','kcL7Fq==','v2fYBMLUz3m=','rv9dqG==','BwfSDMvYDgLZAw5Nx3bVyW==','suzsqu1f','Aw1W','C29Tzq==','Aw5Zzxj0qwrQywnLBNrfBgvTzw50','vefcteu=','yMLKuMvZq291BNq=','C2XPy2u=','w29IAMvJDcboyxzPz2f0Aw9Uxq==','rxzLBNruyxjNzxq=','zg9JD3jPDgu=','x19WCM90B19F','Cg9W','cKbHyM91DdPZCMnKB2m=','AwXS','CgfYzw50tM9Kzq==','zxz0lwHYDW==','reLw','jImZotS=','zgvSzxrL','ANnVBG==','r290y2HH','zNjHBwvtCMm=','oYbZy3jPChqTC3jJicDUB25Jzs0=','zgLY','tI9b','C2fMzuzYyw1L','w0vsuL9nx0Lewf0=','CgvYzM9YBwfUy2u=','iL0UChv0ihX8igz1BMn0Aw9UkgH0BwWPihSGzg9JDw1LBNqUD3jPDguOzgvJB2rLvvjjq29TCg9Uzw50kgH0BwWPktSGzg9JDw1LBNqUy2XVC2uOktSGFtSGD3jPDgvgBIGI','BwLU','Bwf0y2G=','sw5PDgLHBgL6yxrPB25gywLSzwq=','zxz0lxrODq==','B25LCNjVCG==','iL0UCNvUkhT3BMq6D2LUzg93lhnQCZO=','phrIBd51CMW9','jM5HBwu9','x19JC3bYx18=','phjJDd50Ehq9','yxbWlwjHBM5LCG==','CMvSB2fK','D2LUzg93lNbHCMvUDfSI','D2vLAW==','x19JB25ZB2XLlMeKyW==','Aw1NlMnVBgXLy3rPB24=','sw5PDa==','zNjHBwvZ','rJjg','cMDSB2jHBcbJB2rLqgfIB3v0oNnYy2rVyZO=','Dw53CMfW','qLvuve9o','yMLKzgvY','wfbnlKy=','CMvWBgfJzq==','idOG','id0+ia==','Bg9JyxrPB24V','C2vSzG==','y2zJB21Wyxq=','EYjMiJO=','Bxv0zwq=','yMLKuMvXDwvZDgvK','yxbPu2vZC2LVBLv1Awq=','yxvKAw9uCMfJA3m=','zMfPBgvKoIa=','lcbSyxrLBMn5oIa=','Bwf0y2HnzwrPyq==','zxz0lwnZCJe=','DxnLCKfNzw50','Ahr0Chm6lY9PlMnSzwfUlMDNlZfH','zNjHBwvtCMneB2m=','pgH0BwW+','y29UzMLNlNnLzwr0ywCUy29Tl3n0yw5KyxjKlwLMCMfTzs9PBMrLEc52mq==','w0rpoKvwvf0=','sfuV','uMfUz2vfCNjVCG==','C3rYAw5NAwz5','z2v0vgLTzxPVBMvpzMzZzxq=','CMvZCg9UC2vvuKW=','y2XHC3nmAxn0','C3rYAw5N','Dw5SB2fK','sfrnte1LDgffBgvTzw50','zxHLyW==','Chv0','C3lrGt0I','D2LUzg93lG==','jNnYyZ0=','v0felq==','v2LUzg93lM9UzxjYB3i=','y29UDgvUDerVy3vTzw50','rwXLBwvUDa==','v1nytYaVia==','CMv0DxjUicaKChH5','y2LK','C2v0uhjVDg90ExbLt2y=','sfrnterVy3vTzw50lMLUAMvJDa==','Dg9mB3DLCKnHC2u=','tvnjrq==','sfrnte1LzgLHrwXLBwvUDa==','kg51BgWS','iIaTpsa=','lcbJDwu6ia==','v2vIu29JA2v0','zNjVBq==',
URL: https://43187c8ffbbc76326c593e2ad756bd83.safeframe... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate advertisement-related script from a trusted domain (doubleclick.net). While it uses some legacy APIs like `XDomainRequest`, which pose minor risks, the overall behavior is consistent with typical advertisement and analytics functionality. There are no clear indicators of malicious intent or data exfiltration, so the risk score is relatively low." }
vu("https://securepubads.g.doubleclick.net/pcs/view?xai\x3dAKAOjssyiuIC-Yc_tzOyEwUUgSElb4wEMTpRHGPisjd7Fbctotn6RdObjkzo2Hw0MZEfrx7PSKX9q-hG6iRQddhjWyCQ4sd2NoSDq9TdjY8khv0rfhCjFuwrVLFkU5xACg_4FqyWHbsDsc8zHGi57unPSazx2FDQFzoC4DX-TIMObj0rGO7wsrx5dzrQGdkJqfVvZnHxoEZdzzF27IF0mYBmll_IDoVo3ake4O5iIuWL9_HbF398Wsz9hXvHuOMuxtyHfUzKOrES5YNuY1uivDlCJnF5vS2F-YPGL_7y1Fobi13SFb-8FzjoDiAkKLhx8Vytqdj_TPaSl8wjJty3JPs_3-4Api0zDmmPMDoI8dnNYpaQhw72vfP-biN_j-3SNMfeb6NMnebU41qwhN1NhlsYgk1mhTMzlIkDww91TIa01OZV9zb0d1K_aTXvSiB4IxO5_5UomEVfQjHZ1tFGaMlGuqYY5cvbhnJB\x26sai\x3dAMfl-YQGsXakW6IvTYFHYQ7gGfTjPRgIG8-sA2it2hEOflxl5WxTqbX6ucxnwg7V093sNHQ89DfbKp6fe2YseGOa3B2azYRQhtEzd7vJ9nU7JpPuzW2meNUu239QlbEhnK_yg5F4maH-4mjbEk-MsDwNWg\x26sig\x3dCg0ArKJSzNQIdCFwEvtqEAE\x26uach_m\x3d%5BUACH%5D\x26urlfix\x3d1\x26adurl\x3d")
URL: https://43187c8ffbbc76326c593e2ad756bd83.safeframe... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet contains a mix of behaviors that warrant further review. While it does not exhibit any clear malicious intent, there are some moderate-risk indicators that require closer examination. The script appears to be using standard web development practices, but the extensive use of obfuscation and dynamic code manipulation techniques raises some concerns. Overall, the script requires additional analysis to determine the full extent of its functionality and potential risks." }
(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var l=this\|\|self;function n(a){return a};var p,q;a:{for(var r=["CLOSURE_FLAGS"],u=l,v=0;v<r.length;v++)if(u=u[r[v]],u==null){q=null;break a}q=u}var w=q&&q[610401301];p=w!=null?w:!1;var x;const y=l.navigator;x=y?y.userAgentData\|\|null:null;function z(a){return p?x?x.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function A(a){var b;a:{if(b=l.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function B(){return p?!!x&&x.brands.length>0:!1}function C(){return B()?z("Chromium"):(A("Chrome")\|\|A("CriOS"))&&!(B()?0:A("Edge"))\|\|A("Silk")};!A("Android")\|\|C();C();A("Safari")&&(C()\|\|(B()?0:A("Coast"))\|\|(B()?0:A("Opera"))\|\|(B()?0:A("Edge"))\|\|(B()?z("Microsoft Edge"):A("Edg/"))\|\|B()&&z("Opera"));var D=new Set;function E(a,b=!1){a=b&&Symbol.for&&a?Symbol.for(a):a!=null?Symbol(a):Symbol();D.add(a);return a}var F=E("jas",!0),G=E();var H={},I={};function J(a){return!(!a\|\|typeof a!=="object"\|\|a.s!==I)}function K(a){return a!==null&&typeof a==="object"&&!Array.isArray(a)&&a.constructor===Object}function L(a){return!Array.isArray(a)\|\|a.length?!1:(a[F]\|0)&1?!0:!1};const M=BigInt(Number.MIN_SAFE_INTEGER),N=BigInt(Number.MAX_SAFE_INTEGER);function O(a,b){return P(b)}function P(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=M&&a<=N?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(L(a))return}else if(a!=null&&a instanceof Uint8Array){let b="",e=0;const d=a.length-10240;for(;e<d;)b+=String.fromCharCode.apply(null,a.subarray(e,e+=10240));b+=String.fromCharCode.apply(null,e?a.subarray(e):a);return btoa(b)}}return a};function Q(a,b,e,d,f){if(a!=null){if(Array.isArray(a))a=L(a)?void 0:f&&(a[F]\|0)&2?a:R(a,b,e,d!==void 0,f);else if(K(a)){const h={};for(let c in a)h[c]=Q(a[c],b,e,d,f);a=h}else a=b(a,d);return a}}function R(a,b,e,d,f){const h=d\|\|e?a[F]\|0:0,c=d?!!(h&32):void 0;d=Array.prototype.slice.call(a);for(let g=0;g<d.length;g++)d[g]=Q(d[g],b,e,c,f);e&&((a=(b=n(G))?a[b]:void 0)&&(d[G]=Array.prototype.slice.call(a)),e(h,d));return d}function aa(a){return a.l===H?a.toJSON():P(a)} function ba(a){return R(a,aa,void 0,void 0,!1)};function S(a,b,e){if(e!=null&&typeof e!=="string")throw Error();a=a.h;let d=a[F]\|0;if(d&2)throw Error();const f=d&512?0:-1,h=b+f;var c=a.length-1;h>=c&&d&256?a[c][b]=e:h<=c?(a[h]=e,d&256&&(e=a[c],b in e&&delete e[b])):e!==void 0&&(c=d>>15&1023\|\|536870912,b>=c?e!=null&&(a[c+f]={[b]:e},a[F]=d\|256):a[h]=e)};function T(a){return a}let U;var W=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[F]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var e=a;b\|=64;var d=e.length;if(d&&(--d,K(e[d]))){b\|=256;e=d-(b&512?0:-1);if(e>=1024)throw Error("pvtlmt");b=b&-33521665\|(e&1023)<<15}}a[F]=b}this.h=a}toJSON(){const a=!U;try{return a&&(U=ba),V(this)}finally{a&&(U=void 0)}}};W.prototype.l=H; W.prototype.toString=function(){try{return U=T,V(this).toString()}finally{U=void 0}}; function V(a){var b=a.h;a=U(b);{b=a!==b;let m=a.length;if(m){var e=a[m-1],d=K(e);d?m--:e=void 0;var f=a;if(d){b:{var h=e;var c;var g=!1;if(h)for(let t in h)isNaN(+t)?(c??(c={}))[t]=h[t]:(d=h[t],Array.isArray(d)&&(L(d)\|\|J(d)&&d.size===0)&&(d=null),d==null&&(g=!0),d!=null&&((c??(c={}))[t]=d));g\|\|(c=h);if(c)for(let t in c){g=c;break b}g=null}h=g==null?e!=null:g!==e}for(;m>0;m--){c=f[m-1];if(!(c==null\|\|L(c)\|\|J(c)&&c.size===0))break;var k=!0}if(f!==a\|\|h\|\|k){if(!b)f=Array.prototype.slice.call(f,0,m);else if(k\|\| h\|\|g)f.length=m;g&&f.push(g)}k=f}else k=a}return k};var ca=class extends W{};function da(a=window){return a};var ea=/#\|$/;const X=function(a,b=null){return b&&b.getAttribute("data-jc")===String(a)?b:document.querySelector(`[${"data-jc"}="${a}"]`)}(103,document.currentScript);if(X==null)throw Error("JSC not found 103");const Y={},Z=X.attributes;for(let a=Z.length-1;a>=0;a--){const b=Z[a].name;b.indexOf("data-jcp-")===0&&(Y[b.sub
URL: https://43187c8ffbbc76326c593e2ad756bd83.safeframe... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a part of the Closure Library, which is a well-known and trusted JavaScript library maintained by Google. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code seems to be focused on handling URLs and creating safe script URLs, which are common and legitimate use cases. Overall, this script poses a low risk and is likely part of a larger, legitimate application." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/ SPDX-License-Identifier: Apache-2.0 / var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={message:fa(v)};var c=void 0===c?{}:c;this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta=c};var w=function(a){w[" "](a);return a};w[" "]=function(){};var ia=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?#]\|$))?([^?#]+)?(?:\\?([^#]))?(?:#([\\s\\S]))?$");var ja=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)};var ka=RegExp("^https?://(\\w\|-)+\\.cdn\\.ampproject\\.(net\|org)(\\?\|/\|$)"),ma=function(){var a=la;this.g=x;this.h=a},na=function(a,b){this.url=a;this.j=!!b;this.depth=null};function oa(a){f.google_image_requests\|\|(f.google_image_requests=[]);var b=f.document;b=void 0===b?document:b;b=b.createElement("img");b.src=a;f.google_image_requests.push(b)};var y=function(){this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"string"==typeof c&&(c=c.split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(String(a))},sa=function(a){var b="https://pagead2.googlesyndication.com/pagead/gen_204?id=jserror&",c=ra(a)-27;if(0>c)return"";a.g.sort(function(za,Aa){return za-Aa});for(var d=null,e="",k=0;k<a.g.length;k++)for(var g=a.g[k],A=a.h[g],O=0;O<A.length;O++){if(!c){d=null==d?g:d;break}var q=qa(A[O],a.i,",$");if(q){q=e+q;if(c>=q.length){c-=q.length;b+=q;e=a.i;break}d=null==d?g:d}}a="";null!=d&&(a=e+"trn="+d);return b+a},ra=function(a){var b=1,c;for(c in a.h)b=c.length>b?c.length:b;return 3997-b-a.i.length-1};var ta=function(a){if(.01>Math.random())try{if(a instanceof y)var b=a;else b=new y,ja(a,function(d,e){var k=b,g=k.o++;d=z(e,d);k.g.push(g);k.h[g]=d});var c=sa(b);c&&oa(c)}catch(d){}};var fa=function(a){var b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n")}catch(e){b=c}}return b};({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js")));({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S])$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secureframe\.doubleclick\.net\|[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.usercontent\.goog)$/,wa=/^(pagead2\.googlesyndication\.com\|googleads\.g\.doubleclick\.net)$/;var xa=function(a){return function(b){var c=a.hostname,d=va.test(c)\|\|wa.test(c);c=[c];var e=r;r=void 0;if(!d){if(e)throw Error(e());if(c&&0<c.length)throw Error("["+c.map(String).join(",")+"]");throw Error(String(d));}b=(d=aa())?d
URL: https://43187c8ffbbc76326c593e2ad756bd83.safeframe... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a Taboola recommendation script, which is a common third-party advertising and content recommendation service. The script does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script is likely used for legitimate purposes like displaying relevant content recommendations on the login.yahoo.com website. While it uses some legacy APIs like `XDomainRequest`, which pose minor risks, the overall behavior of the script is benign and consistent with its intended purpose." }
window._taboola = window._taboola \|\| []; _taboola.push({ mode: 'Viper_1440x1024_1x1_TextUnder_Y', container: 'taboola-below-article-thumbnails', placement: 'login.yahoo.com_P1676624_S1676624_TYahoo Login - Main - Desktop - Full_Screen_W1440_H1024_N1', target_type: 'mix', rec: {"trc":{"si":"c6d286ca3179fb6a91cab0760cea66f1","sd":"v2_c6d286ca3179fb6a91cab0760cea66f1_7ace7fe0-0abd-410f-a642-598ce2a8780b-tucte7f319d_1736813597_1736813597_CIi3jgYQ0KpmGJu3so6bkI6E4QEgASgBMOEBOJGkDkDVpg9I2YjXA1D1A1gAYABoxIbm7PuHsLpscAGAAQA","ui":"7ace7fe0-0abd-410f-a642-598ce2a8780b-tucte7f319d","plc":"DESK","wi":"691311103236106601","cc":"US","route":"US:US:V","el2r":["bulk-metrics","debug","social","abtests","metrics","perf","supply-feature"],"uvpw":"1","pi":"1676624","cpb":"GAEgnP__________ASoZdXMudGFib29sYXN5bmRpY2F0aW9uLmNvbTIIdHJjMTA2NTA4gPa5QUCRpA5I1aYPUNmI1wNY9QNjCPo3EMRKGDJkYwjXFhDVHxgjZGMI8iQQrZQBGBRkYwjSAxDgBhgIZGMIlhQQnhwYGGRjCKiFARDuqAEYOmRjCPmDARCzpwEYPmRjCPQUEJ4dGB9kYwikJxCKNRgvZGMIhUIQqVcYD2RqDjVlYWYzZWZjYTU4N2FkeAGAAeIjiAHLmZDSAZABGJgBsKehkcYyogEEU0NPRKoBCVRhYm9vbGFIQrIBCVRhYm9vbGFIQroBBGhvbWXAAZCdBMoBAnVz2wEQAdwB","evh":"366543675","evi":{"50":"7162\|9540","62":"16889\|21427","47":"5028\|6794"},"vl":[{"ri":"40f9390f914fde32c7b61466a93387b1","uip":"login.yahoo.com_P1676624_S1676624_TYahoo Login - Main - Desktop - Full_Screen_W1440_H1024_N1","ppb":"CMIDGMDZBCDgkQYqXGxvZ2luLnlhaG9vLmNvbV9QMTY3NjYyNF9TMTY3NjYyNF9UWWFob28gTG9naW4gLSBNYWluIC0gRGVza3RvcCAtIEZ1bGxfU2NyZWVuX1cxNDQwX0gxMDI0X04x","v":[{"urlp":{"attributionsrc":""},"all-thumbnails":"https://cdn.taboola.com/libtrc/static/thumbnails/5d000774fbee3ea8d1c41472e38a533e.png!-#@1000x600","origin":"default","description":"Stay protected as you search and browse online.","title":"Try the DuckDuckGo browser.","type":"text","published-date":"1724434232","branding-text":"DuckDuckGo","uic":"true","duration":"0","balancedPacingValue":"1.0","sig":"a56e3c0bea60f245e4be103e60fa13d1d4a22b62ea0e","constraintType":"SCALE","adomain":"duckduckgo.com","uploader":"","cta-text":"Download","is-syndicated":"true","id":"~~V1~~-3495429243288887471~~mF71SyMFpRHCp1HFBpWo6IyW1E_iyYMYqT0LaguzxEfpZyC7dGVdvKnSHsaHrNsFqPTW8wjc3e4dIvQTJ_LPHG-15pTKcuNBty4hmDPn5m6dn4VohJoI3GZ5LZos9pCAjxfAtsj75Zm6PzSBS4yNyYA1MzMrrjmGLD41byTZY9lz8LOyx8jNEAOcYGn2Toi253WZ-0A5yJvJSwB54E1qFryvhmW4JF0Gm3vlJUXSh_3Q9TvpdT8vSHpg7Jw6EWZIxBCX-AilB-B7iVLJlwPWvCMufPc283TrCkKZvJjhwSFCXAR4BoXKTLntqhGANHbtzetzfiE-skgsidjAuBnkVQ","views":"0","thrf":"true","cropping":"{"crop":[{"ratio":{"w":2,"h":1},"area":{"x":0,"y":28,"w":1000,"h":500}},{"ratio":{"w":1,"h":1},"area":{"x":202,"y":0,"w":600,"h":600}}]}","thumbnail":"https://cdn.taboola.com/libtrc/static/thumbnails/5d000774fbee3ea8d1c41472e38a533e.png","tat":"TABOOLA","thumb-size":"1000x600","placement-label":"login.yahoo.com_P1676624_S1676624_TYahoo Login - Main - Desktop - Full_Screen_W1440_H1024_N1","url":"https://duckduckgo.com/app?origin=funnel_app_taboolapaid_logincreative_productlistcomic","item-id":"~~V1~~-3495429243288887471~~mF71SyMFpRHCp1HFBpWo6IyW1E_iyYMYqT0LaguzxEfpZyC7dGVdvKnSHsaHrNsFqPTW8wjc3e4dIvQTJ_LPHG-15pTKcuNBty4hmDPn5m6dn4VohJoI3GZ5LZos9pCAjxfAtsj75Zm6PzSBS4yNyYA1MzMrrjmGLD41byTZY9lz8LOyx8jNEAOcYGn2Toi253WZ-0A5yJvJSwB54E1qFryvhmW4JF0Gm3vlJUXSh_3Q9TvpdT8vSHpg7Jw6EWZIxBCX-AilB-B7iVLJlwPWvCMufPc283TrCkKZvJjhwSFCXAR4BoXKTLntqhGANHbtzetzfiE-skgsidjAuBnkVQ","tblci":"GiCIMOp8nUlKLNT-CEgeh2sdHDeBxW7E2Ol5JizbLQHG0SDvxmYoqM3s95WHz6CVATDQqmY","publisher":"duckduckgoinc-sc"}],"priorityChargeType":"CPC","lurl":"https://api.taboola.com/2.0/json/yahoomailloginen-headerbidding/recommendations.notify-lost?app.type=desktop&app.apikey=0208da576d71919bb5ac9ecf5d1b67100bb52c21&response.id=__9931da41fd42fc200525d8e4e1de2eea__40f9390f914fde32c7b61466a93387b1__%7E%7EV1%7E%7E-3495429243288887471%7E%7EmF71SyMFpRHCp1HFBpWo6IyW1E_iyYMYqT0LaguzxEfpZyC7dGVdvKnSHsaHrNsFqPTW8wjc3e4dIvQT
URL: https://43187c8ffbbc76326c593e2ad756bd83.safeframe... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This script appears to be related to the Taboola advertising platform, which is a legitimate and widely-used service. The script sets up the Taboola tracking domain and initializes the Taboola library. While it uses some legacy practices like `document.createElement` and `parentNode.insertBefore`, these are common techniques for dynamically loading third-party scripts. The script does not exhibit any high-risk behaviors like dynamic code execution or data exfiltration, and the use of Taboola is a common practice for web publishers. Therefore, this script is assessed as low risk." }
window.tbl_trc_domain = 'us-trc.taboola.com'; window._taboola = window._taboola \|\| []; _taboola.push({home:'auto'}); !function (e, f, u, i) { if (!document.getElementById(i)){ e.async = 1; e.src = u; e.id = i; f.parentNode.insertBefore(e, f); } }(document.createElement('script'), document.getElementsByTagName('script')[0], '//cdn.taboola.com/libtrc/yahoomailloginen-headerbidding/loader.js', 'tb_loader_script'); if(window.performance && typeof window.performance.mark == 'function') {window.performance.mark('tbl_ic');}
URL: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This appears to be the jQuery library, which is a widely used and trusted JavaScript library. The code does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or suspicious redirects. The behaviors observed are typical of a legitimate JavaScript library, including DOM manipulation, event handling, and utility functions. While the code uses some legacy practices like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script is likely benign and does not demonstrate any suspicious or malicious behavior." }
/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.5.1",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document,
URL: https://43187c8ffbbc76326c593e2ad756bd83.safeframe... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate and benign code snippet from the Closure Library. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code primarily focuses on user agent detection and data serialization/deserialization, which are common and expected behaviors in web applications. While the code uses some legacy APIs like `XDomainRequest`, these pose only minor risks and are not inherently malicious. Overall, this script is likely part of a legitimate web application and does not demonstrate any suspicious or harmful behavior." }
(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function G(){return w?!!B&&B.brands.length>0:!1}function ea(){return G()?C("Chromium"):(D("Chrome")\|\|D("CriOS"))&&!(G()?0:D("Edge"))\|\|D("Silk")};function fa(a){fa[" "](a);return a}fa[" "]=function(){};!D("Android")\|\|ea();ea();D("Safari")&&(ea()\|\|(G()?0:D("Coast"))\|\|(G()?0:D("Opera"))\|\|(G()?0:D("Edge"))\|\|(G()?C("Microsoft Edge"):D("Edg/"))\|\|G()&&C("Opera"));var ha={},H=null;var ia=new Set;function ja(a,b=!1){a=b&&Symbol.for&&a?Symbol.for(a):a!=null?Symbol(a):Symbol();ia.add(a);return a}var I=ja("jas",!0),ka=ja();var la={},oa={};function pa(a){return!(!a\|\|typeof a!=="object"\|\|a.g!==oa)}function qa(a){return a!==null&&typeof a==="object"&&!Array.isArray(a)&&a.constructor===Object}function J(a){return!Array.isArray(a)\|\|a.length?!1:(a[I]\|0)&1?!0:!1};const ra=BigInt(Number.MIN_SAFE_INTEGER),sa=BigInt(Number.MAX_SAFE_INTEGER);function ta(a){if(typeof a!=="boolean"){var b=typeof a;throw Error(`Expected boolean but got ${b!="object"?b:a?Array.isArray(a)?"array":b:"null"}: ${a}`);}return a}function K(a){if(a!=null&&typeof a!=="string")throw Error();return a};function ua(a,b){return va(b)}function va(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(J(a))return}else if(a!=null&&a instanceof Uint8Array){let b="",c=0;const d=a.length-10240;for(;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)}}return a};function wa(a,b,c,d,e){if(a!=null){if(Array.isArray(a))a=J(a)?void 0:e&&(a[I]\|0)&2?a:xa(a,b,c,d!==void 0,e);else if(qa(a)){const f={};for(let g in a)f[g]=wa(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function xa(a,b,c,d,e){const f=d\|\|c?a[I]\|0:0,g=d?!!(f&32):void 0;d=Array.prototype.slice.call(a);for(let l=0;l<d.length;l++)d[l]=wa(d[l],b,c,g,e);c&&((a=(b=aa(ka))?a[b]:void 0)&&(d[ka]=Array.prototype.slice.call(a)),c(f,d));return d}function ya(a){return a.A===la?a.toJSON():va(a)} function za(a){return xa(a,ya,void 0,void 0,!1)};function L(a,b,c){const d=a.l;let e=d[I]\|0;if(e&2)throw Error();Aa(d,e,b,c);return a}function Aa(a,b,c,d){const e=b&512?0:-1,f=c+e;var g=a.length-1;f>=g&&b&256?a[g][c]=d:f<=g?(a[f]=d,b&256&&(a=a[g],c in a&&delete a[c])):d!==void 0&&(g=b>>15&1023\|\|536870912,c>=g?d!=null&&(a[g+e]={[c]:d},a[I]=b\|256):a[f]=d)};function Ba(a){return a}let M;var N=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b\|=256;c=d-(b&512?0:-1);if(c>=1024)throw Error("pvtlmt");b=b&-33521665\|(c&1023)<<15}}a[I]=b}this.l=a}toJSON(){const a=!M;try{return a&&(M=za),Ca(this)}finally{a&&(M=void 0)}}};N.prototype.A=la; N.prototype.toString=function(){try{return M=Ba,Ca(this).toString()}finally{M=void 0}}; function Ca(a){var b=a.l;a=M(b);{b=a!==b;let h=a.length;if(h){var c=a[h-1],d=qa(c);d?h--:c=void 0;var e=a;if(d){b:{var f=c;var g;var l=!1;if(f)for(let m in f)isNaN(+m)?(g??(g={}))[m]=f[m]:(d=f[m],Array.isArray(d)&&(J(d)\|\|pa(d)&&d.size===0)&&(d=null),d==null&&(l=!0),d!=null&&((g??(g={}))[m]=d));l\|\|(g=f);if(g)for(let m in g){l=g;break b}l=null}f=l==null?c!=null:l!==c}for(;h>0;h--){g=e[h-1];if(!(g==null\|\|J(g)\|\|pa(g)&&g.size===0))break;var k=!0}if(e!==a\|\|f\|\|k){if(!b)e=Array.prototype.slice.call(e,0,h); else if(k\|\|f\|\|l)e.length=h;l&&e.push(l)}k=e}else k=a}return k};var O=class{cons
URL: https://offfryfjtht767755433.webflow.io/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "to access AT&T Mail and Currently.com", "prominent_button_name": "Next", "text_input_field_labels": [ "Username or email, or mobile", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://offfryfjtht767755433.webflow.io/ Model: Joe Sandbox AI	{ "brands": [ "AT&T" ] }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://offfryfjtht767755433.webflow.io/ Model: Joe Sandbox AI	```json{ "legit_domain": "att.com", "classification": "wellknown", "reasons": [ "The brand AT&T is a well-known telecommunications company.", "The URL 'offfryfjtht767755433.webflow.io' does not match the legitimate domain 'att.com'.", "The domain 'webflow.io' is a platform for web design and hosting, which can be used by anyone to create websites, making it suspicious for a brand like AT&T.", "The subdomain 'offfryfjtht767755433' is nonsensical and does not relate to AT&T, which is a common tactic in phishing to confuse users.", "The presence of input fields for sensitive information like 'Username or email, or mobile' and 'Password' on a non-legitimate domain increases the risk of phishing." ], "riskscore": 9} Google indexed: False
URL: offfryfjtht767755433.webflow.io Brands: AT&T Input Fields: Username or email, or mobile, Password
URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Best in class Yahoo Mail, breaking local, national and global news, finance, sports, music, movies and more. You get more out of the web, you get more out of life.", "prominent_button_name": "Next", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": "Username, email, or mobile", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig% Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "Full name", "New Yahoo email", "Password", "Date of birth" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5l Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "Full name", "New Yahoo email", "Password", "Date of birth" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5l Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "First name", "Last name", "Enter the email address you want to create." ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig% Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5l Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5l Model: Joe Sandbox AI	{ "brands": [ "Yahoo" ] }

URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig% Model: Joe Sandbox AI	```json{ "legit_domain": "yahoo.com", "classification": "wellknown", "reasons": [ "The URL 'login.yahoo.com' is a subdomain of 'yahoo.com', which is the legitimate domain for Yahoo.", "Yahoo is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields are typical for a legitimate registration or login page for an email service." ], "riskscore": 1}
URL: login.yahoo.com Brands: Yahoo Input Fields: Full name, New Yahoo email, Password, Date of birth
URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5l Model: Joe Sandbox AI	```json{ "legit_domain": "yahoo.com", "classification": "wellknown", "reasons": [ "The URL 'login.yahoo.com' is a subdomain of 'yahoo.com', which is the legitimate domain for Yahoo.", "Yahoo is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields are consistent with a legitimate login or account creation page for Yahoo." ], "riskscore": 1}
URL: login.yahoo.com Brands: Yahoo Input Fields: First name, Last name, Enter the email address you want to create.
URL: https://login.yahoo.com/account/create?.intl=us&.lang=en-US&src=ym&specId=yidregsimplified&activity=mail-direct&pspid=159600001&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5l Model: Joe Sandbox AI	```json{ "legit_domain": "yahoo.com", "classification": "wellknown", "reasons": [ "The URL 'login.yahoo.com' is a subdomain of 'yahoo.com', which is the legitimate domain for Yahoo.", "Yahoo is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields are typical for a legitimate registration or login page for an email service." ], "riskscore": 1}
URL: login.yahoo.com Brands: Yahoo Input Fields: Full name, New Yahoo email, Password, Date of birth

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	dropped
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.6826987302732233
Encrypted:	false
SSDEEP:	6:ZM6MdN4jF8VGH0xnYOqEiCNc/+O1t+KbAzNct/XTXP0zyQ59:ZM6gyh82eqExk+uvbAzNc14d
MD5:	B6814AE5582D7953821ACBD76E977BB4
SHA1:	75A33FC706C2C6BA233E76C17337E466949F403C
SHA-256:	4A491ACD00880C407A2B749619003716C87E9C25AC344E5934C13E8F9AA0E8B3
SHA-512:	958268F22E72875B97C42D8927E6A1D6168C94FE2184DE906029688A9D63038301DF2E3DE57E571A3D0ECC7AD41178401823E5C54576936D37C84C7A3ED8EF6B
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... .................................`...d...f...i...k...m...p...q...s.. s..$v..*z..?...D...M...V..._...b...c...l...v...y...\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1097
Entropy (8bit):	5.374835084773392
Encrypted:	false
SSDEEP:	24:YrErrNpreRzEnNaRzjqiIvI9xVvJ0jVvwqhXa3vVYJQVW1xioB5s:YurNpQUN8qiIyJGwqhq3fCr5s
MD5:	BA7D4C1B675749571C315A22CBD0BE65
SHA1:	C4278C6B651F5A4AE116A9365A970323FE03FB7F
SHA-256:	06BA3FFF38E7CF9C21ECDBF576792F72FDA707E7C7325548663EBB141042EFE8
SHA-512:	CD8E2A3312DC9A260A2BB700BAA2F32DE63DB838E96F5DF8AEA025A12C7C3E480E3716326D5C916E4EF55D2E53C86EAF4C31A14E3D92D63CE963CDBE7BA63F7D
Malicious:	false
Reputation:	low
URL:	https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1
Preview:	.<!doctype html>.<html>.<head>. .<link rel="dns-prefetch" href="//securepubads.g.doubleclick.net">.<link rel="preconnect" href="//securepubads.g.doubleclick.net">..<link rel="dns-prefetch" href="//pagead2.googlesyndication.com">.<link rel="preconnect" href="//pagead2.googlesyndication.com">..<script nonce="ilvhRjBFbdajTfXavycx5Q==">. window.ymailAssetHost="https://s.yimg.com/nq/nr/";. window.ymailNonce="ilvhRjBFbdajTfXavycx5Q==";.</script>.<script nonce="ilvhRjBFbdajTfXavycx5Q==" src="https://s.yimg.com/nq/nr/taboolajs/taboola/cmp_utils_1.3.js"></script>.<script nonce="ilvhRjBFbdajTfXavycx5Q==" src="https://s.yimg.com/aaq/benji/benji-2.2.29.js"></script>.<script nonce="ilvhRjBFbdajTfXavycx5Q==" defer src="https://s.yimg.com/nq/nr/js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js"></script>.<style>. html,body{margin:0;padding:0;width:100%;height:100%;display:flex;flex-direction:column;}. #Slot300_250_2-collapse {margin: 0}. #Slot300_250_2. {margin-top: 18px}. {margin:-8px 0 0 -4px

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28371)
Category:	dropped
Size (bytes):	28471
Entropy (8bit):	5.270364248664785
Encrypted:	false
SSDEEP:	768:646pTzZeRQBbEoSvtbEiziP0M7o5LaIa8d8C+:yzZooSviCnWRIx8
MD5:	DD60BC42C02B82B5CD50FF812D3222A8
SHA1:	AA5C7649F67A8E08DB9199716061B56B84ABC2A4
SHA-256:	D1EC897D8E3ECB3BB7CA6747B6C17C591C57269A828CF21098DE1B1584FFD02C
SHA-512:	2499777FA6321AFFAEAA90865EC65B1D313CA0CC4A6C87A65A7AF9BF915932DC83D232F3711194DF1DFC66B06201FC5EE46D08197317DBBC30A04DFB87F6E277
Malicious:	false
Reputation:	low
Preview:	/* v1.17.0-pre.Updated : 2024-11-12.DEPRECATED, please use creative based on hb_format targeting */.!function(n){var r={};function o(t){var e;return(r[t]\|\|(e=r[t]={i:t,l:!1,exports:{}},n[t].call(e.exports,e,e.exports,o),e.l=!0,e)).exports}o.m=n,o.c=r,o.d=function(t,e,n){o.o(t,e)\|\|Object.defineProperty(t,e,{configurable:!1,enumerable:!0,get:n})},o.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return o.d(e,"a",e),e},o.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},o.p="",o(o.s=3)}([function(t,e,n){"use strict";e.i=function(t,e){var n=new Image;e&&"function"==typeof e&&(n.addEventListener("load",e),n.addEventListener("error",e));n.src=t},e.a=function(t){return t?(t=encodeURI(t),'<div style="position:absolute;left:0px;top:0px;visibility:hidden;"><img src="'.concat(t,'"></div>')):""},e.j=function(t,e,n){n=r.a(n,e);n.src=t,document.body.appendChild(n)},e.g=function(t,e){var n=new XMLHttpRequest;n.addEventListener("load",function(){e(

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	4.39358257887536
Encrypted:	false
SSDEEP:	12:trZvnltuC1cg77irputbU4DsIA64xJ+mzXR5GHZlZ8qSu8tcqjda5SFG/bNVCq7I:tVvnju+7O1ue4D7A6/MDOV8sIUbvI
MD5:	EE1A7DFCCF55C37801E237962FFA41D3
SHA1:	B9C161AC871BF8FA206FCBDA7C5241D8DF6C55E5
SHA-256:	2FEEB06472DEF2D1198B694F4B2145A9733D2DA05D23A21C981461E2BE2583AD
SHA-512:	10B1492D8FD74CFC2BACF50DDD3EE8F1CF33F0BD98A41F1765314C1AACB490B89D0CE42A335A4AE0BFDEC9CB2CC56F0EE10CC7B6E2DC6218482248BCC6B23479
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/show-v0.0.3.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M8 11C9.10457 11 10 9.65685 10 8C10 6.34315 9.10457 5 8 5C6.89543 5 6 6.34315 6 8C6 9.65685 6.89543 11 8 11Z" fill="#464E56"/>.<path d="M16 8C16 11.3137 12.4183 14 8 14C3.58172 14 0 11.3137 0 8C0 4.68629 3.58172 2 8 2C12.4183 2 16 4.68629 16 8ZM14.3 8C14.3 6.9982 13.7625 5.96163 12.6369 5.11736C11.5106 4.2727 9.87688 3.7 8 3.7C6.12312 3.7 4.48936 4.2727 3.36315 5.11736C2.23745 5.96163 1.7 6.9982 1.7 8C1.7 9.0018 2.23745 10.0384 3.36315 10.8826C4.48936 11.7273 6.12312 12.3 8 12.3C9.87688 12.3 11.5106 11.7273 12.6369 10.8826C13.7625 10.0384 14.3 9.0018 14.3 8Z" fill="#464E56"/>.</svg>.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	162846
Entropy (8bit):	5.814201301601817
Encrypted:	false
SSDEEP:	3072:iaisblPvRhTeOSP9aoJQ5nCN8p3lTyjkG:iLsblPvRhaP9ayQ5nCNQZy4G
MD5:	C2540D60961C2D8CEEB2C15FB077DABA
SHA1:	51880D812E6530229EE41A4499A39D0048FF910C
SHA-256:	CFE4F217038485B72C0C2A6364206EDA0C507FF196F0B5CD635BC94251C425F5
SHA-512:	388CD54ABB89E4BA46A85389707B33587C83C011A50B98024113E173AA84E479B8C44FA98C69510001C4B54D2E5EB82B81F628C128719BF9427F6A46A62758D8
Malicious:	false
Reputation:	low
Preview:	(new function(){var c=['C2nYAxb0CW==','tKzo','Aw5PDa==','ywjVDxq6yMXHBMS=','jNu9','igLUia==','EhbT','psHCzcSPxhm=','y2zNlwv2ywW=','qK9ewq==','Dw5ZAgLMDa==','cIaGicbHDcbHyM91DdPZCMnKB2m6','Ahr0Chm6','ihWGC3rHy2S6ia==','Aw1Nw2fSDf0SihnWyw5BDgL0BgvD','C29YDa==','cMDLDebQyxzHC2nYAxb0oG==','rLjd','yMLKuMvXq291BNq=','FsKO','y2zNlwG5A2S=','yxbPrxzHBfDYyxa=','CgfYzw50rwXLBwvUDa==','cIaGicbHDcbHyM91DdPIBgfUAZO=','jMe9','Aw5ZCgvJDevYCM9Y','jNq9','CMvMCMvZAcbB','Bg9JywXoyw1L','Bg9JywXtDg9YywDL','ywn0Aw9Ux25HBwu=','zxz0lwG5A2SY','u2vJDxjPDhLfCNjVCG==','rg9JDw1LBNqUD3jPDgu=','CMvMzxjYzxi=','CxvLCNLtzwXLy3rVCG==','CgfYC2u=','uhjLr290y2HH','zxz0lw5MBG==','r0vu','ANnWlMLUAMvJDa==','zgf0ys13AwrNzxqTAwq=','y29UzMLNDxjHyMXL','Bwv0yvTODhrWlwvXDwL2psjdB250zw50lvnLy3vYAxr5lvbVBgLJEsjD','zhvYyxrPB24=','Aw5Zzxj0qMvMB3jL','ksKUCNvUka==','y3vZDg9Tzxjjza==','zxz0lwDNCW==','wfbnlK0=','tgLZDgvUzxiUD3jHCa==','ChjLDMvUDerLzMf1Bhq=','CMjVEa==','yxbPvxnLCNnJCMLWDa==','zg9JDw1LBNrfBgvTzw50','BNr2','Bwf0y2HLCW==','tuXql

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (25994)
Category:	downloaded
Size (bytes):	105016
Entropy (8bit):	5.484001013736656
Encrypted:	false
SSDEEP:	1536:NgbBLvm3z5g5NrK8M0KQslzVGMc+H53XSXRStHBV9JFwq4I4Ndc2ooofEHnOo3+:8drKthVAanSBStHBHEq4IKc2RjO
MD5:	CFFAE5DB73D38C1FCAC697B3369B61F9
SHA1:	BA03D447B8930340ECF2BFBEEBC0D802C1ACB330
SHA-256:	017C5A3795B5230C4C6C3F4A8802FCAABB647C2DA748E9ECDD06CB128900ABB4
SHA-512:	7C208BEEB41B60CC93ECCA24ECB8FAC81F1C3185952D6BA3082BE3DCA3E0550AE6D0B0573BAFDF789D139A7FCEDE6C345868EA397F6D2DA68EDBE37C9BFF9B9B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9424), with no line terminators
Category:	dropped
Size (bytes):	9424
Entropy (8bit):	5.2828780025163615
Encrypted:	false
SSDEEP:	192:VgHvGB2mC2xiP2TwQG065Wnfe1E91I7NsKOcVqAAYyoO8bOGiN6vDh:GHOB2mC2xjz65GfvHFkyL8KGiG
MD5:	2907CF83061833352832F902CF60546E
SHA1:	8ECD21384A9BE55CC8E392B2DE091A5F2B12C5AC
SHA-256:	88756001AFE2277005B143FD74DC8C9F7F8106A5FAE630083E52AA0D93BCD59C
SHA-512:	692614C0D4A64D0517B4D74BBF2A2419152BFEA052EB0FE037311DD25BBC44CA15A7544793345DAAF4F3AC5F311CBEE4116A06D77987A7733BA883ED91AA61C5
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var n=function(n){if(n)return n;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(n){return""}};const t=function(n,t){for(var e="".concat(n,"="),o=(t\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){var i=(o[a]\|\|"").trim();if(0===i.indexOf(e))return i.substring(e.length,i.length)}return""},e=function(t,e,o,a){(a\|\|window.document).cookie="".concat(t,"=").concat(e,";Max-Age=").concat(31536e3,";Domain=").concat(n(o),";path=/;Secure;SameSite=None")},o=function(t,e,o){(o\|\|window.document).cookie="".concat(t,"=;Max-Age=0;Domain=").concat(n(e),";path=/;Secure;SameSite=None")},a=function(n,t,e){try{var o=(e\|\|window.localStorage).getItem(n);return t?JSON.parse(o):o}catch(n){return null}},i=function(n,t,e,o){try{e?(o\|\|window.localStorage).setItem(n,JSON.stringify(t)):(o\|\|window.localStorage).setItem(n,t)}catch(n){}},c=function(n,t){try{(t\|\|window.localStorage).removeItem(n)}catch(n){}};var r="opus",d=function(n){for(var t=0,e=0;e<n.length;e++

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1346
Entropy (8bit):	7.811113028134073
Encrypted:	false
SSDEEP:	24:DzhV0C4bz+BXH/Adox88K9LDNiF6/LodoLopZYGBLn4AcXGKgF13+2HBoHVMnozC:D9jXBFxfKFljRL0YGBrLcW7F13+MBoHC
MD5:	CD166981C96C6D0F4B5A7D798C25878E
SHA1:	09031C4013138BB8BD54AB9092AC59AA47D7C60C
SHA-256:	0FDEFE26BAC6A6B0B06FE67984582F887AF70B7DA25D6CB1B401F9074DB58338
SHA-512:	6D217A81DFDCFD601C3F6D9CDE3F1BE0C4D4FFEF85B02B06208014101456CA730EF759BD51637966C9F2572080B79E8A2F9D45A2087DDC40DF015F8C052DA501
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H............PLTEGpLa..a..a..r..`..`..`..`..b..a..`..e..`....l.....tRNS.T{j....=...Pau>....IDATx...#).F........'.&.1..5.-...t.....9....]0.......3..........,o..8p...r^<v....v.n.....Z.....;..p...%kw..y.;p..~w.H..m..%kw`.....)%...V.z....n.%.}.........G.C....Q...W......G:_]..r4..^.Bh.$.F.;R.,+.R........."s..l.T. ..I.5..H..N.c>.Q......<...G.w........U.]R.!pP.Y.:T..Q.H.qU.......t....\|...hD...'...?.YEe......A.U.t........F.,1.:...:lU....k M.b...;...{.........b..F..O...i_.?.V..~."....>..h.da...e.I.....5.\..#..../7....1...t.8....U...... g9nZ..lR..d.\|...l.T..@.$J......E.J.....%kt.j.s.J.0.d..7...3O.........I..u..1p6$.X....$f .N.b.j..t................ZqI...A)@...9qn..zj.\|F...<...S\...$.t.$3=.C.....lV.....mIm....eKo.A.E.`.......do.._..(FRg..[....<~...a...Y;..-`o....2...s..ZK\~/G.g.-Z..p0..m..../H.......%....o.;.xU_.q^.(......&%..jn...n:..dE.g6..y-2'n..... .q..e``.^.$.^...X\| ..(>!.EvI.......r.I.N...;........Q...+....x.Uw....

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	7.811113028134073
Encrypted:	false
SSDEEP:	24:DzhV0C4bz+BXH/Adox88K9LDNiF6/LodoLopZYGBLn4AcXGKgF13+2HBoHVMnozC:D9jXBFxfKFljRL0YGBrLcW7F13+MBoHC
MD5:	CD166981C96C6D0F4B5A7D798C25878E
SHA1:	09031C4013138BB8BD54AB9092AC59AA47D7C60C
SHA-256:	0FDEFE26BAC6A6B0B06FE67984582F887AF70B7DA25D6CB1B401F9074DB58338
SHA-512:	6D217A81DFDCFD601C3F6D9CDE3F1BE0C4D4FFEF85B02B06208014101456CA730EF759BD51637966C9F2572080B79E8A2F9D45A2087DDC40DF015F8C052DA501
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
Preview:	.PNG........IHDR.......H............PLTEGpLa..a..a..r..`..`..`..`..b..a..`..e..`....l.....tRNS.T{j....=...Pau>....IDATx...#).F........'.&.1..5.-...t.....9....]0.......3..........,o..8p...r^<v....v.n.....Z.....;..p...%kw..y.;p..~w.H..m..%kw`.....)%...V.z....n.%.}.........G.C....Q...W......G:_]..r4..^.Bh.$.F.;R.,+.R........."s..l.T. ..I.5..H..N.c>.Q......<...G.w........U.]R.!pP.Y.:T..Q.H.qU.......t....\|...hD...'...?.YEe......A.U.t........F.,1.:...:lU....k M.b...;...{.........b..F..O...i_.?.V..~."....>..h.da...e.I.....5.\..#..../7....1...t.8....U...... g9nZ..lR..d.\|...l.T..@.$J......E.J.....%kt.j.s.J.0.d..7...3O.........I..u..1p6$.X....$f .N.b.j..t................ZqI...A)@...9qn..zj.\|F...<...S\...$.t.$3=.C.....lV.....mIm....eKo.A.E.`.......do.._..(FRg..[....<~...a...Y;..-`o....2...s..ZK\~/G.g.-Z..p0..m..../H.......%....o.;.xU_.q^.(......&%..jn...n:..dE.g6..y-2'n..... .q..e``.^.$.^...X\| ..(>!.EvI.......r.I.N...;........Q...+....x.Uw....

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?dtstmp=1736813596061&did=did-004f&se=e30&duid=dc5154c516e8--01jhh2gj4yxpk5wqcxcx9fqbp1&tv=8.51.0&pu=https%3A%2F%2Flogin.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.gpt.mail.yahoo.net
Preview:	{"bakers":[]}

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2623
Entropy (8bit):	5.30972628417996
Encrypted:	false
SSDEEP:	48:4UTrzOhdZqpT7n21CTyoq0JDNTQrwyr0JD8+fohrF/rv50JwRjBGPrTWIeDUdkFk:tTOhLqpT7+aRTT9NJfc6QBGPwFBe
MD5:	42FB6DDAD005C2D48B61AEA5BD980694
SHA1:	4ADFFCD04BFF4EA9EEFF8F8FA72E0B64D6BEA35B
SHA-256:	399C085FD3F244980BC37D16490C24E319D4D995484AD56C7628EC4B4F8164FF
SHA-512:	4497CED8BA700C286ECC187CD95FD05E008770C835CC0201E0A5AEFC038F0B673E77C635C6078E04B77DC5C1904BD55FA6449970DA15728CB4B0E803BE7A560E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/nq/nr/taboolajs/taboola/cmp_utils_1.3.js
Preview:	/! . 2024 Yahoo Holdings, Inc. /.(()=>{var t={p:""};(()=>{. if(!window.ymailAssetHost)throw new Error("window.ymailAssetHost must be set before running this application."). ;t.p=window.ymailAssetHost})(),(()=>{"use strict";var t=t=>{. for(var a,i=window;i;){try{if(i.frames[t]){a=i;break}}catch(e){return}. if(i===window.top)break;i=i.parent}return a},a=(t,a,i)=>{var e={};try{. e="string"==typeof t.data?JSON.parse(t.data):t.data}catch(r){return}var n=e[a]. ;n&&"function"==typeof i[n.callId]&&(i[n.callId](n.returnValue,n.success),. delete i[n.callId])},i=()=>{. var t,a="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz-_",i=window.crypto\|\|window.msCrypto. ;try{. t=Array.from(i.getRandomValues(new Uint32Array(32))).map((t=>a[t%64])).join(""). }catch(e){t=Math.random()+""}return t};(e=>{var n,r;if(!window.__gpp){. if(window===window.top)return void e({msg:"API not found"},!1). ;n=t("__gppLocator"),r={},window.__gpp=(t,a,e)=>{if(n){var o

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.110902344426086
Encrypted:	false
SSDEEP:	3:YEOBH5uaQpLI2gJCTkHY:YEOBZDQpLg0T3
MD5:	7E68EB6D17F760CA71C5D3ECA666DCBF
SHA1:	E3C061D61F2023F6BA04EE2B07C69D2967D40D04
SHA-256:	087C429060F935B67BD6CAC486C46F8D4BE8DE2CE4CC8AAA11A84E83CB593957
SHA-512:	E5D0DBEAC3C52E97D93D1BA7C1FB7A035A9EA825E9652131B09F90CBA8A1E20C57F5D04E887F6EB2563A4FDF152D533B260D89922382564FD99898C18D7B08EF
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A"}

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29565)
Category:	downloaded
Size (bytes):	193175
Entropy (8bit):	5.382151201389962
Encrypted:	false
SSDEEP:	1536:CE9TaOeZnqw1/AN8nRw/6sTrxu3wKTrRgsnfzr8TrEIGlATKLlVKo/LJJF28ONMD:Z9Tfe5R42LlVTLMM5Gk5Ul4++ph2I
MD5:	14BF381A72ADAA2223C20A8728BD6FA4
SHA1:	81B456B67DC4CA218952F9BEE6EACC64368D227E
SHA-256:	EB6D6E167541C5D598A0055BD701154B559075D143FFA74CC51E37B21BE7FA1F
SHA-512:	CD1C482382C123DC674D8EDD955A546CE622EAF178A9B2173F4B6371C543BDA62BCF7172B79D5C08D9513ADE48CD1F1402EF44A2022E7D243C45E4ADABA6BD83
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/bundle.js
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){.!function(e,t,n){"use strict";"undefined"!=typeof window&&"function"==typeof define&&define.amd?define(n):"undefined"!=typeof module&&module.exports?module.exports=n():t.exports?t.exports=n():t.Fingerprint2=n()}(0,this,function(){"use strict";var e=function(e,t){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var n=[0,0,0,0];return n[3]+=e[3]+t[3],n[2]+=n[3]>>>16,n[3]&=65535,n[2]+=e[2]+t[2],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]+t[1],n[0]+=n[1]>>>16,n[1]

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28371)
Category:	downloaded
Size (bytes):	28471
Entropy (8bit):	5.270364248664785
Encrypted:	false
SSDEEP:	768:646pTzZeRQBbEoSvtbEiziP0M7o5LaIa8d8C+:yzZooSviCnWRIx8
MD5:	DD60BC42C02B82B5CD50FF812D3222A8
SHA1:	AA5C7649F67A8E08DB9199716061B56B84ABC2A4
SHA-256:	D1EC897D8E3ECB3BB7CA6747B6C17C591C57269A828CF21098DE1B1584FFD02C
SHA-512:	2499777FA6321AFFAEAA90865EC65B1D313CA0CC4A6C87A65A7AF9BF915932DC83D232F3711194DF1DFC66B06201FC5EE46D08197317DBBC30A04DFB87F6E277
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/puc/creative.js
Preview:	/* v1.17.0-pre.Updated : 2024-11-12.DEPRECATED, please use creative based on hb_format targeting */.!function(n){var r={};function o(t){var e;return(r[t]\|\|(e=r[t]={i:t,l:!1,exports:{}},n[t].call(e.exports,e,e.exports,o),e.l=!0,e)).exports}o.m=n,o.c=r,o.d=function(t,e,n){o.o(t,e)\|\|Object.defineProperty(t,e,{configurable:!1,enumerable:!0,get:n})},o.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return o.d(e,"a",e),e},o.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},o.p="",o(o.s=3)}([function(t,e,n){"use strict";e.i=function(t,e){var n=new Image;e&&"function"==typeof e&&(n.addEventListener("load",e),n.addEventListener("error",e));n.src=t},e.a=function(t){return t?(t=encodeURI(t),'<div style="position:absolute;left:0px;top:0px;visibility:hidden;"><img src="'.concat(t,'"></div>')):""},e.j=function(t,e,n){n=r.a(n,e);n.src=t,document.body.appendChild(n)},e.g=function(t,e){var n=new XMLHttpRequest;n.addEventListener("load",function(){e(

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2146)
Category:	downloaded
Size (bytes):	2235
Entropy (8bit):	5.6769719257261375
Encrypted:	false
SSDEEP:	48:tz5kX4PEKD2+LgFMbjzkHTjvb6kXARoRIU:tzsmg7Hfj6K
MD5:	FFBB093C0D577B8FCF46C2DDEDECEFE9
SHA1:	9951A9AC48CFEB9F2B286EE83799DF7C2A0AA634
SHA-256:	1A6FB869B8ED362588C3C0B0DE9C3C3DBB086FB2069D597852CED5E9EAA73817
SHA-512:	0A3041024B966E73A9CE44F8924676DF40DFA5B4670B0FD3F40E1A28F15468C877B34E180424DBF7CC22B7067A25FEDCDD08D4C73466E71C1D67F8958A6EB1B2
Malicious:	false
Reputation:	low
URL:	https://prebid.a-mo.net/isyn?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&s=pbs&cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D%24UID
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=0d87eeaf-9194-43a3-83c9-092f09d73b30&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}","https://id.a-mx.com/u?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Damx_com%26uid%3D","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dopenx%26uid%3D%24%7BUID%7D","https://cm.adform.net/cookie?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{U

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5503), with no line terminators
Category:	downloaded
Size (bytes):	5503
Entropy (8bit):	5.376984635806113
Encrypted:	false
SSDEEP:	96:TeUg4KTMgKq8NGOzZZQujpcM8pmB9Q0C3MzDCprDVQ1nGXuX8Avva+b/70ApZV:6Ug4KTyNl/Qm3cy9SMHCpqp86a+joej
MD5:	19720D3A285ABA8024B11FC9955795FE
SHA1:	8E174FF6003772BC71FFAF2B655E23FC4B8794CA
SHA-256:	00A54A79B12A7E6DC344AE20DEA91F7772A088C14CF9B12D4DD8CEFF8B374C11
SHA-512:	B296C7311263B3B153353904B0D65131ED72F70F9A646795C07CE8DD3735329A6D6AAD99BD1C0F74742FC9E515D7CA1E78F44377EBBA55018331A986C93481A0
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Flogin.yahoo.com%2F%3F.src%3Dym%26pspid%3D159600001%26activity%3Dmail-direct%26.lang%3Den-US%26.intl%3Dus%26.done%3Dhttps%253A%252F%252Fmail.yahoo.com%252Fd%252Ffolders%252F4%253Freason%253Dinvalid_cred%2526guce_referrer%253DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%2526guce_referrer_sig%253DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&axids=gam%3Dy-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A%26dv360%3DeS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B%26ydsp%3Dy-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A%26tbla%3Dy-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1
Preview:	<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const e=function(e,n,r,o){(o\|\|window.document).cookie="".concat(e,"=").concat(n,";Max-Age=").concat(31536e3,";Domain=").concat(t(r),";path=/;Secure;SameSite=None")},n=function(t){return new URLSearchParams(document.location.search.slice(1)).get(t)\|\|""};var r,o=function(){var t=new Date("January 1, 2011 00:00:00 GMT").getTime()/1e3,e=(new Date).getTime()/1e3;return parseInt((e-t)/60/60,10)};!function(t){if(r&&!t)return r;var e=function(t){return parseInt(t,36)};r={};var n=function(t,e){for(var n="".concat(t,"="),r=(e\|\|window.document).cookie.split(";"),o=0;o<r.length;o++){var a=(r[o]\|\|"").trim();

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53867)
Category:	downloaded
Size (bytes):	55134
Entropy (8bit):	5.702232148791689
Encrypted:	false
SSDEEP:	768:jEiPAeoa9vySust0GTzOwaosKf/1gR3ARHNL5vsaeHJ9ibZlPqy5iHMfa+:jEirvmkOnosyORwRr0J9Uq2
MD5:	8B0CCE3B1EBF7A94348320551F0093EF
SHA1:	433867B75985AACAF92CA2AC1F278174509E6076
SHA-256:	F99ACB7AFF3429A4A5E4B1F93826E76461EEEB22D26F7B511AEC1AC4656752C3
SHA-512:	972868D461F9B39F68D87335682680F1BD51F5D9B51E65E41F9A4757678653DFF870E580A92C5973757022C6DD1C9F8B1E613267C6E96F045989FBCDA22B1791
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function F(O){return O}var T=function(O,n,C,V,w,E,x,h,m,r,q,R){for(q=80,r=95;;)try{if(q==13)break;else{if(q==91)return h;if(q==79)return r=95,h;q==V?q=l.console?8:79:q==8?(l.console[E](R.message),q=79):q==19?(r=95,q=V):q==80?(m=l.trustedTypes,h=w,q=O):q==C?(r=n,h=m.createPolicy(x,{createHTML:W,createScript:W,createScriptURL:W}),q=79):q==O&&(q=m&&m.createPolicy?C:91)}}catch(e){if(r==95)throw e;r==n&&(R=e,q=19)}},l=this\|\|self,W=function(O){return F.call(this,O)};(0,eval)(function(O,n){return(n=T(7,32,61,62,null,"error","bg"))&&O.eval(n.createScript("1"))===1?function(C){return n.createScript(C)}:function(C){return""+C}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJza

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49630
Entropy (8bit):	4.154614288626229
Encrypted:	false
SSDEEP:	1536:XMb0+jkkEx9Pgl7MQ+iIo2EBOCoSMgaQMLseYNiLyYhH2FvyH+9P2ISjQnkY:XuHMq5kY
MD5:	528852ED0B19AC7DB47E2154706727FD
SHA1:	BBE80134EB5827AB3C5745467C2A52BFE6B3112B
SHA-256:	D788A04EAB96F6A4D80D47724FF38D44387147245F89C39ADA4161AE64A26DD5
SHA-512:	25DBCA36C36A261904141CD19DF14B6C8BC6BF855C93B023747D4C4845606D6EAE3515F25E43ABEF43B14F7E795E5AB9C6D5D3A5AB78A94C00E38E21ABA97CB2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/eh/prebid-config/bp-yahoo_login.json
Preview:	{. "brandProtection": {. "badv": {. "1111.com.tw": true,. "1keygou.com": true,. "3oaksorchard.com": true,. "43cbd.com": true,. "4everstamp.com": true,. "aax.com": true,. "abloodsugaroption.com": true,. "abra.com": true,. "accessmediaportal.com": true,. "acebarry.com": true,. "acticatin.com": true,. "actiongamesplace.com": true,. "actualitateavranceana.ro": true,. "adameve.com": true,. "adblocker.vpnwelt.com": true,. "aditore.com": true,. "adlock.com": true,. "adpushup.com": true,. "adremover.com": true,. "adremover.org": true,. "adrenal.ru": true,. "adriangadea.ro": true,. "adrianvigheciu.ro": true,. "adroll.com": true,. "ads.google.com": true,. "ads.sharebeast.com": true,. "adsterra.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	dropped
Size (bytes):	510147
Entropy (8bit):	5.51633636669842
Encrypted:	false
SSDEEP:	6144:VAA8QBv6rKRulVD2xJh+ZV5rerjKcIbUtxhJePFr/tIYSDuBFf7oPz1ZNNdoa:quRuld2xIr73bUtXCr7SDuBFfsPz1ZNr
MD5:	807C1D994B1601F772E569DC1924102A
SHA1:	0E14FC89697C2D4467CC881596496E3012B1EA81
SHA-256:	C4DC43341628FF3F8C6F411EBDBD2DAB440E758BEB666AD7467C79B1ACAC38E5
SHA-512:	9CCAC008EF03668AE7321B3C39D8E729F33B3903BF02B89DA054B3D353AC8BE7D92E609D6A0D17E1CE36D2114BBE70CC2EFF21B4057FEE451A96385D191385CE
Malicious:	false
Reputation:	low
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ba,ca,fa,ha,la,sa,va,

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x50, components 3
Category:	dropped
Size (bytes):	1347
Entropy (8bit):	7.62925097297728
Encrypted:	false
SSDEEP:	24:h0Loq6lkYEnbLG4p15t8djqEFopdM1Kqc1hMXXQF/bm/AkYS5QXoE3:eOlZcLG4peXFoPMehoi/bVaUoQ
MD5:	E72F88B460F374FECD74574BD12873DA
SHA1:	75F434242BA8100DB71866EDD9140DF13D75EC85
SHA-256:	1557FB174DDC4F2C18902F0BDC318CD87CA86CB6E890547F4462A7D346B326BA
SHA-512:	11CDD67625FB45E28E23F3C0D6B79CEFD5E2CD393601A5692482FFC94B0E706D2E2390AAB373C8F02D58119A49C766B72C705C71DAFFE21A6175AC265E5CB046
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu......................'.....'<%+%%+%<5@404@5_JBBJ_m\W\m.vv.............2.d...................................................................!1A...6W."2QRSuv..a.BCeqr...................................................!.#12Aa.............?...0q.G..J....U..).t...:.vA.....TB<...#Z....5.&....SrL7..9..9...=2..2..4.!h.I......A..f..r}........O.S ;..>!...d.`3G.9>.L...h..'.)........E2..`3\..v.p.7.p.d...m...........Z.(.....:2 \|....Yb....[.....7.....R...7.Cx.{...&..p..^.".Pk..E.1[...a.S...;KG...P`...]$.:..s$..yR.cs,.K^uX..mp..z8q..\...p.....a\..:.7_....RW.z...:.W.(..U.....V._.....<.m.[k#...S..,.^..-.............i%}v..xl.".N.mE..1.5...y.r.nE)o...:p.....J\...hj..[IQ.`T..~...w....+.>l3..8..Zb....9.Y.Y._>`...jpjYd..M......rx....:..Mb....[.....2{..R?......g.m..\|............r;G.-.j)k!xeM<....oa.?..e..b...u..>.oKF.h..3_..b..+.........-.&.".O.o~....f.5g.I..W.:......V4.......

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3461), with no line terminators
Category:	downloaded
Size (bytes):	3486
Entropy (8bit):	5.638678160531764
Encrypted:	false
SSDEEP:	48:Y5VyNBXzbu1gLgnC4iGba2o+wb++ub7B6DMVbRIoMVbRIB6Jn+xNw6gzuaFZl:syvjb0gLTZbri66bR76bRv6MHT
MD5:	42565CAA17A87441EEEAD366E346D4C3
SHA1:	4B6617F888242805BF010E4186DC19D6DF1051E4
SHA-256:	A371169E76400F8D156FAECB8651E6E68AE08B61354AFCB22D6C776945B8D705
SHA-512:	A88512EB82AF3639224176BCCF1901218829F37D5FEB1486CDE526F635AC71A7BFCABD72BD74A48F4EF0019D12A6004036D7A557CB2F813D3B119D1110160E20
Malicious:	false
Reputation:	low
URL:	https://offfryfjtht767755433.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Sun Jan 12 2025 13:07:01 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="offfryfjtht767755433.webflow.io" data-wf-page="6783bca3840111e5424ee995" data-wf-site="6783bca3840111e5424ee986" data-wf-status="1"><head><meta charset="utf-8"/><title>offfryfjtht767755433</title><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files.com/6783bca3840111e5424ee986/css/offfryfjtht767755433.webflow.e98bb735c.css" rel="stylesheet" type="text/css"/><script type="text/javascript">!function(o,c){var n=c.documentElement,t=" w-mod-";n.className+=t+"js",("ontouchstart"in o\|\|o.DocumentTouch&&c instanceof DocumentTouch)&&(n.className+=t+"touch")}(window,document);</script><link href="https://cdn.prod.website-files.com/img/favicon.ico" rel="shortcut icon" type="image/x-icon"/><link href="https://cdn.pro

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65183)
Category:	dropped
Size (bytes):	1056512
Entropy (8bit):	5.4228735590520705
Encrypted:	false
SSDEEP:	12288:l5/J5qb9q3RQGMwvpnT5i0vhYYYcpYCCIqZWbUWCcdY2U2fDK2H/dzME8pie0/Up:yb9SRhMwvBgRcqCCVu8H
MD5:	634602121FF6199718AE2F0C67534084
SHA1:	0B5ADC55EFD5629ED750C08F96A6AE0E62914569
SHA-256:	2942339DFB06F33EFF91E9137EFCE2AAD49F4CE60A30703013E90DE0539630DF
SHA-512:	B14AC2C18E7AA88D8A591FE3986DC577883B31C38D0B5EAC5237B8436CF9D3FB6D83263C391EAC96DEB7F2F5ECF4304E81BF355F2FC2D28E6CA5310FF318D721
Malicious:	false
Reputation:	low
Preview:	//AB_TEMPLATE.//ab -> 26......var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};.TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSend': true};...................................................................................... ..(function(){var __webpack_modules__={5127:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var e=function(){for(var e=window.document,t=r(e);t;)t=r(e=t.ownerDocument);return e}(),t=[],n=null,i=null;a.prototype.THROTTLE_TIMEOUT=100,a.prototype.POLL_INTERVAL=null,a.prototype.USE_MUTATION_OBSER

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65183)
Category:	downloaded
Size (bytes):	1056512
Entropy (8bit):	5.4228735590520705
Encrypted:	false
SSDEEP:	12288:l5/J5qb9q3RQGMwvpnT5i0vhYYYcpYCCIqZWbUWCcdY2U2fDK2H/dzME8pie0/Up:yb9SRhMwvBgRcqCCVu8H
MD5:	634602121FF6199718AE2F0C67534084
SHA1:	0B5ADC55EFD5629ED750C08F96A6AE0E62914569
SHA-256:	2942339DFB06F33EFF91E9137EFCE2AAD49F4CE60A30703013E90DE0539630DF
SHA-512:	B14AC2C18E7AA88D8A591FE3986DC577883B31C38D0B5EAC5237B8436CF9D3FB6D83263C391EAC96DEB7F2F5ECF4304E81BF355F2FC2D28E6CA5310FF318D721
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/yahoomailloginen-headerbidding/loader.js
Preview:	//AB_TEMPLATE.//ab -> 26......var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};.TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSend': true};...................................................................................... ..(function(){var __webpack_modules__={5127:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var e=function(){for(var e=window.document,t=r(e);t;)t=r(e=t.ownerDocument);return e}(),t=[],n=null,i=null;a.prototype.THROTTLE_TIMEOUT=100,a.prototype.POLL_INTERVAL=null,a.prototype.USE_MUTATION_OBSER

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.5883543471732335
Encrypted:	false
SSDEEP:	3:YIFFZ:YIjZ
MD5:	8ACE7BF0D9922689ECDE11B0E532CA9F
SHA1:	3E19B84F65E2070E9E70E7B7416D844F836C805C
SHA-256:	6EFF05CF4EBAC4D9E394E49D884543035BD7297177FF33220A51AA014BC995E0
SHA-512:	F66AF62F5239B59C2D1FD930212238A0C276BA06D083D46404A02B3B301915AD1B4CCFC3990654C893A1F3E78BBCF3CBAA58ED4EC34CC40F2F95346319C215EF
Malicious:	false
Reputation:	low
Preview:	{"msg":"ok","code":200}

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	162846
Entropy (8bit):	5.814201301601817
Encrypted:	false
SSDEEP:	3072:iaisblPvRhTeOSP9aoJQ5nCN8p3lTyjkG:iLsblPvRhaP9ayQ5nCNQZy4G
MD5:	C2540D60961C2D8CEEB2C15FB077DABA
SHA1:	51880D812E6530229EE41A4499A39D0048FF910C
SHA-256:	CFE4F217038485B72C0C2A6364206EDA0C507FF196F0B5CD635BC94251C425F5
SHA-512:	388CD54ABB89E4BA46A85389707B33587C83C011A50B98024113E173AA84E479B8C44FA98C69510001C4B54D2E5EB82B81F628C128719BF9427F6A46A62758D8
Malicious:	false
Reputation:	low
URL:	https://cadmus.script.ac/d1tqrs7vz94d9k/script.js
Preview:	(new function(){var c=['C2nYAxb0CW==','tKzo','Aw5PDa==','ywjVDxq6yMXHBMS=','jNu9','igLUia==','EhbT','psHCzcSPxhm=','y2zNlwv2ywW=','qK9ewq==','Dw5ZAgLMDa==','cIaGicbHDcbHyM91DdPZCMnKB2m6','Ahr0Chm6','ihWGC3rHy2S6ia==','Aw1Nw2fSDf0SihnWyw5BDgL0BgvD','C29YDa==','cMDLDebQyxzHC2nYAxb0oG==','rLjd','yMLKuMvXq291BNq=','FsKO','y2zNlwG5A2S=','yxbPrxzHBfDYyxa=','CgfYzw50rwXLBwvUDa==','cIaGicbHDcbHyM91DdPIBgfUAZO=','jMe9','Aw5ZCgvJDevYCM9Y','jNq9','CMvMCMvZAcbB','Bg9JywXoyw1L','Bg9JywXtDg9YywDL','ywn0Aw9Ux25HBwu=','zxz0lwG5A2SY','u2vJDxjPDhLfCNjVCG==','rg9JDw1LBNqUD3jPDgu=','CMvMzxjYzxi=','CxvLCNLtzwXLy3rVCG==','CgfYC2u=','uhjLr290y2HH','zxz0lw5MBG==','r0vu','ANnWlMLUAMvJDa==','zgf0ys13AwrNzxqTAwq=','y29UzMLNDxjHyMXL','Bwv0yvTODhrWlwvXDwL2psjdB250zw50lvnLy3vYAxr5lvbVBgLJEsjD','zhvYyxrPB24=','Aw5Zzxj0qMvMB3jL','ksKUCNvUka==','y3vZDg9Tzxjjza==','zxz0lwDNCW==','wfbnlK0=','tgLZDgvUzxiUD3jHCa==','ChjLDMvUDerLzMf1Bhq=','CMjVEa==','yxbPvxnLCNnJCMLWDa==','zg9JDw1LBNrfBgvTzw50','BNr2','Bwf0y2HLCW==','tuXql

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	5.0439833037615625
Encrypted:	false
SSDEEP:	3:YEOBHt2zfG9cZHEpw7n:YEOB+fskkpA
MD5:	A9E5C82FB0C64A761F9831B4C62B9BB1
SHA1:	316D227EBEBB7427F0037F92C36F2E9C407DEC4A
SHA-256:	DAF47C85D64B949851936EB1CB4429842713BF98925730196DD895E47B040703
SHA-512:	289D3419D8D9619E3CC389925D9DE2211E79E2B5CEF796363E41641FB616068ADF84B389EA618D16F40EEC6887A668E748AFDF8953930BDA386CC40F85ED18B7
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B"}

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.6826987302732233
Encrypted:	false
SSDEEP:	6:ZM6MdN4jF8VGH0xnYOqEiCNc/+O1t+KbAzNct/XTXP0zyQ59:ZM6gyh82eqExk+uvbAzNc14d
MD5:	B6814AE5582D7953821ACBD76E977BB4
SHA1:	75A33FC706C2C6BA233E76C17337E466949F403C
SHA-256:	4A491ACD00880C407A2B749619003716C87E9C25AC344E5934C13E8F9AA0E8B3
SHA-512:	958268F22E72875B97C42D8927E6A1D6168C94FE2184DE906029688A9D63038301DF2E3DE57E571A3D0ECC7AD41178401823E5C54576936D37C84C7A3ED8EF6B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
Preview:	..............h.......(....... .................................`...d...f...i...k...m...p...q...s.. s..$v..*z..?...D...M...V..._...b...c...l...v...y...\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (643)
Category:	downloaded
Size (bytes):	13611
Entropy (8bit):	5.613129676896219
Encrypted:	false
SSDEEP:	384:BLcKwl9NIyJ7avDyUaXm0uZym2R+G20NTE4Uxn3LD3++RmWI4peY3cRZf:BLcKwl9NIyJ7avGvXV+3oj5NTe3n3++u
MD5:	A66162B5A3CB7F8CDD34EC0F60B588B0
SHA1:	6D8D7F8B640636B596C310E989F4437E0C9BB1FB
SHA-256:	ED74820D52608C2593EF776EB135C56D786F8F3E5F1D2095E476B552F2A9FE3B
SHA-512:	297090A96C89CF79FFF3F49FD9803EDE7F51C61B63875E4D41F0B916B73C84F70F8E80DADC6D633431EEBC436532B4C4B9072C94B01465BA87C8AFD47EB9371C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/nq/nr/js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js
Preview:	/! . 2025 Yahoo Holdings, Inc. For license information, see js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js.LICENSE.txt. /.(()=>{var e={p:""};(()=>{.if(!window.ymailAssetHost)throw new Error("window.ymailAssetHost must be set before running this application.").;e.p=window.ymailAssetHost})(),(()=>{"use strict";function e(e,n,t){.if(void 0===t&&(t={}),!e){const e=new Error(n);e.name="Invariant".;throw!t\|\|0===Object.keys(t).length\|\|(e.data=t),e}return e}let n,t,i,o,s,r.;!function(e){e.APP="APP",e.IFRAME="IFRAME"}(n\|\|(n={})),function(e){e.REQ="REQ",.e.RES="RES"}(t\|\|(t={})),function(e){.e.REFRESH="refresh",e.LOADED="loaded",e.INIT_ERROR="initError".}(i\|\|(i={})),function(e){e.MAIL="mail",e.BASIC_MAIL="basicMail",e.LOGIN="login",.e.AOL_LOGIN="aolLogin",.e.AOL_MAIL="aolMail",e.AOL_BASIC_MAIL="aolBasicMail",e.NOVATION="novation".}(o\|\|(o={})),function(e){.e.CLIENT="client",e.VERSION="version",e.YMREQID="ymreqid",.e.HAQ="haq",e.CACHE="cache",e.TEST_ID="testid",e.NCID="ncid".}(s\|\|(s={})),function

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 350 x 144, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4720
Entropy (8bit):	7.9512689138980015
Encrypted:	false
SSDEEP:	96:jM7l1XsL5w/f9eG9RKRgG5eH9GYuqsGSkFQw8fZK1wVVpVm23+TCf1:joV1v9RKCG5i9GYSG1uNfZKShm23eI1
MD5:	D44C57B749E414A0BCC7335D2A21522A
SHA1:	553E1354520B00F0925792C6DB2102D26F23A923
SHA-256:	74A7115B66ED1586F8067B8B238560B97F354E34C027B7BA8842F0756D27E976
SHA-512:	3C8AEA35F04101F20C6E6E5F5B39B3FD09B3C10ED7389C40785F8F5494901303E45679A275D76ED6262541004EFCD95A824ADB3302C8107B1B8E2C6A3211995C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...^.........w`.X....PLTE..................XXX uuu......JJJ###.................................V.....}...............o...kkk........A..-...666f.............---aaannn@@@{{{...444.......-......IDATx..]ic.8.....8. \n..-uizm....E\:.:l..~....`x...7.......&QY...2J.E.......7.E6h.!.&.....h...}.O.~.T.Wk........n.Y@.,.1... 6.&......u....T.lm.nG....W......r....{...#d<p.!..3....".#..g.!...JnOpsv..(.....V.......h.r1Pt...BYpf.h.....C..\|.[zD.W&..8........g.;!_.^.=.==.xq..g..{...q..S..7X...qx.Arhm...jM~A5..>:a~C....V.........'.o..d"7...+&....I.T.m....<.`.....3~..z.w......J9.!.M..j...W[..F3....Tmc.;.X............B.....Z+..#4..KX.....JL ...AS.$/q.....M ~..P.....".o.^....YT!.z.i..U...N.p.ni...f.Y#.n.('u..."m.,....?.......y..u......!...[.{<#4.*.E7..1 H..=.P...w8.q$.}...@.>Z.6,..<gp2.EE...!.&/.k%..Ln.M...[..kd...d..b.8.b.s:.....tJTK....j...T.U.}.g...vP].&l.J. ...... .6...:.Z..;Ny....E..0.mMj1N.6`.s../BI%"M.....X......G?k..t.PTp..0..E.{....8^..E

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.43085190156809
Encrypted:	false
SSDEEP:	3:OC0hNejBWk9JyiA:OC0hNuB7A
MD5:	9ACA9D15ADAFBE7AAECCAB50F115CD8B
SHA1:	0FAF57FCB79A2B2D7F4161FFAFB7D9679D3F5DF0
SHA-256:	189B8ED64093B12937354B2EF71CCF1DF59690D90432241A10FE1CB25000ACBA
SHA-512:	A561D48D340192C05E37C089CEE1BB3FE00553FCC055C478C86A7C43C41A6C2CF740E07F678D09025D8B72E2D7E26D9F4E17A20BA2F0B24D559928DAAB61AD94
Malicious:	false
Reputation:	low
Preview:	TRC.getRTUS({"status":"Unknown","userid":""});

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49630
Entropy (8bit):	4.154614288626229
Encrypted:	false
SSDEEP:	1536:XMb0+jkkEx9Pgl7MQ+iIo2EBOCoSMgaQMLseYNiLyYhH2FvyH+9P2ISjQnkY:XuHMq5kY
MD5:	528852ED0B19AC7DB47E2154706727FD
SHA1:	BBE80134EB5827AB3C5745467C2A52BFE6B3112B
SHA-256:	D788A04EAB96F6A4D80D47724FF38D44387147245F89C39ADA4161AE64A26DD5
SHA-512:	25DBCA36C36A261904141CD19DF14B6C8BC6BF855C93B023747D4C4845606D6EAE3515F25E43ABEF43B14F7E795E5AB9C6D5D3A5AB78A94C00E38E21ABA97CB2
Malicious:	false
Reputation:	low
Preview:	{. "brandProtection": {. "badv": {. "1111.com.tw": true,. "1keygou.com": true,. "3oaksorchard.com": true,. "43cbd.com": true,. "4everstamp.com": true,. "aax.com": true,. "abloodsugaroption.com": true,. "abra.com": true,. "accessmediaportal.com": true,. "acebarry.com": true,. "acticatin.com": true,. "actiongamesplace.com": true,. "actualitateavranceana.ro": true,. "adameve.com": true,. "adblocker.vpnwelt.com": true,. "aditore.com": true,. "adlock.com": true,. "adpushup.com": true,. "adremover.com": true,. "adremover.org": true,. "adrenal.ru": true,. "adriangadea.ro": true,. "adrianvigheciu.ro": true,. "adroll.com": true,. "ads.google.com": true,. "ads.sharebeast.com": true,. "adsterra.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.8451755214643475
Encrypted:	false
SSDEEP:	3:YEOBHGluX5VxgNtw983Abk4:YEOBbbg7Im+3
MD5:	E1EC7A772406C020BD7CB8B8B2339A70
SHA1:	E4E1591AED74440B53E67845CE980DEEE357CDC9
SHA-256:	642F9AAF81F49C029E093013872A9BC5A113D3D84491C9CF5A96C180238D9C08
SHA-512:	697A221A640EE757186A6EBEB0CCE0AC3A05271241145E4E25A373424FE78A0F8219EE8B6B6F62FA8C3895AEB10CBEE4C3381F6968AD9144572F7387A9612038
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A"}

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 39888, version 0.0
Category:	downloaded
Size (bytes):	39888
Entropy (8bit):	7.993057630420192
Encrypted:	true
SSDEEP:	768:SuBSTQkmuXr3letgzDt0zU5C4/xwOac2ZcLYEPH:Svtmu73yo5x//abREPH
MD5:	F7FFC5F925D3B186F552CDE1C3E99691
SHA1:	6827B93164847BDA1B696FA71E0997C30FD9D007
SHA-256:	22ACA3530F993651436788F0EFFAB7C09D3AC03BB0CDFCC8D809629E24CD54C7
SHA-512:	E2524E10B00A4F7F83BB88D8EE4C1C1E6E367F0B0A1823F8D0FE4F72BA6FE14F9B146BA852D3F442AA1D8A3ABFDDCD6A86CA3387A28C95D57FF7A1D80A5E4B20
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/bw/fonts/centra-no2-bold.woff2
Preview:	wOF2OTTO...........................................8......\|.`..D.6.$..T...... [Y........."..."..V...............?...~................E`...:..C8....x.......KN.!.i...0.P.....:kw~....#..,.S.....y.b/p.B.P.h.......h..#....'.6..${...v...b...i O... ..$..Y....,...0...6.u...Yu.......(K...X.Y[E.`.K.+.F...P,....X..t.+.tL.\|cr......[OLf.u.....@...ba..b..T..5..X..-...=T14;.wVQ...x.....T.(..n..\|c"%\..ho.n9T ..dc..p...Y....\B;...._}...4glC6.m..Ki.l......b.QC4....,b...uOE...\h/.{.y..~...u.&.9...y....n..........4e:.....'5...TL........T.......=.........A-.bY.4.:w.6.5.V...Zz5V..w..Y...%A....t.{..BP.]=,..8M~1....Wr.....v.C...l..v.......A..A.(@%i.?..7..,...n..0W...r].E.s...........7.&6.=O...U..}..D"T.h..D"...S-..g>0.. /.."/K...3...Up.+W~...g...@.....gP..S.....3..p.A.J -R1.B.,s3V.x..u...)...se....]..:...s.+.tS...\V.......G.e..g.j...".....}.+.W..Hv@o4`...N.x Z../.B...%.....U@.5V.d..t..5....V[o].!...Hu..&.8.a..y....>...=Sf....C....Y...+..-6...`..Xi.......

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (717)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.219841148069385
Encrypted:	false
SSDEEP:	24:0pRlddWZgvIlRkJo/Vu6MO3RctoHwIfATqckxg7iQD8rnaS4NM:0RddRvIlail3u21fATqc50raRNM
MD5:	FB5A4594B9FFEF704D61BB6E6F80F145
SHA1:	B5CE60A22B42FCD31FE8B2810AAA277D545BE43B
SHA-256:	3C30F0F816ADA3A1410045D740A98E4D2FAF07FC74FFC0430678B21ABBD05138
SHA-512:	77C63E1249E4BDF2DE43C74531A64E0AFE7305662BFA46252C432318B374CE7B0A6FC24645A5FDD5E9A4B18D4D924BF74E970B6E64D20B45DFBA263E51AD5FB4
Malicious:	false
Reputation:	low
URL:	https://tsdtocl.com/
Preview:	<!doctype html>.<html>.<head>.<script>.!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=localStorage.getItem(s),o=i?i.split(t):[];if(-1!==o.indexOf(c))return n(r,{success:!0,wasAppended:!1});o.push(c);var d=o.slice(-a).join(t);localStorage.setItem(s,d);var u=localStorage.getItem(s);return n(r,{value:d,wasAppended:!0,success:u===d})}catch(e){return n(r,{success:!1})}},s=function t(a){var n;try{n=JSON.parse(a.data)}catch(e){}if(n&&n.namespace===e&&"append"===n.action)return r(n.id,n.key,n.value)};window.self!==window.top&&window.addEventListener("message",s,!1)}catch(e){}}();</script>.</head>.<body></body>.</html>

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53867)
Category:	dropped
Size (bytes):	55134
Entropy (8bit):	5.702232148791689
Encrypted:	false
SSDEEP:	768:jEiPAeoa9vySust0GTzOwaosKf/1gR3ARHNL5vsaeHJ9ibZlPqy5iHMfa+:jEirvmkOnosyORwRr0J9Uq2
MD5:	8B0CCE3B1EBF7A94348320551F0093EF
SHA1:	433867B75985AACAF92CA2AC1F278174509E6076
SHA-256:	F99ACB7AFF3429A4A5E4B1F93826E76461EEEB22D26F7B511AEC1AC4656752C3
SHA-512:	972868D461F9B39F68D87335682680F1BD51F5D9B51E65E41F9A4757678653DFF870E580A92C5973757022C6DD1C9F8B1E613267C6E96F045989FBCDA22B1791
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function F(O){return O}var T=function(O,n,C,V,w,E,x,h,m,r,q,R){for(q=80,r=95;;)try{if(q==13)break;else{if(q==91)return h;if(q==79)return r=95,h;q==V?q=l.console?8:79:q==8?(l.console[E](R.message),q=79):q==19?(r=95,q=V):q==80?(m=l.trustedTypes,h=w,q=O):q==C?(r=n,h=m.createPolicy(x,{createHTML:W,createScript:W,createScriptURL:W}),q=79):q==O&&(q=m&&m.createPolicy?C:91)}}catch(e){if(r==95)throw e;r==n&&(R=e,q=19)}},l=this\|\|self,W=function(O){return F.call(this,O)};(0,eval)(function(O,n){return(n=T(7,32,61,62,null,"error","bg"))&&O.eval(n.createScript("1"))===1?function(C){return n.createScript(C)}:function(C){return""+C}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJza

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	881
Entropy (8bit):	4.310519776191567
Encrypted:	false
SSDEEP:	24:t1UfDuCZb+bGhTd7zLpulU4XEhUJi3qoYFfiP5RFr:4dOGpd7RUUCsuO5
MD5:	8032304EF0FEF2808180608CBAB8F832
SHA1:	ABF02B43D19A5D5964ACCE1756232D116137E5EB
SHA-256:	83A9F820B54A316BCBAF8D9DBF8D07B88EC95E72EDA15D8D7BB6108BC5A81A56
SHA-512:	0BE1D362CF6DB92F98F33152355A4DE1B955885C3E00043F63E3BFA6AF8DA55E8CF8B21F1C4CE9B3A74F038640FB8A586E5E3986A41808ED95458461DF8F1373
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/yahoo/contact-card-v0.0.2.svg
Preview:	<svg width="16px" height="13px" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M8.2 3.5C8.2 2.83726 7.66274 2.3 7 2.3C6.33726 2.3 5.8 2.83726 5.8 3.5C5.8 4.16274 6.33726 4.7 7 4.7C7.66274 4.7 8.2 4.16274 8.2 3.5ZM10 3.5C10 5.15685 8.65685 6.5 7 6.5C5.34315 6.5 4 5.15685 4 3.5C4 1.84315 5.34315 0.5 7 0.5C8.65685 0.5 10 1.84315 10 3.5ZM10.7058 9.69073C10.2577 9.43468 9.75052 9.3 9.23444 9.3H4.76556C4.24948 9.3 3.74232 9.43468 3.29423 9.69073C2.53686 10.1235 2.01716 10.8618 1.85436 11.7H12.1456C11.9828 10.8618 11.4631 10.1235 10.7058 9.69073ZM0 12.2656C0 10.5554 0.916352 8.97637 2.40118 8.1279C3.12125 7.71643 3.93623 7.5 4.76556 7.5H9.23444C10.0638 7.5 10.8788 7.71643 11.5988 8.1279C13.0836 8.97637 14 10.5554 14 12.2656V13.4322C14 13.4697 13.9697 13.5 13.9322 13.5H0.0677594C0.0303368 13.5 0 13.4697 0 13.4322V12.2656Z" fill="#7E1FFF"/>.</svg>.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	dropped
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4853
Entropy (8bit):	5.004932223281782
Encrypted:	false
SSDEEP:	24:t4ptffMVPFhjD2naMxoFnaRhxokr9xoNxohroSmmoNmkoXcUo76jxoYxotLMVPFe:olU7C0EyP96OA7C0EyP96qIV
MD5:	1371FB7EA1D9F283B0964F6D9FEDF183
SHA1:	3A4AD980032FE8E6277087FCDA87C4E0A699DA97
SHA-256:	186034DA48941B64B5F6B4D8A0176FB86E2AD6ADDA436B8EEEF521B0166D06C5
SHA-512:	427495C5914ECFC85ACCC176A5C3DDA83D7E4E2ABADA45414399A5F4B30D9A656AF823B5A4E6ABADC69FFC35C3DC99A7ADBADD422C453865E9E5A9C5FBE2A58E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="-25 -25 100 100" version="1.1"><g><path d="M25 0 A25 25 0 0 0 25 50" stroke-dasharray="79" stroke="#eeeeee" stroke-width="4" stroke-linecap="round" fill="none"> Expanding and contracting of the arc --><animate id="a1" attributeType="XML" attributeName="stroke-dashoffset" from="9" to="76" dur="625ms" begin="0s; a2.end" fill="freeze" calcMode="spline" keyTimes="0;1" keySplines="0.215, 0.61, 0.355, 1"/><animate id="a2" attributeType="XML" attributeName="stroke-dashoffset" from="76" to="9" dur="625ms" begin="a1.end" fill="freeze" calcMode="spline" keyTimes="0;1" keySplines="0.215, 0.61, 0.355, 1"/> Change of the stroke width --><animate id="a3" attributeType="XML" attributeName="stroke-width" from="4" to="8" dur="625ms" begin="0s; a4.end" fill="freeze" calcMode="spline" keyTimes="0;1" keySplines="0.215, 0.61, 0.355, 1"/><animate id="a4" attributeType="XML" attributeName="stroke-width" from="8" to="4" dur="6

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2461), with no line terminators
Category:	downloaded
Size (bytes):	2461
Entropy (8bit):	5.632424644406669
Encrypted:	false
SSDEEP:	48:jqiNNIlRk2Bqa8H2BqhysGJAbjTBS5Jnh9Sq:+iNNITk2Bqam2BqhysyAbxS5JhYq
MD5:	3CA4F7390E3DF88BD2FA666E9E9B89EC
SHA1:	DEC55AF99D27759FCB91A2693CD909F06AD21840
SHA-256:	B8DBD4245CA6966C9C129A0342531330CE6DB7882AB00FB92FDF715D0193A3C4
SHA-512:	DDBC403F9671BA1593F5010005CB4E9F725472E80750FD62ECF3F379DCB29F551A6515B251B79C8DACFA5BB22CABA9F187822930B1FAFC3FAD4DCD1A0F7D8245
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=60463606&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid=
Preview:	PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=DNk0suLYR-K9q4Q4DKPZZA%3D%3D&gdpr=0&gdpr_consent=&google_cm');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServ

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17490
Entropy (8bit):	6.0164545157800555
Encrypted:	false
SSDEEP:	384:hL0ODv3SJywq4vTO43YdEFQ3HQq05JDFzbO+NuGg:CguvpR0Qq05JDFzxNuGg
MD5:	B2D32FC9A4A0ACA1C6D583F2B182FB03
SHA1:	F11A5C0D1762084AEA46036F0969F80138A2B609
SHA-256:	3695ECBFEE1FD081739AF8B4C74178FC10EAAE8FCD4984F87F003191A7D40E2E
SHA-512:	332D39835F7CFEB6E0D6A4754349B316AA116A93C9C256E18AF6ADAFBB62F7B915E727FA8F9CA812C9075A535A80256D0A08B5B63AA17636DE0CF8FE16951031
Malicious:	false
Reputation:	low
URL:	https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gpt&tv=m202501070101&st=env
Preview:	{"sodar_query_id":"IKyFZ7ilI72s9u8PxofxkA4","injector_basename":"sodar2","bg_hash_basename":"-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM","bg_binary":"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

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	46
Entropy (8bit):	4.43085190156809
Encrypted:	false
SSDEEP:	3:OC0hNejBWk9JyiA:OC0hNuB7A
MD5:	9ACA9D15ADAFBE7AAECCAB50F115CD8B
SHA1:	0FAF57FCB79A2B2D7F4161FFAFB7D9679D3F5DF0
SHA-256:	189B8ED64093B12937354B2EF71CCF1DF59690D90432241A10FE1CB25000ACBA
SHA-512:	A561D48D340192C05E37C089CEE1BB3FE00553FCC055C478C86A7C43C41A6C2CF740E07F678D09025D8B72E2D7E26D9F4E17A20BA2F0B24D559928DAAB61AD94
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
Preview:	TRC.getRTUS({"status":"Unknown","userid":""});

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1246
Entropy (8bit):	5.219513736674568
Encrypted:	false
SSDEEP:	24:2dznnbRLkvEvqeaxM23FUVCqFmw6PSqyi4WQK0XsbgmCT:cTnVkBlKqyTpKSsbo
MD5:	AC8C4FBEDA6EFAD9549CB41B992A8B3A
SHA1:	46F532F081AF894297BCE53A7D212E2D253A60BF
SHA-256:	11B4310DF6E27428E7CF86F316ABDC10148AC5CF3C8BBBD5B85C88B9F6290C59
SHA-512:	0D82A3ACB37B93D05692F677F31F7A381C4D17D21E665504E9E1DC7745EDAE2AC89AD23C8A32E8954431C9BA97B015E340D8FD7AC35CF96DD569A4303591013E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/checkbox-checked.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 59 (86127) - https://sketch.com -->. <title>Tick_Checkbox_Yes</title>. <desc>Created with Sketch.</desc>. <g id="Account-Access" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="User-Name_Desktop_02-Copy-3" transform="translate(-24.000000, -336.000000)">. <g id="Tick_Checkbox_Yes" transform="translate(24.000000, 336.000000)">. <rect id="Rectangle" stroke="#B9BDC5" x="0.5" y="0.5" width="15" height="15" rx="2"></rect>. <path d="M3.16749976,8.35860496 C2.94416675,8.13860527 2.94416675,7.77971689 3.16749976,7.55749498 C3.39027723,7.33693974 3.75194338,7.33693974 3.9752764,7.55749498 L6.2919398,9.85471396 L12.0241539,4.1658331 C12.2480425,3.9447223 12.6091531,3.9447223 12.8319306,4.1658331 C13.0558191,4.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://43187c8ffbbc76326c593e2ad756bd83.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.4582181256178264
Encrypted:	false
SSDEEP:	96:jQ2eQFXKn5O0NkoqpWyRuaoiQ5733LimpFim+xuUbw:jzFan5O0qbMy4d3bBWnuU
MD5:	1F894F487D068A2CED95D5CD4F88598C
SHA1:	743A2C39F538650D53664D19AB5079CFC9BA55D2
SHA-256:	4239819D399860EB27D8A73417F9BD108D45D11676F68B5EDAAE328EC197D55E
SHA-512:	A9BD551FA9F297083351B37DDE9CE6080D14433D26215561875C5A3E8C6EA8ABBE8F5F3204793A7EF9690A4563A2BC640E6A32CFF15F9A9BB42CD322CE1F2717
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	downloaded
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	dropped
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	51141
Entropy (8bit):	5.3656059346715415
Encrypted:	false
SSDEEP:	768:DC6LVVI4DFtXHdj9b1pbNUoLrsQInWw4IpdIp9FL92ed8HysJm9Sf2TDN:Ph+4bHd5b7qoLwLh4Ip2p2Q8HyWmF
MD5:	3AD90205296656E070371A83D5201160
SHA1:	2A9ABD973C356F4DFDC318BA3B7B1B45D304F0D6
SHA-256:	322863EFDB222250F660A04127F8AC343CC74DED9EE6DEA49E88605C80F46EE1
SHA-512:	4846D786A517EB1E91EAE0C4F824516C3C9CDD9FC4F9F8AC9A932CD830DB48A7E125F10C2580081A2CE2241B0DE5907C92421889FEFA753F475EF377E4DD018C
Malicious:	false
Reputation:	low
Preview:	!function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},u={};this.getCookieByName=function(e){return u[e]},this.setRxx=function(e){var o=-2,t=(document.domain\|\|"").split("."),r=t.length;function a(e){return"."+t.slice(e).join(".")}function s(){var e,t=a(o),n="rxx",i=u[n];i\|\|(e=(new Date).getTime()-14383872e5,i=parseInt(Math.random().toString().substring(2)).toString(36)+"."+e.toString(36)+"&v

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3567), with no line terminators
Category:	dropped
Size (bytes):	3567
Entropy (8bit):	5.32203621037149
Encrypted:	false
SSDEEP:	48:+7yzk8YvPEi6qA0zonBU07qdgp1qds7dbaXxitE+7K1Uh++xnvQ956eY+pstV0hh:+7ZPvMzBfqSqAYUU+xnI9ovINZ
MD5:	C52AA1EA682AEF8AD5EBF7AFF9662E35
SHA1:	E171DA979A8C5DFB1DEF6A4ED2F4C72BB787CD18
SHA-256:	BCE4B47B8FC12DE49FAC0A00E9039E38AA568ABA0EE9154B93D20465F0289CFA
SHA-512:	BD010B3C92B9737B31F70E3EF108B11093075EFA80CC096B6BB3E9591DAD6E5420B50D6E949F9D2DAFBB420514906667282ED155F8E355A5738D965ED3226D34
Malicious:	false
Reputation:	low
Preview:	!function(t){try{var e="https://",n="aHR0cHM6Ly9waXBzLnRhYm9vbGEuY29t",r=["YXJjaGl0ZWN0dXJl","cGxhdGZvcm1WZXJzaW9u","dWFGdWxsVmVyc2lvbg=="],a=["YnJhbmRz","bW9iaWxl","bW9kZWw=","cGxhdGZvcm0=","cGxhdGZvcm1WZXJzaW9u","dWFGdWxsVmVyc2lvbg=="];t.TRC.cdsPips={userId:null,getHttpsPrefix:function t(){return e},doNothing:function t(){return!0},safeGetTfaConfig:function e(n,r,a){return t._tfa&&t._tfa.config&&t._tfa.config.safeGet&&t._tfa.config.safeGet(n,r,a)},safeGetRboxConfig:function t(e){var n;return(TRCImpl?TRCImpl.global:{})[e]},prepareGenericRequest:function e(n,r){var a,s=new(t.XDomainRequest\|\|t.XMLHttpRequest);return s.open(n,r),s.onload=this.doNothing,s.onerror=this.doNothing,s.onprogress=this.doNothing,s},tryToReadUserIdFromLocalStorage:function t(){try{return window.localStorage["taboola global:user-id"]}catch(t){return null}},getUserId:function e(){var n=t.TFASC&&t.TFASC.tfaUserId&&"function"==typeof t.TFASC.tfaUserId.getUserId?t.TFASC.tfaUserId.getUserId():null,r=t.TRC.pageManager&&

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1246
Entropy (8bit):	5.219513736674568
Encrypted:	false
SSDEEP:	24:2dznnbRLkvEvqeaxM23FUVCqFmw6PSqyi4WQK0XsbgmCT:cTnVkBlKqyTpKSsbo
MD5:	AC8C4FBEDA6EFAD9549CB41B992A8B3A
SHA1:	46F532F081AF894297BCE53A7D212E2D253A60BF
SHA-256:	11B4310DF6E27428E7CF86F316ABDC10148AC5CF3C8BBBD5B85C88B9F6290C59
SHA-512:	0D82A3ACB37B93D05692F677F31F7A381C4D17D21E665504E9E1DC7745EDAE2AC89AD23C8A32E8954431C9BA97B015E340D8FD7AC35CF96DD569A4303591013E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 59 (86127) - https://sketch.com -->. <title>Tick_Checkbox_Yes</title>. <desc>Created with Sketch.</desc>. <g id="Account-Access" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="User-Name_Desktop_02-Copy-3" transform="translate(-24.000000, -336.000000)">. <g id="Tick_Checkbox_Yes" transform="translate(24.000000, 336.000000)">. <rect id="Rectangle" stroke="#B9BDC5" x="0.5" y="0.5" width="15" height="15" rx="2"></rect>. <path d="M3.16749976,8.35860496 C2.94416675,8.13860527 2.94416675,7.77971689 3.16749976,7.55749498 C3.39027723,7.33693974 3.75194338,7.33693974 3.9752764,7.55749498 L6.2919398,9.85471396 L12.0241539,4.1658331 C12.2480425,3.9447223 12.6091531,3.9447223 12.8319306,4.1658331 C13.0558191,4.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	dropped
Size (bytes):	262888
Entropy (8bit):	5.471082992812215
Encrypted:	false
SSDEEP:	3072:RWmz6sWYV/JnX+7n8PrCReoMrlDO5LDdNN4BQExyJIdIsC:RWsWYV8nkrlMSi
MD5:	286FBB8385E48697DC5F956D4825ED84
SHA1:	65029EE73290CC73A6D28AB509E8F15E9C0C8540
SHA-256:	6F9418768F10357FDF2ACB67E82FA2C5312AA8D7F4E2825FEB0070A15EE59C23
SHA-512:	646EDBDDF9BAAC718BC2D07FAF347522C253F36EB5C318CA7B351005F76434D4562673FD3A0AAD32F3404AF8908477ECD3289B0AE4FE9EAA3998F24EAF8DE902
Malicious:	false
Reputation:	low
Preview:	/! CMP 7.0.0 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={1040:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,i=[],r=window,o=r;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===r.top)break;o=o.parent}e\|\|(function e(){var t=r.document,n=!!r.frames.__tcfapiLocator;if(!n)if(t.body){var i=t.createElement("iframe");i.style.cssText="display:none",i.name="__tcfapiLocator",t.body.appendChild(i)}else setTimeout(e,5);return!n}(),r.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];if(!t.length)return i;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5503), with no line terminators
Category:	downloaded
Size (bytes):	5503
Entropy (8bit):	5.376984635806113
Encrypted:	false
SSDEEP:	96:TeUg4KTMgKq8NGOzZZQujpcM8pmB9Q0C3MzDCprDVQ1nGXuX8Avva+b/70ApZV:6Ug4KTyNl/Qm3cy9SMHCpqp86a+joej
MD5:	19720D3A285ABA8024B11FC9955795FE
SHA1:	8E174FF6003772BC71FFAF2B655E23FC4B8794CA
SHA-256:	00A54A79B12A7E6DC344AE20DEA91F7772A088C14CF9B12D4DD8CEFF8B374C11
SHA-512:	B296C7311263B3B153353904B0D65131ED72F70F9A646795C07CE8DD3735329A6D6AAD99BD1C0F74742FC9E515D7CA1E78F44377EBBA55018331A986C93481A0
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fgpt.mail.yahoo.net%2Fsandbox%3Fclient%3Dlogin%26version%3D0.1%26limited%3D0%26headerBidder%3D1%26haq%3D1%26benji%3D1%23config%3D%257B%2522positions%2522%253A%255B%257B%2522adUnitPath%2522%253A%2522%252F22888152279%252Fus%252Fylogin%252Fmain%252Fdt%252Fus_ylogin_main_dt_full_screen%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522size%2522%253A%255B%255B1440%252C1024%255D%252C%255B%2522fluid%2522%255D%255D%252C%2522div%2522%253A%2522gpt-passback%2522%257D%255D%252C%2522pageUrl%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522headerBidder%2522%253Atrue%252C%2522yahooPrebid%2522%253Atrue%252C%2522geoCountryCode%2522%253A%2522US%2522%252C%2522npa%2522%253Afalse%252C%2522limited%2522%253Afalse%252C%2522targetingConfig%2522%253A%257B%2522lang%2522%253A%2522en-US%2522%252C%2522bucket%2522%253A%2522mbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%2522%252C%2522spaceId%2522%253A%2522794200123%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522age%2522%253A%25220%2522%252C%2522gender%2522%253A%25220%2522%252C%2522colo%2522%253A%2522bf1%2522%252C%2522lu%2522%253A%25220%2522%252C%2522site%2522%253A%2522login%2522%252C%2522device%2522%253A%2522desktop%2522%252C%2522region%2522%253A%2522us%2522%252C%2522pageOrigin%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522AXIds%2522%253A%2522%2522%252C%2522tblaId%2522%253A%2522%2522%257D%252C%2522headerBidderConfig%2522%253A%257B%2522host%2522%253A%2522login.yahoo.com%2522%252C%2522pblob%2522%253A%2522lu%253A0%257C%257C794200123%257C%257C%2522%252C%2522buckets%2522%253A%255B%2522mbr-whatsapp-ac%2522%252C%2522mbr-passkey-unr-reg%2522%252C%2522mbr-whatsapp-nac%2522%255D%252C%2522limited%2522%253Afalse%252C%2522cobrand%2522%253A%2522%2522%252C%2522lang%2522%253A%2522en-US%2522%252C%2522site%2522%253A%2522yahoo_login%2522%252C%2522region%2522%253A%2522us%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%257D%257D&tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&axids=gam%3Dy-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A%26dv360%3DeS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B%26ydsp%3Dy-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A%26tbla%3Dy-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const e=function(e,n,r,o){(o\|\|window.document).cookie="".concat(e,"=").concat(n,";Max-Age=").concat(31536e3,";Domain=").concat(t(r),";path=/;Secure;SameSite=None")},n=function(t){return new URLSearchParams(document.location.search.slice(1)).get(t)\|\|""};var r,o=function(){var t=new Date("January 1, 2011 00:00:00 GMT").getTime()/1e3,e=(new Date).getTime()/1e3;return parseInt((e-t)/60/60,10)};!function(t){if(r&&!t)return r;var e=function(t){return parseInt(t,36)};r={};var n=function(t,e){for(var n="".concat(t,"="),r=(e\|\|window.document).cookie.split(";"),o=0;o<r.length;o++){var a=(r[o]\|\|"").trim();

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 350 x 144, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4720
Entropy (8bit):	7.9512689138980015
Encrypted:	false
SSDEEP:	96:jM7l1XsL5w/f9eG9RKRgG5eH9GYuqsGSkFQw8fZK1wVVpVm23+TCf1:joV1v9RKCG5i9GYSG1uNfZKShm23eI1
MD5:	D44C57B749E414A0BCC7335D2A21522A
SHA1:	553E1354520B00F0925792C6DB2102D26F23A923
SHA-256:	74A7115B66ED1586F8067B8B238560B97F354E34C027B7BA8842F0756D27E976
SHA-512:	3C8AEA35F04101F20C6E6E5F5B39B3FD09B3C10ED7389C40785F8F5494901303E45679A275D76ED6262541004EFCD95A824ADB3302C8107B1B8E2C6A3211995C
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/6783bca3840111e5424ee986/6783bddc64c839548aaca1bf_ATT%20LOGOM.png
Preview:	.PNG........IHDR...^.........w`.X....PLTE..................XXX uuu......JJJ###.................................V.....}...............o...kkk........A..-...666f.............---aaannn@@@{{{...444.......-......IDATx..]ic.8.....8. \n..-uizm....E\:.:l..~....`x...7.......&QY...2J.E.......7.E6h.!.&.....h...}.O.~.T.Wk........n.Y@.,.1... 6.&......u....T.lm.nG....W......r....{...#d<p.!..3....".#..g.!...JnOpsv..(.....V.......h.r1Pt...BYpf.h.....C..\|.[zD.W&..8........g.;!_.^.=.==.xq..g..{...q..S..7X...qx.Arhm...jM~A5..>:a~C....V.........'.o..d"7...+&....I.T.m....<.`.....3~..z.w......J9.!.M..j...W[..F3....Tmc.;.X............B.....Z+..#4..KX.....JL ...AS.$/q.....M ~..P.....".o.^....YT!.z.i..U...N.p.ni...f.Y#.n.('u..."m.,....?.......y..u......!...[.{<#4.*.E7..1 H..=.P...w8.q$.}...@.>Z.6,..<gp2.EE...!.&/.k%..Ln.M...[..kd...d..b.8.b.s:.....tJTK....j...T.U.}.g...vP].&l.J. ...... .6...:.Z..;Ny....E..0.mMj1N.6`.s../BI%"M.....X......G?k..t.PTp..0..E.{....8^..E

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	10643
Entropy (8bit):	2.796541599989246
Encrypted:	false
SSDEEP:	192:fveWChUh96ntV8QLw1CLFD2Cywis/CN5DSiPOyuuViTq8dawBKSkRG94CHBZDyb:nQa96tV86JbI
MD5:	5F44FEDC149F31735B3940D1EC873027
SHA1:	F2BC78016A0A41C02492CC0D469CBAFCADF21ABB
SHA-256:	3A0E9094DB330D1FB8C7B3E9E607BABC756CE356CFAD530C7E637C06BDCCBD7C
SHA-512:	E00A830B63B025E92578064F66840033D12F875269DF8686192294AC3F5D9251677BD918B4FF81C911368D20D37A8421EB9D881E7B4D29389C77F5F3D300C1D0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/eh/prebid-config/yahoo_login-us-desktop.json
Preview:	{. "prebid": {. "adUnits": {. "us_ylogin_main_dt_full_screen": {. "pos": 1,. "formats": {. "banner": {. "sizes": [. [. 1440,. 1024. ]. ]. }. },. "bidders": {. "yahooPrebidServer": {},. "yahooAds": {},. "taboola": {}. }. }. },. "setConfig": {. "debug": false,. "enableSendAllBids": false,. "targetingControls": {. "alwaysIncludeDeals": true,. "allowTargetingKeys": [. "BIDDER",. "AD_ID",. "PRICE_BUCKET",. "SIZE",. "FORMAT",. "DEAL",.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	5.0439833037615625
Encrypted:	false
SSDEEP:	3:YEOBHt2zfG9cZHEpw7n:YEOB+fskkpA
MD5:	A9E5C82FB0C64A761F9831B4C62B9BB1
SHA1:	316D227EBEBB7427F0037F92C36F2E9C407DEC4A
SHA-256:	DAF47C85D64B949851936EB1CB4429842713BF98925730196DD895E47B040703
SHA-512:	289D3419D8D9619E3CC389925D9DE2211E79E2B5CEF796363E41641FB616068ADF84B389EA618D16F40EEC6887A668E748AFDF8953930BDA386CC40F85ED18B7
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B"}

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58398)
Category:	dropped
Size (bytes):	499411
Entropy (8bit):	5.421076345883134
Encrypted:	false
SSDEEP:	6144:E9iviwhWsUWEywTv69owLgI9pNThOyk9BoHgvizxu+Zw:QZwIsU9yiv69o0z9pNTf0MgvkZw
MD5:	2501402AFE19989437B60515FD4BAA23
SHA1:	E6F0AE64A88725D2AEAD60D1553C684A8C85A468
SHA-256:	2A69AE2C43043EB14FD305B26333D1996E50FEB18CDE13D29308DA05EC23D269
SHA-512:	2C2E5A4AE49722580EAB02F34A2CEAF59F457CFCE43881755415AD73EFED0C374DEF4A9A3DB0AF5D4586983FBC3D724C7A654181A9230F5117656C5E40F41E21
Malicious:	false
Reputation:	low
Preview:	/* prebid.js v8.51.0.Updated: 2025-01-09.Build: 2.0.47.Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, kueezRtbBidAdapter, liveIntentIdSystem, medianetBidAdapter, openxBidAdapter, prebidServerBidAdapter, priceFloors, pubmaticBidAdapter, rtdModule, rubiconBidAdapter, seedtagBidAdapter, taboolaBidAdapter, tripleliftBidAdapter, ttdBidAdapter, userId, yahooAnalyticsAdapter, yahooPrebidServer, yahooRtdProvider, yahoosspBidAdapter, yieldmoBidAdapter, identityLinkIdSystem, pairIdSystem, sharedIdSystem */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.(()=>{var r,t={5649:(r,t,e)=>{function n(r,t,e,n,o){for(t=t.split?t.split("."):t,n=0;n<t.length;n++)r=r?r[t[n]]:o;return r===o?e:r}

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10913), with no line terminators
Category:	dropped
Size (bytes):	10913
Entropy (8bit):	5.254821090865018
Encrypted:	false
SSDEEP:	192:FGUAMQ23qSDZJQD3BLcevTbUQUuUSUh6Cle/pnttCLkqFj0:MU1QXnDxLtfhU8/EupOgqh0
MD5:	336B804960F2D2E05B7372CFCF7CA6F7
SHA1:	EDDC49C133EC21645B2AE1FB0D269856A1821449
SHA-256:	B4235ED7DE3D5310BF6EAF35A3F5672AD57453D2AADC627AE0EC66016450D5F8
SHA-512:	7EFF7E0255E665E4766961596F1CCC27FAF04D6D18435CD44AFD8A7F1811954D9C267B9CC19CCB737639FCE28ED40E5D61F7EC264BFDCF812A003D32B79416AB
Malicious:	false
Reputation:	low
Preview:	(()=>{function r(r){return void 0===r?{b:0}:null!==r&&void 0!==r.b?{b:r.b+1\|0}:r}function n(n){return null==n?void 0:r(n)}function e(r){if(null===r\|\|void 0===r.b)return r;var n=r.b;return 0===n?void 0:{b:n-1\|0}}function t(n,t){if(void 0!==n)return r(t(e(n)))}function i(r,n){if(void 0!==r)return n(e(r))}function a(r,n){return void 0!==r?e(r):n}function o(r,n){return void 0!==r?r:n}function u(r){return void 0!==r}var v=new Map;function d(r){var n,e=v.get(r);if(void 0!==e){var t=e+1\|0;v.set(r,t),n=t}else v.set(r,1),n=1;return r+"/"+n}function c(r,n){return r.catch((r=>{return n((r=>null!=r&&"string"==typeof r.a)(e=r)?e:{a:"0j",o:e});var e}))}function f(r){return Promise.resolve(r)}function s(r,n){return r.then((r=>Promise.resolve(n(r))))}function m(r){return r.then((r=>Promise.resolve()))}var l=window,p=document;function w(r){return c(m(r),(r=>(((r,n)=>{var e=l.parent;null==e\|\|e.postMessage({u:"/a/e",e:n+""},"*")})(0,r),Promise.resolve())))}function g(n){if(""!==n)try{return r(new URL(n))

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17534
Entropy (8bit):	6.017290663653848
Encrypted:	false
SSDEEP:	384:obQUENPg8sCctBBLm4Y2wsiS0/LiRBk3c0MwVbObYGPx4u1EGi:o8uCm/L/V0/eRa3c0MwEbfvi
MD5:	49594131924BFD65561154E86D485420
SHA1:	480A2857A91A588DB800108E8F60E77353935CE4
SHA-256:	AA0513F266484827176CE4AB4C9F8319226B9746B3E1F1EA8FF442BB37CF91C7
SHA-512:	7D9137CBA54CF0D67F1606D66B73347EB7BD2DA5CAB4135DB8A8276ACC8E3F79BC8E247920DC88EE108728AE0DD64781240C96D62C97911BC23685CEE27ED179
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"IayFZ9H1Iayv7_UPncXakAc","injector_basename":"sodar2","bg_hash_basename":"-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM","bg_binary":"tUwCWFhwj7/M77KRhGG63eI5QrxuerJPj1X0rVD0owRiXQyj8YZouTmes+99Rp5uTdQaPCZyAd1E209nB4tcbUdcJKPo/FTeCFVV8jMNiTo5nimBX4SO5SeM3nkvnzCjyEAC9QFyFiFDsLSok6pIcM8lP5WzY7VPea4hSvQyCpxnzfid/Izpd4PZoX4QmTQBG7Eymu/UDCszSTMExgfWDxPaAaPyw/VXzgPTSniMRkxNCSV+ASFwNSpwiGObefZoFMfyHjImjEdcX912sCek8mZoA/FsOFDjDuuVCqnm2NIZHbEA96T2wOj2Wg6LYaKDk2nmZLPP9qqZXuuFRXVS+bXGWAdSPF4IoFgzgDmZpOKLq9dDN2yn01br9b+aXJ/sOAsVSXM+MDWEWXL6Gm+zqSMEoSf2q7M2D0ZEQglyrMPSeI750YawG2MKOBhskfiSkgdgRCxKPkX/klSFzVzKCzb1kFscQmS031Ijxc/SunHhIGu6USJJD8jc/cF3TjcDMWBNBRgIVagpV+igZ1Z9jr2jyuGRHLIwr1MrXniFpC/167/KZ07A3/jjiuovwOjCtezFHVV+2NzzEYIsfB1VmUqasbZWpgK7H6b8Rh6MsekHS1iZjqY2OtzeMK8tD7/yKP0ZQa+Lw0r5ziK7BopqyVoJ8jDuy1B4BeTRHN8Qq3I1FDSC1lB9K4bp19YYmuTIVxCr74fJ5r+H20t3uJGPoMDfV2YD3WRsPrWBWtwEaWVTzMMpIHSstxYDzxLexnMjmRZ3vAdIR1HirQoFwvle5oax+Sszv7vsXkBbPAKkdzjyhGADSHOwI0dZ1eS0m02vNIOZmXdhSogukWjYc

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:qinPCBYn:qyP+Y
MD5:	25983063937F54B8F465AD7F56FEB12E
SHA1:	163ADCBBAC43C825A19A5651BE03996F326FE02B
SHA-256:	65FC3D1A55D46044B6A33B5A5E0D8015EB3EA7F84D7F327867CBD2C40A6E23C7
SHA-512:	D983857ECFF66A47D905E82461B0F642A00F8E2B9681C89F677D35C63318187A7701D67C61EB19E720CE80EDAB8F9F419CB28681FC1F1E4E4AD257E09CBA67DC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnd66zNLz61sxIFDYOoWz0SBQ27U4yq?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw27U4yqGgA=

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33090)
Category:	downloaded
Size (bytes):	111107
Entropy (8bit):	5.6136351291082525
Encrypted:	false
SSDEEP:	1536:tA5s/tiRO0PDu7OqnqpsP/3INTsp7q7N7W3UjrZ60olPqrCrj:P/t8RybGTvNzerj
MD5:	8A6F3DA58D5FEC32E70DECDFEBD44DE3
SHA1:	4B56122EB2355D75C262356B2666E2BBF5FB21FE
SHA-256:	4587EFF16171E44124FA6EEE1EBB477EB390E72A6A98D84B71845F985E92728E
SHA-512:	C042AAEF78A411EBE4FF1F95E6BF381FF43A8F97AE7022175D806F82DF57DBD6BE20AD514D04D56FDC5A42FA52F7C03A575CCC13D4FE14427BE46720C21938CE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",u={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in u?f=u:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.027569011092753
Encrypted:	false
SSDEEP:	3:YEOBHjfEz0fdk4gn:YEOBLEOdkt
MD5:	64196A469F4BA9BD53DC5C46E409FB92
SHA1:	70CCAE1F305E4B95CE5B6E1F1132671459ABA4E4
SHA-256:	70795785CFB5DD6F7493D35CF5F279C76ECB0B5F6C786BCE8BF1BF36787BD109
SHA-512:	20D48F84E949F5FD5D30298A7FA3EDCDB577000C95F5F375C84D658DEF38CD73A2894B5E6A78017AAA3BF8122EACE3B86FA2A02FA14AF4B4F0163CE9F01A357E
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A"}

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58398)
Category:	downloaded
Size (bytes):	499411
Entropy (8bit):	5.421076345883134
Encrypted:	false
SSDEEP:	6144:E9iviwhWsUWEywTv69owLgI9pNThOyk9BoHgvizxu+Zw:QZwIsU9yiv69o0z9pNTf0MgvkZw
MD5:	2501402AFE19989437B60515FD4BAA23
SHA1:	E6F0AE64A88725D2AEAD60D1553C684A8C85A468
SHA-256:	2A69AE2C43043EB14FD305B26333D1996E50FEB18CDE13D29308DA05EC23D269
SHA-512:	2C2E5A4AE49722580EAB02F34A2CEAF59F457CFCE43881755415AD73EFED0C374DEF4A9A3DB0AF5D4586983FBC3D724C7A654181A9230F5117656C5E40F41E21
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/prebid/prebid-2.0.js
Preview:	/* prebid.js v8.51.0.Updated: 2025-01-09.Build: 2.0.47.Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, kueezRtbBidAdapter, liveIntentIdSystem, medianetBidAdapter, openxBidAdapter, prebidServerBidAdapter, priceFloors, pubmaticBidAdapter, rtdModule, rubiconBidAdapter, seedtagBidAdapter, taboolaBidAdapter, tripleliftBidAdapter, ttdBidAdapter, userId, yahooAnalyticsAdapter, yahooPrebidServer, yahooRtdProvider, yahoosspBidAdapter, yieldmoBidAdapter, identityLinkIdSystem, pairIdSystem, sharedIdSystem */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.(()=>{var r,t={5649:(r,t,e)=>{function n(r,t,e,n,o){for(t=t.split?t.split("."):t,n=0;n<t.length;n++)r=r?r[t[n]]:o;return r===o?e:r}

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3372432284170253134
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
URL:	https://login.yahoo.com/logads?adType=gam&delay=timeout&spid=794200123
Preview:	ok

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33171)
Category:	dropped
Size (bytes):	109361
Entropy (8bit):	5.603032922095715
Encrypted:	false
SSDEEP:	1536:tA5g/tiPUS53YTJY4E0IROr0dEqGWid9CyqiB6wI0olPqrCrD:J/tQl8QEIsWidAlrD
MD5:	FA4B18AF23154E12093F51649F149994
SHA1:	74892164D5F97D7E6871FDCBEE98239341601642
SHA-256:	3DC5790AE99D5284E14362F52344B8BB152556F817DF7B08E3E18C5C57DC8773
SHA-512:	C8FE91E156EC97BE03FE00423F2A73350FBC966FF7D19A691A2AE7B69DF038125754498077E445EDE35B84969C1D4B5D1E1722ECB8BEE57C7258B47A7CBE5C02
Malicious:	false
Reputation:	low
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",u={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in u?f=u:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=&google_gid=CAESEA4PFwyagmG1cKmdz-hG_hQ&google_cver=1
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://cm.adform.net/cookie?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redirect_url=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D0d87eeaf-9194-43a3-83c9-092f09d73b30%26bidder%3Dadform%26uid%3D%24UID
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1535), with no line terminators
Category:	dropped
Size (bytes):	1535
Entropy (8bit):	5.451360167886937
Encrypted:	false
SSDEEP:	24:CYPmuuo1m/ghMvM7L3kMoVJb3/MnqMkFjIsMNMUusijaMqjVUaGlg:CP+agm077Vu53kTkFjkiUusyjqjuaGq
MD5:	FB873040B7FAD4A125B3B9DE7B14EABF
SHA1:	2CA2FCEC0399577D8277AFA50C49B780FF8BF62C
SHA-256:	2828EDA8F592C33AEE122A593BFBC18F54F0FA8DB3C65DC615DCD80AF0B9E7AD
SHA-512:	ACD6392FC30B8DDBFA1B0C8981B6270EA1943998DE7D27F8B1A698987C3ACF5025FBA650E79EFC92D062DA0F00950752AAF67F6EC23AEBAE614CAFB3DD636819
Malicious:	false
Reputation:	low
Preview:	PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=0CD934B2-E2D8-47E2-BDAB-84380CA3D964&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://t.adx.opera.com/pub/sync?pubid=pub8730968190912&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY');PubMatic.loadAsyncImagePixel('https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://dsp-cookie.adfarm1.adition.com/?ssp=9&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=');PubMatic.loadAsyncI

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29565)
Category:	dropped
Size (bytes):	193175
Entropy (8bit):	5.382151201389962
Encrypted:	false
SSDEEP:	1536:CE9TaOeZnqw1/AN8nRw/6sTrxu3wKTrRgsnfzr8TrEIGlATKLlVKo/LJJF28ONMD:Z9Tfe5R42LlVTLMM5Gk5Ul4++ph2I
MD5:	14BF381A72ADAA2223C20A8728BD6FA4
SHA1:	81B456B67DC4CA218952F9BEE6EACC64368D227E
SHA-256:	EB6D6E167541C5D598A0055BD701154B559075D143FFA74CC51E37B21BE7FA1F
SHA-512:	CD1C482382C123DC674D8EDD955A546CE622EAF178A9B2173F4B6371C543BDA62BCF7172B79D5C08D9513ADE48CD1F1402EF44A2022E7D243C45E4ADABA6BD83
Malicious:	false
Reputation:	low
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){.!function(e,t,n){"use strict";"undefined"!=typeof window&&"function"==typeof define&&define.amd?define(n):"undefined"!=typeof module&&module.exports?module.exports=n():t.exports?t.exports=n():t.Fingerprint2=n()}(0,this,function(){"use strict";var e=function(e,t){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var n=[0,0,0,0];return n[3]+=e[3]+t[3],n[2]+=n[3]>>>16,n[3]&=65535,n[2]+=e[2]+t[2],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]+t[1],n[0]+=n[1]>>>16,n[1]

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	4.654474309626
Encrypted:	false
SSDEEP:	12:hYxu3VHdyC/3KDVU4dtzSwVaRfmfY3fb32FA4Nbx8QL:hYElHMiKhHz+ia94Yvj2FA4NF
MD5:	8B140F0F0F6E1A0F986CC7D6DFD74D65
SHA1:	E75B9E716E6DF29768EACFA27332F62144BDDA0C
SHA-256:	AE57797F708333552A13BCD7293180163E6F38FD11B1A8CD5AA8F05421E5B8FA
SHA-512:	BF71C5810BE6018D6C5564D4A11965F3543C458CA0AC755C4531796A14AC0A322CB838C4064C344643B0C53CD5074BE7FE6DA48AE6EBDD33B8ED610FEC46D4DF
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Taboola Topics Frame</title>. <script>. (async()=>{. var s=document.referrer;. if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")). try{. var e=await document.browsingTopics();e.length&&parent.postMessage({topics:e},s). }catch(e){. parent.postMessage({error:e.message},s). }else parent.postMessage({policyMessage:"Topics not allowed in document feature policy in: "+s},s)})();. </script>.</head>.<body>.<div></div>.</body>.</html>.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.7332906794895795
Encrypted:	false
SSDEEP:	3:YQ3/eHi7tS8dXIHxIbXQyfCDW8is3wWLW6n:YQ3ztS8dX6OzQy6Ke3wMW6
MD5:	B7DB67FF535E566E7D5C352A0A6304DD
SHA1:	414B65CA334D0FE8FE673ABB92DFE28C5CE0294C
SHA-256:	25736739AD7D2836B7413A96ADA60535E96AB048FF7952100795E8453A9BD518
SHA-512:	1EFC13AB0F08E8D516A2BC577C4A5C0B4979220860DBB4EA7B487BB02158EB8E9B82DB289708E08C2831E7166462D72F98031FC9B245F657515768679B0DF47A
Malicious:	false
Reputation:	low
URL:	https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8
Preview:	{"user":{"id":"34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c","isNewUser":false}}

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40540)
Category:	downloaded
Size (bytes):	708761
Entropy (8bit):	5.630786510804192
Encrypted:	false
SSDEEP:	6144:xLKrmuUvXxlJOnvuBZvbVW/JOe9yDH0gpu+2hV6vcdL8TOU3WuyYx+vJ48VlC:srmuAxlnVW/3EOhV6vcdL8TOU33x+PVg
MD5:	FBB649F7C85310F4CC51DACBDF506C3C
SHA1:	0B6C48DA644A9844EF3743B231ED9B7168174583
SHA-256:	4C04F2BDF9853FFC2EC4D59C0B6EE5E6285371DAAAD2F3FB12D5F5CAD15A3269
SHA-512:	D508527B34AE051FFACE758A74BA71E7567A98033E0B0D56212103E9A37BD9FDEE65AB0D999A3224C9F2BDBC824824F33BA263C0C468451533059C92784EB01F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.css
Preview:	@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff) format("woff");font-weight:200;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff) format("woff");font-weight:300;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/f

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.395503885430427
Encrypted:	false
SSDEEP:	24:4Hks1esrP8q5/Jz2pRNrBZJuvu8goqc0ioNhc+D4+mI:21eGXz2bNrVENtmN+f+j
MD5:	04152CBCF0AD2F5CBDFB8BBA0AE288DB
SHA1:	74A0BA32441A552262F055FB9FFA1B401DAA53BD
SHA-256:	88925C716233A8F35E63438B18E1D84A58D294E6AF1399CD2A52A6CBAFE69350
SHA-512:	FEB6297BDF9A95854F93BA77B822E1695EDDB88EC9F23A7D7EB4B2659C45213A03720506639AABF34604C406516143B67841B105A71CC66B88377CA5838F61E1
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="qcuJYeVqqcbJEAm3s4wjzQ">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1736813603118');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
Preview:	ok

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3567), with no line terminators
Category:	downloaded
Size (bytes):	3567
Entropy (8bit):	5.32203621037149
Encrypted:	false
SSDEEP:	48:+7yzk8YvPEi6qA0zonBU07qdgp1qds7dbaXxitE+7K1Uh++xnvQ956eY+pstV0hh:+7ZPvMzBfqSqAYUU+xnI9ovINZ
MD5:	C52AA1EA682AEF8AD5EBF7AFF9662E35
SHA1:	E171DA979A8C5DFB1DEF6A4ED2F4C72BB787CD18
SHA-256:	BCE4B47B8FC12DE49FAC0A00E9039E38AA568ABA0EE9154B93D20465F0289CFA
SHA-512:	BD010B3C92B9737B31F70E3EF108B11093075EFA80CC096B6BB3E9591DAD6E5420B50D6E949F9D2DAFBB420514906667282ED155F8E355A5738D965ED3226D34
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/cds-pips.js
Preview:	!function(t){try{var e="https://",n="aHR0cHM6Ly9waXBzLnRhYm9vbGEuY29t",r=["YXJjaGl0ZWN0dXJl","cGxhdGZvcm1WZXJzaW9u","dWFGdWxsVmVyc2lvbg=="],a=["YnJhbmRz","bW9iaWxl","bW9kZWw=","cGxhdGZvcm0=","cGxhdGZvcm1WZXJzaW9u","dWFGdWxsVmVyc2lvbg=="];t.TRC.cdsPips={userId:null,getHttpsPrefix:function t(){return e},doNothing:function t(){return!0},safeGetTfaConfig:function e(n,r,a){return t._tfa&&t._tfa.config&&t._tfa.config.safeGet&&t._tfa.config.safeGet(n,r,a)},safeGetRboxConfig:function t(e){var n;return(TRCImpl?TRCImpl.global:{})[e]},prepareGenericRequest:function e(n,r){var a,s=new(t.XDomainRequest\|\|t.XMLHttpRequest);return s.open(n,r),s.onload=this.doNothing,s.onerror=this.doNothing,s.onprogress=this.doNothing,s},tryToReadUserIdFromLocalStorage:function t(){try{return window.localStorage["taboola global:user-id"]}catch(t){return null}},getUserId:function e(){var n=t.TFASC&&t.TFASC.tfaUserId&&"function"==typeof t.TFASC.tfaUserId.getUserId?t.TFASC.tfaUserId.getUserId():null,r=t.TRC.pageManager&&

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2074), with no line terminators
Category:	dropped
Size (bytes):	2074
Entropy (8bit):	5.260719431857589
Encrypted:	false
SSDEEP:	48:CEUG4rNVxugJTY7rRKLNqpH7q7HwDOq7br2yOuQ6qh:CdrNV0gVWvbq7eOq72yOdh
MD5:	93D5BB91C9A48C4EDBC164A65354B00C
SHA1:	EA8D8A5F20B4061A7581135B465F7D81F431390C
SHA-256:	E17075CF2F747253CB3C737891BE0F417B8F4330DDAB9D53013BDD4EBCA568EE
SHA-512:	3F0F5D520F75A443304ED277F73F050698029942A1A01B9B65A8F0D38846B7DFA04D126685A75436BC3534D94DD0C9B1BCCC6DB2C628C58FF74453FA92FD9D22
Malicious:	false
Reputation:	low
Preview:	!function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)},f=function e(t,i,o,a){if(c){r[++d]=a;var u={namespace:n,id:d,action:t,key:i,value:o};return c&&c.contentWindow&&c.contentWindow.postMessage(JSON.stringify(u),"*"),u}},l=function n(e){for(var t="".concat(e,"="),i=document.cookie.split(";"),o=0;o<i.length;o++){for(var r=i[o];" "===r.charAt(0);)r=r.substring(1);if(0===r.indexOf(t))return r.substring(t.length,r.length)}return""},g=function n(e,t,i){return f("append",e,t,i)},p=function n(t){if(t&&"string"==typeof t&&-1!==t.indexOf(e)){var i=new Image;return i.src="".concat(a,"//trc.taboola.com/sg/taboola-ifs/1/um/?uils=").concat(encodeURIComponent(t)),i}},m=function n(e){if(e&&e.success){if(e.wasAppended&&e.value)return p(e.value)}else window.__trcDebug&&window.__trcDebug("ifsDebug=".conc

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
URL:	https://login.yahoo.com/logads?adType=gam&delay=13197&spid=794200123
Preview:	ok

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	downloaded
Size (bytes):	510147
Entropy (8bit):	5.51633636669842
Encrypted:	false
SSDEEP:	6144:VAA8QBv6rKRulVD2xJh+ZV5rerjKcIbUtxhJePFr/tIYSDuBFf7oPz1ZNNdoa:quRuld2xIr73bUtXCr7SDuBFfsPz1ZNr
MD5:	807C1D994B1601F772E569DC1924102A
SHA1:	0E14FC89697C2D4467CC881596496E3012B1EA81
SHA-256:	C4DC43341628FF3F8C6F411EBDBD2DAB440E758BEB666AD7467C79B1ACAC38E5
SHA-512:	9CCAC008EF03668AE7321B3C39D8E729F33B3903BF02B89DA054B3D353AC8BE7D92E609D6A0D17E1CE36D2114BBE70CC2EFF21B4057FEE451A96385D191385CE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202501070101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ba,ca,fa,ha,la,sa,va,

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 82, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.002585360278503
Encrypted:	false
SSDEEP:	3:yionv//thPl6tlKkxl/k4E08up:6v/lhPWlKk7Tp
MD5:	C09C96D4D16A1B12C30372B42C631B08
SHA1:	5F3708E1C84DB62847F30665148273556FCC1A9C
SHA-256:	2619AF1441AA9B737211EA20CF085357F092CD2134049C9E70C3282D5EEA11EA
SHA-512:	264C2E74FF1C6721D05539559D6C997C18370EDCD08A99CDC4B54085A649174B77B96062398F59416A7A87DB7BA0EBDE51110A3BAB103744A714CF4355035CE3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...3...R.....vk{.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	dropped
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	31795
Entropy (8bit):	5.855349341228781
Encrypted:	false
SSDEEP:	768:DhAHIgdMCVAXabfxCEe5B7snLc+kffmHulEyaTyXy6l6EOw73VIoykS:Dq8glhyaTyX/1S
MD5:	E5E057E79DE5526B07CD8E0A0929D4D5
SHA1:	CD8765EBE6D30D2C56A10C091397F955F19F1454
SHA-256:	0259BCEFAE2D3FF7A05AC39AB1264E833EF4D9FD854BFDB6E3E3CFF9EA7C01B7
SHA-512:	C5E1A1A5F9C7FC13642545A74F5F984F1E346EAD3869939FE8A392D97399A074FD9DC7597887DF4FFF654D7F8E0E114E75971A857912207EAED8802FB1DBDDE2
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1557141662676483&correlator=519642126984560&eid=31089448%2C95332149%2C31088251%2C83321073%2C31089253&output=ldjh&gdfp_req=1&vrg=202501070101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cylogin%2Cmain%2Cdt%2Cus_ylogin_main_dt_full_screen&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=320x50%7C1440x1024&fluid=height&ifi=1&sfv=1-0-40&fsfs=1&fsbs=1&eri=5&sc=1&cookie_enabled=1&cdm=gpt.mail.yahoo.net&abxe=1&dt=1736813599931&adxs=-12245933&adys=-12245933&biw=-12245933&bih=-12245933&isw=1440&ish=1024&scr_x=-12245933&scr_y=-12245933&ucis=asgd039bvznl&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Flogin.yahoo.com&loc=https%3A%2F%2Fgpt.mail.yahoo.net%2Fsandbox%3Fclient%3Dlogin%26version%3D0.1%26limited%3D0%26headerBidder%3D1%26haq%3D1%26benji%3D1%23config%3D%257B%2522positions%2522%253A%255B%257B%2522adUnitPath%2522%253A%2522%252F22888152279%252Fus%252Fylogin%252Fmain%252Fdt%252Fus_ylogin_main_dt_full_screen%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522size%2522%253A%255B%255B1440%252C1024%255D%252C%255B%2522fluid%2522%255D%255D%252C%2522div%2522%253A%2522gpt-passback%2522%257D%255D%252C%2522pageUrl%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522headerBidder%2522%253Atrue%252C%2522yahooPrebid%2522%253Atrue%252C%2522geoCountryCode%2522%253A%2522US%2522%252C%2522npa%2522%253Afalse%252C%2522limited%2522%253Afalse%252C%2522targetingConfig%2522%253A%257B%2522lang%2522%253A%2522en-US%2522%252C%2522bucket%2522%253A%2522mbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%2522%252C%2522spaceId%2522%253A%2522794200123%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522age%2522%253A%25220%2522%252C%2522gender%2522%253A%25220%2522%252C%2522colo%2522%253A%2522bf1%2522%252C%2522lu%2522%253A%25220%2522%252C%2522site%2522%253A%2522login%2522%252C%2522device%2522%253A%2522desktop%2522%252C%2522region%2522%253A%2522us%2522%252C%2522pageOrigin%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522AXIds%2522%253A%2522%2522%252C%2522tblaId%2522%253A%2522%2522%257D%252C%2522headerBidderConfig%2522%253A%257B%2522host%2522%253A%2522login.yahoo.com%2522%252C%2522pblob%2522%253A%2522lu%253A0%257C%257C794200123%257C%257C%2522%252C%2522buckets%2522%253A%255B%2522mbr-whatsapp-ac%2522%252C%2522mbr-passkey-unr-reg%2522%252C%2522mbr-whatsapp-nac%2522%255D%252C%2522limited%2522%253Afalse%252C%2522cobrand%2522%253A%2522%2522%252C%2522lang%2522%253A%2522en-US%2522%252C%2522site%2522%253A%2522yahoo_login%2522%252C%2522region%2522%253A%2522us%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%257D%257D&top=login.yahoo.com&vis=1&psz=0x0&msz=0x0&fws=256&ohw=0&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1736813590984&idt=4148&prev_scp=loc%3Dfull_screen%26ri%3D1%26hb_pb100%3Dfalse%26hb_crid%3D-3495429243288887471%26hb_adomain%3Dduckduckgo.com%26hb_format%3Dbanner%26hb_source%3Dclient%26hb_size%3D1440x1024%26hb_pb%3D0.90%26hb_adid%3D70795000262966%26hb_bidder%3Dtaboola&cust_params=bucket%3Dmbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%252Cdmi_consent_false%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3Dus%26site%3Dyahoo_login%26usercountry%3DUS%26spaceid%3D794200123%26url%3Dhttps%253A%252F%252Flogin.yahoo.com%26bka%3D0%26bkg%3D0%26hb_uid_mod%3Dliveintentid_on_not_enriched%26li-module-enabled%3Dt1-e0%26lr_env%3Dno-id%26sharedid%3Did%26lr_pairid%3Dno-id&adks=1818218935&frm=24&eoidce=1&td=1
Preview:	{"/22888152279/us/ylogin/main/dt/us_ylogin_main_dt_full_screen":["html",1,null,null,1,1,1,0,0,null,null,1,1,[["ID=9c4f8f8c5d0ce695:T=1736813601:RT=1736813601:S=ALNI_MZrgdX9kFyZ2axV5FTPHwkVNZFIRg",1770509601,"/","yahoo.net",1],["UID=00000fb6fd82f60a:T=1736813601:RT=1736813601:S=ALNI_Mbb_3djnmFySZp0f0oBSP64YojNhg",1770509601,"/","yahoo.net",2]],[138467550613],[6636161179],[5462617191],[3473808467],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsmpH9Bg3Gjwy0jPmkoRzAaUjG8YKbm2Qgohv3fBuA7y6bTi1Av2OE6yBdvKvTxHAvZoVWtUSglFX-0j0oyW8O0fIDp-knAhSGTWw5feCTk6VFAE","CNnSj-7284oDFceW_QcdGPgSXQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"asgd039bvznl",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOUIlxzvHEjEBNNOnqOgDVqj2SYJBDXOqWbpomd1hoknPixdJRnoMrCP4cZj3_wnF7pneoPyEA-",null,null,1,null,null,null,[["ID=1f69b2ace5e46785:T=1736813601:RT=1736813601:S=AA-AfjaYdfnfsIAEpzfBKMInzTiG",1752365601,"/","yahoo.net"]],[]]}.<!doctype html><html

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.8451755214643475
Encrypted:	false
SSDEEP:	3:YEOBHGluX5VxgNtw983Abk4:YEOBbbg7Im+3
MD5:	E1EC7A772406C020BD7CB8B8B2339A70
SHA1:	E4E1591AED74440B53E67845CE980DEEE357CDC9
SHA-256:	642F9AAF81F49C029E093013872A9BC5A113D3D84491C9CF5A96C180238D9C08
SHA-512:	697A221A640EE757186A6EBEB0CCE0AC3A05271241145E4E25A373424FE78A0F8219EE8B6B6F62FA8C3895AEB10CBEE4C3381F6968AD9144572F7387A9612038
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A"}

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17320), with no line terminators
Category:	downloaded
Size (bytes):	17320
Entropy (8bit):	5.756027257143914
Encrypted:	false
SSDEEP:	384:cCgBEbDATWo7pCz8qpI7/+fsQRBMUgyvDDqgMLGUGOCLYRIC1WZGb:cCgBz6o1CzXa7+fsQH/3nsXb
MD5:	2FDF3E79D5E851201A0D52A886453D8B
SHA1:	0CCA49213DC761C62B82C185E3A7C597CBE47515
SHA-256:	12B5EACCD8A9D81A6A12512566D2B72AA7C100B4A261A08EE6AAE4679A9E36B4
SHA-512:	42C03ECEAE90964D9A6DD5999ADC52E5A1899D549B71966881EC43CD3BAAA79A188A8E50212AE720B8C85C094EC06DB09461D7C4E349BD53E526811BC3C0979D
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/eid.es5.js
Preview:	function _createForOfIteratorHelper(b,t){var e="undefined"!=typeof Symbol&&b[Symbol.iterator]\|\|b["@@iterator"];if(!e){if(Array.isArray(b)\|\|(e=_unsupportedIterableToArray(b))\|\|t&&b&&"number"==typeof b.length){e&&(b=e);var c=0,m=function b(){};return{s:m,n:function t(){return c>=b.length?{done:!0}:{done:!1,value:b[c++]}},e:function b(t){throw t},f:m}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var W=!0,d=!1,n;return{s:function t(){e=e.call(b)},n:function b(){var t=e.next();return W=t.done,t},e:function b(t){d=!0,n=t},f:function b(){try{W\|\|null==e.return\|\|e.return()}finally{if(d)throw n}}}}function _unsupportedIterableToArray(b,t){if(b){if("string"==typeof b)return _arrayLikeToArray(b,t);var e=Object.prototype.toString.call(b).slice(8,-1);return"Object"===e&&b.constructor&&(e=b.constructor.name),"Map"===e\|\|"Set"===e?Array.from(b):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamp

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.692835709144737
Encrypted:	false
SSDEEP:	3:YQ3/eHi7tS8dXIHxIbXQyfCDW8is3wWK1:YQ3ztS8dX6OzQy6Ke3wd
MD5:	35FB9EEC870B2BE435D4DA9C1E41305B
SHA1:	A2450A132CD42D1BCD654471067269620F78D7BA
SHA-256:	50425C62A089027768A2EC73955ADF0505925094F4B63C7D2034A5133E73EE1F
SHA-512:	5F07A87587177478FEBA76F815A8525499EBA26958E012EC3615C865314383B21AD846E623E7E9E48D09E82CDF4024B39D9085B9B512E690FC771C93EB7F9878
Malicious:	false
Reputation:	low
URL:	https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8
Preview:	{"user":{"id":"34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c","isNewUser":true}}

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
Preview:	ok

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (643)
Category:	dropped
Size (bytes):	13611
Entropy (8bit):	5.613129676896219
Encrypted:	false
SSDEEP:	384:BLcKwl9NIyJ7avDyUaXm0uZym2R+G20NTE4Uxn3LD3++RmWI4peY3cRZf:BLcKwl9NIyJ7avGvXV+3oj5NTe3n3++u
MD5:	A66162B5A3CB7F8CDD34EC0F60B588B0
SHA1:	6D8D7F8B640636B596C310E989F4437E0C9BB1FB
SHA-256:	ED74820D52608C2593EF776EB135C56D786F8F3E5F1D2095E476B552F2A9FE3B
SHA-512:	297090A96C89CF79FFF3F49FD9803EDE7F51C61B63875E4D41F0B916B73C84F70F8E80DADC6D633431EEBC436532B4C4B9072C94B01465BA87C8AFD47EB9371C
Malicious:	false
Reputation:	low
Preview:	/! . 2025 Yahoo Holdings, Inc. For license information, see js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js.LICENSE.txt. /.(()=>{var e={p:""};(()=>{.if(!window.ymailAssetHost)throw new Error("window.ymailAssetHost must be set before running this application.").;e.p=window.ymailAssetHost})(),(()=>{"use strict";function e(e,n,t){.if(void 0===t&&(t={}),!e){const e=new Error(n);e.name="Invariant".;throw!t\|\|0===Object.keys(t).length\|\|(e.data=t),e}return e}let n,t,i,o,s,r.;!function(e){e.APP="APP",e.IFRAME="IFRAME"}(n\|\|(n={})),function(e){e.REQ="REQ",.e.RES="RES"}(t\|\|(t={})),function(e){.e.REFRESH="refresh",e.LOADED="loaded",e.INIT_ERROR="initError".}(i\|\|(i={})),function(e){e.MAIL="mail",e.BASIC_MAIL="basicMail",e.LOGIN="login",.e.AOL_LOGIN="aolLogin",.e.AOL_MAIL="aolMail",e.AOL_BASIC_MAIL="aolBasicMail",e.NOVATION="novation".}(o\|\|(o={})),function(e){.e.CLIENT="client",e.VERSION="version",e.YMREQID="ymreqid",.e.HAQ="haq",e.CACHE="cache",e.TEST_ID="testid",e.NCID="ncid".}(s\|\|(s={})),function

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.4582181256178264
Encrypted:	false
SSDEEP:	96:jQ2eQFXKn5O0NkoqpWyRuaoiQ5733LimpFim+xuUbw:jzFan5O0qbMy4d3bBWnuU
MD5:	1F894F487D068A2CED95D5CD4F88598C
SHA1:	743A2C39F538650D53664D19AB5079CFC9BA55D2
SHA-256:	4239819D399860EB27D8A73417F9BD108D45D11676F68B5EDAAE328EC197D55E
SHA-512:	A9BD551FA9F297083351B37DDE9CE6080D14433D26215561875C5A3E8C6EA8ABBE8F5F3204793A7EF9690A4563A2BC640E6A32CFF15F9A9BB42CD322CE1F2717
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=conversant&uid=AQAJC9JjqkKwxQIg3ULfAQEBAQEBAQCVYylcFQEBAJVjKVwV&expiration=1736900000&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.825251737288651
Encrypted:	false
SSDEEP:	3:e43iBncEyoYr8LK/XQn:e4MlQPQn
MD5:	159A0B7E0AD052620C72E4A40DBD4500
SHA1:	788C33C911B1FCEACE5679FE26D9AEF99A3749DC
SHA-256:	A3ACF25812AD4787694086054C069A380CCF5A6CAE52324207633C12AD97280C
SHA-512:	9EA586C8F0981FF99DCFAB16DF9A91240848CD533113CA771948D2611EFBDB0E0573D0B95713E44D9355720BC2E3F02F863E7CE9D4361D5188637EA36C315744
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHglDMFjFtnya3RIFDa0_TYESBQ3njUAOEgUNV3r3_Q==?alt=proto
Preview:	CiMKCw2tP02BGgQIDBgBCgsN541ADhoECGQYAgoHDVd69/0aAA==

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23608)
Category:	dropped
Size (bytes):	46298
Entropy (8bit):	5.451582230382597
Encrypted:	false
SSDEEP:	768:w5p9hACv5OLZlT3VrbVnQ05LWuaN0yaMzA2VAT6aR8K6sGOO6qjaa6KSxVoatwI1:w5p9hACv54ZHtn8qpFGOpVoFIXEg97Dd
MD5:	86DF9B5E983BE7AE7D11DBA634E66DD0
SHA1:	3A867BA5C4BFE2F512CA636E38455A66CD14D510
SHA-256:	9C4D5614095130E55D4B4E877D4D1B65FD25C47CE2256F03395355106F17EE78
SHA-512:	BD7EFC700D42ED0E6651590EAC661A761395E3A87AD0613B1B811DB06D82C59582530386ECC3D7414EDEB9034A0E2BC8C5A7DA534EEF4D58CFC64D320CDE64E2
Malicious:	false
Reputation:	low
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var pt=(e,b)=>()=>(b\|\|e((b={exports:{}}).exports,b),b.exports);var Ut=pt(()=>{"use strict";window.tram=function(e){function b(t,n){var i=new ut.Bare;return i.init(t,n)}function f(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function M(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function m(){}function W(t,n){j("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function C(t,n,i){j("Units do not match ["+t+"]: "+n+", "+i)}function R(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return Wt.test(t)\|\|!qt.test(t)?r=parseInt(t,10):qt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function j(t){S.debug&&window&&window.console.warn(t)}function J(t){for(var

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (594)
Category:	downloaded
Size (bytes):	5311
Entropy (8bit):	5.046822701969818
Encrypted:	false
SSDEEP:	96:duegRhCpwcn4QfbE/XOZjt/r6tCrY6saTGTbAaNkYaySgoaauIfQYCSG8IrW:OhCpwcn4QfbSOttT6MU6saTGTkYaySgq
MD5:	BA0777792CE6C88CB6AC61D50F5ED420
SHA1:	096E3337C3EB08177FC61F058A0A43FE7CC486EC
SHA-256:	2CFC3D9F68235DCA692E8B8D70E2DE1F872D321133005C628D1306AC0D72F225
SHA-512:	C8D17040A8966648EE790EB91235553096BCE4050814696A6F741A8E1C7EA9233EC2CC4005C3918B507B939D3E26A812212A40B87C6CD7CB7E414A627B52D066
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport". content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <title>Document</title>. <script type="text/javascript">."use strict";..function _slicedToArray(arr, i) { return _arrayWithHoles(arr) \|\| _iterableToArrayLimit(arr, i) \|\| _unsupportedIterableToArray(arr, i) \|\| _nonIterableRest(); }.function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }.function _unsupportedIterableToArray(o, minLen) { if (!o) return; if (typeof o === "string") return _arrayLikeToArray(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === "Object" && o.constructor) n = o.constructor.name; if (n === "Map" \|\| n === "Set") return Array.from(o); i

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	881
Entropy (8bit):	4.310519776191567
Encrypted:	false
SSDEEP:	24:t1UfDuCZb+bGhTd7zLpulU4XEhUJi3qoYFfiP5RFr:4dOGpd7RUUCsuO5
MD5:	8032304EF0FEF2808180608CBAB8F832
SHA1:	ABF02B43D19A5D5964ACCE1756232D116137E5EB
SHA-256:	83A9F820B54A316BCBAF8D9DBF8D07B88EC95E72EDA15D8D7BB6108BC5A81A56
SHA-512:	0BE1D362CF6DB92F98F33152355A4DE1B955885C3E00043F63E3BFA6AF8DA55E8CF8B21F1C4CE9B3A74F038640FB8A586E5E3986A41808ED95458461DF8F1373
Malicious:	false
Reputation:	low
Preview:	<svg width="16px" height="13px" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M8.2 3.5C8.2 2.83726 7.66274 2.3 7 2.3C6.33726 2.3 5.8 2.83726 5.8 3.5C5.8 4.16274 6.33726 4.7 7 4.7C7.66274 4.7 8.2 4.16274 8.2 3.5ZM10 3.5C10 5.15685 8.65685 6.5 7 6.5C5.34315 6.5 4 5.15685 4 3.5C4 1.84315 5.34315 0.5 7 0.5C8.65685 0.5 10 1.84315 10 3.5ZM10.7058 9.69073C10.2577 9.43468 9.75052 9.3 9.23444 9.3H4.76556C4.24948 9.3 3.74232 9.43468 3.29423 9.69073C2.53686 10.1235 2.01716 10.8618 1.85436 11.7H12.1456C11.9828 10.8618 11.4631 10.1235 10.7058 9.69073ZM0 12.2656C0 10.5554 0.916352 8.97637 2.40118 8.1279C3.12125 7.71643 3.93623 7.5 4.76556 7.5H9.23444C10.0638 7.5 10.8788 7.71643 11.5988 8.1279C13.0836 8.97637 14 10.5554 14 12.2656V13.4322C14 13.4697 13.9697 13.5 13.9322 13.5H0.0677594C0.0303368 13.5 0 13.4697 0 13.4322V12.2656Z" fill="#7E1FFF"/>.</svg>.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.7332906794895795
Encrypted:	false
SSDEEP:	3:YQ3/eHi7tS8dXIHxIbXQyfCDW8is3wWLW6n:YQ3ztS8dX6OzQy6Ke3wMW6
MD5:	B7DB67FF535E566E7D5C352A0A6304DD
SHA1:	414B65CA334D0FE8FE673ABB92DFE28C5CE0294C
SHA-256:	25736739AD7D2836B7413A96ADA60535E96AB048FF7952100795E8453A9BD518
SHA-512:	1EFC13AB0F08E8D516A2BC577C4A5C0B4979220860DBB4EA7B487BB02158EB8E9B82DB289708E08C2831E7166462D72F98031FC9B245F657515768679B0DF47A
Malicious:	false
Reputation:	low
Preview:	{"user":{"id":"34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c","isNewUser":false}}

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	103748
Entropy (8bit):	5.396737885661236
Encrypted:	false
SSDEEP:	1536:mOv/uiGAIy1HTIVU8bB58RUeScgN2xDnQZ3vwNcWw+MbRxbgp:EiGk1ES8bB+vn23vwNcyMbRxb0
MD5:	EB77E519F9ED8E141AB475AF8F0A3614
SHA1:	8B6077C7584DF0A749D39E43FB0F9D5EF5D6AA6D
SHA-256:	B066DDC9036DE11E45EC3D54332679838F5EB6CD38BACA3FA01262B54473081F
SHA-512:	F7229AAFC143A96D31822B4D456B02E6FAE76BE7FDFF71E0FD5CB35E291062D8AECE3BA2ED103AFD9545A5A84E3774C459B5D14504DC034ACAE7C5ED694B12E0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/benji/benji-2.2.29.js
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{assertive:{},benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({reason:e,status:"rejected"})))))));const t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),n=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),i=new RegExp(`^https?://(${t.concat(n).join("\|")})(:\\d+)?$`);const s="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",u="block",g="index",p=!0,f="DOMContentLoaded",m="testid",b="ncid",y="fr",E="pg_name",_="type",I="auto",v="VERSION",A={ATS_DIRECT:"_lr_atsDirect"};var C,S;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct Sold"}(C\|\|(C={})),function(e)

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	262888
Entropy (8bit):	5.471082992812215
Encrypted:	false
SSDEEP:	3072:RWmz6sWYV/JnX+7n8PrCReoMrlDO5LDdNN4BQExyJIdIsC:RWsWYV8nkrlMSi
MD5:	286FBB8385E48697DC5F956D4825ED84
SHA1:	65029EE73290CC73A6D28AB509E8F15E9C0C8540
SHA-256:	6F9418768F10357FDF2ACB67E82FA2C5312AA8D7F4E2825FEB0070A15EE59C23
SHA-512:	646EDBDDF9BAAC718BC2D07FAF347522C253F36EB5C318CA7B351005F76434D4562673FD3A0AAD32F3404AF8908477ECD3289B0AE4FE9EAA3998F24EAF8DE902
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/cmp.js
Preview:	/! CMP 7.0.0 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={1040:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,i=[],r=window,o=r;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===r.top)break;o=o.parent}e\|\|(function e(){var t=r.document,n=!!r.frames.__tcfapiLocator;if(!n)if(t.body){var i=t.createElement("iframe");i.style.cssText="display:none",i.name="__tcfapiLocator",t.body.appendChild(i)}else setTimeout(e,5);return!n}(),r.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];if(!t.length)return i;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20309), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.495030380716332
Encrypted:	false
SSDEEP:	384:NiUyDOyDIwLgig9aXWqh3VTo5dwxiygH7dNAdPwD3C:NiLDJDIwL+amqfTSgiy27dC
MD5:	FA56BFAED52F032004597F2A36805575
SHA1:	84BA7B13231C1F9D9AE629BA1D70AE4236021473
SHA-256:	A88123F7890E58349E3A64226C716BE9D346A42BA76E542A8EBDD30026A89604
SHA-512:	F1781DC1AC155FCE20CE1442AC04C700B30D2ADBB7C8C3B5BCEA59EC0CD19317124F0932878AC47CF2EDBB7945E9A12AD74B045024F624550489B49374E0AF0D
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D
Preview:	<html><body><script type="text/javascript">(function(){var ah=window,s=navigator,ar=ah.top\|\|ah,at=ah.location.search.substr(1),E=encodeURIComponent,ad=decodeURIComponent,aN=ah.parseInt,U=ah.PubMatic\|\|(ah.PubMatic={}),O=0,aj=0,b=0,aA="pubmatic.com",ab="ads."+aA,aw=1,V="https://",a=(ah.__cmp?1:0),az=function(aS){return typeof aS==="function"},aG=console.log.bind(console,"PubMatic:"),aE=function(aW,aV){var aT=0,aS=aW.length,aU=false;for(;aT<aS;aT++){if(aW[aT]===aV){aU=true;break}}return aU},p=function(aS,aV){var aU=ah.document.createElement("script");aU.type="text/javascript";aU.src=aS;aU.async=true;if(az(aV)){aU.onload=aU.onreadystatechange=aV}var aT=ah.document.getElementsByTagName("script")[0];aT&&aT.parentNode&&az(aT.parentNode.appendChild)&&aT.parentNode.appendChild(aU)},aC=function(aU){var aT=ah.document.createElement("iframe");aT.src=aU;aT.style.height="0px";aT.style.width="0px";aT.style.display="none";aT.height=0;aT.width=0;aT.border="0px";aT.hspace="0";aT.vspace="0";aT.marginWidt

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	776
Entropy (8bit):	6.900545405371768
Encrypted:	false
SSDEEP:	24:T5rwbRTZ2oezaMTVy8CkW6oobDVn/DLo:FOR12jV1CjobZLo
MD5:	F9B44752E9C29EBA86C62BF9BACF492E
SHA1:	F544424321E59268174FADBC72659637E946841E
SHA-256:	C738B6380DB63570792CBACCDB3D8A6CB25E4F6747FF398480ACA6B875BD6AA3
SHA-512:	49A8240A799118CCCB75D047A17C971E9031D1D1517AFEE82C17B18B70845970FB0004482BFFFF31F45D298F0E512DC135E0DD302BE3ABD770061D6A06FF939D
Malicious:	false
Reputation:	low
URL:	https://images.taboola.com/taboola/image/fetch/c_crop%2Cf_jpg%2Cq_auto%2Ce_sharpen%2Car_2.0000%2Cw_1000%2Cx_0%2Cy_28/c_fill%2Cw_100%2Ch_50/https%3A//cdn.taboola.com/libtrc/static/thumbnails/5d000774fbee3ea8d1c41472e38a533e.png
Preview:	RIFF....WEBPVP8X........c..1..VP8 ........d.2.>.>.K%."!.u\x...g..$.7....d&Jo.S....+m.E~h>.m....,....N...7...2..{.5..\|.T.^A.e..,...5.$..9P.x.@...1T.bCs.......w...x.).+D.....n.......n.........F..1E.....n0...h.....k.).\|..Q.{..L..!.....q....D.S7....^x3.Zj...".(N.E?b.....V......m........F...O..j.(....<.D.]...^.d.......&..].P?b-6.....466..s.$....(@3.%H....Lz..WV..>.D.6.F0..nu.....-.s...[..s8....^....i)......l..m...P.....9.s.B...'...............,._.\......s..c.........y\|fQ!0Z.l3GK..i#.......h-v....[7..P.NJ..k.=.(7.xv.._.s.C../E..F....qD...dg.........+....EXIF....Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100....................d...........2.......

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	37336
Entropy (8bit):	5.2250288588456515
Encrypted:	false
SSDEEP:	768:AyNf7A1RE/GqyFVF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVxk:Aye1REeqyP0XcPyjowKjL
MD5:	E98BB735C638A724BD5A423C8BAE924A
SHA1:	8CF11E3BE90320D2E2DB102A067552DFE5233144
SHA-256:	247343A14691550D27BE8D7626DEEFE98D59898966DC43F35F293079ADCE73A6
SHA-512:	671AC1A170BB5DB6D847B549B07A9A3F46141E99713C76A96C0F2B00440FA1487C27C9DD4895EB0F0D57E29D0CC731DBBBCAE1263B77FC66D854ED58D44D89FE
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/6783bca3840111e5424ee986/css/offfryfjtht767755433.webflow.e98bb735c.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=medianet&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3798152066406142000V10
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	2623
Entropy (8bit):	5.30972628417996
Encrypted:	false
SSDEEP:	48:4UTrzOhdZqpT7n21CTyoq0JDNTQrwyr0JD8+fohrF/rv50JwRjBGPrTWIeDUdkFk:tTOhLqpT7+aRTT9NJfc6QBGPwFBe
MD5:	42FB6DDAD005C2D48B61AEA5BD980694
SHA1:	4ADFFCD04BFF4EA9EEFF8F8FA72E0B64D6BEA35B
SHA-256:	399C085FD3F244980BC37D16490C24E319D4D995484AD56C7628EC4B4F8164FF
SHA-512:	4497CED8BA700C286ECC187CD95FD05E008770C835CC0201E0A5AEFC038F0B673E77C635C6078E04B77DC5C1904BD55FA6449970DA15728CB4B0E803BE7A560E
Malicious:	false
Reputation:	low
Preview:	/! . 2024 Yahoo Holdings, Inc. /.(()=>{var t={p:""};(()=>{. if(!window.ymailAssetHost)throw new Error("window.ymailAssetHost must be set before running this application."). ;t.p=window.ymailAssetHost})(),(()=>{"use strict";var t=t=>{. for(var a,i=window;i;){try{if(i.frames[t]){a=i;break}}catch(e){return}. if(i===window.top)break;i=i.parent}return a},a=(t,a,i)=>{var e={};try{. e="string"==typeof t.data?JSON.parse(t.data):t.data}catch(r){return}var n=e[a]. ;n&&"function"==typeof i[n.callId]&&(i[n.callId](n.returnValue,n.success),. delete i[n.callId])},i=()=>{. var t,a="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz-_",i=window.crypto\|\|window.msCrypto. ;try{. t=Array.from(i.getRandomValues(new Uint32Array(32))).map((t=>a[t%64])).join(""). }catch(e){t=Math.random()+""}return t};(e=>{var n,r;if(!window.__gpp){. if(window===window.top)return void e({msg:"API not found"},!1). ;n=t("__gppLocator"),r={},window.__gpp=(t,a,e)=>{if(n){var o

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.027569011092753
Encrypted:	false
SSDEEP:	3:YEOBHjfEz0fdk4gn:YEOBLEOdkt
MD5:	64196A469F4BA9BD53DC5C46E409FB92
SHA1:	70CCAE1F305E4B95CE5B6E1F1132671459ABA4E4
SHA-256:	70795785CFB5DD6F7493D35CF5F279C76ECB0B5F6C786BCE8BF1BF36787BD109
SHA-512:	20D48F84E949F5FD5D30298A7FA3EDCDB577000C95F5F375C84D658DEF38CD73A2894B5E6A78017AAA3BF8122EACE3B86FA2A02FA14AF4B4F0163CE9F01A357E
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A"}

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31717
Entropy (8bit):	5.851274249591564
Encrypted:	false
SSDEEP:	768:E5xAHIgdMCVAXabfxCEe5B7snLc+kffmHulGrwaRi6RXyrl6EOw73VIoykS:Y68glKoiiXm1S
MD5:	8CD959BCCC7C0393CF7808A944E995A3
SHA1:	BD9416F449F06A8F4ACD8CDD82008154103C1DAD
SHA-256:	5619298D92CF87B6CC10FBCDE885D1C0FB6B93504511CF2A054B09804975C369
SHA-512:	A941306F80902B076C636BA961B7C73B603E588819EEC93AC01D05FC5B9E8A6EF4F1E5BC43E8ED9E2A3ACC93C4125DB99ABDBB4E3048CCB196348AF6E88E6E1A
Malicious:	false
Reputation:	low
Preview:	{"/22888152279/us/ylogin/main/dt/us_ylogin_main_dt_full_screen":["html",1,null,null,1,1,1,0,0,null,null,1,1,[["ID=f3b4fa2a41a19a79:T=1736813603:RT=1736813603:S=ALNI_MaocjGGMma1y-s7Fls09ssiUG-oZg",1770509603,"/","yahoo.net",1],["UID=00000fcdd41523b8:T=1736813603:RT=1736813603:S=ALNI_Mb3rq2vNAGVa-zbrgtXHcdmLb_NqA",1770509603,"/","yahoo.net",2]],[138466991465],[6636161179],[5462617191],[3473808467],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsmxzaqL5v2knsFtiKSWaJWmjDZWdWslMkLqXykvrs1wm5BNUuImDzLlkhlicwjFHApjtIV31VCRcp3OIXWniTK-qPdusyz-wq3hi24TSd30Fy-v","CM6c8u7284oDFdq-_QcdMmYaLw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"asgd039bvznl",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qMgMFlsiDjEhAZm2Tt5C0nN9ZS7Zrfk7lxHxrXEeXY0bRjiONLgpfG2NbSDwmomNj8vVo6FhqLA",null,null,1,null,null,null,[["ID=707fdb362c4aab95:T=1736813603:RT=1736813603:S=AA-AfjZjDvTtSAY90g7qVFifz6mZ",1752365603,"/","yahoo.net"]],[]]}.<!doctype html><html

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1748)
Category:	downloaded
Size (bytes):	3596
Entropy (8bit):	5.444209745064718
Encrypted:	false
SSDEEP:	96:YY7YNYR1m5ABePKTBxj6kDxx12yS1M9O84itGGyBoirdxM6j:t86+A4STflDp9B4YL8oi5xM6j
MD5:	D92FD68178888768C733A4365A56FC3D
SHA1:	55916ED75FD5C9DF0A7447298E2BCA559CC9583A
SHA-256:	E573D7D4E3679F1D578E544C5B807AA4FF21E208BAF12E48AA0D09B2B3938F04
SHA-512:	37CAEE932A7038636D84720960420E701C7659C873188CA400EE0196868D9C5A09BB31F566699ACF54DB0F0FC42BD769F1A141A213C2127C38CE839DACCA8BE5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self;/ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 .*/ .var f={};function g(){if(f!==f)throw Error("Bad secret");};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function k(a){return a.toString().indexOf("`")===-1}const l=k(a=>a``)\|\|k(a=>a`\0`)\|\|k(a=>a`\n`)\|\|k(a=>a`\u0000`),m=h``&&h`\0`&&h`\n`&&h`\u0000`;let n=globalThis.trustedTypes,p;function q(){let a=null;if(!n)return a;try{const b=d=>d;a=n.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(b){throw b;}return a};var r=class{constructor(a){g();this.g=a}toString(){return this.g+""}};function t(a){p===void 0&&(p=q());var b=p;return new r(b?b.createScriptURL(a):a)};var v=class{constructor(a){g();this.h=a}toString(){return this.h}};new v("about:blank");new v("about:invalid#zClosurez");const w=[];var x=a=>{console.warn(`A URL with content '${a}' was sanitized away.`)};w.ind

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17320), with no line terminators
Category:	dropped
Size (bytes):	17320
Entropy (8bit):	5.756027257143914
Encrypted:	false
SSDEEP:	384:cCgBEbDATWo7pCz8qpI7/+fsQRBMUgyvDDqgMLGUGOCLYRIC1WZGb:cCgBz6o1CzXa7+fsQH/3nsXb
MD5:	2FDF3E79D5E851201A0D52A886453D8B
SHA1:	0CCA49213DC761C62B82C185E3A7C597CBE47515
SHA-256:	12B5EACCD8A9D81A6A12512566D2B72AA7C100B4A261A08EE6AAE4679A9E36B4
SHA-512:	42C03ECEAE90964D9A6DD5999ADC52E5A1899D549B71966881EC43CD3BAAA79A188A8E50212AE720B8C85C094EC06DB09461D7C4E349BD53E526811BC3C0979D
Malicious:	false
Reputation:	low
Preview:	function _createForOfIteratorHelper(b,t){var e="undefined"!=typeof Symbol&&b[Symbol.iterator]\|\|b["@@iterator"];if(!e){if(Array.isArray(b)\|\|(e=_unsupportedIterableToArray(b))\|\|t&&b&&"number"==typeof b.length){e&&(b=e);var c=0,m=function b(){};return{s:m,n:function t(){return c>=b.length?{done:!0}:{done:!1,value:b[c++]}},e:function b(t){throw t},f:m}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var W=!0,d=!1,n;return{s:function t(){e=e.call(b)},n:function b(){var t=e.next();return W=t.done,t},e:function b(t){d=!0,n=t},f:function b(){try{W\|\|null==e.return\|\|e.return()}finally{if(d)throw n}}}}function _unsupportedIterableToArray(b,t){if(b){if("string"==typeof b)return _arrayLikeToArray(b,t);var e=Object.prototype.toString.call(b).slice(8,-1);return"Object"===e&&b.constructor&&(e=b.constructor.name),"Map"===e\|\|"Set"===e?Array.from(b):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamp

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.8451755214643475
Encrypted:	false
SSDEEP:	3:YEOBHGluX5VxgNtw983Abk4:YEOBbbg7Im+3
MD5:	E1EC7A772406C020BD7CB8B8B2339A70
SHA1:	E4E1591AED74440B53E67845CE980DEEE357CDC9
SHA-256:	642F9AAF81F49C029E093013872A9BC5A113D3D84491C9CF5A96C180238D9C08
SHA-512:	697A221A640EE757186A6EBEB0CCE0AC3A05271241145E4E25A373424FE78A0F8219EE8B6B6F62FA8C3895AEB10CBEE4C3381F6968AD9144572F7387A9612038
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A"}

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4853
Entropy (8bit):	5.004932223281782
Encrypted:	false
SSDEEP:	24:t4ptffMVPFhjD2naMxoFnaRhxokr9xoNxohroSmmoNmkoXcUo76jxoYxotLMVPFe:olU7C0EyP96OA7C0EyP96qIV
MD5:	1371FB7EA1D9F283B0964F6D9FEDF183
SHA1:	3A4AD980032FE8E6277087FCDA87C4E0A699DA97
SHA-256:	186034DA48941B64B5F6B4D8A0176FB86E2AD6ADDA436B8EEEF521B0166D06C5
SHA-512:	427495C5914ECFC85ACCC176A5C3DDA83D7E4E2ABADA45414399A5F4B30D9A656AF823B5A4E6ABADC69FFC35C3DC99A7ADBADD422C453865E9E5A9C5FBE2A58E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/modern/images/fuji-spinner-1.0.1.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="-25 -25 100 100" version="1.1"><g><path d="M25 0 A25 25 0 0 0 25 50" stroke-dasharray="79" stroke="#eeeeee" stroke-width="4" stroke-linecap="round" fill="none"> Expanding and contracting of the arc --><animate id="a1" attributeType="XML" attributeName="stroke-dashoffset" from="9" to="76" dur="625ms" begin="0s; a2.end" fill="freeze" calcMode="spline" keyTimes="0;1" keySplines="0.215, 0.61, 0.355, 1"/><animate id="a2" attributeType="XML" attributeName="stroke-dashoffset" from="76" to="9" dur="625ms" begin="a1.end" fill="freeze" calcMode="spline" keyTimes="0;1" keySplines="0.215, 0.61, 0.355, 1"/> Change of the stroke width --><animate id="a3" attributeType="XML" attributeName="stroke-width" from="4" to="8" dur="625ms" begin="0s; a4.end" fill="freeze" calcMode="spline" keyTimes="0;1" keySplines="0.215, 0.61, 0.355, 1"/><animate id="a4" attributeType="XML" attributeName="stroke-width" from="8" to="4" dur="6

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.027569011092753
Encrypted:	false
SSDEEP:	3:YEOBHjfEz0fdk4gn:YEOBLEOdkt
MD5:	64196A469F4BA9BD53DC5C46E409FB92
SHA1:	70CCAE1F305E4B95CE5B6E1F1132671459ABA4E4
SHA-256:	70795785CFB5DD6F7493D35CF5F279C76ECB0B5F6C786BCE8BF1BF36787BD109
SHA-512:	20D48F84E949F5FD5D30298A7FA3EDCDB577000C95F5F375C84D658DEF38CD73A2894B5E6A78017AAA3BF8122EACE3B86FA2A02FA14AF4B4F0163CE9F01A357E
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A"}

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 82, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.002585360278503
Encrypted:	false
SSDEEP:	3:yionv//thPl6tlKkxl/k4E08up:6v/lhPWlKk7Tp
MD5:	C09C96D4D16A1B12C30372B42C631B08
SHA1:	5F3708E1C84DB62847F30665148273556FCC1A9C
SHA-256:	2619AF1441AA9B737211EA20CF085357F092CD2134049C9E70C3282D5EEA11EA
SHA-512:	264C2E74FF1C6721D05539559D6C997C18370EDCD08A99CDC4B54085A649174B77B96062398F59416A7A87DB7BA0EBDE51110A3BAB103744A714CF4355035CE3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/90196aba2c860f98/1736813573974/hdlLq_AxuGYOldi
Preview:	.PNG........IHDR...3...R.....vk{.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6783bca3840111e5424ee986
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/0CD934B2-E2D8-47E2-BDAB-84380CA3D964?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=kueez&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=8a942ec5-27a9-1928-d76f-71229861b328
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10643
Entropy (8bit):	2.796541599989246
Encrypted:	false
SSDEEP:	192:fveWChUh96ntV8QLw1CLFD2Cywis/CN5DSiPOyuuViTq8dawBKSkRG94CHBZDyb:nQa96tV86JbI
MD5:	5F44FEDC149F31735B3940D1EC873027
SHA1:	F2BC78016A0A41C02492CC0D469CBAFCADF21ABB
SHA-256:	3A0E9094DB330D1FB8C7B3E9E607BABC756CE356CFAD530C7E637C06BDCCBD7C
SHA-512:	E00A830B63B025E92578064F66840033D12F875269DF8686192294AC3F5D9251677BD918B4FF81C911368D20D37A8421EB9D881E7B4D29389C77F5F3D300C1D0
Malicious:	false
Reputation:	low
Preview:	{. "prebid": {. "adUnits": {. "us_ylogin_main_dt_full_screen": {. "pos": 1,. "formats": {. "banner": {. "sizes": [. [. 1440,. 1024. ]. ]. }. },. "bidders": {. "yahooPrebidServer": {},. "yahooAds": {},. "taboola": {}. }. }. },. "setConfig": {. "debug": false,. "enableSendAllBids": false,. "targetingControls": {. "alwaysIncludeDeals": true,. "allowTargetingKeys": [. "BIDDER",. "AD_ID",. "PRICE_BUCKET",. "SIZE",. "FORMAT",. "DEAL",.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9424), with no line terminators
Category:	downloaded
Size (bytes):	9424
Entropy (8bit):	5.2828780025163615
Encrypted:	false
SSDEEP:	192:VgHvGB2mC2xiP2TwQG065Wnfe1E91I7NsKOcVqAAYyoO8bOGiN6vDh:GHOB2mC2xjz65GfvHFkyL8KGiG
MD5:	2907CF83061833352832F902CF60546E
SHA1:	8ECD21384A9BE55CC8E392B2DE091A5F2B12C5AC
SHA-256:	88756001AFE2277005B143FD74DC8C9F7F8106A5FAE630083E52AA0D93BCD59C
SHA-512:	692614C0D4A64D0517B4D74BBF2A2419152BFEA052EB0FE037311DD25BBC44CA15A7544793345DAAF4F3AC5F311CBEE4116A06D77987A7733BA883ED91AA61C5
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus.js
Preview:	(()=>{"use strict";var n=function(n){if(n)return n;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(n){return""}};const t=function(n,t){for(var e="".concat(n,"="),o=(t\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){var i=(o[a]\|\|"").trim();if(0===i.indexOf(e))return i.substring(e.length,i.length)}return""},e=function(t,e,o,a){(a\|\|window.document).cookie="".concat(t,"=").concat(e,";Max-Age=").concat(31536e3,";Domain=").concat(n(o),";path=/;Secure;SameSite=None")},o=function(t,e,o){(o\|\|window.document).cookie="".concat(t,"=;Max-Age=0;Domain=").concat(n(e),";path=/;Secure;SameSite=None")},a=function(n,t,e){try{var o=(e\|\|window.localStorage).getItem(n);return t?JSON.parse(o):o}catch(n){return null}},i=function(n,t,e,o){try{e?(o\|\|window.localStorage).setItem(n,JSON.stringify(t)):(o\|\|window.localStorage).setItem(n,t)}catch(n){}},c=function(n,t){try{(t\|\|window.localStorage).removeItem(n)}catch(n){}};var r="opus",d=function(n){for(var t=0,e=0;e<n.length;e++

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=2285659547512489711723
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.295327441382004
Encrypted:	false
SSDEEP:	3:xuSrhoSsOrk7PiurIkuESmScs22D1Dv2D50+WJSLkKxu5NkkK6l:xuSrmSk7P1kDm9k1Dv45IJSLdu5Dl
MD5:	89774F487EC3A147BCBDF9081601D411
SHA1:	CD00D286E57D820F60510F2260902020AF77DE33
SHA-256:	5FAF63D460F95688B62A8AF666B3171A57C455A2EF2A53CDA6F6483E7000FA1D
SHA-512:	20FE8DADFD0445DF92EBC95C02FEB502D0AD205E4FB77A102DFD8E533B8073F180F0B0D19BE48456EA7427A4DA7706CB1BC143536839EFC5FB03E0D914FF2B1D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISQQkvXB19NrKaJRIFDWtomm4SBQ1Pnif4EgUNanWXVxIFDYYMfJESBQ3OQUx6EgUN3RHABhIFDW-KUiASBQ0DyCF4?alt=proto
Preview:	CnEKBw1raJpuGgAKBw1Pnif4GgAKDQ1qdZdXGgQIVhgCIAEKBw2GDHyRGgAKKg3OQUx6GgQITBgCKh0IClIZCg9AISQjLipfPyYtJS8rLCkQARj/////DwoHDd0RwAYaAAoHDW+KUiAaAAoHDQPIIXgaAA==

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	51141
Entropy (8bit):	5.3656059346715415
Encrypted:	false
SSDEEP:	768:DC6LVVI4DFtXHdj9b1pbNUoLrsQInWw4IpdIp9FL92ed8HysJm9Sf2TDN:Ph+4bHd5b7qoLwLh4Ip2p2Q8HyWmF
MD5:	3AD90205296656E070371A83D5201160
SHA1:	2A9ABD973C356F4DFDC318BA3B7B1B45D304F0D6
SHA-256:	322863EFDB222250F660A04127F8AC343CC74DED9EE6DEA49E88605C80F46EE1
SHA-512:	4846D786A517EB1E91EAE0C4F824516C3C9CDD9FC4F9F8AC9A932CD830DB48A7E125F10C2580081A2CE2241B0DE5907C92421889FEFA753F475EF377E4DD018C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/rapid-3.53.39.js
Preview:	!function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},u={};this.getCookieByName=function(e){return u[e]},this.setRxx=function(e){var o=-2,t=(document.domain\|\|"").split("."),r=t.length;function a(e){return"."+t.slice(e).join(".")}function s(){var e,t=a(o),n="rxx",i=u[n];i\|\|(e=(new Date).getTime()-14383872e5,i=parseInt(Math.random().toString().substring(2)).toString(36)+"."+e.toString(36)+"&v

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2982
Entropy (8bit):	5.433553301182623
Encrypted:	false
SSDEEP:	48:kHbLefmz8GO5bBJnbGOox1GOGU9dNbHGOh/gr51jGO+om6gGOUj5MueOSy9DOGOZ:IeeXEBgbxkhYDbmSbT6/xUDyPs
MD5:	B2CCBD527CA4FE53BBE0DE8852F991DD
SHA1:	475325F479C3CCCD26E5CFBEA0238442AA2C9CDB
SHA-256:	4E23E58CF39BABA5DD1506D9E59181BC97A276DF33D8486CD977600C935CE665
SHA-512:	C4F4E94D57D64EA03AA4DA4EB292FEFB69695282BDB6B85C5CC3D2BF42A70D11F340A2189055C741FF2B5EA8B554A7870E11FA23FDCCB4819F64560AA9730E43
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_52cf446a-5a2c-4fae-b38a-81f916a32883&gdpr=0&gdpr_consent=&us_privacy=1YNN" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV81MmNmNDQ2YS01YTJjLTRmYWUtYjM4YS04MWY5MTZhMzI4ODM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.954148353644222
Encrypted:	false
SSDEEP:	3:YRM9WREaTkRhPfFPW714VSi9upjRbLvSaijJphACvuyUulYn:YsWivRhnFlVSi9MBLKnJpGCmyc
MD5:	F3A5A5A30CF3273DBF2F9D6C7682491F
SHA1:	AB4C97883774842539D0809DFD9E1581F94CF835
SHA-256:	F2BBA043BD23AAF5A1AF085B46E4238241075824B86B27BD2B4C9C9B25D14718
SHA-512:	BBF666B08DE91E3EDAC771BB1BA3FE6229A3B91ED78E0D28DBFA779DD42A6EF8592E1E2CC958B99CD0C12BFD43FFF82189AF4D1D36A8E97365B097D6C0D936A9
Malicious:	false
Reputation:	low
Preview:	{"timestamp":"2025-01-14T00:13:20.404+00:00","path":"/admax/bid/partners/YPBJS","status":404,"error":"Not Found","requestId":"14599f14-65487523"}

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34588, version 0.0
Category:	downloaded
Size (bytes):	34588
Entropy (8bit):	7.991674784180286
Encrypted:	true
SSDEEP:	768:AWUwlnmujFvuPmo/290wc01MeCYDdJa7NPsra4l3:8G7jNGJeQhoa7qa4l
MD5:	492A0A160B8DA9414134282EF8B62F78
SHA1:	25F704E7B3C6972FF84BA95D4E92E807AB15F38B
SHA-256:	318D39388D650F931CFD5283AB5DA11570BC0C6B1A85360BCBF03D3656D2EA8A
SHA-512:	CA28ED371E6846E108297FAF0C4C1A5DE7E3409F535D2B63365B27CB12400C7AEAE9EF0169BB318533D12D74CDD9102470F1C7FC8EEE58C2BA22056FDB2AD3E2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/bw/fonts/yahoo-sans-cr4-vf.woff2
Preview:	wOF2..............................................$...H..B.`?STATd'..../B...$.r0...6.$..l..... ..V. [..q.F.....!..}XDU.d.......U...~..?../.....?B...Gx.6.)...9..p'>.p'>..4..p.Wa........e.i..Y.s>d!..PdY.N.".,.s:..)..g_..o.^.37.....,.....3..L..Lol.S..[.2s..L.H#..<.P.)$.(.^.x..B....)....Z....\|..O...:... <}.1...z=.M.^..p....l.[2....e..f(.eKf.{...{.C"..)..]..D.I..#"...$".4..H....\|<x....D..A.{....s%I..)K.>di....H.4..b.;..Sg.Sq...V.x...z..K..A\|.^W.Y9.....L.]Z,:...'C8@.QI......YN.].v.Y`..K .....T@Hz.$K...`....eZ..6.....].s..P...E..nP@......h...z.fKm.-....7......f......Ex`k..gH7.{KA%&].!.,...Z7."i..B...:i.t...@......=.f.y.]....Hh$...Clc..l.I.b...8&....Lf.2[...z.....\|..I..d..&.1.(!O$.<..@.\|\QN...}k.-B ........`...$....."D.._..\QD..iW..q..K~.....%.`........O.(.F.Y..+......E.9!.."M.=..}....D..}.h.\.(v(.'..w..h....z.......V.[q.....Y....bp.G`.......p......C..MS..g.a.y.h*.o...ue..#...lL.....p.)..]../....f.DH....&..@......4fp..7.H. `...-..l..#..S..sQ..j

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9424), with no line terminators
Category:	downloaded
Size (bytes):	9424
Entropy (8bit):	5.2828780025163615
Encrypted:	false
SSDEEP:	192:VgHvGB2mC2xiP2TwQG065Wnfe1E91I7NsKOcVqAAYyoO8bOGiN6vDh:GHOB2mC2xjz65GfvHFkyL8KGiG
MD5:	2907CF83061833352832F902CF60546E
SHA1:	8ECD21384A9BE55CC8E392B2DE091A5F2B12C5AC
SHA-256:	88756001AFE2277005B143FD74DC8C9F7F8106A5FAE630083E52AA0D93BCD59C
SHA-512:	692614C0D4A64D0517B4D74BBF2A2419152BFEA052EB0FE037311DD25BBC44CA15A7544793345DAAF4F3AC5F311CBEE4116A06D77987A7733BA883ED91AA61C5
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus.js
Preview:	(()=>{"use strict";var n=function(n){if(n)return n;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(n){return""}};const t=function(n,t){for(var e="".concat(n,"="),o=(t\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){var i=(o[a]\|\|"").trim();if(0===i.indexOf(e))return i.substring(e.length,i.length)}return""},e=function(t,e,o,a){(a\|\|window.document).cookie="".concat(t,"=").concat(e,";Max-Age=").concat(31536e3,";Domain=").concat(n(o),";path=/;Secure;SameSite=None")},o=function(t,e,o){(o\|\|window.document).cookie="".concat(t,"=;Max-Age=0;Domain=").concat(n(e),";path=/;Secure;SameSite=None")},a=function(n,t,e){try{var o=(e\|\|window.localStorage).getItem(n);return t?JSON.parse(o):o}catch(n){return null}},i=function(n,t,e,o){try{e?(o\|\|window.localStorage).setItem(n,JSON.stringify(t)):(o\|\|window.localStorage).setItem(n,t)}catch(n){}},c=function(n,t){try{(t\|\|window.localStorage).removeItem(n)}catch(n){}};var r="opus",d=function(n){for(var t=0,e=0;e<n.length;e++

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	4.645814752594444
Encrypted:	false
SSDEEP:	3:YMsw/EP2miBALwxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/EXi2cPMMg/ptQoXn/Fx2t6mHqt
MD5:	B77371637A514404A5FFE5FBA7937B40
SHA1:	FBE2F409326C5E287F55943B99B7A2BBE8149836
SHA-256:	689DA16C35830123D32699087A8406632A1E8F186FA8E35309CDC3737F669FE6
SHA-512:	1C3615604B4010EDB79061F1BB715648DB9ADEF2BD126379B443F7CFA624DD3D825D904DE0BD4083CC178F117EB1F96EA6DE0BC2AEB833C4AA47FD9AD66B9F49
Malicious:	false
Reputation:	low
URL:	https://guce.yahoo.com/v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid
Preview:	{"identifier":"3prbo45jobb0i","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.110902344426086
Encrypted:	false
SSDEEP:	3:YEOBH5uaQpLI2gJCTkHY:YEOBZDQpLg0T3
MD5:	7E68EB6D17F760CA71C5D3ECA666DCBF
SHA1:	E3C061D61F2023F6BA04EE2B07C69D2967D40D04
SHA-256:	087C429060F935B67BD6CAC486C46F8D4BE8DE2CE4CC8AAA11A84E83CB593957
SHA-512:	E5D0DBEAC3C52E97D93D1BA7C1FB7A035A9EA825E9652131B09F90CBA8A1E20C57F5D04E887F6EB2563A4FDF152D533B260D89922382564FD99898C18D7B08EF
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A"}

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	103748
Entropy (8bit):	5.396737885661236
Encrypted:	false
SSDEEP:	1536:mOv/uiGAIy1HTIVU8bB58RUeScgN2xDnQZ3vwNcWw+MbRxbgp:EiGk1ES8bB+vn23vwNcyMbRxb0
MD5:	EB77E519F9ED8E141AB475AF8F0A3614
SHA1:	8B6077C7584DF0A749D39E43FB0F9D5EF5D6AA6D
SHA-256:	B066DDC9036DE11E45EC3D54332679838F5EB6CD38BACA3FA01262B54473081F
SHA-512:	F7229AAFC143A96D31822B4D456B02E6FAE76BE7FDFF71E0FD5CB35E291062D8AECE3BA2ED103AFD9545A5A84E3774C459B5D14504DC034ACAE7C5ED694B12E0
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{assertive:{},benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({reason:e,status:"rejected"})))))));const t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),n=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),i=new RegExp(`^https?://(${t.concat(n).join("\|")})(:\\d+)?$`);const s="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",u="block",g="index",p=!0,f="DOMContentLoaded",m="testid",b="ncid",y="fr",E="pg_name",_="type",I="auto",v="VERSION",A={ATS_DIRECT:"_lr_atsDirect"};var C,S;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct Sold"}(C\|\|(C={})),function(e)

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=ttd&uid=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.110902344426086
Encrypted:	false
SSDEEP:	3:YEOBH5uaQpLI2gJCTkHY:YEOBZDQpLg0T3
MD5:	7E68EB6D17F760CA71C5D3ECA666DCBF
SHA1:	E3C061D61F2023F6BA04EE2B07C69D2967D40D04
SHA-256:	087C429060F935B67BD6CAC486C46F8D4BE8DE2CE4CC8AAA11A84E83CB593957
SHA-512:	E5D0DBEAC3C52E97D93D1BA7C1FB7A035A9EA825E9652131B09F90CBA8A1E20C57F5D04E887F6EB2563A4FDF152D533B260D89922382564FD99898C18D7B08EF
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A"}

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10913), with no line terminators
Category:	downloaded
Size (bytes):	10913
Entropy (8bit):	5.254821090865018
Encrypted:	false
SSDEEP:	192:FGUAMQ23qSDZJQD3BLcevTbUQUuUSUh6Cle/pnttCLkqFj0:MU1QXnDxLtfhU8/EupOgqh0
MD5:	336B804960F2D2E05B7372CFCF7CA6F7
SHA1:	EDDC49C133EC21645B2AE1FB0D269856A1821449
SHA-256:	B4235ED7DE3D5310BF6EAF35A3F5672AD57453D2AADC627AE0EC66016450D5F8
SHA-512:	7EFF7E0255E665E4766961596F1CCC27FAF04D6D18435CD44AFD8A7F1811954D9C267B9CC19CCB737639FCE28ED40E5D61F7EC264BFDCF812A003D32B79416AB
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/cframe.js
Preview:	(()=>{function r(r){return void 0===r?{b:0}:null!==r&&void 0!==r.b?{b:r.b+1\|0}:r}function n(n){return null==n?void 0:r(n)}function e(r){if(null===r\|\|void 0===r.b)return r;var n=r.b;return 0===n?void 0:{b:n-1\|0}}function t(n,t){if(void 0!==n)return r(t(e(n)))}function i(r,n){if(void 0!==r)return n(e(r))}function a(r,n){return void 0!==r?e(r):n}function o(r,n){return void 0!==r?r:n}function u(r){return void 0!==r}var v=new Map;function d(r){var n,e=v.get(r);if(void 0!==e){var t=e+1\|0;v.set(r,t),n=t}else v.set(r,1),n=1;return r+"/"+n}function c(r,n){return r.catch((r=>{return n((r=>null!=r&&"string"==typeof r.a)(e=r)?e:{a:"0j",o:e});var e}))}function f(r){return Promise.resolve(r)}function s(r,n){return r.then((r=>Promise.resolve(n(r))))}function m(r){return r.then((r=>Promise.resolve()))}var l=window,p=document;function w(r){return c(m(r),(r=>(((r,n)=>{var e=l.parent;null==e\|\|e.postMessage({u:"/a/e",e:n+""},"*")})(0,r),Promise.resolve())))}function g(n){if(""!==n)try{return r(new URL(n))

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
Preview:	{"bakers":[]}

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuApY3QVBgSK7R2ZPmdSZmxHIPHS1JTWzHqnJq_hZvIn2JRb29xep_pesDlTQP3K2AQjV3brx2i8p8iE5AM0BcGcnS79TyrRLod75J7s3vFDH6nKT1i8hPJQylMXoYSdhEixSoG0WK82Y_neIPHsL2p0Spps8-XHEiP1SWvDxiH5ul2klKlcpIHIHfEmaX02eWsRw&sig=Cg0ArKJSzDdyf7gNDyQbEAE&id=lidartos&mcvt=0&p=0,0,0,0&tm=3349.3000000000175&tu=3349.3000000000175&mtos=0,0,0,0,0&tos=0,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=0&if=1&vu=1&app=0&itpl=19&adk=1818218935&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=3&r=b&co=3274640300&rst=1736813601726&rpt=4705&ec=1&met=ce&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2074), with no line terminators
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.260719431857589
Encrypted:	false
SSDEEP:	48:CEUG4rNVxugJTY7rRKLNqpH7q7HwDOq7br2yOuQ6qh:CdrNV0gVWvbq7eOq72yOdh
MD5:	93D5BB91C9A48C4EDBC164A65354B00C
SHA1:	EA8D8A5F20B4061A7581135B465F7D81F431390C
SHA-256:	E17075CF2F747253CB3C737891BE0F417B8F4330DDAB9D53013BDD4EBCA568EE
SHA-512:	3F0F5D520F75A443304ED277F73F050698029942A1A01B9B65A8F0D38846B7DFA04D126685A75436BC3534D94DD0C9B1BCCC6DB2C628C58FF74453FA92FD9D22
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/ifs.js
Preview:	!function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)},f=function e(t,i,o,a){if(c){r[++d]=a;var u={namespace:n,id:d,action:t,key:i,value:o};return c&&c.contentWindow&&c.contentWindow.postMessage(JSON.stringify(u),"*"),u}},l=function n(e){for(var t="".concat(e,"="),i=document.cookie.split(";"),o=0;o<i.length;o++){for(var r=i[o];" "===r.charAt(0);)r=r.substring(1);if(0===r.indexOf(t))return r.substring(t.length,r.length)}return""},g=function n(e,t,i){return f("append",e,t,i)},p=function n(t){if(t&&"string"==typeof t&&-1!==t.indexOf(e)){var i=new Image;return i.src="".concat(a,"//trc.taboola.com/sg/taboola-ifs/1/um/?uils=").concat(encodeURIComponent(t)),i}},m=function n(e){if(e&&e.success){if(e.wasAppended&&e.value)return p(e.value)}else window.__trcDebug&&window.__trcDebug("ifsDebug=".conc

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1391
Entropy (8bit):	7.763598788410441
Encrypted:	false
SSDEEP:	24:tE18rshgbc3xtnee6jtTln6li6OvjcARaInltdmmGG0I5kCr/G7:rrsCbc3xtextl6pObcARaIXmmGhIG7
MD5:	DD31F56B9E4DFF40EB87447C3DC55B84
SHA1:	1908B34AF2D15440D33DFC81FCB93AA9B271DC58
SHA-256:	4F47EF8FF3DAD2A78360AB207CF35FF2905622511C0426109F6E225052CF5637
SHA-512:	057D2DCD66C48A2BB43D7B62BC38E4DACD3D7F3FDAA103AF178FDBC737BE91A81A369158BF02AB59C46F507F538536D01D5FC179D681375F9B77EE814E544407
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png
Preview:	.PNG........IHDR.......H............3PLTEGpL..................................................a....tRNS......=..T.v.h.#......IDATx^... ..9J...?m.....eL.ig..w.8.O.I.U.....(.S....R..I8N...\...=...yw`..I...(p...P...k.....<d...)oP{..;p..N...C...X).....,.v.N..>..9..0.,....>.....w1K........0......}.B.....&.J.......t..Q.....mn...,....=. ..<.)4.1..(.(H...O.....[.u^~c;.L...8."....k.q...6d....X.....wFs.,y!..b....j.........,.'F..C....CP2.'.$.M..A.].>.`m9.`...H<..Va.%SD6.0......a...W..p".q.P..a..yik...f..e..fe.<>.s..S... .%...N....<zaX...4..A..\lV.K......<'.G.D.duq..i........{.......M..f.3......?...4..d!..k.........C$...b.Y.RwC.Q.a....'..p.k..@x..{`o.r..7..K.-..D.k.J.....R"..0E).p../..0X...N....J.2.....n..j~v..HuA.sK._..feg....Ib...0....\...U....0k.J.....'....s.+5.k1...!.x^wl..&....P.6...\~....E...^..'wm...#U..p{.l.~.....i.......t..?..q..<%...d....WN\."[........5...Y....[.QH..$.k>....."........t#..W........&..</.y...+ .w.X...!...}..G.......q...E$..:..v..

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	5.0439833037615625
Encrypted:	false
SSDEEP:	3:YEOBHt2zfG9cZHEpw7n:YEOB+fskkpA
MD5:	A9E5C82FB0C64A761F9831B4C62B9BB1
SHA1:	316D227EBEBB7427F0037F92C36F2E9C407DEC4A
SHA-256:	DAF47C85D64B949851936EB1CB4429842713BF98925730196DD895E47B040703
SHA-512:	289D3419D8D9619E3CC389925D9DE2211E79E2B5CEF796363E41641FB616068ADF84B389EA618D16F40EEC6887A668E748AFDF8953930BDA386CC40F85ED18B7
Malicious:	false
Reputation:	low
Preview:	{"axid": "eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B"}

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	24
Entropy (8bit):	3.605388542207534
Encrypted:	false
SSDEEP:	3:eOtLFaAD:eO58AD
MD5:	4D95F7B32CDD5FAC247863312996B041
SHA1:	86850A2277BD32DF8A6994029EE460D4250DEC42
SHA-256:	F1677395258565A3F17E98D4B43E8AE047F2E1A103C4D9B644D807EC926706FE
SHA-512:	57A0D57AD8C39F20E03E70C585A9A1790419A934F08C6FD2C71236F0E8ED2FA2E520C28C164B07815C095A38EE4DBE69FF0AD94B570E44F77C5CB64EB4274E71
Malicious:	false
Reputation:	low
Preview:	unknown partner: throtle

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	695
Entropy (8bit):	4.39358257887536
Encrypted:	false
SSDEEP:	12:trZvnltuC1cg77irputbU4DsIA64xJ+mzXR5GHZlZ8qSu8tcqjda5SFG/bNVCq7I:tVvnju+7O1ue4D7A6/MDOV8sIUbvI
MD5:	EE1A7DFCCF55C37801E237962FFA41D3
SHA1:	B9C161AC871BF8FA206FCBDA7C5241D8DF6C55E5
SHA-256:	2FEEB06472DEF2D1198B694F4B2145A9733D2DA05D23A21C981461E2BE2583AD
SHA-512:	10B1492D8FD74CFC2BACF50DDD3EE8F1CF33F0BD98A41F1765314C1AACB490B89D0CE42A335A4AE0BFDEC9CB2CC56F0EE10CC7B6E2DC6218482248BCC6B23479
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M8 11C9.10457 11 10 9.65685 10 8C10 6.34315 9.10457 5 8 5C6.89543 5 6 6.34315 6 8C6 9.65685 6.89543 11 8 11Z" fill="#464E56"/>.<path d="M16 8C16 11.3137 12.4183 14 8 14C3.58172 14 0 11.3137 0 8C0 4.68629 3.58172 2 8 2C12.4183 2 16 4.68629 16 8ZM14.3 8C14.3 6.9982 13.7625 5.96163 12.6369 5.11736C11.5106 4.2727 9.87688 3.7 8 3.7C6.12312 3.7 4.48936 4.2727 3.36315 5.11736C2.23745 5.96163 1.7 6.9982 1.7 8C1.7 9.0018 2.23745 10.0384 3.36315 10.8826C4.48936 11.7273 6.12312 12.3 8 12.3C9.87688 12.3 11.5106 11.7273 12.6369 10.8826C13.7625 10.0384 14.3 9.0018 14.3 8Z" fill="#464E56"/>.</svg>.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjI4NTY1OTU0NzUxMjQ4OTcxMTcyMw%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/sync?vxii_pid=5038&vxii_pdid=y-MHrOuIRE2oTaqyLCz596Clm8WBgoZrbV_MOnYA--~A
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.763598788410441
Encrypted:	false
SSDEEP:	24:tE18rshgbc3xtnee6jtTln6li6OvjcARaInltdmmGG0I5kCr/G7:rrsCbc3xtextl6pObcARaIXmmGhIG7
MD5:	DD31F56B9E4DFF40EB87447C3DC55B84
SHA1:	1908B34AF2D15440D33DFC81FCB93AA9B271DC58
SHA-256:	4F47EF8FF3DAD2A78360AB207CF35FF2905622511C0426109F6E225052CF5637
SHA-512:	057D2DCD66C48A2BB43D7B62BC38E4DACD3D7F3FDAA103AF178FDBC737BE91A81A369158BF02AB59C46F507F538536D01D5FC179D681375F9B77EE814E544407
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H............3PLTEGpL..................................................a....tRNS......=..T.v.h.#......IDATx^... ..9J...?m.....eL.ig..w.8.O.I.U.....(.S....R..I8N...\...=...yw`..I...(p...P...k.....<d...)oP{..;p..N...C...X).....,.v.N..>..9..0.,....>.....w1K........0......}.B.....&.J.......t..Q.....mn...,....=. ..<.)4.1..(.(H...O.....[.u^~c;.L...8."....k.q...6d....X.....wFs.,y!..b....j.........,.'F..C....CP2.'.$.M..A.].>.`m9.`...H<..Va.%SD6.0......a...W..p".q.P..a..yik...f..e..fe.<>.s..S... .%...N....<zaX...4..A..\lV.K......<'.G.D.duq..i........{.......M..f.3......?...4..d!..k.........C$...b.Y.RwC.Q.a....'..p.k..@x..{`o.r..7..K.-..D.k.J.....R"..0E).p../..0X...N....J.2.....n..j~v..HuA.sK._..feg....Ib...0....\...U....0k.J.....'....s.+5.k1...!.x^wl..&....P.6...\~....E...^..'wm...#U..p{.l.~.....i.......t..?..q..<%...d....WN\."[........5...Y....[.QH..$.k>....."........t#..W........&..</.y...+ .w.X...!...}..G.......q...E$..:..v..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23608)
Category:	downloaded
Size (bytes):	46298
Entropy (8bit):	5.451582230382597
Encrypted:	false
SSDEEP:	768:w5p9hACv5OLZlT3VrbVnQ05LWuaN0yaMzA2VAT6aR8K6sGOO6qjaa6KSxVoatwI1:w5p9hACv54ZHtn8qpFGOpVoFIXEg97Dd
MD5:	86DF9B5E983BE7AE7D11DBA634E66DD0
SHA1:	3A867BA5C4BFE2F512CA636E38455A66CD14D510
SHA-256:	9C4D5614095130E55D4B4E877D4D1B65FD25C47CE2256F03395355106F17EE78
SHA-512:	BD7EFC700D42ED0E6651590EAC661A761395E3A87AD0613B1B811DB06D82C59582530386ECC3D7414EDEB9034A0E2BC8C5A7DA534EEF4D58CFC64D320CDE64E2
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/6783bca3840111e5424ee986/js/webflow.967b2dfec747eeb055e813a1fe43b230.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var pt=(e,b)=>()=>(b\|\|e((b={exports:{}}).exports,b),b.exports);var Ut=pt(()=>{"use strict";window.tram=function(e){function b(t,n){var i=new ut.Bare;return i.init(t,n)}function f(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function M(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function m(){}function W(t,n){j("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function C(t,n,i){j("Units do not match ["+t+"]: "+n+", "+i)}function R(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return Wt.test(t)\|\|!qt.test(t)?r=parseInt(t,10):qt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function j(t){S.debug&&window&&window.console.warn(t)}function J(t){for(var

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	140
Entropy (8bit):	4.645814752594444
Encrypted:	false
SSDEEP:	3:YMsw/EP2miBALwxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/EXi2cPMMg/ptQoXn/Fx2t6mHqt
MD5:	B77371637A514404A5FFE5FBA7937B40
SHA1:	FBE2F409326C5E287F55943B99B7A2BBE8149836
SHA-256:	689DA16C35830123D32699087A8406632A1E8F186FA8E35309CDC3737F669FE6
SHA-512:	1C3615604B4010EDB79061F1BB715648DB9ADEF2BD126379B443F7CFA624DD3D825D904DE0BD4083CC178F117EB1F96EA6DE0BC2AEB833C4AA47FD9AD66B9F49
Malicious:	false
Reputation:	low
Preview:	{"identifier":"3prbo45jobb0i","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-14T01:13:20.287295+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.4	53448	52.211.89.170	443	TCP
2025-01-14T01:13:39.295551+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.4	53666	96.46.186.61	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 01:12:46.345761061 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:46.345794916 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:46.345881939 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:46.346149921 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:46.346163034 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:47.001811028 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:47.002243996 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:47.002269030 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:47.003711939 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:47.003793955 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:47.004933119 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:47.005027056 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:47.054563046 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:47.054574966 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:47.101387978 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:48.194268942 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.194307089 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.194364071 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.194739103 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.194780111 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.194824934 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.195203066 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.195218086 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.195409060 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.195430994 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.654324055 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.654611111 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.654623985 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.655502081 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.655558109 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.659066916 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.659265995 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.659286022 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.660413980 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.660475969 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.660578012 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.660584927 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.660720110 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.660789967 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.661056042 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.661138058 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.712085962 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.712094069 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.712100983 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.759743929 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.821804047 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.821851969 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.821872950 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.821887016 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.821894884 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.821959019 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.821993113 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.821993113 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.825680971 CET	49740	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:12:48.825690031 CET	443	49740	172.64.151.8	192.168.2.4
Jan 14, 2025 01:12:48.849693060 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:48.849731922 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:48.849781036 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:48.849838972 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:48.849881887 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:48.850038052 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:48.850054026 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:48.850203037 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:48.850203037 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:48.850229025 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:48.865374088 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:48.865390062 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:48.865503073 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:48.865727901 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:48.865746975 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.323060989 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.323396921 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.323419094 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.324367046 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.324774981 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.325706005 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.325706959 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.325727940 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.326554060 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.329930067 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.330137968 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.330157995 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.331029892 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.331136942 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.331549883 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.331549883 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.331562996 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.331604958 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.368824005 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.368843079 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.386837006 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.386868954 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.418350935 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.431008101 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.465445042 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465480089 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465519905 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465543985 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465615988 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.465620041 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465641975 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465651989 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.465677977 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.465740919 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465765953 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465794086 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.465807915 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.465873003 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.470062017 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.470771074 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.470778942 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.486557961 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.486589909 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.486614943 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.486637115 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.486665964 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.486691952 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.486716986 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.486738920 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.486753941 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.486834049 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.486841917 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.487544060 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.487670898 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.487732887 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.491061926 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.491067886 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.525033951 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.540044069 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.540056944 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.552670002 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.553600073 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.553630114 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.553826094 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.553855896 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.553894997 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.553916931 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.553916931 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.553946018 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.553946018 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.554666042 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.554666042 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.554676056 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.554723024 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.554765940 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.554796934 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.554852009 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.554869890 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.555479050 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.555510044 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.555551052 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.555567980 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.555619001 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.555727959 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.556123972 CET	49744	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.556152105 CET	443	49744	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.578948975 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.578985929 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579011917 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579040051 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579330921 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579359055 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.579370975 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579524040 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579545021 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.579550982 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579701900 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.579852104 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579880953 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579895973 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.579900026 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579926014 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.579942942 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.579946041 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.580728054 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.580754995 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.580756903 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.580765963 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.580805063 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.580821991 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.580826044 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.580841064 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.581577063 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.581605911 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.581633091 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.581634045 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.581640959 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.581701040 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.581720114 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.581726074 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.581773996 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.581821918 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.581929922 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.583751917 CET	49743	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.583765984 CET	443	49743	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.585865021 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.589973927 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.589994907 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.591015100 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.591052055 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.591377974 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.591377974 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.591401100 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.591449022 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.593249083 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.593249083 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.593249083 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.593265057 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.593487978 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.610305071 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.610348940 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.610694885 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.610694885 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:49.610729933 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:49.638833046 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.638851881 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.683674097 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.857175112 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.857211113 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.857222080 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.857254028 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.857271910 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.857281923 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.857304096 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.857316017 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.857364893 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.857364893 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.937304020 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.937319040 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.937359095 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.937403917 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.937412977 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.937472105 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.943535089 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.943559885 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.943628073 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.943634033 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:49.943660021 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:49.943686962 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.022969961 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.023005962 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.023063898 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.023071051 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.023133039 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.023478031 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.023497105 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.023541927 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.023546934 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.023582935 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.023601055 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.024127960 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.024202108 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.024205923 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.024254084 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.053136110 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.068439007 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.071075916 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.071088076 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.071363926 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.071372986 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.072535992 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.072673082 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.072729111 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.075747967 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.075845957 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.080471039 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.080671072 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.121464968 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.121474028 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.127480984 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.168179989 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.216200113 CET	49745	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.216213942 CET	443	49745	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.267062902 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.267189980 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.287705898 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.287733078 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.287784100 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.287964106 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.287981033 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.290515900 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.290550947 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.290599108 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.291035891 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.291064024 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.291114092 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.291253090 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.291265011 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.291500092 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.291508913 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.311337948 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.311358929 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.318382025 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.318432093 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.318492889 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.318728924 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:50.318743944 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:50.377376080 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.377437115 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.377474070 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.377499104 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.377509117 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.377564907 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.377571106 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.377582073 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.377636909 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.378962040 CET	49746	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.378968954 CET	443	49746	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382179022 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382235050 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382277966 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382318974 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382323980 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.382339001 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382381916 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382383108 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.382426977 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382461071 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382464886 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.382479906 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.382536888 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.386944056 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.386976957 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.387306929 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.387325048 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.387465954 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.396821022 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.396857023 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.396923065 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.397258997 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.397273064 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.468745947 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.468806028 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.468838930 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.468856096 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.468883038 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.468916893 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.468961954 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.468970060 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.469146013 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.469696045 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.469753027 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.469796896 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.469824076 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.469834089 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.469890118 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.469897032 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.470566988 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.470622063 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.470628977 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.470645905 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.470686913 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.470722914 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.470726967 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.470736980 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.470912933 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.471554041 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.471600056 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.471604109 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.471616983 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.471661091 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.471661091 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.471677065 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.471721888 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.472460032 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.472562075 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.472604990 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.472867012 CET	49747	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.472892046 CET	443	49747	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.753077984 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.753343105 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.753365993 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.755040884 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.755115986 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.756267071 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.756346941 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.756479025 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.756484985 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.805589914 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.861095905 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.861339092 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.861371994 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.861660004 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.861970901 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.862036943 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:50.862092972 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:50.891619921 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.891691923 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.891923904 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.892163992 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.892178059 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.892189026 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.892245054 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.894121885 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.894159079 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.894439936 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.894654036 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:50.894668102 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:50.903373003 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:51.024507999 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:51.024564028 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:51.024611950 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:51.024662018 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:51.024681091 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:51.024722099 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:51.024729013 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:51.024766922 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:51.024905920 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:51.026779890 CET	49753	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:51.026793957 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.026828051 CET	443	49753	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:51.027348042 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.027358055 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.030522108 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.030606985 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.031142950 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.031224012 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.031414986 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.031425953 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.032852888 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.033138990 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.033152103 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.034126997 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.034214973 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.034653902 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.034699917 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.034763098 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.034769058 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.041800022 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.041991949 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.042006016 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.043447971 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.043509007 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.043901920 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.043979883 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.044358969 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.044367075 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.071074963 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.086843014 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.087089062 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.308469057 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.308634996 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.308778048 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.308970928 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.315131903 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.315143108 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.315175056 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.315195084 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.315208912 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.315222979 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.315236092 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.315248966 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.315279961 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.321199894 CET	49749	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.321224928 CET	443	49749	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.322161913 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.322192907 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.322202921 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.322223902 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.322257042 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.322276115 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.322293997 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.322314978 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.322335005 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.324065924 CET	49750	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.324076891 CET	443	49750	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.331235886 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.331264973 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.331329107 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.331935883 CET	49756	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.332031965 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.332122087 CET	49756	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.332840919 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.332854033 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.333173990 CET	49756	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.333209991 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.375302076 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.375668049 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.375684023 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.376157999 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.376487017 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.376563072 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.376625061 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.404701948 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.404735088 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.404838085 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.404854059 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.405481100 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.411469936 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.411493063 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.411556005 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.411565065 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.411871910 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.423324108 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.491790056 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.491831064 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.491924047 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.491945028 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.491962910 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.491983891 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.492738962 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.492763042 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.492808104 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.492815971 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.492846012 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.494199991 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.494292974 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.494299889 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.494772911 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.494781017 CET	443	49752	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:51.494801998 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.494853020 CET	49752	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:51.508431911 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.508490086 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.508558035 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.508570910 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.508594036 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.508627892 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.508712053 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.508750916 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.508788109 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.508790016 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.508805990 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.508826971 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.509378910 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.509897947 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.509906054 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.556564093 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.556580067 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.599967957 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.600012064 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.600127935 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.600142002 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.600184917 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.600434065 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.601752043 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.601875067 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.601880074 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.601911068 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.601968050 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602005005 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.602006912 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602020979 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602041006 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.602083921 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602121115 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602158070 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.602160931 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602171898 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602194071 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.602233887 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602273941 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.602277994 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602288961 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602324963 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.602332115 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602394104 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602428913 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602462053 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.602467060 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.602504969 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.603210926 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.603444099 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.603490114 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.603538036 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.603547096 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.603564024 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.603580952 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.603612900 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.605143070 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.605155945 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.631439924 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.631475925 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.631560087 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.631815910 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:51.631824970 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:51.635653019 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:51.635679960 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:51.635803938 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:51.635976076 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:51.635987997 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.050183058 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.050689936 CET	49756	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.050720930 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.051028013 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.051336050 CET	49756	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.051386118 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.051466942 CET	49756	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.069091082 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.069453001 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.069484949 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.069766045 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.071187019 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.071235895 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.071485043 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.093400002 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.093641996 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.093673944 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.095300913 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.095369101 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.095705986 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.095788002 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.095825911 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.099327087 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.105411053 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.105690956 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.105703115 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.107137918 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.107201099 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.107515097 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.107584000 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.107620955 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.119326115 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.143326998 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.149132967 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.149144888 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.149152994 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.149161100 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.195880890 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.196070910 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.238248110 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.238462925 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.238533974 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.238558054 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.238589048 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.238632917 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.238671064 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.239126921 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.239172935 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.239187956 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.239270926 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.239320040 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.239329100 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.240885973 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.241080999 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.241118908 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.241125107 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.241133928 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.241172075 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.241178036 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.242223978 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.242274046 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.242280960 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.242286921 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.242326975 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.242332935 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.242969036 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.243029118 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.243036985 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.245901108 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.245934963 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.245965004 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.245970964 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.246018887 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.283561945 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.283596992 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.283690929 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.283921003 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.283937931 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.290672064 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.322629929 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.322700024 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.322758913 CET	49756	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.325481892 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.325649023 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.325695992 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.325706005 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.325797081 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.325839996 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.325848103 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.325942039 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.325979948 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.325988054 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.326069117 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.326112986 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.326121092 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.326288939 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.326343060 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.331854105 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.331935883 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.331983089 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.331984997 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.331998110 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.332034111 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.332122087 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.332195044 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.332235098 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.332237005 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.332247019 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.332289934 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.332303047 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333017111 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333058119 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333070040 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.333076954 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333112955 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333116055 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.333123922 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333172083 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.333178043 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333230972 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333273888 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.333278894 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333959103 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.333998919 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.334005117 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.334036112 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.334080935 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.334086895 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.336452961 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.336477041 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.340734005 CET	49756	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.340750933 CET	443	49756	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.343154907 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.349224091 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.349266052 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.349296093 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.349304914 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.349348068 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.350929976 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.350982904 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.351058006 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.351933956 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.351952076 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.352157116 CET	49755	443	192.168.2.4	18.244.20.40
Jan 14, 2025 01:12:52.352174044 CET	443	49755	18.244.20.40	192.168.2.4
Jan 14, 2025 01:12:52.374063969 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.374150991 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.374159098 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.374316931 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.374368906 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.374635935 CET	49757	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:52.374649048 CET	443	49757	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:52.741239071 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.790443897 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.841763973 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.848906994 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.848938942 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.849040985 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.849062920 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.849350929 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.849672079 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.849927902 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.849993944 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.850649118 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.850740910 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.853399038 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.853528023 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.895374060 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.899337053 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959135056 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959178925 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959201097 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959223032 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.959233046 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959263086 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959285021 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.959527016 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959564924 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.959573030 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959625959 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959650040 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959656954 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.959665060 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.959697008 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:52.963893890 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.984472990 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.984544992 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:52.984607935 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.007153034 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.007172108 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.012964010 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.012988091 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.017808914 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.017858028 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.017949104 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.018150091 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.018162966 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.046278954 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.046320915 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.046334982 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.046344995 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.046356916 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.046389103 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.046802044 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.046829939 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.046837091 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.046848059 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.046885967 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.047254086 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.047286987 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.047327042 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.047334909 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.047983885 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.048027039 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.048032999 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.048074961 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.048111916 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.048119068 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.048163891 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.048202038 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.048208952 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.048935890 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.048969030 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.048971891 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.048983097 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.049026966 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.049034119 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.049712896 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.049746990 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.049757957 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.049766064 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.049815893 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.051067114 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.101488113 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.133805990 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.133894920 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.133949041 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.133968115 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134027958 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134083986 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134084940 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.134108067 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134129047 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134151936 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.134167910 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134198904 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.134434938 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134481907 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.134500027 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134562016 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134587049 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134588003 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.134660006 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.134675980 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134730101 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.134753942 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134808064 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.134852886 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.134911060 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.135205984 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.135265112 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.135381937 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.135436058 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.135479927 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.135545969 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.135610104 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.135658979 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.135663986 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.135694027 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.135725021 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.136461020 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.136511087 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.136512041 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.136527061 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.136579037 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.136625051 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.136673927 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.221506119 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.221609116 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.221784115 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.221784115 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.221966028 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.221992016 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.249255896 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.249293089 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.249366045 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.249568939 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.249582052 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.287785053 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.287834883 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.287928104 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.288151026 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.288167000 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.390253067 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.390271902 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.390362024 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.391004086 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.391017914 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.476483107 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.476923943 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.476942062 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.477381945 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.477637053 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.477696896 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.477786064 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.519339085 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.623419046 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.623594046 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.623677015 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.624655008 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.624670982 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.709614992 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.710098028 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.710123062 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.710581064 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.710900068 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.710978985 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.711066008 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.755350113 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.757363081 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.757631063 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.757648945 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.757930040 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.760060072 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.760124922 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.760200024 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.807339907 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.859082937 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.860394001 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.860500097 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.860547066 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.860563040 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.860672951 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.860707998 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.860713959 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.860816956 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.860865116 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.860871077 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.860991001 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.861032009 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.861037016 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.861159086 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.861205101 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.861208916 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.861361027 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.861407995 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.861413002 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.861495018 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.861541986 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.885289907 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.885309935 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.886421919 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.891105890 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.891139030 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.891189098 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.891211987 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.891222000 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.891252041 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.891258001 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.891266108 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.891297102 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.891304970 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.891758919 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.891796112 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.891810894 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.896174908 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.896210909 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.896223068 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.896235943 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.896270037 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.896275997 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.900640965 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.900827885 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.904539108 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.904573917 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:53.904594898 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:53.923584938 CET	49765	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.923597097 CET	443	49765	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.945384026 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.979465008 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.979577065 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.979619026 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.979624987 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.979638100 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.979675055 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.979681969 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.980178118 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.980212927 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.980221033 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.980227947 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.980259895 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.980272055 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.980956078 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.980993032 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.981005907 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.981014967 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.981049061 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.981054068 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.981061935 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.981107950 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.981786966 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.981858969 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.981897116 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.981899977 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.981909037 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.981950998 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.981956005 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.982696056 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.982727051 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.982753992 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.982762098 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:53.982804060 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:53.991240978 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.991271973 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:53.991347075 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.991508007 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:53.991523027 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.024038076 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068139076 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068170071 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068193913 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068213940 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.068223953 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068234921 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068259954 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.068276882 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.068286896 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068470955 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068515062 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.068521976 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.068563938 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.068967104 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.069035053 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.069041014 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.069060087 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.069080114 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.069086075 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.069109917 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.069749117 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.069798946 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.069804907 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.069825888 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.069843054 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.069852114 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.069868088 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.070635080 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.070693016 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.070698977 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.070724964 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.070735931 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.070744038 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.070771933 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.070785999 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.070849895 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.070858002 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.070894003 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.071532011 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.071589947 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.071623087 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.071670055 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.071732998 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.071779966 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.072599888 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.072654963 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.078471899 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.078600883 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.078651905 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.078660965 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.078754902 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.078800917 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.078807116 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.078928947 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.078969955 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.078975916 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.079118967 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.079164982 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.079170942 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.079286098 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.079333067 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.079339027 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.113334894 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.113436937 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.132886887 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.132894993 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.156603098 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.156667948 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.156678915 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.156723022 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.156729937 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.156742096 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.156764030 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.156796932 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.156965017 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.156980038 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.166897058 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.166977882 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.166986942 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.167084932 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.167133093 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.167140007 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.167246103 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.167292118 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.167299032 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.167438984 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.167484999 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.167491913 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.167824984 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.167879105 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.167887926 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.168370008 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.168430090 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.168437004 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.168530941 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.168575048 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.168581963 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.168936968 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.168984890 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.168991089 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.169097900 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.169158936 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.169164896 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.169864893 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.169923067 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.169929981 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.170039892 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.170092106 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.170099020 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.208544016 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.208663940 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.208672047 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.208704948 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.208751917 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.255501032 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.255692005 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.255759001 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.255774021 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.255805016 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.255858898 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.255904913 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.256088972 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.256139040 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.256153107 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.256192923 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.256200075 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.256237030 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.256273031 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.256899118 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.256963015 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.256970882 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.256989002 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.257045031 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.257052898 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.257096052 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.257620096 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.257682085 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.257745028 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.257805109 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.257847071 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.257916927 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.258694887 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.258758068 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.258805990 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.258856058 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.258893013 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.258945942 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.259531021 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.259602070 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.259670973 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.259723902 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.297076941 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.297211885 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.344448090 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.344583988 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.344588041 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.344624043 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.344702959 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.344737053 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.344788074 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.344801903 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.344846010 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.345398903 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.345458984 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.345511913 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.345566034 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.345608950 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.345668077 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.346257925 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.346316099 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.346385956 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.346431971 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.346477032 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.346563101 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.347151041 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.347214937 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.347263098 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.347318888 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.347326040 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.347363949 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.347459078 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.347503901 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.347650051 CET	49768	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.347666979 CET	443	49768	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.414282084 CET	49770	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.414319992 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.414397955 CET	49770	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.414689064 CET	49770	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.414701939 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.471925974 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.472254038 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.472315073 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.473414898 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.473778009 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.473913908 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.473953962 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.523761988 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.617556095 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.617665052 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.617734909 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.617748976 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.617799997 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.617835999 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.617849112 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.618000031 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.618047953 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.618056059 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.618156910 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.618200064 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.618207932 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.622354984 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.622431993 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.622437000 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.622464895 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.622507095 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.622555017 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.622689009 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.622762918 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.622807026 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.622822046 CET	443	49769	104.18.161.117	192.168.2.4
Jan 14, 2025 01:12:54.622836113 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.622862101 CET	49769	443	192.168.2.4	104.18.161.117
Jan 14, 2025 01:12:54.647392988 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.647500992 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.647583008 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.647778988 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:54.647814989 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:54.885416031 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.885833025 CET	49770	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.885860920 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.886965036 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.887506008 CET	49770	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.887588024 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:54.887689114 CET	49770	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:54.931339025 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:55.030790091 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:55.030956030 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:55.031023979 CET	49770	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:55.032354116 CET	49770	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:55.032370090 CET	443	49770	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:55.123954058 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.158962965 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.159025908 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.160388947 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.161037922 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.161201000 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.161218882 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.161257029 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.211333036 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.274214029 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.274405956 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.274483919 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.274545908 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.274585009 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.274646044 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.282789946 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.282825947 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.348939896 CET	49772	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.348987103 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.349052906 CET	49772	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.349332094 CET	49772	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.349349976 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.807936907 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.808222055 CET	49772	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.808244944 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.808697939 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.809195042 CET	49772	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.809276104 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.809324026 CET	49772	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.851372957 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.940723896 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.940821886 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.940917015 CET	49772	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.941941977 CET	49772	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:55.941967964 CET	443	49772	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:55.945311069 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:55.945353031 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:55.945487976 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:55.945765972 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:55.945776939 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:56.424144030 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:56.424510956 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:56.424525976 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:56.424972057 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:56.425331116 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:56.425477028 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:56.425590038 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:56.476864100 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:56.556190014 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:56.556274891 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:56.556350946 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:56.557167053 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:56.557182074 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:56.902759075 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:56.902852058 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:56.903070927 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:56.911729097 CET	49738	443	192.168.2.4	216.58.206.68
Jan 14, 2025 01:12:56.911748886 CET	443	49738	216.58.206.68	192.168.2.4
Jan 14, 2025 01:12:56.912199974 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:56.912252903 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:56.912477970 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:56.912746906 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:56.912764072 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.411848068 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.412133932 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.412159920 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.412503004 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.412934065 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.412996054 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.413099051 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.413175106 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.413208008 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.413322926 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.413350105 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.690888882 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.690931082 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.690953970 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.690973043 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.691045046 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:57.691049099 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.691111088 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.692121029 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.692121983 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.695080042 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:57.695127010 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:57.695301056 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:57.695497036 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:57.695517063 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:57.992320061 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 01:12:57.992360115 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 01:12:58.150100946 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:58.150487900 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:58.150502920 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:58.150829077 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:58.151395082 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:58.151453018 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:58.151730061 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:58.195329905 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:58.296525955 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:58.296613932 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:58.297410011 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:58.297626972 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 01:12:58.297643900 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 01:12:59.569659948 CET	80	49723	217.20.57.18	192.168.2.4
Jan 14, 2025 01:12:59.569982052 CET	49723	80	192.168.2.4	217.20.57.18
Jan 14, 2025 01:12:59.569982052 CET	49723	80	192.168.2.4	217.20.57.18
Jan 14, 2025 01:12:59.575750113 CET	80	49723	217.20.57.18	192.168.2.4
Jan 14, 2025 01:13:03.559349060 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:13:03.559417009 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:13:03.559521914 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:13:04.207994938 CET	49741	443	192.168.2.4	172.64.151.8
Jan 14, 2025 01:13:04.208029032 CET	443	49741	172.64.151.8	192.168.2.4
Jan 14, 2025 01:13:04.222582102 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.222636938 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:04.222718954 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.223062038 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.223081112 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:04.698823929 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:04.699254990 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.699273109 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:04.700299978 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:04.700491905 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.701828003 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.701893091 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:04.702162981 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.702168941 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:04.702188015 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.741986990 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:04.742006063 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:05.171360016 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:05.171502113 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:05.171670914 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:05.172249079 CET	49781	443	192.168.2.4	52.4.175.122
Jan 14, 2025 01:13:05.172270060 CET	443	49781	52.4.175.122	192.168.2.4
Jan 14, 2025 01:13:05.203171968 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.203214884 CET	443	49782	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.203387022 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.203540087 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.203574896 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.203641891 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.203828096 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.203846931 CET	443	49782	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.204092979 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.204106092 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.221306086 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.221338987 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.221415997 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.221725941 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.221739054 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.688405991 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.689481974 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.689524889 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.693097115 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.693211079 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.694041014 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.694221973 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.694226027 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.735342026 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.744402885 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.744416952 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.788625956 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.807352066 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.807537079 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.807605982 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.809782028 CET	49784	443	192.168.2.4	18.210.65.74
Jan 14, 2025 01:13:05.809791088 CET	443	49784	18.210.65.74	192.168.2.4
Jan 14, 2025 01:13:05.839898109 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.840445042 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.840466022 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.840758085 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.840827942 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.841341019 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.841397047 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.842509985 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.842564106 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.842694998 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.883455992 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.883464098 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.924325943 CET	443	49782	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.924674988 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.924691916 CET	443	49782	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.925399065 CET	443	49782	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.925853014 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.926933050 CET	443	49782	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.926992893 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.931904078 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.950819969 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.951210976 CET	443	49782	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:05.994818926 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:05.994836092 CET	443	49782	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:06.036699057 CET	49782	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:06.144325972 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:06.144382000 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:06.144455910 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:06.144474983 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:06.144525051 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:06.144670010 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:06.144767046 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:06.144939899 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:06.272121906 CET	49783	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:06.272135973 CET	443	49783	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:06.337126017 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:06.337143898 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:06.337208986 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:06.337649107 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:06.337661028 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:06.921386957 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:06.921690941 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:06.921716928 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:06.922096014 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:06.922168970 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:06.922780037 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:06.922837019 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:06.923773050 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:06.923830032 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:06.923932076 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:06.923938990 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:06.976067066 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.134536028 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.134551048 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.134598970 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.134676933 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.134686947 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.134718895 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.134747982 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.186748981 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.186791897 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.186868906 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.187144995 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.187165022 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.225186110 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.225197077 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.225228071 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.225320101 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.225330114 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.225389004 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.227093935 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.227108955 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.227191925 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.227199078 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.227253914 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.227982044 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.228053093 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.228056908 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.228085041 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.228096962 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.228148937 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.230109930 CET	49785	443	192.168.2.4	67.195.204.151
Jan 14, 2025 01:13:07.230114937 CET	443	49785	67.195.204.151	192.168.2.4
Jan 14, 2025 01:13:07.233587980 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.233618975 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.233711958 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.233872890 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.233891964 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.233962059 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.234071970 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.234083891 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.234196901 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.234208107 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.865552902 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.865840912 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.865847111 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.866127014 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.866195917 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.866759062 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.866816044 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.868006945 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.868118048 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.868244886 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.868252993 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.917610884 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.919096947 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.919110060 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.919158936 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.919454098 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.919543982 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.920123100 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.920193911 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.920490980 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.920547009 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.920697927 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.920705080 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.958565950 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.958853006 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.958878994 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.960067987 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.960143089 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.962526083 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.962599039 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.962824106 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.962990046 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:07.962995052 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:07.966213942 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.003338099 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.012933969 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.012948990 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.059192896 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.194771051 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.195087910 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.195302010 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.195981979 CET	49786	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.195998907 CET	443	49786	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.200918913 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.200951099 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.201122046 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.201560020 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.201575041 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.210014105 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.210042953 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.210206032 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.210531950 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.210546970 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.235095978 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.235436916 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.235498905 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.235912085 CET	49788	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.235918045 CET	443	49788	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.239200115 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.239221096 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.239341021 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.239599943 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.239629030 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.239679098 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.240001917 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.240022898 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.241230965 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.241247892 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.500087976 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.500132084 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.500164986 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.500260115 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.500272989 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.500334024 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.500513077 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.500582933 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.500618935 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.500624895 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.501075983 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.501127005 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.501132965 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.541129112 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.541135073 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.589797020 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.592405081 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.592576027 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.592622042 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.592628956 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.592655897 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.592685938 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.592696905 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.592701912 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.592741966 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.592746973 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.593276024 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.593312979 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.593337059 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.593342066 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.593370914 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.593383074 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.593388081 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.593430996 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.593977928 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.594309092 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.594350100 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.594357967 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.594362974 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.594399929 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.594404936 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.594408989 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.594451904 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.594454050 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.594461918 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.594506979 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.595208883 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.595252991 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.595302105 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.595307112 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.637415886 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.684817076 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.684958935 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.684986115 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685019970 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.685026884 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685079098 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.685167074 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685236931 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685313940 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.685318947 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685425997 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685481071 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.685486078 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685554028 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685584068 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685610056 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.685616016 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.685687065 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.686012030 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686049938 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686086893 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686091900 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.686096907 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686137915 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.686142921 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686166048 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686203003 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.686208010 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686772108 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686803102 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686820984 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.686825991 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686870098 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.686875105 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686903954 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686930895 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686939955 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.686944008 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686970949 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.686978102 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.686981916 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687045097 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.687776089 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687820911 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687846899 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687860966 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.687865019 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687886000 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687910080 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.687913895 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687933922 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687958002 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.687958956 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.687967062 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.688007116 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.688688040 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.688721895 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.688725948 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.688751936 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.688777924 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.688791990 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.688796043 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.688836098 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.688839912 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.688874006 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.688911915 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.688916922 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.735753059 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.777477980 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.777614117 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.777686119 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.777693987 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.777720928 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.777766943 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.777802944 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.777947903 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.777987957 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.777995110 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778089046 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778136969 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.778141975 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778219938 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778259039 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.778264046 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778362989 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778405905 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.778410912 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778496027 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778537989 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.778542995 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778640032 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778681993 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.778686047 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778779030 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778822899 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.778827906 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778929949 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.778973103 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.778978109 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779072046 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779114008 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.779119968 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779218912 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779263020 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779268026 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.779304028 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779359102 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.779417992 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779563904 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779613972 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.779618979 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779711962 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779751062 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.779757023 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779855967 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.779896021 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.779901981 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780015945 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780056000 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.780061007 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780183077 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780225039 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.780230045 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780339003 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780379057 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.780384064 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780488014 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780524969 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.780529022 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780647039 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780689955 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.780694962 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780802011 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780842066 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.780847073 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.780957937 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.781002045 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.781008005 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.781102896 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.781147003 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.781152010 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.781255960 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.781296015 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.781301022 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.782638073 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.782675982 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.782681942 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.782871008 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.782918930 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.782923937 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.783013105 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.783046007 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.783050060 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.783097982 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.783130884 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.783133030 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.783139944 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.783174992 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.783175945 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.783185005 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.783216953 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.783221006 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.822909117 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.822915077 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.842554092 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.862948895 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.865586996 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.865678072 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.865689039 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.865741968 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.865842104 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.865847111 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.865997076 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866060972 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.866066933 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866205931 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866266966 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.866271973 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866358995 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866439104 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.866446018 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866467953 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866507053 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.866555929 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866719007 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866763115 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.866769075 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866879940 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.866925001 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.866930008 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867034912 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867079973 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.867085934 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867192030 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867235899 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.867242098 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867400885 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867444992 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.867450953 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867557049 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867602110 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.867608070 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867712975 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867757082 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.867763042 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867872000 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.867918015 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.867923975 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.869821072 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.869885921 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.869890928 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.869998932 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870042086 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.870048046 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870172024 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870213032 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.870218039 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870341063 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870385885 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.870390892 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870544910 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870587111 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.870593071 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870702028 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870743990 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.870749950 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870887041 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.870933056 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.870939016 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871043921 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871084929 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.871089935 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871201038 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871239901 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.871246099 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871390104 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871437073 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.871443987 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871591091 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871635914 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.871643066 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871753931 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871798038 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.871803045 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871912003 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.871954918 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.871961117 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872068882 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872111082 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.872117043 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872225046 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872267962 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.872275114 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872380972 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872427940 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.872432947 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872538090 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872584105 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.872589111 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872736931 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872776985 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.872782946 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872899055 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.872945070 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.872951031 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873054028 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873111963 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.873117924 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873250961 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873294115 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.873300076 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873310089 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.873428106 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873492956 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.873498917 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873594999 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873632908 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.873639107 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873766899 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.873786926 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873790026 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.873841047 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.873847008 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873939991 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.873981953 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.873990059 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.874135017 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.874155998 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.874159098 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.874226093 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.874842882 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.874891996 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.875372887 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.875545025 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.875613928 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.875883102 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.876019001 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.876034975 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.876059055 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.876060009 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.876601934 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.923336983 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.931281090 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.934844971 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.939218044 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.950938940 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951019049 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951057911 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.951072931 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951112986 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.951119900 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951211929 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951267958 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.951272964 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951401949 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951447010 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.951452971 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951539040 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951584101 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.951589108 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951673031 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951736927 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.951741934 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951806068 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951858044 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.951864004 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951939106 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.951986074 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.951991081 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952075958 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952119112 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.952124119 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952204943 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952280998 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952286959 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.952322006 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952363014 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.952430010 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952570915 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952609062 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.952621937 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952702045 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952749968 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.952754021 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952832937 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952881098 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.952886105 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.952965021 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.953016043 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.953021049 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.953094959 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.953140974 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.953145981 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.956551075 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.956603050 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.956609011 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.956751108 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.956794977 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.956799984 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.956923962 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.956969023 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.956974030 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957067966 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957110882 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.957115889 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957248926 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957293034 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.957298040 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957432032 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957472086 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.957478046 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957587004 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957629919 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.957636118 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957794905 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957843065 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.957849026 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957952023 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.957995892 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.958002090 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958110094 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958157063 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.958162069 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958273888 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958318949 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.958323956 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958427906 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958479881 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.958484888 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958601952 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958657026 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.958662033 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958765984 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958811998 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.958817959 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.958997011 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959043026 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.959048033 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959161997 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959208965 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.959213972 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959351063 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959398031 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.959403038 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959513903 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959558964 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.959563971 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959666967 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959713936 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.959718943 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959824085 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.959881067 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.959886074 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960026979 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960072041 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.960078001 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960184097 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960233927 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.960238934 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960338116 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960381985 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.960387945 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960494041 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960536003 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.960541964 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960653067 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960700035 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.960705042 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960808992 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.960849047 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.960855007 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.961003065 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.961050034 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.961055040 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.961169004 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.961215019 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:08.961220026 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:08.977884054 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.978302956 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.978336096 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.978821039 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.978893042 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.979830980 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.979883909 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.980179071 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.980259895 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:08.980436087 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:08.980448961 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.007473946 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.007479906 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.008570910 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.013832092 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.013858080 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.015048981 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.015727043 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.015876055 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.015893936 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.024420977 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.051259041 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.051325083 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.051336050 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.051465988 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.051517010 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.051522970 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.051620007 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.051666021 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.051671028 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.051776886 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.051825047 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.051830053 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.051961899 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052006960 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.052012920 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052134991 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052175999 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.052181005 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052292109 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052335024 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.052340031 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052453041 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052499056 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.052505016 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052628994 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052685976 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.052690983 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052788973 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052833080 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.052838087 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052947044 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.052989006 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.052999020 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053103924 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053144932 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.053150892 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053281069 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053319931 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.053327084 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053443909 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053491116 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.053495884 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053622961 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053662062 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.053666115 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053781033 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053838968 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.053843975 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053947926 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.053985119 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.053989887 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054140091 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054255962 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054258108 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.054284096 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054327965 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.054378986 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054544926 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054600954 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.054605961 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054702997 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054744005 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.054749966 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054883957 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.054924011 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.054930925 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055058956 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055098057 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.055103064 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055217028 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055257082 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.055264950 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055387020 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055432081 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.055437088 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055556059 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055603027 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.055624962 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055715084 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055752993 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.055758953 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055887938 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.055927992 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.055933952 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056046963 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056092024 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.056097031 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056201935 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056248903 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.056253910 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056365967 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056405067 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.056411982 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056554079 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056605101 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.056611061 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056713104 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056762934 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.056768894 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056876898 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.056927919 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.056934118 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057030916 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057075024 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057080030 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057184935 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057240963 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057245970 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057337999 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057377100 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057383060 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057436943 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057482958 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057482958 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057495117 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057529926 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057533979 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057584047 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057615042 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057617903 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057622910 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057657957 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057662010 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057688951 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057719946 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057725906 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057730913 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057765961 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057770967 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057806015 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057842016 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057843924 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057849884 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057889938 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057892084 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057898998 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057934999 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.057940006 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.057980061 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.058012009 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.058022022 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.058027029 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.058059931 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.058062077 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.058069944 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.058115005 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.058120012 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.059334040 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.071054935 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.101262093 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.138101101 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138300896 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138360977 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.138369083 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138477087 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138515949 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.138521910 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138637066 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138679981 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.138685942 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138813972 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138858080 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.138864040 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.138978958 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139024973 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.139029980 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139136076 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139185905 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.139190912 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139303923 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139358044 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.139374018 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139537096 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139581919 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.139586926 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139700890 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139748096 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.139753103 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139873981 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.139919996 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.139925957 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140037060 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140079021 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.140084982 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140204906 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140254021 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.140259027 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140388966 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140434027 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.140439034 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140522003 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140568018 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.140579939 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140688896 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140729904 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.140736103 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140866995 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.140901089 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.140907049 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141025066 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141073942 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.141078949 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141180992 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141221046 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.141225100 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141354084 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141396999 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.141401052 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141510010 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141558886 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.141563892 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141680002 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141725063 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.141731024 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141849041 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141890049 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.141895056 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.141983032 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142024994 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.142030001 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142129898 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142169952 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.142174959 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142291069 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142333031 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.142338037 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142457008 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142508030 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.142513037 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142640114 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142694950 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.142699957 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142796993 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142837048 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.142842054 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.142955065 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143001080 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143006086 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143119097 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143163919 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143170118 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143276930 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143285990 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143321991 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143327951 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143407106 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143490076 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143522978 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143527985 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143528938 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143580914 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143584967 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143608093 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143609047 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143641949 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143682003 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143692970 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143718958 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143723011 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143723965 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143831968 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143879890 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143882990 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143887997 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143924952 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.143945932 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.143979073 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144012928 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144018888 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.144023895 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144062996 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.144071102 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144104004 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144148111 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.144153118 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144273043 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144309998 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.144321918 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144429922 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144469023 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.144474983 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144589901 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144629955 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.144634962 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144745111 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144829988 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144862890 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.144867897 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.144901991 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.144922972 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145077944 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145128012 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.145133018 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145270109 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145313978 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.145318985 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145431042 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145474911 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.145479918 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145584106 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145627975 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.145632982 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145741940 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145785093 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.145790100 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145900011 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.145942926 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.145947933 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.146061897 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.146100998 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.146106005 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.146219015 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.146260977 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.146265984 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.147901058 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.148011923 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.148062944 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.149110079 CET	49790	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.149143934 CET	443	49790	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.194911003 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.194926977 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.194952965 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.194960117 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225080967 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225142002 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.225155115 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225265026 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225310087 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.225316048 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225430965 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225476980 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.225481987 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225599051 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225641966 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.225646973 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225774050 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225815058 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.225821972 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225908995 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.225955009 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.225960970 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226073980 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226141930 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.226146936 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226246119 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226339102 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226351976 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.226367950 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226407051 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.226458073 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226628065 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226675034 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.226680040 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226784945 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226927996 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.226960897 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.226968050 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227011919 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.227025032 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227191925 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227241993 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.227247953 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227390051 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227436066 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.227442026 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227550983 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227590084 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.227600098 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227765083 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227809906 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.227814913 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227926016 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.227973938 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.227979898 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228091002 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228131056 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.228137016 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228250027 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228296995 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.228302002 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228405952 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228451967 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.228457928 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228559971 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228602886 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.228609085 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228732109 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228776932 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.228784084 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228897095 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.228945017 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.228950024 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229059935 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229106903 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.229111910 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229216099 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229273081 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.229279041 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229383945 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229424953 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.229430914 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229547977 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229594946 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.229598999 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229737997 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229784012 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.229789019 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229906082 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.229954004 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.230180979 CET	49787	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.230190992 CET	443	49787	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.237816095 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.237915039 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.237927914 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238025904 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238064051 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.238074064 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238189936 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238229990 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.238246918 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238356113 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238424063 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.238430977 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238519907 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238579035 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.238584995 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238676071 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238717079 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.238723993 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238845110 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.238884926 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.238903046 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.239000082 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.239053965 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.239063025 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.239154100 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.239233971 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.239243031 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.240150928 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.240200043 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.240216970 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.240309000 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.240355015 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.240374088 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.258526087 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.258867979 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.258945942 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.270318031 CET	49792	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.270332098 CET	443	49792	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.274187088 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:09.274204016 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:09.274276972 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:09.274491072 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:09.274502993 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:09.279350996 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.279402971 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.279483080 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.279627085 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:09.279649019 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:09.279697895 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:09.279809952 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.279829025 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.279943943 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:09.279959917 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:09.290993929 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.291162014 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.291258097 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.291327953 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.291344881 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.291403055 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.291410923 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.291522980 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.291569948 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.291585922 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.291989088 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.292192936 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.292201042 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.295330048 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328114033 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328145027 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328166962 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328253984 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328326941 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328402996 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328422070 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328506947 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328592062 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328599930 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328675985 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328701973 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328751087 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328759909 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328763962 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328795910 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.328805923 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328840971 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.328898907 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.329051971 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.329097986 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.329106092 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.329231024 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.329533100 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.329549074 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.332216024 CET	49789	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.332230091 CET	443	49789	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.333652020 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.334541082 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.356754065 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:09.356791973 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:09.356865883 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:09.357037067 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:09.357052088 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:09.364564896 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.364590883 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.364648104 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.365469933 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.365483046 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.383583069 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.383698940 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.383704901 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.383729935 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.383882999 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.383893013 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.383919954 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.383985996 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.384011030 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.384290934 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.384363890 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.384375095 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.384527922 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.384578943 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.384594917 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.384984970 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.385056019 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.385063887 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.385160923 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.385246038 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.385250092 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.385272980 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.385333061 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.385361910 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.385912895 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.386018991 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.386039019 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.386049032 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.386253119 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.426544905 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.426769972 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.426861048 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.426917076 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.426932096 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.427004099 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.427051067 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.427090883 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.427090883 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.427098989 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.475900888 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476016045 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.476027966 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476130962 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476178885 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.476186037 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476298094 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476480007 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.476489067 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476638079 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476686954 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.476695061 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476800919 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.476874113 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.476881981 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.477174044 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.477264881 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.477302074 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.477309942 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.477381945 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.477389097 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.477705956 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.477770090 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.477777004 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.477885008 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.477957964 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.477966070 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.478080034 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.478147030 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.478153944 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.478245020 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.478442907 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.478456974 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.478804111 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.478892088 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.478892088 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.478921890 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479079008 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479105949 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.479115009 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479165077 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.479172945 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479304075 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479367971 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.479382038 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479721069 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479810953 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479829073 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.479836941 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.479880095 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.479927063 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.518876076 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.518918037 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.518992901 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519033909 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519032955 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.519032955 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.519062042 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519284010 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519329071 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519330025 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.519339085 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519527912 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.519587040 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519620895 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519650936 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519654989 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.519661903 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.519735098 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.559566975 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.559721947 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.559735060 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568165064 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568205118 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568238974 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568268061 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568289042 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.568289042 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.568300009 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568356037 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.568362951 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568641901 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568675995 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568713903 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568752050 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.568752050 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.568758011 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568770885 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.568830967 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.568962097 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569025040 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569061995 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.569070101 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569081068 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569171906 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.569180012 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569462061 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569500923 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.569510937 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569555998 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569591999 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.569598913 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569634914 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569669008 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569710970 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.569715977 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569737911 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.569760084 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.570295095 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570341110 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570372105 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570375919 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.570383072 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570436001 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570467949 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570473909 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.570473909 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.570483923 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570518970 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.570519924 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570529938 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570599079 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570630074 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.570666075 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.570666075 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.570674896 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571254015 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571295023 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571327925 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.571337938 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571372032 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571405888 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.571413040 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571450949 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571482897 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571492910 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.571499109 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571536064 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.571544886 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571577072 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571594000 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.571600914 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.571727037 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.572062969 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572151899 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572200060 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572201014 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.572210073 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572258949 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.572266102 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572321892 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572346926 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572381973 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572419882 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572421074 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.572421074 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.572428942 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.572515965 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.572524071 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.573024035 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.573117971 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.573126078 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.611413956 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.611454010 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.611490011 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.611514091 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.611521006 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.611536026 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.611588955 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.611588955 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.611598015 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.611605883 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.611830950 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.612368107 CET	49791	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.612385035 CET	443	49791	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.617885113 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.617908001 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.617958069 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.619260073 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:09.619267941 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:09.922177076 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.922471046 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.922487974 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.922792912 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.923197031 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.923218012 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:09.923224926 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.923264027 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:09.976552010 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.020371914 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.020692110 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.020715952 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.021670103 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.021728039 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.023197889 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.023255110 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.023432016 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.023437977 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.027973890 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.028194904 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.028218031 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.029866934 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.029933929 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.029943943 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.029984951 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.031008959 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.031091928 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.031166077 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.031178951 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.031194925 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.031239986 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.036114931 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.036319017 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.036329985 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.037733078 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.037803888 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.039839983 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.039921045 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.039988995 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.039998055 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.069832087 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.070318937 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.071966887 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.072282076 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.072294950 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.072623014 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.072685003 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.073321104 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.073358059 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.075052023 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.075098991 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.075220108 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.075225115 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.086996078 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.087184906 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.087861061 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.087877989 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.088381052 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.088778973 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.088804007 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.088882923 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.089776039 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.089797020 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.089811087 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.090146065 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.090297937 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.090874910 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.090967894 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.091173887 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.091221094 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.091249943 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.117320061 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.131387949 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.133347988 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.133361101 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.179481030 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.201319933 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.201505899 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.201551914 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.206304073 CET	49794	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.206322908 CET	443	49794	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.213639975 CET	49802	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.213665009 CET	443	49802	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.213746071 CET	49802	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.213957071 CET	49802	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.213967085 CET	443	49802	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.258476019 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.259639025 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.259649992 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.260025978 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.260498047 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.260555029 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.260664940 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.291726112 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.291790009 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.291810036 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.291845083 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.291850090 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.291873932 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.291888952 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.291954041 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.291959047 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.291997910 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.292047024 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.303136110 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.303337097 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.315798998 CET	49793	443	192.168.2.4	65.9.66.17
Jan 14, 2025 01:13:10.315810919 CET	443	49793	65.9.66.17	192.168.2.4
Jan 14, 2025 01:13:10.316951990 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.317126036 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.317193031 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.317315102 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.317338943 CET	443	49798	188.125.72.139	192.168.2.4
Jan 14, 2025 01:13:10.317352057 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.317375898 CET	49798	443	192.168.2.4	188.125.72.139
Jan 14, 2025 01:13:10.342850924 CET	49803	443	192.168.2.4	65.9.66.44
Jan 14, 2025 01:13:10.342864990 CET	443	49803	65.9.66.44	192.168.2.4
Jan 14, 2025 01:13:10.342924118 CET	49803	443	192.168.2.4	65.9.66.44
Jan 14, 2025 01:13:10.343105078 CET	49803	443	192.168.2.4	65.9.66.44
Jan 14, 2025 01:13:10.343113899 CET	443	49803	65.9.66.44	192.168.2.4
Jan 14, 2025 01:13:10.350677967 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.350737095 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.350766897 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.350776911 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.350789070 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.350831985 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.350837946 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.351171970 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.351207972 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.351212025 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.351280928 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.351317883 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.351321936 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.355304003 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.364160061 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.364240885 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.364291906 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.364300013 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.364351988 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.364353895 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.364366055 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.364397049 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.364728928 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.364808083 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.364837885 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.364841938 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.371949911 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.372014999 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.372042894 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.372440100 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.372464895 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.372795105 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.372824907 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.372827053 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.372827053 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.372827053 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.372843027 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.373264074 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.373271942 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.393482924 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.393495083 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.393537045 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.393539906 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.393560886 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.393584967 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.393603086 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.393603086 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.393603086 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.393608093 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.393626928 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.393640041 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.395340919 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.395361900 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.395426989 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.395437002 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.395446062 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.395459890 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.403412104 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.403418064 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.406186104 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.406229019 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.406241894 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.418883085 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.418909073 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.441867113 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.441891909 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.441931009 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.441946983 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.441981077 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.442943096 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.442970037 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.442981958 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.442986012 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.443017960 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.443031073 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.443269968 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.443362951 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.443367958 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.443574905 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.443599939 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.443607092 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.443612099 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.443644047 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.444107056 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.444159031 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.444183111 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.444191933 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.444195032 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.444221020 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.444226980 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.445029974 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.445055008 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.445063114 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.445069075 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.445158958 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.445177078 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.445199966 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.445904016 CET	49796	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.445910931 CET	443	49796	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.449578047 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.464459896 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.464538097 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.464576960 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.464576960 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.464590073 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.464624882 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.464631081 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.464984894 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465019941 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.465024948 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465097904 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.465114117 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465146065 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.465151072 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465581894 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.465658903 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.465688944 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465698957 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.465719938 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.465729952 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.465734959 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465749025 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.465753078 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.465753078 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.465756893 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465761900 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.465797901 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.465809107 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465831995 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.465836048 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.465881109 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.466006994 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.466068983 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.466099977 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.466114044 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.466121912 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.466247082 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.466253996 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.466638088 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.466710091 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.466742992 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.466747046 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.467024088 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.467052937 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.467061996 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.467071056 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.467082977 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.467102051 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.467123032 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.467128992 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.467137098 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.467145920 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.467153072 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.467924118 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.467953920 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.467981100 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.468007088 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.468008041 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.468008041 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.468014956 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.468024969 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.468076944 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.468843937 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.468843937 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.474720955 CET	49797	443	192.168.2.4	87.248.119.251
Jan 14, 2025 01:13:10.474740028 CET	443	49797	87.248.119.251	192.168.2.4
Jan 14, 2025 01:13:10.484750032 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.484785080 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.484818935 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.484838009 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.484859943 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.484879017 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.485424042 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.485455990 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.485485077 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.485492945 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.485513926 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.485529900 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.487023115 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.487050056 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.487082958 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.487090111 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.487128019 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.487138987 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.498681068 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.498729944 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.498737097 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.498749971 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.498789072 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.498800993 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.498852015 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.498883009 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.498888016 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536195040 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536253929 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536288977 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536295891 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.536308050 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536350012 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.536545038 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536608934 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536640882 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536640882 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.536650896 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.536685944 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.537152052 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.543346882 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.548867941 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.548942089 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.548978090 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.548984051 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.549032927 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.549038887 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.549074888 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.549120903 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.550498009 CET	49799	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.550507069 CET	443	49799	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.574574947 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.574619055 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.574656963 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.574690104 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.574718952 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.574734926 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.575023890 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575067043 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575092077 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.575099945 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575143099 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.575370073 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575413942 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575429916 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.575438976 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575465918 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.575474977 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.575885057 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575932026 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575944901 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.575953007 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.575984001 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.575994968 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.577155113 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.577198982 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.577210903 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.577219963 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.577253103 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.577275038 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.577729940 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.577766895 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.577790976 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.577799082 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.578528881 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.578557968 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.578557968 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.578572989 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.578579903 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.579778910 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.579823971 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.579845905 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.579854965 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.579900980 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.620367050 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.623287916 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.623310089 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.623353004 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.623363018 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.623408079 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.623419046 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.654257059 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.654329062 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.654362917 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.654372931 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.654381990 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.654421091 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.654422998 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.654431105 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.654463053 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.654756069 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.654819012 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.654851913 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.654858112 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.655464888 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.655488968 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.655525923 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.655541897 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.655546904 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.655567884 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.655584097 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.655586958 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.656362057 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.656394005 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.656409025 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.656414032 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.656457901 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.665566921 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.665618896 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.665642977 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.665656090 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.665684938 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.665699005 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.665813923 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.665869951 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.665874004 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.665889978 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.665919065 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.665951014 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.665997982 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.666004896 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.666045904 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.666104078 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.666151047 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.668400049 CET	49795	443	192.168.2.4	3.161.82.31
Jan 14, 2025 01:13:10.668416023 CET	443	49795	3.161.82.31	192.168.2.4
Jan 14, 2025 01:13:10.670887947 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.670954943 CET	443	49800	87.248.119.252	192.168.2.4
Jan 14, 2025 01:13:10.670998096 CET	49800	443	192.168.2.4	87.248.119.252
Jan 14, 2025 01:13:10.671005964 CET	443	49800	87.248.119.252	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 01:12:46.337560892 CET	192.168.2.4	1.1.1.1	0x4f26	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:46.337722063 CET	192.168.2.4	1.1.1.1	0x5133	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 01:12:48.183603048 CET	192.168.2.4	1.1.1.1	0x245d	Standard query (0)	offfryfjtht767755433.webflow.io	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.183747053 CET	192.168.2.4	1.1.1.1	0x829b	Standard query (0)	offfryfjtht767755433.webflow.io	65	IN (0x0001)	false
Jan 14, 2025 01:12:48.842106104 CET	192.168.2.4	1.1.1.1	0x40c1	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.842252016 CET	192.168.2.4	1.1.1.1	0xb77e	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Jan 14, 2025 01:12:48.843028069 CET	192.168.2.4	1.1.1.1	0x3b3c	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.843170881 CET	192.168.2.4	1.1.1.1	0xbe32	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Jan 14, 2025 01:12:49.598253012 CET	192.168.2.4	1.1.1.1	0x4244	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:49.598253965 CET	192.168.2.4	1.1.1.1	0xb11a	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Jan 14, 2025 01:12:50.282552958 CET	192.168.2.4	1.1.1.1	0x392e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:50.282757044 CET	192.168.2.4	1.1.1.1	0x23ff	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 01:12:50.300757885 CET	192.168.2.4	1.1.1.1	0x2357	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:50.300909042 CET	192.168.2.4	1.1.1.1	0x16b4	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Jan 14, 2025 01:12:51.615117073 CET	192.168.2.4	1.1.1.1	0xf116	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:51.616209984 CET	192.168.2.4	1.1.1.1	0x9598	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 01:12:51.626517057 CET	192.168.2.4	1.1.1.1	0x862f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:51.626626968 CET	192.168.2.4	1.1.1.1	0x4a3c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:04.208417892 CET	192.168.2.4	1.1.1.1	0xe37c	Standard query (0)	webflow.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:04.208794117 CET	192.168.2.4	1.1.1.1	0x162	Standard query (0)	webflow.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:05.187696934 CET	192.168.2.4	1.1.1.1	0xa2f7	Standard query (0)	mail.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:05.187808037 CET	192.168.2.4	1.1.1.1	0x2bd0	Standard query (0)	mail.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:05.204977036 CET	192.168.2.4	1.1.1.1	0xdc34	Standard query (0)	webflow.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:05.205168009 CET	192.168.2.4	1.1.1.1	0xc36f	Standard query (0)	webflow.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:06.328793049 CET	192.168.2.4	1.1.1.1	0x5d31	Standard query (0)	login.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:06.329571962 CET	192.168.2.4	1.1.1.1	0x1f00	Standard query (0)	login.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:07.167908907 CET	192.168.2.4	1.1.1.1	0x22c0	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.168047905 CET	192.168.2.4	1.1.1.1	0x6cf9	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:07.184326887 CET	192.168.2.4	1.1.1.1	0xc6f1	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.184480906 CET	192.168.2.4	1.1.1.1	0x29bf	Standard query (0)	google.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:07.187597990 CET	192.168.2.4	1.1.1.1	0xf5c4	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.187731028 CET	192.168.2.4	1.1.1.1	0xe3ec	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:07.191903114 CET	192.168.2.4	1.1.1.1	0x131a	Standard query (0)	geo.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.192043066 CET	192.168.2.4	1.1.1.1	0x9d3d	Standard query (0)	geo.query.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:07.195662975 CET	192.168.2.4	1.1.1.1	0x8822	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.196111917 CET	192.168.2.4	1.1.1.1	0x6e49	Standard query (0)	ucs.query.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:07.200848103 CET	192.168.2.4	1.1.1.1	0x2e7a	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.200985909 CET	192.168.2.4	1.1.1.1	0xb8cf	Standard query (0)	y.analytics.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:07.209222078 CET	192.168.2.4	1.1.1.1	0x2e31	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.218559027 CET	192.168.2.4	1.1.1.1	0xed1d	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:08.202734947 CET	192.168.2.4	1.1.1.1	0xa96	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:08.202862978 CET	192.168.2.4	1.1.1.1	0x3134	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:09.253468037 CET	192.168.2.4	1.1.1.1	0x8a2d	Standard query (0)	consent.cmp.oath.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.254106045 CET	192.168.2.4	1.1.1.1	0x390a	Standard query (0)	consent.cmp.oath.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:09.254926920 CET	192.168.2.4	1.1.1.1	0x5b1f	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.255053043 CET	192.168.2.4	1.1.1.1	0xce97	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:09.347651958 CET	192.168.2.4	1.1.1.1	0x11e0	Standard query (0)	udc.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.347779989 CET	192.168.2.4	1.1.1.1	0x5289	Standard query (0)	udc.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:10.323775053 CET	192.168.2.4	1.1.1.1	0xe9b6	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.324009895 CET	192.168.2.4	1.1.1.1	0xc44b	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:10.708717108 CET	192.168.2.4	1.1.1.1	0xe55f	Standard query (0)	guce.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.709173918 CET	192.168.2.4	1.1.1.1	0xa1cf	Standard query (0)	guce.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:10.735382080 CET	192.168.2.4	1.1.1.1	0xd532	Standard query (0)	gpt.mail.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.735719919 CET	192.168.2.4	1.1.1.1	0xf1b6	Standard query (0)	gpt.mail.yahoo.net	65	IN (0x0001)	false
Jan 14, 2025 01:13:10.771410942 CET	192.168.2.4	1.1.1.1	0xd186	Standard query (0)	consent.cmp.oath.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.771580935 CET	192.168.2.4	1.1.1.1	0xe2bf	Standard query (0)	consent.cmp.oath.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:11.763592005 CET	192.168.2.4	1.1.1.1	0x2fca	Standard query (0)	guce.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.763814926 CET	192.168.2.4	1.1.1.1	0x778a	Standard query (0)	guce.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:11.789840937 CET	192.168.2.4	1.1.1.1	0x3eca	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.790106058 CET	192.168.2.4	1.1.1.1	0xda8f	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:11.810343981 CET	192.168.2.4	1.1.1.1	0xbce1	Standard query (0)	csp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.810538054 CET	192.168.2.4	1.1.1.1	0xc629	Standard query (0)	csp.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:11.838495970 CET	192.168.2.4	1.1.1.1	0x96b9	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.838893890 CET	192.168.2.4	1.1.1.1	0x680f	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 14, 2025 01:13:11.848844051 CET	192.168.2.4	1.1.1.1	0x84a2	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.849237919 CET	192.168.2.4	1.1.1.1	0x7826	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:12.752135992 CET	192.168.2.4	1.1.1.1	0x6d3e	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:12.752286911 CET	192.168.2.4	1.1.1.1	0xea2c	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:13.752156019 CET	192.168.2.4	1.1.1.1	0x7ded	Standard query (0)	241.42.69.40.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Jan 14, 2025 01:13:13.965101957 CET	192.168.2.4	1.1.1.1	0x26b3	Standard query (0)	cadmus.script.ac	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:13.965467930 CET	192.168.2.4	1.1.1.1	0x3360	Standard query (0)	cadmus.script.ac	65	IN (0x0001)	false
Jan 14, 2025 01:13:13.966214895 CET	192.168.2.4	1.1.1.1	0xa4f9	Standard query (0)	noa.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:13.966428995 CET	192.168.2.4	1.1.1.1	0x6997	Standard query (0)	noa.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:13.979502916 CET	192.168.2.4	1.1.1.1	0x7199	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:13.979643106 CET	192.168.2.4	1.1.1.1	0x6b1b	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:14.422034979 CET	192.168.2.4	1.1.1.1	0x7f6d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.422835112 CET	192.168.2.4	1.1.1.1	0xe0e3	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 14, 2025 01:13:14.874605894 CET	192.168.2.4	1.1.1.1	0x627a	Standard query (0)	cadmus.script.ac	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.874972105 CET	192.168.2.4	1.1.1.1	0x731f	Standard query (0)	cadmus.script.ac	65	IN (0x0001)	false
Jan 14, 2025 01:13:14.886482000 CET	192.168.2.4	1.1.1.1	0xa6d7	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.886740923 CET	192.168.2.4	1.1.1.1	0x5ae3	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Jan 14, 2025 01:13:15.037121058 CET	192.168.2.4	1.1.1.1	0xe04c	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.037334919 CET	192.168.2.4	1.1.1.1	0x80ca	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:15.604589939 CET	192.168.2.4	1.1.1.1	0xea47	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.604717016 CET	192.168.2.4	1.1.1.1	0xc9ea	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:15.606553078 CET	192.168.2.4	1.1.1.1	0xd85f	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.606689930 CET	192.168.2.4	1.1.1.1	0xd00f	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Jan 14, 2025 01:13:16.106061935 CET	192.168.2.4	1.1.1.1	0xb10d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.106106997 CET	192.168.2.4	1.1.1.1	0x3a14	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.116339922 CET	192.168.2.4	1.1.1.1	0x2bf2	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.135051966 CET	192.168.2.4	1.1.1.1	0xdd22	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.398950100 CET	192.168.2.4	1.1.1.1	0x261c	Standard query (0)	login.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.548809052 CET	192.168.2.4	1.1.1.1	0x95ab	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.746951103 CET	192.168.2.4	1.1.1.1	0x4951	Standard query (0)	tsdtocl.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.747029066 CET	192.168.2.4	1.1.1.1	0x8059	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.771146059 CET	192.168.2.4	1.1.1.1	0x2ba4	Standard query (0)	noa.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.866008997 CET	192.168.2.4	1.1.1.1	0x2431	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873430967 CET	192.168.2.4	1.1.1.1	0x7989	Standard query (0)	display.bidder.taboola.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.877610922 CET	192.168.2.4	1.1.1.1	0xea3b	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:17.004787922 CET	192.168.2.4	1.1.1.1	0x11d9	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:17.952519894 CET	192.168.2.4	1.1.1.1	0xc2dd	Standard query (0)	yahoo-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.290669918 CET	192.168.2.4	1.1.1.1	0x3e6e	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.301439047 CET	192.168.2.4	1.1.1.1	0xd8b5	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.343729019 CET	192.168.2.4	1.1.1.1	0x8951	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.412463903 CET	192.168.2.4	1.1.1.1	0x6d48	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.418678045 CET	192.168.2.4	1.1.1.1	0x4ef5	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.729614019 CET	192.168.2.4	1.1.1.1	0xa4e1	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.745584011 CET	192.168.2.4	1.1.1.1	0x8fd5	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:20.242701054 CET	192.168.2.4	1.1.1.1	0x14c9	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:20.409076929 CET	192.168.2.4	1.1.1.1	0xd588	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:20.793785095 CET	192.168.2.4	1.1.1.1	0xede7	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:21.735537052 CET	192.168.2.4	1.1.1.1	0x36cc	Standard query (0)	sync.kueezrtb.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.123367071 CET	192.168.2.4	1.1.1.1	0x60d9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.608966112 CET	192.168.2.4	1.1.1.1	0x3fc4	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.755093098 CET	192.168.2.4	1.1.1.1	0x13e	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.787754059 CET	192.168.2.4	1.1.1.1	0xf9ba	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:23.983747959 CET	192.168.2.4	1.1.1.1	0x8907	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:24.624726057 CET	192.168.2.4	1.1.1.1	0x1a9e	Standard query (0)	api.archive-digger.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:25.403736115 CET	192.168.2.4	1.1.1.1	0x38d2	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:25.728441000 CET	192.168.2.4	1.1.1.1	0x9771	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.342749119 CET	192.168.2.4	1.1.1.1	0x4b92	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.357059956 CET	192.168.2.4	1.1.1.1	0x2d52	Standard query (0)	beacon.taboola.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.399104118 CET	192.168.2.4	1.1.1.1	0xcf4a	Standard query (0)	images.taboola.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.738785982 CET	192.168.2.4	1.1.1.1	0xaad2	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:27.015750885 CET	192.168.2.4	1.1.1.1	0x40d7	Standard query (0)	cds.taboola.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:27.203016043 CET	192.168.2.4	1.1.1.1	0x2086	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:27.519161940 CET	192.168.2.4	1.1.1.1	0x3499	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:28.155917883 CET	192.168.2.4	1.1.1.1	0x47f1	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:28.743712902 CET	192.168.2.4	1.1.1.1	0xfd13	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:29.177057981 CET	192.168.2.4	1.1.1.1	0x7058	Standard query (0)	eexsync.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.351964951 CET	192.168.2.4	1.1.1.1	0x58ed	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.352359056 CET	192.168.2.4	1.1.1.1	0xf00a	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.353054047 CET	192.168.2.4	1.1.1.1	0x89fe	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.528461933 CET	192.168.2.4	1.1.1.1	0xf23b	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.785293102 CET	192.168.2.4	1.1.1.1	0xe71b	Standard query (0)	cs.emxdgt.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.057029009 CET	192.168.2.4	1.1.1.1	0x1831	Standard query (0)	triplelift-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.118850946 CET	192.168.2.4	1.1.1.1	0xa0ba	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.161197901 CET	192.168.2.4	1.1.1.1	0xff6b	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.103395939 CET	192.168.2.4	1.1.1.1	0x1d60	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.752717972 CET	192.168.2.4	1.1.1.1	0x3039	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.093203068 CET	192.168.2.4	1.1.1.1	0x93cc	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.590943098 CET	192.168.2.4	1.1.1.1	0xb1c3	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.653387070 CET	192.168.2.4	1.1.1.1	0x3ade	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.045572042 CET	192.168.2.4	1.1.1.1	0x1b7f	Standard query (0)	assets.a-mo.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.499742031 CET	192.168.2.4	1.1.1.1	0x1abe	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.519963026 CET	192.168.2.4	1.1.1.1	0xc7a7	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.533165932 CET	192.168.2.4	1.1.1.1	0x11e6	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.629828930 CET	192.168.2.4	1.1.1.1	0x5605	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.648185015 CET	192.168.2.4	1.1.1.1	0x42	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.652734041 CET	192.168.2.4	1.1.1.1	0xc82e	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.659781933 CET	192.168.2.4	1.1.1.1	0xcece	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.410639048 CET	192.168.2.4	1.1.1.1	0x76a0	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.428723097 CET	192.168.2.4	1.1.1.1	0x5de6	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.428813934 CET	192.168.2.4	1.1.1.1	0x7b6f	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.632932901 CET	192.168.2.4	1.1.1.1	0x7841	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.636029959 CET	192.168.2.4	1.1.1.1	0x26c6	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.638035059 CET	192.168.2.4	1.1.1.1	0xe6bd	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.639061928 CET	192.168.2.4	1.1.1.1	0xd8dd	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.640700102 CET	192.168.2.4	1.1.1.1	0x61d	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.643507004 CET	192.168.2.4	1.1.1.1	0x8e0b	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.091356993 CET	192.168.2.4	1.1.1.1	0x199e	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.299834013 CET	192.168.2.4	1.1.1.1	0xf8b2	Standard query (0)	sync.a-mo.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.502348900 CET	192.168.2.4	1.1.1.1	0x8de1	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.636058092 CET	192.168.2.4	1.1.1.1	0x6590	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.750905991 CET	192.168.2.4	1.1.1.1	0xf7cd	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.409380913 CET	192.168.2.4	1.1.1.1	0xa2d2	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.608694077 CET	192.168.2.4	1.1.1.1	0x5f18	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.888878107 CET	192.168.2.4	1.1.1.1	0x9a82	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.893374920 CET	192.168.2.4	1.1.1.1	0x429d	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.894895077 CET	192.168.2.4	1.1.1.1	0xb8fc	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.897335052 CET	192.168.2.4	1.1.1.1	0x74a7	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.899616957 CET	192.168.2.4	1.1.1.1	0x6bf1	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.901585102 CET	192.168.2.4	1.1.1.1	0xf3f5	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.985795021 CET	192.168.2.4	1.1.1.1	0xdce9	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.152936935 CET	192.168.2.4	1.1.1.1	0x2004	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.325887918 CET	192.168.2.4	1.1.1.1	0xd0c3	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.465060949 CET	192.168.2.4	1.1.1.1	0x58a4	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.886425972 CET	192.168.2.4	1.1.1.1	0x2230	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.887011051 CET	192.168.2.4	1.1.1.1	0x5dc9	Standard query (0)	geo.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.889235973 CET	192.168.2.4	1.1.1.1	0x671f	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.895883083 CET	192.168.2.4	1.1.1.1	0xa52	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.944536924 CET	192.168.2.4	1.1.1.1	0xe924	Standard query (0)	udc.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:40.799031019 CET	192.168.2.4	1.1.1.1	0x6e96	Standard query (0)	b1sync.outbrain.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:40.800318003 CET	192.168.2.4	1.1.1.1	0x56e3	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:40.803977966 CET	192.168.2.4	1.1.1.1	0x67eb	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:51.326469898 CET	192.168.2.4	1.1.1.1	0x94b6	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:51.328393936 CET	192.168.2.4	1.1.1.1	0x3c66	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 01:12:46.344187975 CET	1.1.1.1	192.168.2.4	0x4f26	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:46.344600916 CET	1.1.1.1	192.168.2.4	0x5133	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 01:12:48.193253040 CET	1.1.1.1	192.168.2.4	0x245d	No error (0)	offfryfjtht767755433.webflow.io		172.64.151.8	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.193253040 CET	1.1.1.1	192.168.2.4	0x245d	No error (0)	offfryfjtht767755433.webflow.io		104.18.36.248	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.193664074 CET	1.1.1.1	192.168.2.4	0x829b	No error (0)	offfryfjtht767755433.webflow.io			65	IN (0x0001)	false
Jan 14, 2025 01:12:48.848860025 CET	1.1.1.1	192.168.2.4	0x40c1	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.848860025 CET	1.1.1.1	192.168.2.4	0x40c1	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.849231958 CET	1.1.1.1	192.168.2.4	0xb77e	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Jan 14, 2025 01:12:48.857340097 CET	1.1.1.1	192.168.2.4	0x3b3c	No error (0)	d3e54v103j8qbb.cloudfront.net		18.244.20.40	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.857340097 CET	1.1.1.1	192.168.2.4	0x3b3c	No error (0)	d3e54v103j8qbb.cloudfront.net		18.244.20.134	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.857340097 CET	1.1.1.1	192.168.2.4	0x3b3c	No error (0)	d3e54v103j8qbb.cloudfront.net		18.244.20.221	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:48.857340097 CET	1.1.1.1	192.168.2.4	0x3b3c	No error (0)	d3e54v103j8qbb.cloudfront.net		18.244.20.109	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:49.605639935 CET	1.1.1.1	192.168.2.4	0xb11a	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Jan 14, 2025 01:12:49.606276035 CET	1.1.1.1	192.168.2.4	0x4244	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:49.606276035 CET	1.1.1.1	192.168.2.4	0x4244	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:50.289186954 CET	1.1.1.1	192.168.2.4	0x392e	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:50.289186954 CET	1.1.1.1	192.168.2.4	0x392e	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:50.289629936 CET	1.1.1.1	192.168.2.4	0x23ff	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 01:12:50.317485094 CET	1.1.1.1	192.168.2.4	0x2357	No error (0)	d3e54v103j8qbb.cloudfront.net		18.244.20.40	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:50.317485094 CET	1.1.1.1	192.168.2.4	0x2357	No error (0)	d3e54v103j8qbb.cloudfront.net		18.244.20.221	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:50.317485094 CET	1.1.1.1	192.168.2.4	0x2357	No error (0)	d3e54v103j8qbb.cloudfront.net		18.244.20.134	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:50.317485094 CET	1.1.1.1	192.168.2.4	0x2357	No error (0)	d3e54v103j8qbb.cloudfront.net		18.244.20.109	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:51.624901056 CET	1.1.1.1	192.168.2.4	0xf116	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:51.624901056 CET	1.1.1.1	192.168.2.4	0xf116	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:51.624917984 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 01:12:51.634865046 CET	1.1.1.1	192.168.2.4	0x4a3c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 01:12:51.635135889 CET	1.1.1.1	192.168.2.4	0x862f	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:12:51.635135889 CET	1.1.1.1	192.168.2.4	0x862f	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:04.215439081 CET	1.1.1.1	192.168.2.4	0xe37c	No error (0)	webflow.com		52.4.175.122	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:04.215439081 CET	1.1.1.1	192.168.2.4	0xe37c	No error (0)	webflow.com		52.207.143.58	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:04.215439081 CET	1.1.1.1	192.168.2.4	0xe37c	No error (0)	webflow.com		18.210.65.74	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:05.194565058 CET	1.1.1.1	192.168.2.4	0xa2f7	No error (0)	mail.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:05.194565058 CET	1.1.1.1	192.168.2.4	0xa2f7	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:05.194565058 CET	1.1.1.1	192.168.2.4	0xa2f7	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:05.195499897 CET	1.1.1.1	192.168.2.4	0x2bd0	No error (0)	mail.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:05.211481094 CET	1.1.1.1	192.168.2.4	0xdc34	No error (0)	webflow.com		18.210.65.74	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:05.211481094 CET	1.1.1.1	192.168.2.4	0xdc34	No error (0)	webflow.com		52.207.143.58	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:05.211481094 CET	1.1.1.1	192.168.2.4	0xdc34	No error (0)	webflow.com		52.4.175.122	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:06.335550070 CET	1.1.1.1	192.168.2.4	0x5d31	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:06.335550070 CET	1.1.1.1	192.168.2.4	0x5d31	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:06.336478949 CET	1.1.1.1	192.168.2.4	0x1f00	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:07.174640894 CET	1.1.1.1	192.168.2.4	0x22c0	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:07.174640894 CET	1.1.1.1	192.168.2.4	0x22c0	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.174640894 CET	1.1.1.1	192.168.2.4	0x22c0	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.175172091 CET	1.1.1.1	192.168.2.4	0x6cf9	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:07.190732002 CET	1.1.1.1	192.168.2.4	0xc6f1	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.190888882 CET	1.1.1.1	192.168.2.4	0x29bf	No error (0)	google.com			65	IN (0x0001)	false
Jan 14, 2025 01:13:07.194161892 CET	1.1.1.1	192.168.2.4	0xf5c4	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:07.194161892 CET	1.1.1.1	192.168.2.4	0xf5c4	No error (0)	geo-atsv2.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.194770098 CET	1.1.1.1	192.168.2.4	0xe3ec	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:07.207154036 CET	1.1.1.1	192.168.2.4	0x131a	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:07.207154036 CET	1.1.1.1	192.168.2.4	0x131a	No error (0)	udc-ats.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.207942963 CET	1.1.1.1	192.168.2.4	0x9d3d	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:07.208444118 CET	1.1.1.1	192.168.2.4	0xb8cf	Name error (3)	y.analytics.yahoo.com	none	none	65	IN (0x0001)	false
Jan 14, 2025 01:13:07.208456039 CET	1.1.1.1	192.168.2.4	0x2e7a	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:07.216509104 CET	1.1.1.1	192.168.2.4	0x2e31	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:08.209521055 CET	1.1.1.1	192.168.2.4	0x3134	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:08.209547997 CET	1.1.1.1	192.168.2.4	0xa96	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:08.209547997 CET	1.1.1.1	192.168.2.4	0xa96	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:08.209547997 CET	1.1.1.1	192.168.2.4	0xa96	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.263093948 CET	1.1.1.1	192.168.2.4	0xce97	No error (0)	opus.analytics.yahoo.com	prod.opus.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273180962 CET	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	consent.cmp.oath.com	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273180962 CET	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273180962 CET	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.9	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273180962 CET	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.108	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273180962 CET	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.22	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273215055 CET	1.1.1.1	192.168.2.4	0x5b1f	No error (0)	opus.analytics.yahoo.com	prod.opus.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273215055 CET	1.1.1.1	192.168.2.4	0x5b1f	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.17	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273215055 CET	1.1.1.1	192.168.2.4	0x5b1f	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273215055 CET	1.1.1.1	192.168.2.4	0x5b1f	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.109	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.273215055 CET	1.1.1.1	192.168.2.4	0x5b1f	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.80	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.294023037 CET	1.1.1.1	192.168.2.4	0x390a	No error (0)	consent.cmp.oath.com	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:09.355210066 CET	1.1.1.1	192.168.2.4	0x11e0	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:09.355210066 CET	1.1.1.1	192.168.2.4	0x11e0	No error (0)	udc-ats.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:09.356331110 CET	1.1.1.1	192.168.2.4	0x5289	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.331093073 CET	1.1.1.1	192.168.2.4	0xc44b	No error (0)	opus.analytics.yahoo.com	prod.opus.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.342384100 CET	1.1.1.1	192.168.2.4	0xe9b6	No error (0)	opus.analytics.yahoo.com	prod.opus.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.342384100 CET	1.1.1.1	192.168.2.4	0xe9b6	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.342384100 CET	1.1.1.1	192.168.2.4	0xe9b6	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.17	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.342384100 CET	1.1.1.1	192.168.2.4	0xe9b6	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.80	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.342384100 CET	1.1.1.1	192.168.2.4	0xe9b6	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.109	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.716078997 CET	1.1.1.1	192.168.2.4	0xe55f	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.716078997 CET	1.1.1.1	192.168.2.4	0xe55f	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.716078997 CET	1.1.1.1	192.168.2.4	0xe55f	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.253.93.164	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.716078997 CET	1.1.1.1	192.168.2.4	0xe55f	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.75.184.67	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.716078997 CET	1.1.1.1	192.168.2.4	0xe55f	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.241.10.95	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.726646900 CET	1.1.1.1	192.168.2.4	0xa1cf	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.726646900 CET	1.1.1.1	192.168.2.4	0xa1cf	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.761337996 CET	1.1.1.1	192.168.2.4	0xd532	No error (0)	gpt.mail.yahoo.net	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.761337996 CET	1.1.1.1	192.168.2.4	0xd532	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.761337996 CET	1.1.1.1	192.168.2.4	0xd532	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.778789043 CET	1.1.1.1	192.168.2.4	0xe2bf	No error (0)	consent.cmp.oath.com	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.782104969 CET	1.1.1.1	192.168.2.4	0xd186	No error (0)	consent.cmp.oath.com	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:10.782104969 CET	1.1.1.1	192.168.2.4	0xd186	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.108	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.782104969 CET	1.1.1.1	192.168.2.4	0xd186	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.22	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.782104969 CET	1.1.1.1	192.168.2.4	0xd186	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.9	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.782104969 CET	1.1.1.1	192.168.2.4	0xd186	No error (0)	consent-cmp-prod.dcs-core-dmp-prd.aws.oath.cloud		3.161.82.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:10.786254883 CET	1.1.1.1	192.168.2.4	0xf1b6	No error (0)	gpt.mail.yahoo.net	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.770389080 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.770389080 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.770389080 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.241.10.95	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.770389080 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.75.184.67	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.770389080 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.253.93.164	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.771056890 CET	1.1.1.1	192.168.2.4	0x778a	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.771056890 CET	1.1.1.1	192.168.2.4	0x778a	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.796468973 CET	1.1.1.1	192.168.2.4	0x3eca	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.796468973 CET	1.1.1.1	192.168.2.4	0x3eca	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.796468973 CET	1.1.1.1	192.168.2.4	0x3eca	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.796667099 CET	1.1.1.1	192.168.2.4	0xda8f	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.817195892 CET	1.1.1.1	192.168.2.4	0xbce1	No error (0)	csp.yahoo.com	media-router-brb1.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.817195892 CET	1.1.1.1	192.168.2.4	0xbce1	No error (0)	media-router-brb1.prod.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.819562912 CET	1.1.1.1	192.168.2.4	0xc629	No error (0)	csp.yahoo.com	media-router-brb1.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.845191956 CET	1.1.1.1	192.168.2.4	0x96b9	No error (0)	securepubads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.845683098 CET	1.1.1.1	192.168.2.4	0x680f	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Jan 14, 2025 01:13:11.856755018 CET	1.1.1.1	192.168.2.4	0x84a2	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:11.856755018 CET	1.1.1.1	192.168.2.4	0x84a2	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.856755018 CET	1.1.1.1	192.168.2.4	0x84a2	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:11.856775999 CET	1.1.1.1	192.168.2.4	0x7826	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:12.759006977 CET	1.1.1.1	192.168.2.4	0x6d3e	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:12.759006977 CET	1.1.1.1	192.168.2.4	0x6d3e	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:12.759006977 CET	1.1.1.1	192.168.2.4	0x6d3e	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:12.760083914 CET	1.1.1.1	192.168.2.4	0xea2c	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:13.759470940 CET	1.1.1.1	192.168.2.4	0x7ded	Name error (3)	241.42.69.40.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Jan 14, 2025 01:13:13.971801996 CET	1.1.1.1	192.168.2.4	0x26b3	No error (0)	cadmus.script.ac		104.18.22.145	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:13.971801996 CET	1.1.1.1	192.168.2.4	0x26b3	No error (0)	cadmus.script.ac		104.18.23.145	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:13.972467899 CET	1.1.1.1	192.168.2.4	0x3360	No error (0)	cadmus.script.ac			65	IN (0x0001)	false
Jan 14, 2025 01:13:13.973368883 CET	1.1.1.1	192.168.2.4	0x6997	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:13.973524094 CET	1.1.1.1	192.168.2.4	0xa4f9	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:13.973524094 CET	1.1.1.1	192.168.2.4	0xa4f9	No error (0)	noa-atsv2.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:13.986820936 CET	1.1.1.1	192.168.2.4	0x6b1b	No error (0)	opus.analytics.yahoo.com	prod.opus.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:14.003556967 CET	1.1.1.1	192.168.2.4	0x7199	No error (0)	opus.analytics.yahoo.com	prod.opus.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:14.003556967 CET	1.1.1.1	192.168.2.4	0x7199	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.17	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.003556967 CET	1.1.1.1	192.168.2.4	0x7199	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.003556967 CET	1.1.1.1	192.168.2.4	0x7199	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.109	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.003556967 CET	1.1.1.1	192.168.2.4	0x7199	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.80	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.428675890 CET	1.1.1.1	192.168.2.4	0x7f6d	No error (0)	securepubads.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.429375887 CET	1.1.1.1	192.168.2.4	0xe0e3	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Jan 14, 2025 01:13:14.881099939 CET	1.1.1.1	192.168.2.4	0x627a	No error (0)	cadmus.script.ac		104.18.22.145	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.881099939 CET	1.1.1.1	192.168.2.4	0x627a	No error (0)	cadmus.script.ac		104.18.23.145	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:14.881735086 CET	1.1.1.1	192.168.2.4	0x731f	No error (0)	cadmus.script.ac			65	IN (0x0001)	false
Jan 14, 2025 01:13:14.893332958 CET	1.1.1.1	192.168.2.4	0xa6d7	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.043601990 CET	1.1.1.1	192.168.2.4	0xe04c	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:15.043601990 CET	1.1.1.1	192.168.2.4	0xe04c	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.043601990 CET	1.1.1.1	192.168.2.4	0xe04c	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.044709921 CET	1.1.1.1	192.168.2.4	0x80ca	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:15.611241102 CET	1.1.1.1	192.168.2.4	0xea47	No error (0)	pbs.yahoo.com	edge-prebid-cdn.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:15.611241102 CET	1.1.1.1	192.168.2.4	0xea47	No error (0)	edge-prebid-cdn.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.611241102 CET	1.1.1.1	192.168.2.4	0xea47	No error (0)	edge-prebid-cdn.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.611742020 CET	1.1.1.1	192.168.2.4	0xc9ea	No error (0)	pbs.yahoo.com	edge-prebid-cdn.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:15.613045931 CET	1.1.1.1	192.168.2.4	0xd85f	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:15.613045931 CET	1.1.1.1	192.168.2.4	0xd85f	No error (0)	idx.cph.liveintent.com		34.194.178.247	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.613045931 CET	1.1.1.1	192.168.2.4	0xd85f	No error (0)	idx.cph.liveintent.com		34.238.92.28	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.613045931 CET	1.1.1.1	192.168.2.4	0xd85f	No error (0)	idx.cph.liveintent.com		18.210.235.203	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.613045931 CET	1.1.1.1	192.168.2.4	0xd85f	No error (0)	idx.cph.liveintent.com		44.220.97.187	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.613045931 CET	1.1.1.1	192.168.2.4	0xd85f	No error (0)	idx.cph.liveintent.com		54.164.90.29	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.613045931 CET	1.1.1.1	192.168.2.4	0xd85f	No error (0)	idx.cph.liveintent.com		3.221.57.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:15.613872051 CET	1.1.1.1	192.168.2.4	0xd00f	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.112694979 CET	1.1.1.1	192.168.2.4	0x3a14	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.112694979 CET	1.1.1.1	192.168.2.4	0x3a14	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.112694979 CET	1.1.1.1	192.168.2.4	0x3a14	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.112694979 CET	1.1.1.1	192.168.2.4	0x3a14	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.112694979 CET	1.1.1.1	192.168.2.4	0x3a14	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.112838984 CET	1.1.1.1	192.168.2.4	0xb10d	No error (0)	securepubads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.124095917 CET	1.1.1.1	192.168.2.4	0x2bf2	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.124095917 CET	1.1.1.1	192.168.2.4	0x2bf2	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.124095917 CET	1.1.1.1	192.168.2.4	0x2bf2	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.142036915 CET	1.1.1.1	192.168.2.4	0xdd22	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.406302929 CET	1.1.1.1	192.168.2.4	0x261c	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.406302929 CET	1.1.1.1	192.168.2.4	0x261c	No error (0)	ds-ats.member.g02.yahoodns.net		212.82.100.140	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.556231022 CET	1.1.1.1	192.168.2.4	0x95ab	No error (0)	pbs.yahoo.com	edge-prebid-cdn.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.556231022 CET	1.1.1.1	192.168.2.4	0x95ab	No error (0)	edge-prebid-cdn.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.556231022 CET	1.1.1.1	192.168.2.4	0x95ab	No error (0)	edge-prebid-cdn.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.753818989 CET	1.1.1.1	192.168.2.4	0x4951	No error (0)	tsdtocl.com		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.753818989 CET	1.1.1.1	192.168.2.4	0x4951	No error (0)	tsdtocl.com		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.753818989 CET	1.1.1.1	192.168.2.4	0x4951	No error (0)	tsdtocl.com		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.753818989 CET	1.1.1.1	192.168.2.4	0x4951	No error (0)	tsdtocl.com		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.754388094 CET	1.1.1.1	192.168.2.4	0x8059	No error (0)	opus.analytics.yahoo.com	prod.opus.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.754388094 CET	1.1.1.1	192.168.2.4	0x8059	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.754388094 CET	1.1.1.1	192.168.2.4	0x8059	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.109	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.754388094 CET	1.1.1.1	192.168.2.4	0x8059	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.80	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.754388094 CET	1.1.1.1	192.168.2.4	0x8059	No error (0)	prod.opus.aolp-ds-prd.aws.oath.cloud		65.9.66.17	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.778209925 CET	1.1.1.1	192.168.2.4	0x2ba4	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.778209925 CET	1.1.1.1	192.168.2.4	0x2ba4	No error (0)	noa-atsv2.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873225927 CET	1.1.1.1	192.168.2.4	0x2431	No error (0)	c2shb-oao.ssp.yahoo.com	global-dtp-oao.ybp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873225927 CET	1.1.1.1	192.168.2.4	0x2431	No error (0)	global-dtp-oao.ybp.yahoo.com	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873225927 CET	1.1.1.1	192.168.2.4	0x2431	No error (0)	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud		52.18.154.142	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873225927 CET	1.1.1.1	192.168.2.4	0x2431	No error (0)	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud		3.248.73.163	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873225927 CET	1.1.1.1	192.168.2.4	0x2431	No error (0)	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud		54.72.208.215	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873225927 CET	1.1.1.1	192.168.2.4	0x2431	No error (0)	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud		34.241.203.84	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873225927 CET	1.1.1.1	192.168.2.4	0x2431	No error (0)	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud		18.203.163.140	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.873225927 CET	1.1.1.1	192.168.2.4	0x2431	No error (0)	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud		34.252.120.72	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.882070065 CET	1.1.1.1	192.168.2.4	0x7989	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.882070065 CET	1.1.1.1	192.168.2.4	0x7989	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.882070065 CET	1.1.1.1	192.168.2.4	0x7989	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.882070065 CET	1.1.1.1	192.168.2.4	0x7989	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.882070065 CET	1.1.1.1	192.168.2.4	0x7989	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	livepixel-production.bln.liveintent.com		44.195.149.119	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	livepixel-production.bln.liveintent.com		23.21.229.6	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	livepixel-production.bln.liveintent.com		18.206.108.202	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	livepixel-production.bln.liveintent.com		44.221.168.224	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	livepixel-production.bln.liveintent.com		3.94.72.4	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	livepixel-production.bln.liveintent.com		34.231.219.101	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	livepixel-production.bln.liveintent.com		52.54.248.128	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:16.884819984 CET	1.1.1.1	192.168.2.4	0xea3b	No error (0)	livepixel-production.bln.liveintent.com		3.214.107.21	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:17.011511087 CET	1.1.1.1	192.168.2.4	0x11d9	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:17.011511087 CET	1.1.1.1	192.168.2.4	0x11d9	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:17.011511087 CET	1.1.1.1	192.168.2.4	0x11d9	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:17.971532106 CET	1.1.1.1	192.168.2.4	0xc2dd	No error (0)	yahoo-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:19.298736095 CET	1.1.1.1	192.168.2.4	0x3e6e	Name error (3)	tags.bluekai.com	none	none	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.309798002 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:19.309798002 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.309798002 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.350435972 CET	1.1.1.1	192.168.2.4	0x8951	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:19.350435972 CET	1.1.1.1	192.168.2.4	0x8951	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		3.254.223.93	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.350435972 CET	1.1.1.1	192.168.2.4	0x8951	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.213.25.182	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.350435972 CET	1.1.1.1	192.168.2.4	0x8951	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		34.248.93.34	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.350435972 CET	1.1.1.1	192.168.2.4	0x8951	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.229.90.108	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.211.89.170	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.83.154	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.46.177	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.211.121.244	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.247.168	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.204.64	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.77.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.419339895 CET	1.1.1.1	192.168.2.4	0x6d48	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.200.255	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.425482035 CET	1.1.1.1	192.168.2.4	0x4ef5	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:19.425482035 CET	1.1.1.1	192.168.2.4	0x4ef5	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.425482035 CET	1.1.1.1	192.168.2.4	0x4ef5	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.425482035 CET	1.1.1.1	192.168.2.4	0x4ef5	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.425482035 CET	1.1.1.1	192.168.2.4	0x4ef5	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.737502098 CET	1.1.1.1	192.168.2.4	0xa4e1	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.737502098 CET	1.1.1.1	192.168.2.4	0xa4e1	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.737502098 CET	1.1.1.1	192.168.2.4	0xa4e1	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.737502098 CET	1.1.1.1	192.168.2.4	0xa4e1	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:19.755065918 CET	1.1.1.1	192.168.2.4	0x8fd5	No error (0)	ep1.adtrafficquality.google		142.250.184.194	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:20.249440908 CET	1.1.1.1	192.168.2.4	0x14c9	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:20.416182041 CET	1.1.1.1	192.168.2.4	0xd588	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:20.416182041 CET	1.1.1.1	192.168.2.4	0xd588	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:20.416182041 CET	1.1.1.1	192.168.2.4	0xd588	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:20.798738956 CET	1.1.1.1	192.168.2.4	0xd3e6	No error (0)	pagead-googlehosted.l.google.com		142.250.186.97	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:20.800229073 CET	1.1.1.1	192.168.2.4	0xede7	No error (0)	ep2.adtrafficquality.google		172.217.16.129	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:21.742856026 CET	1.1.1.1	192.168.2.4	0x36cc	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:21.742856026 CET	1.1.1.1	192.168.2.4	0x36cc	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:21.742856026 CET	1.1.1.1	192.168.2.4	0x36cc	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:21.742856026 CET	1.1.1.1	192.168.2.4	0x36cc	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:21.742856026 CET	1.1.1.1	192.168.2.4	0x36cc	No error (0)	hj5ozcalb.puzztake.com		198.199.89.209	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:21.742856026 CET	1.1.1.1	192.168.2.4	0x36cc	No error (0)	hj5ozcalb.puzztake.com		167.99.229.36	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.130297899 CET	1.1.1.1	192.168.2.4	0x60d9	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.615787029 CET	1.1.1.1	192.168.2.4	0x3fc4	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:22.615787029 CET	1.1.1.1	192.168.2.4	0x3fc4	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.615787029 CET	1.1.1.1	192.168.2.4	0x3fc4	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.615787029 CET	1.1.1.1	192.168.2.4	0x3fc4	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.615787029 CET	1.1.1.1	192.168.2.4	0x3fc4	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.615787029 CET	1.1.1.1	192.168.2.4	0x3fc4	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.615787029 CET	1.1.1.1	192.168.2.4	0x3fc4	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.615787029 CET	1.1.1.1	192.168.2.4	0x3fc4	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.762351990 CET	1.1.1.1	192.168.2.4	0x13e	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:22.762351990 CET	1.1.1.1	192.168.2.4	0x13e	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.762351990 CET	1.1.1.1	192.168.2.4	0x13e	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.762351990 CET	1.1.1.1	192.168.2.4	0x13e	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.762351990 CET	1.1.1.1	192.168.2.4	0x13e	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.794487953 CET	1.1.1.1	192.168.2.4	0xf9ba	No error (0)	crb.kargo.com		3.64.183.169	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.794487953 CET	1.1.1.1	192.168.2.4	0xf9ba	No error (0)	crb.kargo.com		18.196.193.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:22.794487953 CET	1.1.1.1	192.168.2.4	0xf9ba	No error (0)	crb.kargo.com		18.198.113.36	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:23.990401030 CET	1.1.1.1	192.168.2.4	0x8907	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:24.632641077 CET	1.1.1.1	192.168.2.4	0x1a9e	No error (0)	api.archive-digger.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:24.632641077 CET	1.1.1.1	192.168.2.4	0x1a9e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:24.632641077 CET	1.1.1.1	192.168.2.4	0x1a9e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:24.632641077 CET	1.1.1.1	192.168.2.4	0x1a9e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:24.632641077 CET	1.1.1.1	192.168.2.4	0x1a9e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:25.410814047 CET	1.1.1.1	192.168.2.4	0x38d2	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:25.410814047 CET	1.1.1.1	192.168.2.4	0x38d2	No error (0)	image8-v2.pubmnet.com	imgsync-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:25.410814047 CET	1.1.1.1	192.168.2.4	0x38d2	No error (0)	imgsync-amsfpairbc.pubmnet.com		198.47.127.18	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:25.735574007 CET	1.1.1.1	192.168.2.4	0x9771	No error (0)	hbx.media.net		2.23.240.30	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.349425077 CET	1.1.1.1	192.168.2.4	0x4b92	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:26.349425077 CET	1.1.1.1	192.168.2.4	0x4b92	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.363733053 CET	1.1.1.1	192.168.2.4	0x2d52	No error (0)	beacon.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:26.363733053 CET	1.1.1.1	192.168.2.4	0x2d52	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.363733053 CET	1.1.1.1	192.168.2.4	0x2d52	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.363733053 CET	1.1.1.1	192.168.2.4	0x2d52	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.363733053 CET	1.1.1.1	192.168.2.4	0x2d52	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.406270027 CET	1.1.1.1	192.168.2.4	0xcf4a	No error (0)	images.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:26.406270027 CET	1.1.1.1	192.168.2.4	0xcf4a	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.406270027 CET	1.1.1.1	192.168.2.4	0xcf4a	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.406270027 CET	1.1.1.1	192.168.2.4	0xcf4a	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.406270027 CET	1.1.1.1	192.168.2.4	0xcf4a	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		98.84.205.158	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.152.212.203	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.207.79.239	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.209.19.249	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.237.60.62	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.22.155.227	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.225.153.120	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:26.746249914 CET	1.1.1.1	192.168.2.4	0xaad2	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.89.94.152	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:27.022470951 CET	1.1.1.1	192.168.2.4	0x40d7	No error (0)	cds.taboola.com	us-cds.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:27.022470951 CET	1.1.1.1	192.168.2.4	0x40d7	No error (0)	us-cds.taboola.com		141.226.224.32	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:27.209855080 CET	1.1.1.1	192.168.2.4	0x2086	No error (0)	cm.g.doubleclick.net		172.217.18.2	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:27.525958061 CET	1.1.1.1	192.168.2.4	0x3499	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:27.525958061 CET	1.1.1.1	192.168.2.4	0x3499	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:28.162635088 CET	1.1.1.1	192.168.2.4	0x47f1	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:28.162635088 CET	1.1.1.1	192.168.2.4	0x47f1	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:28.162635088 CET	1.1.1.1	192.168.2.4	0x47f1	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:28.750566006 CET	1.1.1.1	192.168.2.4	0xfd13	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:28.750566006 CET	1.1.1.1	192.168.2.4	0xfd13	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:28.750566006 CET	1.1.1.1	192.168.2.4	0xfd13	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:29.183978081 CET	1.1.1.1	192.168.2.4	0x7058	No error (0)	eexsync.com		80.77.87.108	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359101057 CET	1.1.1.1	192.168.2.4	0x58ed	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359101057 CET	1.1.1.1	192.168.2.4	0x58ed	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	idaas-ext.cph.liveintent.com		52.73.207.134	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	idaas-ext.cph.liveintent.com		34.201.214.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	idaas-ext.cph.liveintent.com		3.208.153.251	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	idaas-ext.cph.liveintent.com		54.205.32.236	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	idaas-ext.cph.liveintent.com		3.218.55.33	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	idaas-ext.cph.liveintent.com		52.55.72.170	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	idaas-ext.cph.liveintent.com		52.205.26.233	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359466076 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	idaas-ext.cph.liveintent.com		54.225.89.216	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359687090 CET	1.1.1.1	192.168.2.4	0x89fe	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359687090 CET	1.1.1.1	192.168.2.4	0x89fe	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.248.108.242	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359687090 CET	1.1.1.1	192.168.2.4	0x89fe	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.51.29.15	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359687090 CET	1.1.1.1	192.168.2.4	0x89fe	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.76.91.170	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.359687090 CET	1.1.1.1	192.168.2.4	0x89fe	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		63.34.161.76	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.535335064 CET	1.1.1.1	192.168.2.4	0xf23b	No error (0)	cs.media.net		2.23.240.30	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.792210102 CET	1.1.1.1	192.168.2.4	0xe71b	No error (0)	cs.emxdgt.com	proxy-euro-2-685782417.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:30.792210102 CET	1.1.1.1	192.168.2.4	0xe71b	No error (0)	proxy-euro-2-685782417.eu-central-1.elb.amazonaws.com		3.69.214.99	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.792210102 CET	1.1.1.1	192.168.2.4	0xe71b	No error (0)	proxy-euro-2-685782417.eu-central-1.elb.amazonaws.com		3.68.143.2	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.792210102 CET	1.1.1.1	192.168.2.4	0xe71b	No error (0)	proxy-euro-2-685782417.eu-central-1.elb.amazonaws.com		18.192.180.216	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:30.792210102 CET	1.1.1.1	192.168.2.4	0xe71b	No error (0)	proxy-euro-2-685782417.eu-central-1.elb.amazonaws.com		18.193.51.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.063971996 CET	1.1.1.1	192.168.2.4	0x1831	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:31.125370979 CET	1.1.1.1	192.168.2.4	0xa0ba	No error (0)	sync.srv.stackadapt.com		34.234.109.98	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.125370979 CET	1.1.1.1	192.168.2.4	0xa0ba	No error (0)	sync.srv.stackadapt.com		52.200.38.60	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.125370979 CET	1.1.1.1	192.168.2.4	0xa0ba	No error (0)	sync.srv.stackadapt.com		52.71.40.119	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.125370979 CET	1.1.1.1	192.168.2.4	0xa0ba	No error (0)	sync.srv.stackadapt.com		35.153.85.19	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.125370979 CET	1.1.1.1	192.168.2.4	0xa0ba	No error (0)	sync.srv.stackadapt.com		54.166.196.94	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.125370979 CET	1.1.1.1	192.168.2.4	0xa0ba	No error (0)	sync.srv.stackadapt.com		54.156.21.112	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.125370979 CET	1.1.1.1	192.168.2.4	0xa0ba	No error (0)	sync.srv.stackadapt.com		52.204.170.218	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.125370979 CET	1.1.1.1	192.168.2.4	0xa0ba	No error (0)	sync.srv.stackadapt.com		34.203.116.124	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.167643070 CET	1.1.1.1	192.168.2.4	0xff6b	No error (0)	thrtle.com		34.233.219.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.167643070 CET	1.1.1.1	192.168.2.4	0xff6b	No error (0)	thrtle.com		54.225.117.250	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.167643070 CET	1.1.1.1	192.168.2.4	0xff6b	No error (0)	thrtle.com		52.6.98.243	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.167643070 CET	1.1.1.1	192.168.2.4	0xff6b	No error (0)	thrtle.com		52.204.65.193	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:31.167643070 CET	1.1.1.1	192.168.2.4	0xff6b	No error (0)	thrtle.com		23.21.74.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.247.120.220	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.74.180.243	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.16.250.210	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		63.32.213.101	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.152.212	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.228.174.248	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.154.126.78	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.111398935 CET	1.1.1.1	192.168.2.4	0x1d60	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		18.203.50.141	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:32.759553909 CET	1.1.1.1	192.168.2.4	0x3039	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	nld-prebid.a-mx.net		163.5.194.34	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	nld-prebid.a-mx.net		163.5.194.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	nld-prebid.a-mx.net		163.5.194.35	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	nld-prebid.a-mx.net		163.5.194.32	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	nld-prebid.a-mx.net		163.5.194.33	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	nld-prebid.a-mx.net		163.5.194.30	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	nld-prebid.a-mx.net		163.5.194.37	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.100089073 CET	1.1.1.1	192.168.2.4	0x93cc	No error (0)	nld-prebid.a-mx.net		163.5.194.36	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.597908974 CET	1.1.1.1	192.168.2.4	0xb1c3	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:34.597908974 CET	1.1.1.1	192.168.2.4	0xb1c3	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:34.597908974 CET	1.1.1.1	192.168.2.4	0xb1c3	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.660177946 CET	1.1.1.1	192.168.2.4	0x3ade	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:34.660177946 CET	1.1.1.1	192.168.2.4	0x3ade	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.052594900 CET	1.1.1.1	192.168.2.4	0x1b7f	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:35.506516933 CET	1.1.1.1	192.168.2.4	0x1abe	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:35.526732922 CET	1.1.1.1	192.168.2.4	0xc7a7	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:35.526732922 CET	1.1.1.1	192.168.2.4	0xc7a7	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.541011095 CET	1.1.1.1	192.168.2.4	0x11e6	No error (0)	aax-eu.amazon-adsystem.com		52.95.125.22	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.637860060 CET	1.1.1.1	192.168.2.4	0x5605	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.654788017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.660300970 CET	1.1.1.1	192.168.2.4	0xc82e	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.660300970 CET	1.1.1.1	192.168.2.4	0xc82e	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.660300970 CET	1.1.1.1	192.168.2.4	0xc82e	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.666868925 CET	1.1.1.1	192.168.2.4	0xcece	No error (0)	um.simpli.fi		35.204.201.36	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.666868925 CET	1.1.1.1	192.168.2.4	0xcece	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:35.666868925 CET	1.1.1.1	192.168.2.4	0xcece	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.417622089 CET	1.1.1.1	192.168.2.4	0x76a0	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:36.417622089 CET	1.1.1.1	192.168.2.4	0x76a0	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.435342073 CET	1.1.1.1	192.168.2.4	0x7b6f	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:36.435342073 CET	1.1.1.1	192.168.2.4	0x7b6f	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.435342073 CET	1.1.1.1	192.168.2.4	0x7b6f	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.435342073 CET	1.1.1.1	192.168.2.4	0x7b6f	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.435342073 CET	1.1.1.1	192.168.2.4	0x7b6f	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.435451031 CET	1.1.1.1	192.168.2.4	0x5de6	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:36.435451031 CET	1.1.1.1	192.168.2.4	0x5de6	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:36.435451031 CET	1.1.1.1	192.168.2.4	0x5de6	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.639736891 CET	1.1.1.1	192.168.2.4	0x7841	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:36.639736891 CET	1.1.1.1	192.168.2.4	0x7841	No error (0)	image4-v2.pubmnet.com	spug22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:36.639736891 CET	1.1.1.1	192.168.2.4	0x7841	No error (0)	spug22000nf.pubmatic.com		185.64.189.114	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.642637968 CET	1.1.1.1	192.168.2.4	0x26c6	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:36.642637968 CET	1.1.1.1	192.168.2.4	0x26c6	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.645294905 CET	1.1.1.1	192.168.2.4	0xe6bd	No error (0)	id.a-mx.com		79.127.216.47	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.645294905 CET	1.1.1.1	192.168.2.4	0xe6bd	No error (0)	id.a-mx.com		79.127.227.46	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.645853996 CET	1.1.1.1	192.168.2.4	0xd8dd	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.645853996 CET	1.1.1.1	192.168.2.4	0xd8dd	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.647722960 CET	1.1.1.1	192.168.2.4	0x61d	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:36.650477886 CET	1.1.1.1	192.168.2.4	0x8e0b	No error (0)	ssum.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:36.650477886 CET	1.1.1.1	192.168.2.4	0x8e0b	No error (0)	ssum.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.098382950 CET	1.1.1.1	192.168.2.4	0x199e	No error (0)	match.prod.bidr.io		52.48.191.9	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.098382950 CET	1.1.1.1	192.168.2.4	0x199e	No error (0)	match.prod.bidr.io		52.48.57.98	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.098382950 CET	1.1.1.1	192.168.2.4	0x199e	No error (0)	match.prod.bidr.io		63.32.181.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.098382950 CET	1.1.1.1	192.168.2.4	0x199e	No error (0)	match.prod.bidr.io		54.228.93.54	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.098382950 CET	1.1.1.1	192.168.2.4	0x199e	No error (0)	match.prod.bidr.io		54.154.231.237	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.098382950 CET	1.1.1.1	192.168.2.4	0x199e	No error (0)	match.prod.bidr.io		34.252.79.168	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.098382950 CET	1.1.1.1	192.168.2.4	0x199e	No error (0)	match.prod.bidr.io		54.154.177.234	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.272377014 CET	1.1.1.1	192.168.2.4	0x730c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:37.272377014 CET	1.1.1.1	192.168.2.4	0x730c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	sync.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	nld-prebid.a-mx.net		163.5.194.33	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	nld-prebid.a-mx.net		163.5.194.35	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	nld-prebid.a-mx.net		163.5.194.37	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	nld-prebid.a-mx.net		163.5.194.32	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	nld-prebid.a-mx.net		163.5.194.30	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	nld-prebid.a-mx.net		163.5.194.36	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	nld-prebid.a-mx.net		163.5.194.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.307209015 CET	1.1.1.1	192.168.2.4	0xf8b2	No error (0)	nld-prebid.a-mx.net		163.5.194.34	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.509756088 CET	1.1.1.1	192.168.2.4	0x8de1	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:37.665294886 CET	1.1.1.1	192.168.2.4	0x6590	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:37.665294886 CET	1.1.1.1	192.168.2.4	0x6590	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:37.665294886 CET	1.1.1.1	192.168.2.4	0x6590	No error (0)	spug-lhrc.pubmnet.com		185.64.190.81	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.761806011 CET	1.1.1.1	192.168.2.4	0xf7cd	No error (0)	rtb.gumgum.com		52.30.150.203	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.761806011 CET	1.1.1.1	192.168.2.4	0xf7cd	No error (0)	rtb.gumgum.com		52.211.50.181	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.761806011 CET	1.1.1.1	192.168.2.4	0xf7cd	No error (0)	rtb.gumgum.com		54.228.25.110	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.761806011 CET	1.1.1.1	192.168.2.4	0xf7cd	No error (0)	rtb.gumgum.com		34.243.104.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.761806011 CET	1.1.1.1	192.168.2.4	0xf7cd	No error (0)	rtb.gumgum.com		54.195.177.127	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.761806011 CET	1.1.1.1	192.168.2.4	0xf7cd	No error (0)	rtb.gumgum.com		52.18.27.11	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.761806011 CET	1.1.1.1	192.168.2.4	0xf7cd	No error (0)	rtb.gumgum.com		54.73.101.16	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:37.761806011 CET	1.1.1.1	192.168.2.4	0xf7cd	No error (0)	rtb.gumgum.com		54.171.63.54	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.417186975 CET	1.1.1.1	192.168.2.4	0xa2d2	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:38.417186975 CET	1.1.1.1	192.168.2.4	0xa2d2	No error (0)	geo-atsv2.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		96.46.186.61	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		96.46.186.64	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		96.46.186.63	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		172.240.127.131	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		96.46.186.59	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		172.240.127.129	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		96.46.186.65	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		172.240.127.130	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.615555048 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	ssp.ads.betweendigital.com		172.240.127.128	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.895673037 CET	1.1.1.1	192.168.2.4	0x9a82	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.895673037 CET	1.1.1.1	192.168.2.4	0x9a82	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.900108099 CET	1.1.1.1	192.168.2.4	0x429d	No error (0)	sync.ipredictive.com		44.205.182.185	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.900108099 CET	1.1.1.1	192.168.2.4	0x429d	No error (0)	sync.ipredictive.com		34.225.22.174	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.900108099 CET	1.1.1.1	192.168.2.4	0x429d	No error (0)	sync.ipredictive.com		34.197.8.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.900108099 CET	1.1.1.1	192.168.2.4	0x429d	No error (0)	sync.ipredictive.com		52.1.102.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.900108099 CET	1.1.1.1	192.168.2.4	0x429d	No error (0)	sync.ipredictive.com		3.210.132.182	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.900108099 CET	1.1.1.1	192.168.2.4	0x429d	No error (0)	sync.ipredictive.com		52.23.100.133	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.900108099 CET	1.1.1.1	192.168.2.4	0x429d	No error (0)	sync.ipredictive.com		34.196.74.196	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.900108099 CET	1.1.1.1	192.168.2.4	0x429d	No error (0)	sync.ipredictive.com		44.210.213.98	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.902075052 CET	1.1.1.1	192.168.2.4	0xb8fc	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:38.902075052 CET	1.1.1.1	192.168.2.4	0xb8fc	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.902075052 CET	1.1.1.1	192.168.2.4	0xb8fc	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.902075052 CET	1.1.1.1	192.168.2.4	0xb8fc	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.902075052 CET	1.1.1.1	192.168.2.4	0xb8fc	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.903882980 CET	1.1.1.1	192.168.2.4	0x74a7	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:38.903882980 CET	1.1.1.1	192.168.2.4	0x74a7	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:38.903882980 CET	1.1.1.1	192.168.2.4	0x74a7	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:38.903882980 CET	1.1.1.1	192.168.2.4	0x74a7	No error (0)	chidc2.outbrain.org		50.31.142.127	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:38.906544924 CET	1.1.1.1	192.168.2.4	0x6bf1	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:38.906544924 CET	1.1.1.1	192.168.2.4	0x6bf1	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:38.906544924 CET	1.1.1.1	192.168.2.4	0x6bf1	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.160020113 CET	1.1.1.1	192.168.2.4	0x2004	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.333168983 CET	1.1.1.1	192.168.2.4	0xd0c3	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:39.472599983 CET	1.1.1.1	192.168.2.4	0x58a4	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:39.472599983 CET	1.1.1.1	192.168.2.4	0x58a4	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.893264055 CET	1.1.1.1	192.168.2.4	0x2230	No error (0)	google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.894449949 CET	1.1.1.1	192.168.2.4	0x5dc9	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:39.894449949 CET	1.1.1.1	192.168.2.4	0x5dc9	No error (0)	udc-ats.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.902987003 CET	1.1.1.1	192.168.2.4	0xa52	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:39.953406096 CET	1.1.1.1	192.168.2.4	0xe924	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:39.953406096 CET	1.1.1.1	192.168.2.4	0xe924	No error (0)	udc-ats.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:40.805883884 CET	1.1.1.1	192.168.2.4	0x6e96	No error (0)	b1sync.outbrain.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:40.805883884 CET	1.1.1.1	192.168.2.4	0x6e96	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:40.805883884 CET	1.1.1.1	192.168.2.4	0x6e96	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:40.805883884 CET	1.1.1.1	192.168.2.4	0x6e96	No error (0)	nydc1.outbrain.org		70.42.32.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:40.807291031 CET	1.1.1.1	192.168.2.4	0x56e3	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:40.807291031 CET	1.1.1.1	192.168.2.4	0x56e3	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:40.807291031 CET	1.1.1.1	192.168.2.4	0x56e3	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:40.810828924 CET	1.1.1.1	192.168.2.4	0x67eb	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:40.810828924 CET	1.1.1.1	192.168.2.4	0x67eb	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 01:13:40.810828924 CET	1.1.1.1	192.168.2.4	0x67eb	No error (0)	bid-iad-static.yeahtargeter.com		47.253.61.56	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:13:51.335798979 CET	1.1.1.1	192.168.2.4	0x3c66	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	172.64.151.8	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:48 UTC	674	OUT	GET / HTTP/1.1 Host: offfryfjtht767755433.webflow.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:48 UTC	815	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 90196aa48b2142f2-EWR CF-Cache-Status: HIT Age: 47017 Last-Modified: Sun, 12 Jan 2025 13:07:08 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: offfryfjtht767755433.webflow.io 6783bca3840111e5424ee986 pageId:6783bca3840111e5424ee995 x-lambda-id: 1be43e00-f8ff-4ce2-baa8-3684ab6028a0 vary: Accept-Encoding Set-Cookie: _cfuvid=01XOKOSDH8cuX_92yqFGjqxkVMWBysiLG9VyUKa8CqM-1736813568778-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:48 UTC	554	IN	Data Raw: 64 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 53 75 6e 20 4a 61 6e 20 31 32 20 32 30 32 35 20 31 33 3a 30 37 3a 30 31 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 6f 66 66 66 72 79 66 6a 74 68 74 37 36 37 37 35 35 34 33 33 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 37 38 33 62 63 61 33 38 34 30 31 31 31 65 35 34 Data Ascii: d9e<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Sun Jan 12 2025 13:07:01 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="offfryfjtht767755433.webflow.io" data-wf-page="6783bca3840111e54
2025-01-14 00:12:48 UTC	1369	IN	Data Raw: 34 30 31 31 31 65 35 34 32 34 65 65 39 38 36 2f 63 73 73 2f 6f 66 66 66 72 79 66 6a 74 68 74 37 36 37 37 35 35 34 33 33 2e 77 65 62 66 6c 6f 77 2e 65 39 38 62 62 37 33 35 63 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6e 3d 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 74 3d 22 20 77 2d 6d 6f 64 2d 22 3b 6e 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 74 2b 22 6a 73 22 2c 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 6f 7c 7c 6f 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 Data Ascii: 40111e5424ee986/css/offfryfjtht767755433.webflow.e98bb735c.css" rel="stylesheet" type="text/css"/><script type="text/javascript">!function(o,c){var n=c.documentElement,t=" w-mod-";n.className+=t+"js",("ontouchstart"in o\|\|o.DocumentTouch&&c instanceof Docu
2025-01-14 00:12:48 UTC	1369	IN	Data Raw: 74 65 57 46 6f 62 32 38 75 59 58 52 30 4c 6d 35 6c 64 43 38 26 61 6d 70 3b 67 75 63 65 5f 72 65 66 65 72 72 65 72 5f 73 69 67 3d 41 51 41 41 41 48 55 37 70 4f 6e 35 50 79 30 49 43 59 52 79 36 48 4d 61 34 77 4b 76 2d 70 57 55 4a 4b 50 74 74 77 6d 55 59 56 6c 39 63 45 6f 71 5a 5f 45 54 57 39 43 7a 79 4a 75 49 69 4c 31 61 42 46 6a 5a 33 50 4e 34 75 71 59 4d 4f 36 4a 6e 36 79 79 51 64 30 59 5a 42 7a 66 72 77 2d 39 63 33 32 68 41 53 79 59 2d 41 57 6a 50 77 61 6b 4c 6a 61 4f 37 53 48 6f 5f 66 45 7a 53 48 78 46 39 78 7a 50 4f 72 56 36 6a 77 51 54 4f 4c 6c 6f 7a 55 37 65 39 63 37 5f 5a 43 58 61 31 31 43 4f 49 64 76 39 61 2d 62 77 74 72 4d 66 75 53 68 4b 5f 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 2d 69 64 3d 22 36 37 38 33 Data Ascii: teWFob28uYXR0Lm5ldC8&guce_referrer_sig=AQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_" method="get" data-wf-page-id="6783
2025-01-14 00:12:48 UTC	201	IN	Data Raw: 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 37 38 33 62 63 61 33 38 34 30 31 31 31 65 35 34 32 34 65 65 39 38 36 2f 6a 73 2f 77 65 62 66 6c 6f 77 2e 39 36 37 62 32 64 66 65 63 37 34 37 65 65 62 30 35 35 65 38 31 33 61 31 66 65 34 33 62 32 33 30 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: rossorigin="anonymous"></script><script src="https://cdn.prod.website-files.com/6783bca3840111e5424ee986/js/webflow.967b2dfec747eeb055e813a1fe43b230.js" type="text/javascript"></script></body></html>
2025-01-14 00:12:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	104.18.161.117	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:49 UTC	626	OUT	GET /6783bca3840111e5424ee986/css/offfryfjtht767755433.webflow.e98bb735c.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:49 UTC	631	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: J0JPsEmFFptZLr0QFTnG6mR92+cwXyUbXyzDLAnYlb15vHy1LfrfGW3Xp6AqpbIXlWBQEjzM7qA= x-amz-request-id: 1DBVT1H2P7WECQ7X Last-Modified: Sun, 12 Jan 2025 13:07:02 GMT ETag: W/"5b989a7dba24157bfc5039a1d257a4c9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: Ecpmf7eQD6igiQcYadresAiPyu.fH0f0 CF-Cache-Status: HIT Age: 47018 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 90196aa8ba1819cf-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:49 UTC	738	IN	Data Raw: 37 64 33 61 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d3ahtml { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 68 Data Ascii: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: content-box; h
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 54 Data Ascii: r-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQT
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 50 Data Ascii: Egb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1P
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f Data Ascii: "], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family: webflow-ico
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 72 65 2e 77 2d 63 6f 64 65 2d 62 6c 6f Data Ascii: r-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}pre.w-code-blo
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 73 65 74 3b 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 75 6e 73 65 74 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 61 Data Ascii: set; word-wrap: unset; transition: unset;}.w-webflow-badge { white-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; opacity: 1 !important; z-index: 2147483647 !importa
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a Data Ascii: -height: 18px;}p { margin-top: 0; margin-bottom: 10px;}blockquote { border-left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align:
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 3a 20 33 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 38 39 38 65 63 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a Data Ascii: : 38px; margin-bottom: 10px; padding: 8px 12px; font-size: 14px; line-height: 1.42857; display: block;}.w-input::placeholder, .w-select::placeholder { color: #999;}.w-input:focus, .w-select:focus { border-color: #3898ec; outline: 0;
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c Data Ascii: .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error { margin-top: 10px; display: block;}.w-file-upload-defaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	104.18.161.117	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:49 UTC	612	OUT	GET /6783bca3840111e5424ee986/js/webflow.967b2dfec747eeb055e813a1fe43b230.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:49 UTC	653	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:49 GMT Content-Type: text/javascript Content-Length: 46298 Connection: close x-amz-id-2: vvjlQ9A2jS6EE2/G2goLmi7bfyevMNlSsPQGmz71z+yvo3r1aZugyAfkWitTPxu4t6UR8KEPzPI= x-amz-request-id: 1DBXJ0QCG5MJMF66 Last-Modified: Sun, 12 Jan 2025 13:07:02 GMT ETag: "86df9b5e983be7ae7d11dba634e66dd0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: erGfuS7E0uy0tjiYdU0ciewzezbtmKkR CF-Cache-Status: HIT Age: 47018 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 90196aa8b8b242f2-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:49 UTC	716	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 70 74 3d 28 65 2c 62 29 3d 3e 28 29 3d 3e 28 62 7c 7c 65 28 28 62 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 62 29 2c 62 2e 65 78 70 6f 72 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var pt=(e,b)=>()=>(b\|\|e((b={exports:{}}).exports,b),b.expor
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 57 74 2e 74 65 73 74 28 74 29 7c 7c 21 71 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 71 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 53 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e Data Ascii: nits do not match ["+t+"]: "+n+", "+i)}function R(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return Wt.test(t)\|\|!qt.test(t)?r=parseInt(t,10):qt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function j(t){S.debug&&window&&window.console.
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 Data Ascii: (t,n,i,r){return it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":["cubi
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 3d 32 29 2a 74 2a 74 2a 74 2a 74 2b 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d Data Ascii: =2)tttt+2)+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 Data Ascii: r,s){return s===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s*=1.525)+1
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 65 7c 7c 55 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 55 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 70 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 55 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 55 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 68 74 3d 62 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 70 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: e\|\|U.oRequestAnimationFrame\|\|U.msRequestAnimationFrame;return t&&p.bind?t.bind(U):function(n){U.setTimeout(n,16)}}(),ht=b.now=function(){var t=U.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&p.bind?n.bind(t):Date.now\|\|function(){retur
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 72 28 4c 29 7b 4c 3d 52 28 4c 2c 30 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 4c 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 4e 28 7b 64 75 72 61 74 69 6f 6e 3a 4c 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 4c 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 4c 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 6a 28 22 4e 6f 20 61 63 74 69 76 65 20 74 Data Ascii: nction r(L){L=R(L,0),this.active?this.queue.push({options:L}):(this.timer=new N({duration:L,context:this,complete:o}),this.active=!0)}function s(L){return this.active?(this.queue.push({options:L,args:arguments}),void(this.timer.complete=o)):j("No active t
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 5d 2c 6c 74 3d 74 68 69 73 2e 70 72 6f 70 73 5b 74 74 5d 2c 21 6c 74 29 7b 69 66 28 21 50 74 29 63 6f 6e 74 69 6e 75 65 3b 6c 74 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 74 74 29 7d 5a 2e 63 61 6c 6c 28 74 68 69 73 2c 6c 74 2c 62 74 29 7d 6e 74 26 26 64 74 26 26 6e 74 2e 63 61 6c 6c 28 74 68 69 73 2c 64 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 4c 29 7b 4c 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 4c 2c 5a 29 7b 4c 2e 73 65 74 28 5a 29 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 4c 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 4c 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 4c 2c 5a 29 7b 74 5b 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 6b 65 2e 63 61 6c 6c 28 74 68 69 73 2c 5a 2c 61 Data Ascii: ],lt=this.props[tt],!lt){if(!Pt)continue;lt=n.call(this,tt)}Z.call(this,lt,bt)}nt&&dt&&nt.call(this,dt)}function ct(L){L.stop()}function It(L,Z){L.set(Z)}function xe(L){this.$el.css(L)}function gt(L,Z){t[L]=function(){return this.children?ke.call(this,Z,a
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 3a 6f 29 2e 72 65 70 6c 61 63 65 28 2f 23 28 5c 77 29 28 5c 77 29 28 5c 77 29 24 2f 2c 22 23 24 31 24 31 24 32 24 32 24 33 24 33 22 29 7d 76 61 72 20 73 3d 7b 64 75 72 61 74 69 6f 6e 3a 35 30 30 2c 65 61 73 65 3a 22 65 61 73 65 22 2c 64 65 6c 61 79 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 79 2c 4f 2c 45 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 79 5b 30 5d 3b 4f 5b 32 5d 26 26 28 63 3d 4f 5b 32 5d 29 2c 41 74 5b 63 5d 26 26 28 63 3d 41 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 4f 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 52 28 79 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 Data Ascii: :o).replace(/#(\w)(\w)(\w)$/,"#$1$1$2$2$3$3")}var s={duration:500,ease:"ease",delay:0};t.init=function(o,y,O,E){this.$el=o,this.el=o[0];var c=y[0];O[2]&&(c=O[2]),At[c]&&(c=At[c]),this.name=c,this.type=O[1],this.duration=R(y[1],this.duration,s.duration),th
2025-01-14 00:12:49 UTC	1369	IN	Data Raw: 7d 2c 74 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 46 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 6f 29 7d 2c 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 68 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 46 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 79 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 Data Ascii: },t.update=function(o){F(this.el,this.name,o)},t.stop=function(){(this.active\|\|this.nextStyle)&&(this.active=!1,this.nextStyle=null,F(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,y){if(o=="auto"&&this.aut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	18.244.20.40	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:49 UTC	653	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6783bca3840111e5424ee986 HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://offfryfjtht767755433.webflow.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:49 UTC	550	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 00:03:12 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 11c65b00bf7f76c861a15dcad5558b9c.cloudfront.net (CloudFront) Age: 578 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: KtJI_pD5GnoWjTELnlhXiqWxQgrdzvPHLHXbmlgRqL6DE_PDMZE8uQ==
2025-01-14 00:12:49 UTC	15834	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-01-14 00:12:49 UTC	16384	IN	Data Raw: 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 Data Ascii: tNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"
2025-01-14 00:12:49 UTC	16384	IN	Data Raw: 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f Data Ascii: ?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?
2025-01-14 00:12:50 UTC	16384	IN	Data Raw: 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: bute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e
2025-01-14 00:12:50 UTC	16384	IN	Data Raw: 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 Data Ascii: eeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.op
2025-01-14 00:12:50 UTC	8106	IN	Data Raw: 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 Data Ascii: s.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpReques

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	104.18.161.117	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:50 UTC	666	OUT	GET /6783bca3840111e5424ee986/6783bddc64c839548aaca1bf_ATT%20LOGOM.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:50 UTC	644	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:50 GMT Content-Type: image/png Content-Length: 4720 Connection: close x-amz-id-2: SCa5+hDingv81UDIUWJyQuKOG4+pYOE/paK9xofxSYox7IvGyATzbAW9TftGuHtw3qzqYk6hL7Y= x-amz-request-id: AC8E20SVM3NBMG7B Last-Modified: Sun, 12 Jan 2025 13:04:39 GMT ETag: "d44c57b749e414a0bcc7335d2a21522a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: SMBOb.q5KUosOLtgMkeWBc7VjRQINrih CF-Cache-Status: HIT Age: 71082 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 90196aae7f198c29-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:50 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5e 00 00 00 90 08 03 00 00 00 77 60 f3 58 00 00 00 ab 50 4c 54 45 ff ff ff 00 a8 e0 00 00 00 00 a3 de 00 a5 df 00 a2 de 58 58 58 20 20 20 75 75 75 e8 e8 e8 ca ca ca 4a 4a 4a 23 23 23 00 aa e1 fc ff ff f8 f8 f8 e7 f6 fc f0 fa fd e2 e2 e2 d9 f0 f9 f5 fc fe be e4 f5 f2 f2 f2 c9 e9 f7 56 bd e7 d5 ee f9 7d ca ec 99 d5 f0 8e d1 ee 1a 1a 1a d1 d1 d1 80 80 80 6f c5 ea a9 a9 a9 6b 6b 6b 9e 9e 9e b2 df f3 a7 db f2 41 b7 e5 2d b1 e3 b9 b9 b9 36 36 36 66 c2 e9 90 90 90 94 d3 ef ad ad ad 86 ce ed 10 10 10 2d 2d 2d 61 61 61 6e 6e 6e 40 40 40 7b 7b 7b c1 c1 c1 34 34 34 8a 8a 8a 00 9b dc d5 2d fa b4 00 00 11 80 49 44 41 54 78 9c ed 5d 69 63 9b 38 10 0d 91 94 9e 38 10 20 5c 6e cb b6 1c 2d 75 69 7a 6d f7 ff ff b2 45 Data Ascii: PNGIHDR^w`XPLTEXXX uuuJJJ###V}okkkA-666f---aaannn@@@{{{444-IDATx]ic88 \n-uizmE
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 0e f0 66 e8 59 23 18 6e 1d 28 27 75 d7 0b 83 22 6d 92 2c cb ea 16 ed 3f cd b6 c8 83 d0 d9 c8 8f e3 e5 79 14 ae 75 ed 8f 1f 9b f1 a9 87 cd 91 be 21 9d 19 16 5b f1 7b 3c 23 34 c4 2a 1e 45 37 0c 05 31 20 48 d5 c7 3d 13 50 b3 93 c0 77 38 14 71 24 cc 7d 9c 8e f7 40 dd 3e 5a bb 36 2c 8e 16 3c 67 70 32 c1 45 45 dd f5 aa 21 eb 26 2f 17 6b 25 c0 c9 4c 6e 09 4d 01 9c 05 5b fb c2 6b 64 b5 7f e0 64 aa 1f 62 c6 38 82 62 8d 73 3a c5 f2 c0 ed bf e6 74 4a 54 4b 86 08 14 1d 6a 16 9d b4 54 d6 55 aa 7d ec 67 03 2e b9 76 50 5d d8 26 6c b0 4a a1 20 f7 a4 1c df 8b 9c f3 9d 20 da ab 36 17 ab 13 3a d4 5a a7 96 3b 4e 79 df 14 8a 14 45 09 9c 30 ad 6d 4d 6a 31 4e c8 36 60 14 73 df 1f 2f 42 49 25 22 4d 0f d7 0b d2 a4 84 58 e8 d1 a5 16 b3 9b f5 47 3f 6b ef cc a3 74 ed 50 54 70 8a d5 Data Ascii: fY#n('u"m,?yu![{<#4*E71 H=Pw8q$}@>Z6,<gp2EE!&/k%LnM[kddb8bs:tJTKjTU}g.vP]&lJ 6:Z;NyE0mMj1N6`s/BI%"MXG?ktPTp
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: ef 77 39 bb 5a f4 5e 5c 64 e2 e2 a7 62 3f 33 ec 84 bb c8 02 26 dd fb 90 b6 db 40 0d d5 c9 12 50 a9 06 a1 22 a6 45 af d0 3c bc 51 d5 eb e8 d1 7b 91 2f 14 3f 55 89 68 e1 ea 22 5c 2f df b6 cc 9a aa c2 a0 57 cb 74 f2 41 c4 d0 52 ea 0b e1 e3 83 e8 18 2d 7a 2f e6 55 0e 6c 16 5e 71 90 94 de 0b b7 16 17 3f 41 04 ec 72 9b 7b 0a 7f cd 75 c2 a2 89 6c 3c 66 cd f5 76 34 44 14 3a 92 24 71 13 28 3b 4b 6e 52 e8 a3 ea d0 fb 9a 04 6e 23 7e d0 13 e5 ed 4d 0f 6e f2 d4 a5 57 bc ee 6c a0 b8 e5 d8 b2 cb 7a 57 04 b1 e3 38 ae 8f 55 31 5c c6 e7 38 b8 86 af 89 ca 96 d7 7d 4a f8 06 76 07 5a 1d 4b 71 85 17 cc 23 4c cd e8 64 ba 13 f2 a7 e1 f7 b2 d5 4f 3d bb f4 07 48 fe 8e 7d 3e a4 f4 72 93 97 50 c8 a2 48 ee 6a f8 da 8f d8 03 ac 51 51 df 8f d6 91 dd d1 ee 46 ca 9c 1f 7d 9b cc ed 10 52 Data Ascii: w9Z^\db?3&@P"E<Q{/?Uh"\/WtAR-z/Ul^q?Ar{ul<fv4D:$q(;KnRn#~MnWlzW8U1\8}JvZKq#LdO=H}>rPHjQQF}R
2025-01-14 00:12:50 UTC	1257	IN	Data Raw: ee e2 7d 3c 35 df c9 93 d2 32 c8 21 69 ac 98 21 c3 47 54 85 43 81 e2 81 fc 0e fb 96 91 5c 4e 25 92 b7 4c 9f 1d ea 24 fa 35 66 f3 ce f1 00 d9 51 11 eb f7 c0 da b8 71 cb ac 6d 54 7a 3a c4 13 f2 90 46 63 71 d5 00 4a 06 27 83 4c 5d 04 b5 a4 67 fc 15 9c e2 92 56 7e 0d e8 bd 70 eb d9 90 c3 9b a7 94 59 11 38 52 92 37 be 17 14 b8 19 9f 79 52 0e 74 6a 9d 23 1f c0 94 6d 50 dc 02 65 48 89 75 a0 2c f7 52 85 a4 50 8e 7b 43 09 e8 6c 29 cf f4 32 a1 57 50 be 32 43 5c 8a 66 79 9c cd b1 aa a8 6e f0 de 14 b1 87 17 0e 77 2d 0e c3 20 ef d6 6c 57 f6 7e 3d 0e 31 bb 59 67 7f 2a b9 9c 73 fb eb c5 5b 8c 17 ff 2e 34 0c 20 f8 f6 76 04 f5 d1 af ef fa 97 5e 2c bb 1d d7 9f f8 32 be 2b f6 a7 b8 b9 9a ce fc 8e 2c af bd b9 1b ae ec 4e 79 65 1d e6 3a ec 44 72 df d6 90 5a fa 0e cc 13 6f 1c Data Ascii: }<52!i!GTC\N%L$5fQqmTz:FcqJ'L]gV~pY8R7yRtj#mPeHu,RP{Cl)2WP2C\fynw- lW~=1Yg*s[.4 v^,2+,Nye:DrZo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	104.18.161.117	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:50 UTC	421	OUT	GET /6783bca3840111e5424ee986/js/webflow.967b2dfec747eeb055e813a1fe43b230.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:50 UTC	653	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:50 GMT Content-Type: text/javascript Content-Length: 46298 Connection: close x-amz-id-2: vvjlQ9A2jS6EE2/G2goLmi7bfyevMNlSsPQGmz71z+yvo3r1aZugyAfkWitTPxu4t6UR8KEPzPI= x-amz-request-id: 1DBXJ0QCG5MJMF66 Last-Modified: Sun, 12 Jan 2025 13:07:02 GMT ETag: "86df9b5e983be7ae7d11dba634e66dd0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: erGfuS7E0uy0tjiYdU0ciewzezbtmKkR CF-Cache-Status: HIT Age: 47019 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 90196aae7dfd7cae-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:50 UTC	716	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 70 74 3d 28 65 2c 62 29 3d 3e 28 29 3d 3e 28 62 7c 7c 65 28 28 62 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 62 29 2c 62 2e 65 78 70 6f 72 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var pt=(e,b)=>()=>(b\|\|e((b={exports:{}}).exports,b),b.expor
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 57 74 2e 74 65 73 74 28 74 29 7c 7c 21 71 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 71 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 53 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e Data Ascii: nits do not match ["+t+"]: "+n+", "+i)}function R(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return Wt.test(t)\|\|!qt.test(t)?r=parseInt(t,10):qt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function j(t){S.debug&&window&&window.console.
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 Data Ascii: (t,n,i,r){return it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":["cubi
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 3d 32 29 2a 74 2a 74 2a 74 2a 74 2b 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d Data Ascii: =2)tttt+2)+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 Data Ascii: r,s){return s===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s*=1.525)+1
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 65 7c 7c 55 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 55 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 70 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 55 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 55 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 68 74 3d 62 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 70 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: e\|\|U.oRequestAnimationFrame\|\|U.msRequestAnimationFrame;return t&&p.bind?t.bind(U):function(n){U.setTimeout(n,16)}}(),ht=b.now=function(){var t=U.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&p.bind?n.bind(t):Date.now\|\|function(){retur
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 72 28 4c 29 7b 4c 3d 52 28 4c 2c 30 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 4c 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 4e 28 7b 64 75 72 61 74 69 6f 6e 3a 4c 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 4c 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 4c 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 6a 28 22 4e 6f 20 61 63 74 69 76 65 20 74 Data Ascii: nction r(L){L=R(L,0),this.active?this.queue.push({options:L}):(this.timer=new N({duration:L,context:this,complete:o}),this.active=!0)}function s(L){return this.active?(this.queue.push({options:L,args:arguments}),void(this.timer.complete=o)):j("No active t
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 5d 2c 6c 74 3d 74 68 69 73 2e 70 72 6f 70 73 5b 74 74 5d 2c 21 6c 74 29 7b 69 66 28 21 50 74 29 63 6f 6e 74 69 6e 75 65 3b 6c 74 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 74 74 29 7d 5a 2e 63 61 6c 6c 28 74 68 69 73 2c 6c 74 2c 62 74 29 7d 6e 74 26 26 64 74 26 26 6e 74 2e 63 61 6c 6c 28 74 68 69 73 2c 64 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 4c 29 7b 4c 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 4c 2c 5a 29 7b 4c 2e 73 65 74 28 5a 29 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 4c 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 4c 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 4c 2c 5a 29 7b 74 5b 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 6b 65 2e 63 61 6c 6c 28 74 68 69 73 2c 5a 2c 61 Data Ascii: ],lt=this.props[tt],!lt){if(!Pt)continue;lt=n.call(this,tt)}Z.call(this,lt,bt)}nt&&dt&&nt.call(this,dt)}function ct(L){L.stop()}function It(L,Z){L.set(Z)}function xe(L){this.$el.css(L)}function gt(L,Z){t[L]=function(){return this.children?ke.call(this,Z,a
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 3a 6f 29 2e 72 65 70 6c 61 63 65 28 2f 23 28 5c 77 29 28 5c 77 29 28 5c 77 29 24 2f 2c 22 23 24 31 24 31 24 32 24 32 24 33 24 33 22 29 7d 76 61 72 20 73 3d 7b 64 75 72 61 74 69 6f 6e 3a 35 30 30 2c 65 61 73 65 3a 22 65 61 73 65 22 2c 64 65 6c 61 79 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 79 2c 4f 2c 45 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 79 5b 30 5d 3b 4f 5b 32 5d 26 26 28 63 3d 4f 5b 32 5d 29 2c 41 74 5b 63 5d 26 26 28 63 3d 41 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 4f 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 52 28 79 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 Data Ascii: :o).replace(/#(\w)(\w)(\w)$/,"#$1$1$2$2$3$3")}var s={duration:500,ease:"ease",delay:0};t.init=function(o,y,O,E){this.$el=o,this.el=o[0];var c=y[0];O[2]&&(c=O[2]),At[c]&&(c=At[c]),this.name=c,this.type=O[1],this.duration=R(y[1],this.duration,s.duration),th
2025-01-14 00:12:50 UTC	1369	IN	Data Raw: 7d 2c 74 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 46 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 6f 29 7d 2c 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 68 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 46 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 79 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 Data Ascii: },t.update=function(o){F(this.el,this.name,o)},t.stop=function(){(this.active\|\|this.nextStyle)&&(this.active=!1,this.nextStyle=null,F(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,y){if(o=="auto"&&this.aut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	104.18.94.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:50 UTC	559	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:50 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:12:50 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 90196ab1bbad4373-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	104.18.161.117	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:50 UTC	415	OUT	GET /6783bca3840111e5424ee986/6783bddc64c839548aaca1bf_ATT%20LOGOM.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:51 UTC	644	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:50 GMT Content-Type: image/png Content-Length: 4720 Connection: close x-amz-id-2: SCa5+hDingv81UDIUWJyQuKOG4+pYOE/paK9xofxSYox7IvGyATzbAW9TftGuHtw3qzqYk6hL7Y= x-amz-request-id: AC8E20SVM3NBMG7B Last-Modified: Sun, 12 Jan 2025 13:04:39 GMT ETag: "d44c57b749e414a0bcc7335d2a21522a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: SMBOb.q5KUosOLtgMkeWBc7VjRQINrih CF-Cache-Status: HIT Age: 71082 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 90196ab27b3242da-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:51 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5e 00 00 00 90 08 03 00 00 00 77 60 f3 58 00 00 00 ab 50 4c 54 45 ff ff ff 00 a8 e0 00 00 00 00 a3 de 00 a5 df 00 a2 de 58 58 58 20 20 20 75 75 75 e8 e8 e8 ca ca ca 4a 4a 4a 23 23 23 00 aa e1 fc ff ff f8 f8 f8 e7 f6 fc f0 fa fd e2 e2 e2 d9 f0 f9 f5 fc fe be e4 f5 f2 f2 f2 c9 e9 f7 56 bd e7 d5 ee f9 7d ca ec 99 d5 f0 8e d1 ee 1a 1a 1a d1 d1 d1 80 80 80 6f c5 ea a9 a9 a9 6b 6b 6b 9e 9e 9e b2 df f3 a7 db f2 41 b7 e5 2d b1 e3 b9 b9 b9 36 36 36 66 c2 e9 90 90 90 94 d3 ef ad ad ad 86 ce ed 10 10 10 2d 2d 2d 61 61 61 6e 6e 6e 40 40 40 7b 7b 7b c1 c1 c1 34 34 34 8a 8a 8a 00 9b dc d5 2d fa b4 00 00 11 80 49 44 41 54 78 9c ed 5d 69 63 9b 38 10 0d 91 94 9e 38 10 20 5c 6e cb b6 1c 2d 75 69 7a 6d f7 ff ff b2 45 Data Ascii: PNGIHDR^w`XPLTEXXX uuuJJJ###V}okkkA-666f---aaannn@@@{{{444-IDATx]ic88 \n-uizmE
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 0e f0 66 e8 59 23 18 6e 1d 28 27 75 d7 0b 83 22 6d 92 2c cb ea 16 ed 3f cd b6 c8 83 d0 d9 c8 8f e3 e5 79 14 ae 75 ed 8f 1f 9b f1 a9 87 cd 91 be 21 9d 19 16 5b f1 7b 3c 23 34 c4 2a 1e 45 37 0c 05 31 20 48 d5 c7 3d 13 50 b3 93 c0 77 38 14 71 24 cc 7d 9c 8e f7 40 dd 3e 5a bb 36 2c 8e 16 3c 67 70 32 c1 45 45 dd f5 aa 21 eb 26 2f 17 6b 25 c0 c9 4c 6e 09 4d 01 9c 05 5b fb c2 6b 64 b5 7f e0 64 aa 1f 62 c6 38 82 62 8d 73 3a c5 f2 c0 ed bf e6 74 4a 54 4b 86 08 14 1d 6a 16 9d b4 54 d6 55 aa 7d ec 67 03 2e b9 76 50 5d d8 26 6c b0 4a a1 20 f7 a4 1c df 8b 9c f3 9d 20 da ab 36 17 ab 13 3a d4 5a a7 96 3b 4e 79 df 14 8a 14 45 09 9c 30 ad 6d 4d 6a 31 4e c8 36 60 14 73 df 1f 2f 42 49 25 22 4d 0f d7 0b d2 a4 84 58 e8 d1 a5 16 b3 9b f5 47 3f 6b ef cc a3 74 ed 50 54 70 8a d5 Data Ascii: fY#n('u"m,?yu![{<#4*E71 H=Pw8q$}@>Z6,<gp2EE!&/k%LnM[kddb8bs:tJTKjTU}g.vP]&lJ 6:Z;NyE0mMj1N6`s/BI%"MXG?ktPTp
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: ef 77 39 bb 5a f4 5e 5c 64 e2 e2 a7 62 3f 33 ec 84 bb c8 02 26 dd fb 90 b6 db 40 0d d5 c9 12 50 a9 06 a1 22 a6 45 af d0 3c bc 51 d5 eb e8 d1 7b 91 2f 14 3f 55 89 68 e1 ea 22 5c 2f df b6 cc 9a aa c2 a0 57 cb 74 f2 41 c4 d0 52 ea 0b e1 e3 83 e8 18 2d 7a 2f e6 55 0e 6c 16 5e 71 90 94 de 0b b7 16 17 3f 41 04 ec 72 9b 7b 0a 7f cd 75 c2 a2 89 6c 3c 66 cd f5 76 34 44 14 3a 92 24 71 13 28 3b 4b 6e 52 e8 a3 ea d0 fb 9a 04 6e 23 7e d0 13 e5 ed 4d 0f 6e f2 d4 a5 57 bc ee 6c a0 b8 e5 d8 b2 cb 7a 57 04 b1 e3 38 ae 8f 55 31 5c c6 e7 38 b8 86 af 89 ca 96 d7 7d 4a f8 06 76 07 5a 1d 4b 71 85 17 cc 23 4c cd e8 64 ba 13 f2 a7 e1 f7 b2 d5 4f 3d bb f4 07 48 fe 8e 7d 3e a4 f4 72 93 97 50 c8 a2 48 ee 6a f8 da 8f d8 03 ac 51 51 df 8f d6 91 dd d1 ee 46 ca 9c 1f 7d 9b cc ed 10 52 Data Ascii: w9Z^\db?3&@P"E<Q{/?Uh"\/WtAR-z/Ul^q?Ar{ul<fv4D:$q(;KnRn#~MnWlzW8U1\8}JvZKq#LdO=H}>rPHjQQF}R
2025-01-14 00:12:51 UTC	1257	IN	Data Raw: ee e2 7d 3c 35 df c9 93 d2 32 c8 21 69 ac 98 21 c3 47 54 85 43 81 e2 81 fc 0e fb 96 91 5c 4e 25 92 b7 4c 9f 1d ea 24 fa 35 66 f3 ce f1 00 d9 51 11 eb f7 c0 da b8 71 cb ac 6d 54 7a 3a c4 13 f2 90 46 63 71 d5 00 4a 06 27 83 4c 5d 04 b5 a4 67 fc 15 9c e2 92 56 7e 0d e8 bd 70 eb d9 90 c3 9b a7 94 59 11 38 52 92 37 be 17 14 b8 19 9f 79 52 0e 74 6a 9d 23 1f c0 94 6d 50 dc 02 65 48 89 75 a0 2c f7 52 85 a4 50 8e 7b 43 09 e8 6c 29 cf f4 32 a1 57 50 be 32 43 5c 8a 66 79 9c cd b1 aa a8 6e f0 de 14 b1 87 17 0e 77 2d 0e c3 20 ef d6 6c 57 f6 7e 3d 0e 31 bb 59 67 7f 2a b9 9c 73 fb eb c5 5b 8c 17 ff 2e 34 0c 20 f8 f6 76 04 f5 d1 af ef fa 97 5e 2c bb 1d d7 9f f8 32 be 2b f6 a7 b8 b9 9a ce fc 8e 2c af bd b9 1b ae ec 4e 79 65 1d e6 3a ec 44 72 df d6 90 5a fa 0e cc 13 6f 1c Data Ascii: }<52!i!GTC\N%L$5fQqmTz:FcqJ'L]gV~pY8R7yRtj#mPeHu,RP{Cl)2WP2C\fynw- lW~=1Yg*s[.4 v^,2+,Nye:DrZo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	18.244.20.40	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:51 UTC	644	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:51 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 13 Jan 2025 23:34:24 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 0be2062deeede74cb37dc047454ddbce.cloudfront.net (CloudFront) Age: 2308 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: KsskBaY_ohT5kgNdocrWpc3nflXH1hWX9FhsjoNbZAAuIv2CR3n0Nw==
2025-01-14 00:12:51 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	18.244.20.40	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:51 UTC	644	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:51 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 13 Jan 2025 00:45:04 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 bc6b68f8b4f6e3814b05a3b96cd7b690.cloudfront.net (CloudFront) Age: 84468 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: -fTySypMytvGjyyasukvMoFZaoJcfJCrQz1YebC1L1xOa54Zzq_F-A==
2025-01-14 00:12:51 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	18.244.20.40	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:51 UTC	416	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6783bca3840111e5424ee986 HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:51 UTC	550	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 00:03:12 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 11c65b00bf7f76c861a15dcad5558b9c.cloudfront.net (CloudFront) Age: 580 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: Mt1Zq9i1QxjCn9-Ylwkc1DxRO2XG-AdFuyMgYHM0mMRLdfCqbZNPVA==
2025-01-14 00:12:51 UTC	15834	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-01-14 00:12:51 UTC	16384	IN	Data Raw: 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 Data Ascii: tNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"
2025-01-14 00:12:51 UTC	16384	IN	Data Raw: 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f Data Ascii: ?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?
2025-01-14 00:12:51 UTC	16384	IN	Data Raw: 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: bute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e
2025-01-14 00:12:51 UTC	16384	IN	Data Raw: 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 Data Ascii: eeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.op
2025-01-14 00:12:51 UTC	8106	IN	Data Raw: 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 Data Ascii: s.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpReques

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	104.18.94.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:51 UTC	574	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:51 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:51 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 90196ab58d9043b3-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:51 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-14 00:12:51 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	18.244.20.40	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:52 UTC	393	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:52 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 13 Jan 2025 23:34:24 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 6571e9f709b2287f8a30275c17d07140.cloudfront.net (CloudFront) Age: 2309 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: kkF22_cZph0kGijNaVsQl6OaanmJxnN4HI9A7uYynNiDajOK-fzhUw==
2025-01-14 00:12:52 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	18.244.20.40	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:52 UTC	393	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:52 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 13 Jan 2025 00:45:04 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 0be2062deeede74cb37dc047454ddbce.cloudfront.net (CloudFront) Age: 84469 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: cXncviZt_ePTVK3PLjCX1CMpmUFqp-5nf1Zk1O9UbJLdAPT8XRqFdQ==
2025-01-14 00:12:52 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	104.18.95.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:52 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:52 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26638 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-14 00:12:52 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 39 36 61 62 61 32 63 38 36 30 66 39 38 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 90196aba2c860f98-EWRalt-svc: h3=":443"; ma=86400
2025-01-14 00:12:52 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	104.18.94.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:52 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:52 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:52 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 90196aba2f58432b-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function jt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 49 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Ie;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 49 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c Data Ascii: OM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function it(e){return M(["auto","dark","light"],e)}function ot(e){return M(["auto","never"],e)}function ct(e){return e>0&&e<9e5}function ut(e){return e>0&&e<36e4}var Ir=/^[0-9A-Za-z_-]{3,
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 2c 65 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 68 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 74 72 3d 38 65 33 2c 45 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 72 72 3d 33 2c 6e 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 22 3b 76 61 72 20 4e 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 6b Data Ascii: ,er=".g-recaptcha",ht="cf_challenge_response",_t="cf-turnstile-response",bt="g-recaptcha-response",tr=8e3,Et="private-token",rr=3,nr=500,ar=500,Y="";var Nr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],k
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f 22 35 30 30 70 78 22 3a 6e 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d Data Ascii: boseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?"500px":n?"480px":r?"650px":o?"590px":"570px"};function Be(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 63 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 53 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 Data Ascii: 0;return qe=function(o){if(o===null\|\|!cr(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Se(o,arguments,ce(t
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6e 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 73 72 63 3a 72 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 6e 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 Data Ascii: uld not find Turnstile script tag, some features may not be available",43777);var r=e.src,n={loadedAsync:!1,params:new URLSearchParams,src:r};(e.async\|\|e.defer)&&(n.loadedAsync=!0);var o=r.split("?");return o.length>1&&(n.params=new URLSearchParams(o[1]))
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 53 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 53 2e 69 64 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2d 66 72 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 68 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 Data Ascii: yle.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.top="0px",E.style.overflow="hidden",E.style.margin="0px auto";var S=document.createElement("iframe");S.id="".concat(e,"-fr"),S.setAttribute("src",h),S.setAttribute("allow"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49759	104.18.95.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:52 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90196aba2c860f98&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:52 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:52 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116144 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 90196abea8c11831-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:52 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e Data Ascii: ontact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_feedback_description":"Send%20Feedback","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_verifying":"Verifying...","testing_on
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 2c 66 4b 2c 66 55 2c 67 35 2c 67 39 2c 67 61 2c 67 62 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 36 38 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 32 37 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 32 36 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 32 38 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 32 37 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 31 35 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 32 33 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,fK,fU,g5,g9,ga,gb,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(868))/1(-parseInt(gI(527))/2)+parseInt(gI(326))/3+-parseInt(gI(328))/4(parseInt(gI(1527))/5)+parseInt(gI(1615))/6+-parseInt(gI(523))/7+-parseInt(gI(
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 66 28 31 34 34 32 29 5d 5b 68 66 28 31 33 37 38 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 68 66 28 34 35 35 29 5d 28 43 2c 78 5b 68 66 28 39 30 37 29 5d 29 3b 43 2b 2b 29 69 66 28 6f 5b 68 66 28 33 30 36 29 5d 3d 3d 3d 68 66 28 31 31 34 30 29 29 78 28 6f 5b 68 66 28 31 31 31 32 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 48 2c 68 69 29 7b 68 69 3d 68 66 2c 48 5b 68 69 28 31 31 33 39 29 5d 3d 6f 5b 68 69 28 31 34 38 33 29 5d 28 68 69 28 35 37 32 29 2b 67 2c 6f 5b 68 69 28 34 38 39 29 5d 29 7d 29 3b 65 6c 73 65 20 69 66 28 44 3d 78 5b 43 5d 2c 45 3d 66 31 28 67 2c 68 2c 44 29 2c 42 28 45 29 29 7b 69 66 28 6f 5b 68 66 28 37 37 35 29 5d 3d 3d Data Ascii: 1);return G}(x),B='nAsAaAb'.split('A'),B=B[hf(1442)][hf(1378)](B),C=0;o[hf(455)](C,x[hf(907)]);C++)if(o[hf(306)]===hf(1140))x(o[hf(1112)],function(H,hi){hi=hf,H[hi(1139)]=o[hi(1483)](hi(572)+g,o[hi(489)])});else if(D=x[C],E=f1(g,h,D),B(E)){if(o[hf(775)]==
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 6b 28 31 36 30 39 29 5d 5b 68 6b 28 31 65 33 29 5d 28 32 3c 3c 66 2c 33 32 29 2c 65 4d 5b 68 6b 28 35 39 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 6c 29 7b 69 66 28 68 6c 3d 68 6b 2c 65 4d 5b 68 6c 28 31 31 31 37 29 5d 29 7b 69 66 28 65 5b 68 6c 28 36 32 39 29 5d 28 65 5b 68 6c 28 32 31 39 29 5d 2c 68 6c 28 31 31 37 35 29 29 29 65 4d 5b 68 6c 28 39 39 31 29 5d 5b 68 6c 28 35 31 35 29 5d 28 29 2c 65 4d 5b 68 6c 28 39 39 31 29 5d 5b 68 6c 28 38 36 32 29 5d 28 29 2c 65 4d 5b 68 6c 28 38 30 31 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 68 6c 28 31 31 31 37 29 5d 5b 68 6c 28 39 36 36 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 65 5b 68 6c 28 31 35 30 36 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 6c 28 33 32 34 29 Data Ascii: =d,f=1,g=1e3*eM[hk(1609)][hk(1e3)](2<<f,32),eM[hk(595)](function(hl){if(hl=hk,eM[hl(1117)]){if(e[hl(629)](e[hl(219)],hl(1175)))eM[hl(991)][hl(515)](),eM[hl(991)][hl(862)](),eM[hl(801)]=!![],eM[hl(1117)][hl(966)]({'source':e[hl(1506)],'widgetId':eM[hl(324)
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 5b 68 6d 28 33 32 34 29 5d 5b 68 6d 28 31 33 38 38 29 5d 2b 27 2f 27 3a 27 27 2c 6f 3d 6b 5b 68 6d 28 38 31 36 29 5d 28 6b 5b 68 6d 28 31 30 39 36 29 5d 28 68 6d 28 31 34 39 30 29 2b 6e 2b 68 6d 28 33 36 32 29 2c 31 29 2b 6b 5b 68 6d 28 39 39 32 29 5d 2b 65 4d 5b 68 6d 28 33 32 34 29 5d 5b 68 6d 28 31 33 38 33 29 5d 2b 27 2f 27 2b 65 4d 5b 68 6d 28 33 32 34 29 5d 2e 63 48 2c 27 2f 27 29 2b 65 4d 5b 68 6d 28 33 32 34 29 5d 5b 68 6d 28 31 30 35 31 29 5d 2c 73 3d 7b 7d 2c 73 5b 68 6d 28 31 31 30 36 29 5d 3d 65 4d 5b 68 6d 28 33 32 34 29 5d 5b 68 6d 28 31 31 30 36 29 5d 2c 73 5b 68 6d 28 31 31 39 36 29 5d 3d 65 4d 5b 68 6d 28 33 32 34 29 5d 5b 68 6d 28 31 31 39 36 29 5d 2c 73 5b 68 6d 28 34 36 30 29 5d 3d 65 4d 5b 68 6d 28 33 32 34 29 5d 5b 68 6d 28 34 36 30 Data Ascii: [hm(324)][hm(1388)]+'/':'',o=k[hm(816)](k[hm(1096)](hm(1490)+n+hm(362),1)+k[hm(992)]+eM[hm(324)][hm(1383)]+'/'+eM[hm(324)].cH,'/')+eM[hm(324)][hm(1051)],s={},s[hm(1106)]=eM[hm(324)][hm(1106)],s[hm(1196)]=eM[hm(324)][hm(1196)],s[hm(460)]=eM[hm(324)][hm(460
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 28 31 34 34 37 29 5d 3d 65 2c 6f 7d 2c 65 4d 5b 67 4a 28 36 32 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 68 71 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 28 68 71 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 71 28 32 30 36 29 5d 3d 68 71 28 39 33 33 29 2c 6a 5b 68 71 28 31 32 39 34 29 5d 3d 68 71 28 31 35 39 35 29 2c 6b 3d 6a 2c 6c 3d 65 5b 68 71 28 38 34 32 29 5d 28 29 2c 6d 3d 68 71 28 31 35 37 39 29 2c 6c 5b 68 71 28 34 35 37 29 5d 28 6d 29 3e 2d 31 29 3f 65 4d 5b 68 71 28 35 39 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 72 29 7b 68 72 3d 68 71 2c 68 72 28 31 30 35 36 29 21 3d 3d 6b 5b 68 72 28 32 30 36 29 5d 3f 65 4d 5b 68 72 28 34 36 34 29 5d 28 29 3a 66 5b 68 72 28 31 31 36 33 29 5d 28 68 72 28 31 36 33 34 29 2c 66 75 6e 63 74 69 6f Data Ascii: (1447)]=e,o},eM[gJ(620)]=function(e,f,g,h,i,hq,j,k,l,m,n,o){(hq=gJ,j={},j[hq(206)]=hq(933),j[hq(1294)]=hq(1595),k=j,l=e[hq(842)](),m=hq(1579),l[hq(457)](m)>-1)?eM[hq(595)](function(hr){hr=hq,hr(1056)!==k[hr(206)]?eM[hr(464)]():f[hr(1163)](hr(1634),functio
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 7b 7d 2c 67 39 5b 67 4a 28 39 39 34 29 5d 3d 21 5b 5d 2c 67 39 5b 67 4a 28 33 35 39 29 5d 3d 66 62 2c 67 39 5b 67 4a 28 31 34 35 35 29 5d 3d 66 58 2c 67 39 5b 67 4a 28 31 31 35 34 29 5d 3d 67 32 2c 67 39 5b 67 4a 28 36 36 34 29 5d 3d 67 33 2c 67 39 5b 67 4a 28 38 36 32 29 5d 3d 66 59 2c 67 39 5b 67 4a 28 32 37 35 29 5d 3d 67 34 2c 67 39 5b 67 4a 28 31 34 34 34 29 5d 3d 67 31 2c 67 39 5b 67 4a 28 33 35 32 29 5d 3d 67 30 2c 67 39 5b 67 4a 28 35 36 36 29 5d 3d 66 70 2c 67 39 5b 67 4a 28 32 34 39 29 5d 3d 66 57 2c 67 39 5b 67 4a 28 35 35 39 29 5d 3d 66 56 2c 67 39 5b 67 4a 28 31 33 31 33 29 5d 3d 66 67 2c 67 39 5b 67 4a 28 39 38 35 29 5d 3d 66 68 2c 67 39 5b 67 4a 28 31 31 34 31 29 5d 3d 66 44 2c 67 39 5b 67 4a 28 35 31 36 29 5d 3d 66 46 2c 67 39 5b 67 4a 28 Data Ascii: {},g9[gJ(994)]=![],g9[gJ(359)]=fb,g9[gJ(1455)]=fX,g9[gJ(1154)]=g2,g9[gJ(664)]=g3,g9[gJ(862)]=fY,g9[gJ(275)]=g4,g9[gJ(1444)]=g1,g9[gJ(352)]=g0,g9[gJ(566)]=fp,g9[gJ(249)]=fW,g9[gJ(559)]=fV,g9[gJ(1313)]=fg,g9[gJ(985)]=fh,g9[gJ(1141)]=fD,g9[gJ(516)]=fF,g9[gJ(
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 20 68 26 69 7d 2c 27 66 4f 72 41 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6e 57 70 65 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6a 58 4d 43 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 47 78 6d 5a 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 6b 59 73 67 7a 27 3a 69 4d 28 35 36 31 29 2c 27 55 56 52 6e 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 4a 59 41 45 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 72 55 51 76 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 Data Ascii: h&i},'fOrAV':function(h,i){return h-i},'nWpeH':function(h,i){return h==i},'jXMCE':function(h,i){return h(i)},'GxmZB':function(h,i){return h>i},'kYsgz':iM(561),'UVRnG':function(h,i){return i!=h},'JYAEN':function(h,i){return i==h},'rUQvf':function(h,i){ret
2025-01-14 00:12:52 UTC	1369	IN	Data Raw: 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 69 51 28 33 32 35 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 64 5b 69 51 28 33 37 35 29 5d 28 49 2c 31 29 7c 31 26 4e 2c 64 5b 69 51 28 31 35 39 38 29 5d 28 4a 2c 64 5b 69 51 28 35 34 33 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 69 51 28 31 34 39 32 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 30 3d 3d 45 26 26 28 45 3d 4d 61 74 68 5b 69 51 28 31 32 34 36 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 51 28 38 38 32 29 5d 28 49 2c 31 29 7c 64 5b 69 51 28 33 39 36 29 5d 28 4e 2c 31 29 2c 4a 3d 3d 64 5b 69 51 28 36 33 33 29 Data Ascii: N=0,x++);for(N=D[iQ(325)](0),x=0;16>x;I=d[iQ(375)](I,1)\|1&N,d[iQ(1598)](J,d[iQ(543)](j,1))?(J=0,H[iQ(1492)](o(I)),I=0):J++,N>>=1,x++);}E--,0==E&&(E=Math[iQ(1246)](2,G),G++),delete C[D]}else for(N=B[D],x=0;x<G;I=d[iQ(882)](I,1)\|d[iQ(396)](N,1),J==d[iQ(633)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	104.18.95.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:52 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:52 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:52 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 90196abebcc6422b-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:52 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49764	104.18.94.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:53 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:53 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:53 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 90196ac2ddf24407-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:53 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49765	104.18.161.117	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:53 UTC	616	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:53 UTC	644	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:53 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 4487 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 90196ac4291e78e7-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:53 UTC	725	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+92

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49766	104.18.94.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:53 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90196aba2c860f98&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:53 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118666 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 90196ac47e250f90-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:53 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f Data Ascii: vacy":"Privacy","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_failure":"Error","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","human_button_
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 2c 66 42 2c 66 4c 2c 66 57 2c 67 30 2c 67 33 2c 67 34 2c 67 41 2c 67 48 2c 67 31 2c 67 32 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 32 35 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 33 35 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 33 39 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 31 30 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 33 35 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 39 39 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 35 37 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 Data Ascii: ,fB,fL,fW,g0,g3,g4,gA,gH,g1,g2){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(725))/1(parseInt(gI(1235))/2)+-parseInt(gI(939))/3(parseInt(gI(910))/4)+parseInt(gI(935))/5+parseInt(gI(1299))/6+parseInt(gI(957))/7*(-parseInt(gI(1
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 78 5b 67 50 28 31 35 37 31 29 5d 28 67 5b 67 50 28 38 36 33 29 5d 5b 67 50 28 31 36 30 37 29 5d 28 68 29 29 29 2c 78 3d 67 5b 67 50 28 31 33 34 30 29 5d 5b 67 50 28 35 38 31 29 5d 26 26 67 5b 67 50 28 31 37 37 31 29 5d 3f 67 5b 67 50 28 31 33 34 30 29 5d 5b 67 50 28 35 38 31 29 5d 28 6e 65 77 20 67 5b 28 67 50 28 31 37 37 31 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 67 52 2c 48 29 7b 66 6f 72 28 67 52 3d 67 50 2c 47 5b 67 52 28 31 32 36 34 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 67 52 28 31 35 31 32 29 5d 3b 47 5b 48 2b 31 5d 3d 3d 3d 47 5b 48 5d 3f 47 5b 67 52 28 33 34 30 29 5d 28 6f 5b 67 52 28 31 33 32 32 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c Data Ascii: x[gP(1571)](g[gP(863)][gP(1607)](h))),x=g[gP(1340)][gP(581)]&&g[gP(1771)]?g[gP(1340)][gP(581)](new g[(gP(1771))](x)):function(G,gR,H){for(gR=gP,G[gR(1264)](),H=0;H<G[gR(1512)];G[H+1]===G[H]?G[gR(340)](o[gR(1322)](H,1),1):H+=1);return G}(x),B='nAsAaAb'.spl
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 5d 29 72 65 74 75 72 6e 20 69 5b 67 54 28 34 31 33 29 5d 28 27 6f 2e 27 2c 6e 29 3b 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 55 3d 30 3b 56 3c 57 3b 59 3d 69 5b 67 54 28 31 32 36 32 29 5d 28 5a 2c 31 29 7c 61 30 2c 69 5b 67 54 28 31 32 35 38 29 5d 28 61 31 2c 61 32 2d 31 29 3f 28 61 33 3d 30 2c 61 34 5b 67 54 28 35 38 38 29 5d 28 69 5b 67 54 28 39 30 30 29 5d 28 61 35 2c 61 36 29 29 2c 61 37 3d 30 29 3a 61 38 2b 2b 2c 61 39 3d 30 2c 58 2b 2b 29 3b 66 6f 72 28 61 61 3d 61 62 5b 67 54 28 31 32 39 36 29 5d 28 30 29 2c 61 63 3d 30 3b 31 36 3e 61 64 3b 61 66 3d 69 5b 67 54 28 31 33 36 36 29 5d 28 61 67 2c 31 29 7c 31 2e 31 35 26 61 68 2c 61 69 3d 3d 69 5b 67 54 28 31 31 38 38 29 5d 28 61 6a 2c 31 29 3f 28 61 6b 3d 30 2c 61 6c 5b 67 54 28 35 38 38 29 5d 28 61 6d Data Ascii: ])return i[gT(413)]('o.',n);else{for(T=1,U=0;V<W;Y=i[gT(1262)](Z,1)\|a0,i[gT(1258)](a1,a2-1)?(a3=0,a4[gT(588)](i[gT(900)](a5,a6)),a7=0):a8++,a9=0,X++);for(aa=ab[gT(1296)](0),ac=0;16>ad;af=i[gT(1366)](ag,1)\|1.15&ah,ai==i[gT(1188)](aj,1)?(ak=0,al[gT(588)](am
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 39 35 39 29 5d 28 67 57 28 36 34 30 29 2c 6e 29 2b 67 57 28 31 36 32 37 29 2b 31 2b 67 57 28 35 30 35 29 2b 65 4d 5b 67 57 28 35 30 37 29 5d 5b 67 57 28 31 34 35 30 29 5d 2c 27 2f 27 29 2b 65 4d 5b 67 57 28 35 30 37 29 5d 2e 63 48 2c 27 2f 27 29 2c 65 4d 5b 67 57 28 35 30 37 29 5d 5b 67 57 28 31 34 30 33 29 5d 29 2c 73 3d 7b 7d 2c 73 5b 67 57 28 37 32 36 29 5d 3d 65 4d 5b 67 57 28 35 30 37 29 5d 5b 67 57 28 37 32 36 29 5d 2c 73 5b 67 57 28 31 32 39 33 29 5d 3d 65 4d 5b 67 57 28 35 30 37 29 5d 5b 67 57 28 31 32 39 33 29 5d 2c 73 5b 67 57 28 38 36 36 29 5d 3d 65 4d 5b 67 57 28 35 30 37 29 5d 5b 67 57 28 38 36 36 29 5d 2c 73 5b 67 57 28 39 39 35 29 5d 3d 65 4d 5b 67 57 28 35 30 37 29 5d 5b 67 57 28 33 34 31 29 5d 2c 78 3d 73 2c 42 3d 6e 65 77 20 65 4d 5b 28 Data Ascii: 959)](gW(640),n)+gW(1627)+1+gW(505)+eM[gW(507)][gW(1450)],'/')+eM[gW(507)].cH,'/'),eM[gW(507)][gW(1403)]),s={},s[gW(726)]=eM[gW(507)][gW(726)],s[gW(1293)]=eM[gW(507)][gW(1293)],s[gW(866)]=eM[gW(507)][gW(866)],s[gW(995)]=eM[gW(507)][gW(341)],x=s,B=new eM[(
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 5a 28 31 31 34 34 29 2c 6b 3d 6a 2c 6c 3d 65 5b 67 5a 28 37 36 34 29 5d 28 29 2c 6d 3d 6b 5b 67 5a 28 31 36 33 32 29 5d 2c 6c 5b 67 5a 28 33 37 31 29 5d 28 6d 29 3e 2d 31 29 3f 65 4d 5b 67 5a 28 31 30 35 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 30 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 68 30 3d 67 5a 2c 73 3d 7b 27 62 46 6f 42 6b 27 3a 68 30 28 35 37 37 29 2c 27 4a 4f 4c 75 43 27 3a 68 30 28 31 31 35 39 29 2c 27 4b 45 6d 68 75 27 3a 6b 5b 68 30 28 31 31 38 34 29 5d 2c 27 71 4b 59 67 58 27 3a 66 75 6e 63 74 69 6f 6e 28 76 2c 42 29 7b 72 65 74 75 72 6e 20 76 2b 42 7d 2c 27 4e 68 65 56 79 27 3a 6b 5b 68 30 28 31 32 34 39 29 5d 2c 27 78 54 46 66 67 27 3a 66 75 6e 63 74 69 6f 6e 28 76 2c 42 2c 68 31 Data Ascii: Z(1144),k=j,l=e[gZ(764)](),m=k[gZ(1632)],l[gZ(371)](m)>-1)?eM[gZ(1055)](function(h0,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(h0=gZ,s={'bFoBk':h0(577),'JOLuC':h0(1159),'KEmhu':k[h0(1184)],'qKYgX':function(v,B){return v+B},'NheVy':k[h0(1249)],'xTFfg':function(v,B,h1
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 35 27 3a 4d 3d 73 5b 68 30 28 31 30 38 30 29 5d 28 73 5b 68 30 28 31 30 38 30 29 5d 28 73 5b 68 30 28 31 30 38 30 29 5d 28 68 30 28 36 34 30 29 2b 48 2c 68 30 28 31 36 32 37 29 29 2b 31 2b 68 30 28 35 30 35 29 2b 61 34 5b 68 30 28 35 30 37 29 5d 5b 68 30 28 31 34 35 30 29 5d 2b 27 2f 27 2b 61 35 5b 68 30 28 35 30 37 29 5d 2e 63 48 2c 27 2f 27 29 2c 61 36 5b 68 30 28 35 30 37 29 5d 5b 68 30 28 31 34 30 33 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 2c 31 65 33 29 3a 28 6e 3d 7b 7d 2c 6e 5b 67 5a 28 39 38 39 29 5d 3d 65 2c 6e 5b 67 5a 28 37 34 31 29 5d 3d 66 2c 6e 5b 67 5a 28 31 35 39 38 29 5d 3d 67 2c 6e 5b 67 5a 28 31 32 33 39 29 5d 3d 68 2c 6e 5b 67 5a 28 34 31 32 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d 5b Data Ascii: ntinue;case'15':M=s[h0(1080)](s[h0(1080)](s[h0(1080)](h0(640)+H,h0(1627))+1+h0(505)+a4[h0(507)][h0(1450)]+'/'+a5[h0(507)].cH,'/'),a6[h0(507)][h0(1403)]);continue}break}},1e3):(n={},n[gZ(989)]=e,n[gZ(741)]=f,n[gZ(1598)]=g,n[gZ(1239)]=h,n[gZ(412)]=i,o=n,eM[
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 28 68 29 2c 69 5b 69 73 28 36 32 31 29 5d 28 29 29 3a 66 69 28 29 3a 63 5b 69 73 28 31 36 37 30 29 5d 28 66 6a 29 7d 2c 31 65 33 29 29 2c 67 30 3d 7b 7d 2c 67 30 5b 67 4a 28 31 33 31 39 29 5d 3d 21 5b 5d 2c 67 30 5b 67 4a 28 31 32 34 35 29 5d 3d 66 32 2c 67 30 5b 67 4a 28 31 30 38 33 29 5d 3d 66 4f 2c 67 30 5b 67 4a 28 31 35 31 36 29 5d 3d 66 54 2c 67 30 5b 67 4a 28 37 38 32 29 5d 3d 66 55 2c 67 30 5b 67 4a 28 38 30 32 29 5d 3d 66 50 2c 67 30 5b 67 4a 28 31 36 35 32 29 5d 3d 66 56 2c 67 30 5b 67 4a 28 38 32 35 29 5d 3d 66 53 2c 67 30 5b 67 4a 28 33 39 31 29 5d 3d 66 52 2c 67 30 5b 67 4a 28 36 37 32 29 5d 3d 66 67 2c 67 30 5b 67 4a 28 34 30 39 29 5d 3d 66 4e 2c 67 30 5b 67 4a 28 34 34 34 29 5d 3d 66 4d 2c 67 30 5b 67 4a 28 31 35 37 35 29 5d 3d 66 37 2c 67 Data Ascii: (h),i[is(621)]()):fi():c[is(1670)](fj)},1e3)),g0={},g0[gJ(1319)]=![],g0[gJ(1245)]=f2,g0[gJ(1083)]=fO,g0[gJ(1516)]=fT,g0[gJ(782)]=fU,g0[gJ(802)]=fP,g0[gJ(1652)]=fV,g0[gJ(825)]=fS,g0[gJ(391)]=fR,g0[gJ(672)]=fg,g0[gJ(409)]=fN,g0[gJ(444)]=fM,g0[gJ(1575)]=f7,g
2025-01-14 00:12:53 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 42 58 4f 75 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 47 4d 6f 6d 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 58 44 49 66 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 69 6e 4e 55 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 6a 74 6c 69 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 45 7a 6b 49 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 4c 54 43 47 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c Data Ascii: i){return h<<i},'BXOuA':function(h,i){return h<i},'GMomF':function(h,i){return h-i},'XDIfZ':function(h,i){return h^i},'inNUz':function(h,i){return h^i},'jtliR':function(h,i){return i&h},'EzkIg':function(h,i){return i!=h},'LTCGy':function(h,i){return h&i},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49768	104.18.95.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:53 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1400638156:1736810115:4fgdCy3Y0sO6QOVyobUg6DnFEglnskOp8hAFVBcFeMA/90196aba2c860f98/azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3148 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:53 UTC	3148	OUT	Data Raw: 76 5f 39 30 31 39 36 61 62 61 32 63 38 36 30 66 39 38 3d 65 41 77 78 6d 78 31 78 32 78 53 78 54 57 45 4f 57 45 74 78 57 34 25 32 62 39 6c 59 34 45 2d 57 43 43 50 76 45 7a 72 45 2b 49 78 57 67 45 76 78 2b 47 59 2b 69 67 77 45 48 4c 67 45 38 46 57 24 31 45 66 78 4c 39 64 45 4c 64 51 2d 45 4e 78 6c 37 45 67 78 4c 2d 45 6c 57 37 46 45 66 45 45 46 4c 51 45 37 47 2b 76 45 66 64 39 45 58 61 45 76 68 54 35 69 71 52 24 69 45 7a 47 49 2b 72 65 45 6c 77 4c 6a 36 7a 6b 67 69 2b 4d 4d 48 50 37 2b 30 74 4e 57 75 45 44 77 64 4e 45 57 70 72 4e 6b 75 45 52 35 78 45 47 46 45 59 5a 53 77 50 32 7a 79 5a 6b 34 45 51 77 34 77 6a 61 51 74 31 78 2b 61 5a 2b 46 78 45 4c 51 43 37 57 49 45 75 6d 78 45 36 78 4c 55 45 77 47 34 45 5a 6c 70 48 78 45 24 41 4b 70 64 32 78 77 39 4d 51 77 Data Ascii: v_90196aba2c860f98=eAwxmx1x2xSxTWEOWEtxW4%2b9lY4E-WCCPvEzrE+IxWgEvx+GY+igwEHLgE8FW$1EfxL9dELdQ-ENxl7EgxL-ElW7FEfEEFLQE7G+vEfd9EXaEvhT5iqR$iEzGI+reElwLj6zkgi+MMHP7+0tNWuEDwdNEWprNkuER5xEGFEYZSwP2zyZk4EQw4wjaQt1x+aZ+FxELQC7WIEumxE6xLUEwG4EZlpHxE$AKpd2xw9MQw
2025-01-14 00:12:54 UTC	751	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:54 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153132 Connection: close cf-chl-gen: kn03pVIzr7sYcF7oqf+tvlzoOluDNx65VStsmcRhNPLX+tLYGgFXFfKzzCqb2o0C9L3TySyYilnx6hhfyFxL1D8wxnYAb9rOrqwiLYn/XwboSEnVu6gzmK2bQwzSdpRcpAE0j2F+Iw0gAyu+TuM2l7GmAQJOWdJ1z1NDfuWJAvUatJadc+ivbI3+o4khXe4wELx0LPSV5LBiMpjtfI8zbecTQjvEsV19mX/xeMgFgBi9g+TQXu7jP9EPCVpvW1Oughb7DpbVgDSgdkH0+v1Mc93xpym/wVJe34UI8MFxhNIaBTAn3z01LDfWlcQRTibwRw5IYbGCPSlKxTAKbmTPBKKJV44llTwXbByLkzzJybPjFG0c4CrAVvJ15mrMj5YOFPd2VzaOxS2YljyqhvS+J2UAo/lmB88AAuIYJ5afUUNCpQPinlO0HkZFmgXkNq52aN+refkRnLRS+kBN7lVdO644RXdSVbYrX/QXTRO9T48=$UQUt+TkhIMD8MrLWos8PnA== Server: cloudflare CF-RAY: 90196ac5398f1899-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:54 UTC	618	IN	Data Raw: 69 59 57 4a 56 32 75 4d 6a 6f 35 51 61 32 78 30 68 5a 47 4d 6b 46 4e 77 6c 6e 4f 65 58 36 4a 2b 59 5a 64 79 6e 61 4f 6e 6e 35 35 33 64 6e 68 37 68 71 31 38 67 34 46 79 72 5a 36 73 6d 58 57 76 73 4c 57 70 6a 35 32 37 66 38 4a 2f 65 73 4b 79 6e 4b 43 2b 73 36 57 72 72 72 75 35 75 4c 79 2b 71 4a 7a 4b 74 62 65 52 70 70 6d 38 6c 74 7a 54 78 39 53 32 6d 38 4c 56 31 37 65 66 78 4f 6a 6f 31 73 6a 73 37 4e 75 71 73 63 62 67 77 73 72 72 31 75 6e 6e 79 37 54 4c 39 4e 44 62 33 4f 4c 61 2b 37 7a 41 76 4e 48 7a 2f 41 6e 34 32 38 58 38 2f 4e 2f 52 79 2f 7a 7a 7a 41 37 70 35 4f 6a 35 46 4f 51 56 37 74 62 59 45 50 62 61 34 68 2f 77 49 2f 6a 32 46 65 45 45 47 2b 58 68 48 69 76 73 4e 65 6f 4e 4e 2f 51 4f 49 68 45 39 43 69 63 70 46 52 63 2b 46 79 56 42 46 67 45 6e 49 77 6b Data Ascii: iYWJV2uMjo5Qa2x0hZGMkFNwlnOeX6J+YZdynaOnn553dnh7hq18g4FyrZ6smXWvsLWpj527f8J/esKynKC+s6Wrrru5uLy+qJzKtbeRppm8ltzTx9S2m8LV17efxOjo1sjs7Nuqscbgwsrr1unny7TL9NDb3OLa+7zAvNHz/An428X8/N/Ry/zzzA7p5Oj5FOQV7tbYEPba4h/wI/j2FeEEG+XhHivsNeoNN/QOIhE9CicpFRc+FyVBFgEnIwk
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 5a 49 4e 45 74 65 4d 78 34 30 4d 54 49 32 49 69 46 47 58 31 39 65 4e 54 5a 70 4f 6a 31 4d 4f 30 67 2b 64 46 64 6f 52 6e 6f 35 52 6c 78 33 4f 6a 39 32 59 6e 4e 56 54 34 56 52 5a 49 5a 2f 51 30 78 56 64 6d 68 6b 54 32 35 37 58 70 52 6a 61 57 61 50 62 33 4e 58 62 47 35 39 6c 5a 56 7a 6c 5a 53 55 63 4b 46 30 68 6d 6c 72 67 61 4e 2b 61 71 52 2f 6b 33 36 79 62 62 43 44 6b 71 61 6e 6c 6e 75 62 74 59 2b 50 74 48 79 4c 65 70 74 2b 6e 4c 2f 45 71 6e 33 43 6e 4d 69 46 71 37 7a 4a 78 64 48 57 71 6f 37 57 7a 4b 62 5a 70 4c 4c 4b 77 4c 57 2f 6d 61 79 36 75 2b 57 31 31 36 6a 6d 74 4c 76 61 79 74 76 6d 76 39 79 79 35 65 66 54 71 62 44 42 32 61 33 59 7a 65 65 2f 33 72 7a 64 75 65 33 6c 34 62 33 7a 36 65 58 42 39 75 33 70 78 66 33 78 37 63 6b 42 39 66 48 4e 34 66 6e 31 30 Data Ascii: ZINEteMx40MTI2IiFGX19eNTZpOj1MO0g+dFdoRno5Rlx3Oj92YnNVT4VRZIZ/Q0xVdmhkT257XpRjaWaPb3NXbG59lZVzlZSUcKF0hmlrgaN+aqR/k36ybbCDkqanlnubtY+PtHyLept+nL/Eqn3CnMiFq7zJxdHWqo7WzKbZpLLKwLW/may6u+W116jmtLvaytvmv9yy5efTqbDB2a3Yzee/3rzdue3l4b3z6eXB9u3pxf3x7ckB9fHN4fn10
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 4c 4c 6c 51 65 61 43 5a 62 49 43 74 74 54 55 31 4b 63 45 6c 4c 63 47 55 39 58 7a 46 48 53 6b 74 77 55 31 41 36 54 47 31 2b 63 46 41 36 63 32 42 56 50 6d 46 68 59 32 46 66 5a 59 75 42 63 4a 4b 43 55 32 46 51 62 6d 4b 57 67 31 71 61 6e 47 64 59 65 59 4b 53 63 5a 36 44 6c 35 75 68 67 61 4b 64 61 57 53 6b 6f 5a 46 77 70 4b 69 55 69 62 43 71 70 4c 4f 30 72 70 65 33 75 4c 4b 5a 63 37 32 30 65 73 58 43 6f 73 6d 47 77 71 6d 49 78 62 36 77 30 4b 50 43 76 5a 33 45 76 70 47 56 6d 64 66 47 72 39 79 76 75 37 65 75 72 61 2b 78 6e 62 58 57 70 64 4f 69 34 72 7a 6b 72 65 75 35 37 72 76 4d 72 63 54 32 79 65 66 79 79 38 58 5a 38 4e 37 48 32 4f 33 65 76 4f 58 4e 39 4f 50 78 39 38 62 59 44 64 62 65 35 39 2f 69 41 4d 76 70 38 77 6b 4c 38 50 62 6e 45 78 76 38 2b 2f 77 4a 41 65 Data Ascii: LLlQeaCZbICttTU1KcElLcGU9XzFHSktwU1A6TG1+cFA6c2BVPmFhY2FfZYuBcJKCU2FQbmKWg1qanGdYeYKScZ6Dl5uhgaKdaWSkoZFwpKiUibCqpLO0rpe3uLKZc720esXCosmGwqmIxb6w0KPCvZ3EvpGVmdfGr9yvu7eura+xnbXWpdOi4rzkreu57rvMrcT2yefyy8XZ8N7H2O3evOXN9OPx98bYDdbe59/iAMvp8wkL8PbnExv8+/wJAe
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 55 79 74 5a 4b 45 6b 6c 58 46 46 4e 4b 54 31 56 55 53 31 41 5a 45 49 79 63 69 38 37 56 47 31 54 55 59 46 66 62 30 56 59 67 58 45 38 59 32 52 65 64 6f 4a 38 55 48 47 54 5a 6e 4f 41 6b 59 68 57 65 5a 4e 32 5a 33 2b 54 66 58 74 72 6b 32 2b 5a 66 4a 65 65 66 5a 6d 42 59 35 35 34 69 33 43 41 73 36 4f 4b 67 59 53 69 6a 61 75 70 65 6f 6d 4f 76 6f 75 57 6c 34 79 74 65 72 65 39 79 4c 32 48 6f 61 53 4b 72 4c 69 72 77 70 2b 62 68 63 4f 53 6e 72 48 43 73 39 75 6e 79 71 36 59 30 35 4c 58 73 74 44 45 76 64 71 2b 75 71 65 33 34 74 66 72 78 64 37 49 71 4d 6a 63 79 63 54 47 30 65 6a 79 74 73 6e 38 33 63 66 52 36 72 50 59 76 62 76 78 76 72 2f 6d 34 64 76 31 42 2f 58 46 45 65 30 52 36 51 58 4b 42 64 51 58 30 78 4c 7a 44 2b 63 51 32 4f 72 31 38 75 45 50 34 42 66 66 35 51 4c Data Ascii: UytZKEklXFFNKT1VUS1AZEIyci87VG1TUYFfb0VYgXE8Y2RedoJ8UHGTZnOAkYhWeZN2Z3+TfXtrk2+ZfJeefZmBY554i3CAs6OKgYSijaupeomOvouWl4ytere9yL2HoaSKrLirwp+bhcOSnrHCs9unyq6Y05LXstDEvdq+uqe34tfrxd7IqMjcycTG0ejytsn83cfR6rPYvbvxvr/m4dv1B/XFEe0R6QXKBdQX0xLzD+cQ2Or18uEP4Bff5QL
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 79 6c 62 57 7a 78 78 5a 6b 56 35 61 30 74 78 4e 33 6c 48 53 48 52 63 59 32 31 30 56 6c 46 58 65 31 5a 37 55 34 78 6a 61 47 4e 72 5a 6f 4a 6e 54 59 4e 52 69 35 64 6e 56 58 4e 78 62 6f 71 41 67 48 2b 55 6e 6c 36 43 6d 5a 61 48 6c 5a 31 34 66 34 69 4c 65 49 65 4b 70 71 61 67 6b 57 32 75 6f 4a 53 51 74 6f 6d 71 6b 71 39 35 74 70 53 72 78 4d 57 50 78 72 74 37 6f 5a 79 6e 66 38 71 71 75 70 36 6c 6e 63 4c 45 6e 34 36 53 6f 36 4b 73 6d 70 4f 75 30 4c 4b 58 76 4f 50 57 32 74 2b 78 32 64 6e 64 30 2b 53 70 77 37 75 36 37 75 72 4e 37 75 2f 66 30 63 54 58 2b 2f 71 34 31 63 66 33 30 50 50 52 2f 4e 58 64 75 4e 33 66 30 51 72 58 32 4e 6b 48 33 73 34 49 79 64 37 55 37 74 4d 43 2b 52 73 62 32 50 58 38 32 2b 76 70 44 39 33 72 32 78 63 50 46 2b 59 67 34 75 6f 6a 47 2f 63 46 Data Ascii: ylbWzxxZkV5a0txN3lHSHRcY210VlFXe1Z7U4xjaGNrZoJnTYNRi5dnVXNxboqAgH+Unl6CmZaHlZ14f4iLeIeKpqagkW2uoJSQtomqkq95tpSrxMWPxrt7oZynf8qqup6lncLEn46So6KsmpOu0LKXvOPW2t+x2dnd0+Spw7u67urN7u/f0cTX+/q41cf30PPR/NXduN3f0QrX2NkH3s4Iyd7U7tMC+Rsb2PX82+vpD93r2xcPF+Yg4uojG/cF
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 39 53 51 31 74 76 57 56 64 48 62 30 74 31 57 48 4e 36 57 58 56 64 50 33 70 55 5a 30 78 63 6a 33 39 6d 58 57 42 2b 61 59 65 46 56 6d 56 71 6d 6d 64 79 63 32 69 4a 56 70 4f 5a 70 4a 6c 6a 66 59 42 6d 69 4a 53 48 6e 6e 74 33 6a 58 68 75 65 6f 32 65 6a 37 65 44 70 6f 79 62 70 32 36 7a 6a 71 79 67 6d 62 61 61 6c 6f 4f 54 76 72 50 48 6f 62 71 6b 68 4b 53 34 70 61 43 51 77 35 48 4c 74 38 72 4d 70 64 48 63 6c 35 76 4c 75 4a 37 41 76 38 53 73 32 4f 62 6d 34 63 53 2f 79 72 69 66 78 63 33 6a 37 73 48 6a 36 38 50 53 7a 64 50 6a 7a 72 4c 78 2f 4c 6a 7a 31 2b 72 39 30 76 48 56 35 2b 44 64 38 63 67 47 2f 63 66 64 78 39 38 4f 30 52 58 67 44 74 58 73 47 65 72 52 47 76 6b 4e 41 43 44 57 46 66 34 52 49 43 58 38 4a 66 49 41 4a 66 30 6c 39 68 73 4a 4a 43 6b 74 42 44 59 68 41 Data Ascii: 9SQ1tvWVdHb0t1WHN6WXVdP3pUZ0xcj39mXWB+aYeFVmVqmmdyc2iJVpOZpJljfYBmiJSHnnt3jXhueo2ej7eDpoybp26zjqygmbaaloOTvrPHobqkhKS4paCQw5HLt8rMpdHcl5vLuJ7Av8Ss2Obm4cS/yrifxc3j7sHj68PSzdPjzrLx/Ljz1+r90vHV5+Dd8cgG/cfdx98O0RXgDtXsGerRGvkNACDWFf4RICX8JfIAJf0l9hsJJCktBDYhA
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 79 57 46 6c 76 54 58 6c 35 54 58 64 35 68 54 2b 49 64 49 31 47 5a 6f 74 2f 67 32 4a 37 5a 6e 39 2f 6c 6b 2b 52 68 57 2b 51 66 5a 65 4d 6e 49 42 77 6c 36 52 79 62 34 64 33 66 70 69 6c 65 33 71 64 5a 6e 68 2f 6f 62 47 66 6a 4c 4e 78 69 59 4a 31 6c 5a 71 76 6e 35 6d 74 73 70 57 76 66 62 2b 75 72 33 2b 36 6e 4a 6d 46 79 72 65 37 69 63 65 37 75 38 50 47 71 63 2b 59 31 4d 50 63 71 39 7a 47 30 5a 32 7a 73 71 4c 6c 30 4a 37 41 74 4c 61 37 78 4c 79 6c 74 2b 36 73 76 62 72 43 78 66 62 74 77 4c 50 55 32 2f 6e 77 30 2f 32 36 38 39 57 30 32 64 72 39 32 63 58 49 43 75 4d 49 7a 41 50 32 43 4f 7a 79 38 39 41 4f 42 76 50 71 7a 39 6b 58 43 65 66 63 47 2b 34 68 31 79 41 4e 47 75 55 6a 39 68 58 35 41 79 45 41 42 79 4c 6e 48 51 34 6c 2f 42 55 54 4b 69 4d 4e 45 78 67 64 4b 42 Data Ascii: yWFlvTXl5TXd5hT+IdI1GZot/g2J7Zn9/lk+RhW+QfZeMnIBwl6Ryb4d3fpile3qdZnh/obGfjLNxiYJ1lZqvn5mtspWvfb+ur3+6nJmFyre7ice7u8PGqc+Y1MPcq9zG0Z2zsqLl0J7AtLa7xLylt+6svbrCxfbtwLPU2/nw0/2689W02dr92cXICuMIzAP2COzy89AOBvPqz9kXCefcG+4h1yANGuUj9hX5AyEAByLnHQ4l/BUTKiMNExgdKB
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 67 6b 53 48 64 33 36 43 59 6b 74 75 61 6e 6d 52 57 58 70 6a 61 6c 53 57 6c 6d 68 77 6c 31 56 74 61 6c 78 74 57 5a 78 31 6d 32 53 54 5a 48 6d 64 70 57 6d 59 6c 61 69 76 71 61 65 49 69 57 6d 52 66 6f 69 4a 70 72 57 69 73 36 57 7a 6a 6f 39 33 72 4a 6a 45 6d 38 50 44 6c 4a 33 4b 6b 34 65 55 68 34 54 4b 6a 71 75 2b 7a 63 2b 66 74 64 54 50 6c 5a 47 77 70 70 79 6f 72 37 57 5a 6e 4d 44 6b 7a 73 57 6a 36 4d 72 48 78 4e 7a 4f 7a 4c 7a 77 79 61 7a 69 33 4d 36 2b 30 65 44 32 2b 73 76 56 39 74 67 42 37 65 2f 4c 75 73 4b 33 78 66 6f 42 79 65 44 49 43 2b 44 57 43 74 7a 6a 38 67 37 77 36 50 58 69 43 68 72 56 2b 52 54 6e 37 2f 63 62 44 50 6a 32 39 78 55 66 47 76 6b 64 39 41 6b 72 36 42 6b 73 41 43 6f 4c 2f 67 6f 4f 41 6a 51 7a 4d 44 6b 51 42 77 30 59 50 69 34 52 50 41 34 Data Ascii: gkSHd36CYktuanmRWXpjalSWlmhwl1VtalxtWZx1m2STZHmdpWmYlaivqaeIiWmRfoiJprWis6Wzjo93rJjEm8PDlJ3Kk4eUh4TKjqu+zc+ftdTPlZGwppyor7WZnMDkzsWj6MrHxNzOzLzwyazi3M6+0eD2+svV9tgB7e/LusK3xfoByeDIC+DWCtzj8g7w6PXiChrV+RTn7/cbDPj29xUfGvkd9Akr6BksACoL/goOAjQzMDkQBw0YPi4RPA4
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 33 32 44 6a 47 4e 37 59 46 74 4f 64 47 4a 2f 59 59 79 4b 64 34 52 56 58 46 52 32 66 46 4e 35 6f 46 39 68 6b 49 4b 5a 57 34 43 59 6c 49 61 47 69 5a 32 43 6f 33 79 75 64 49 75 69 6a 4b 46 35 68 34 6d 62 76 72 4e 37 76 4d 47 58 6d 62 75 57 72 38 4f 30 78 62 53 6e 68 49 53 71 73 49 71 53 78 4b 47 52 71 71 36 34 32 4a 44 54 71 64 79 72 6e 64 54 62 75 4f 4b 61 77 70 33 6d 34 65 66 43 79 4e 53 2f 31 39 2b 71 76 66 43 73 34 75 6e 65 72 2f 6d 77 35 62 6e 6c 74 72 44 61 79 77 50 39 41 64 34 47 31 4c 6b 48 77 64 7a 63 78 51 33 76 77 63 37 74 36 50 4c 4f 35 41 38 4b 46 68 72 55 35 77 72 54 2b 75 37 57 38 50 54 78 32 67 58 59 38 39 37 6a 48 2f 66 69 4c 41 33 37 35 6a 41 43 44 41 6f 49 44 6a 51 71 47 54 73 72 2b 77 72 34 46 77 73 65 46 53 41 39 41 45 51 56 43 54 6f 2b Data Ascii: 32DjGN7YFtOdGJ/YYyKd4RVXFR2fFN5oF9hkIKZW4CYlIaGiZ2Co3yudIuijKF5h4mbvrN7vMGXmbuWr8O0xbSnhISqsIqSxKGRqq642JDTqdyrndTbuOKawp3m4efCyNS/19+qvfCs4uner/mw5bnltrDaywP9Ad4G1LkHwdzcxQ3vwc7t6PLO5A8KFhrU5wrT+u7W8PTx2gXY897jH/fiLA375jACDAoIDjQqGTsr+wr4FwseFSA9AEQVCTo+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49769	104.18.161.117	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:54 UTC	365	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:54 UTC	644	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:54 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 4488 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 90196ac8f94c43a0-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:54 UTC	725	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-01-14 00:12:54 UTC	1369	IN	Data Raw: ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+92

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49770	104.18.94.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:54 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1400638156:1736810115:4fgdCy3Y0sO6QOVyobUg6DnFEglnskOp8hAFVBcFeMA/90196aba2c860f98/azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:55 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 00:12:54 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 1NzsGX+Z+ZwWQJcCGeoVHJCX9qBCep6HOg+6ThZqI2hjI5NNVKWNx/6ED7WIab6Hc60ZH03Z9mmHZzIrgPiHIA==$8pViAu+dHaL/eWSlsCSZZQ== Server: cloudflare CF-RAY: 90196acb9ff30f3a-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:55 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49771	104.18.95.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:55 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/90196aba2c860f98/1736813573973/a06144902a6c58b64de639719de67546b8e64059a1cbaa1e1fc3336cf23c78e7/KPAFIp1G787jD7r HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:55 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 14 Jan 2025 00:12:55 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-14 00:12:55 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6f 47 46 45 6b 43 70 73 57 4c 5a 4e 35 6a 6c 78 6e 65 5a 31 52 72 6a 6d 51 46 6d 68 79 36 6f 65 48 38 4d 7a 62 50 49 38 65 4f 63 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20goGFEkCpsWLZN5jlxneZ1RrjmQFmhy6oeH8MzbPI8eOcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-14 00:12:55 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49772	104.18.95.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:55 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/90196aba2c860f98/1736813573974/hdlLq_AxuGYOldi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:55 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:55 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 90196ad14bbec47c-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:55 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 52 08 02 00 00 00 76 6b 7b 82 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR3Rvk{IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	104.18.94.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:56 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/90196aba2c860f98/1736813573974/hdlLq_AxuGYOldi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:56 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:56 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 90196ad51d740f9b-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:56 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 52 08 02 00 00 00 76 6b 7b 82 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR3Rvk{IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	104.18.95.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:57 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1400638156:1736810115:4fgdCy3Y0sO6QOVyobUg6DnFEglnskOp8hAFVBcFeMA/90196aba2c860f98/azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32481 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nkyha/0x4AAAAAAAQTptj2So4dx43e/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:57 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 39 36 61 62 61 32 63 38 36 30 66 39 38 3d 65 41 77 78 32 57 4c 2d 46 37 41 45 41 45 59 41 4c 76 4c 37 75 49 6c 2d 25 32 62 4a 2b 64 4c 2d 4c 35 45 55 49 4c 6f 37 4c 43 45 76 34 2b 38 37 36 64 45 53 37 54 45 4f 6d 45 4c 46 49 51 69 4c 74 45 47 34 4c 43 45 38 78 34 4c 52 45 70 39 74 61 43 73 45 45 4d 45 32 78 45 41 37 37 78 6e 58 57 45 35 78 6e 6a 4c 76 67 6e 6e 38 70 5a 45 67 34 57 67 45 61 75 70 32 77 45 35 72 41 45 35 45 70 6b 65 72 58 42 57 45 45 37 75 45 65 46 6d 67 76 46 34 45 68 4b 78 45 38 32 77 24 32 77 34 67 71 45 2b 6b 47 6a 66 6d 76 36 76 74 45 4c 77 67 47 64 6e 6d 50 2b 77 34 45 37 7a 4d 4a 70 67 64 57 2b 47 34 45 77 35 4c 76 78 32 76 24 62 46 34 76 32 6a 2d 50 39 4f 38 45 47 62 6a 6a 66 47 6f 6f 73 43 65 5a 49 75 67 78 42 4f 65 Data Ascii: v_90196aba2c860f98=eAwx2WL-F7AEAEYALvL7uIl-%2bJ+dL-L5EUILo7LCEv4+876dES7TEOmELFIQiLtEG4LCE8x4LREp9taCsEEME2xEA77xnXWE5xnjLvgnn8pZEg4WgEaup2wE5rAE5EpkerXBWEE7uEeFmgvF4EhKxE82w$2w4gqE+kGjfmv6vtELwgGdnmP+w4E7zMJpgdW+G4Ew5Lvx2v$bF4v2j-P9O8EGbjjfGoosCeZIugxBOe
2025-01-14 00:12:57 UTC	16097	OUT	Data Raw: 45 70 45 31 34 38 78 38 30 74 57 78 6a 45 4a 78 36 45 2b 78 6e 5a 32 59 4c 50 45 35 45 76 5a 45 34 45 6e 45 6c 39 45 73 39 45 49 4c 76 4c 74 45 6e 66 76 34 4c 68 45 35 49 38 75 45 5a 45 2b 49 4c 59 45 30 45 70 45 6e 76 4c 53 45 54 52 59 69 4c 51 45 70 45 2b 49 57 47 45 6e 78 38 67 4c 74 69 6c 2d 76 4d 45 79 41 76 59 38 57 45 74 45 31 34 57 4a 30 75 45 65 57 57 66 45 5a 45 38 6e 6e 48 64 4e 45 49 49 76 54 4c 77 45 44 7a 33 69 4c 52 45 49 78 77 2d 62 72 45 49 41 45 49 45 79 45 68 78 65 39 57 67 45 41 75 38 52 4c 6e 45 53 78 61 38 6f 34 6b 67 64 6c 59 4c 4c 45 64 45 38 74 69 31 78 65 49 6e 4b 4d 69 45 6a 78 44 30 4c 6a 46 31 79 45 39 57 78 6f 52 64 38 56 39 70 4b 45 31 75 34 45 35 49 65 46 2b 75 49 49 45 66 71 34 39 57 4f 71 47 45 2b 49 45 37 45 6c 45 45 52 Data Ascii: EpE148x80tWxjEJx6E+xnZ2YLPE5EvZE4EnEl9Es9EILvLtEnfv4LhE5I8uEZE+ILYE0EpEnvLSETRYiLQEpE+IWGEnx8gLtil-vMEyAvY8WEtE14WJ0uEeWWfEZE8nnHdNEIIvTLwEDz3iLREIxw-brEIAEIEyEhxe9WgEAu8RLnESxa8o4kgdlYLLEdE8ti1xeInKMiEjxD0LjF1yE9WxoRd8V9pKE1u4E5IeF+uIIEfq49WOqGE+IE7ElEER
2025-01-14 00:12:57 UTC	961	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:12:57 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4700 Connection: close cf-chl-out: +ysL8wu6i0/F2iUHSsXAxZONqtvyb4xZr5POZhEGwq9Ar1jDly48tFfEHgueJTy2NJ+Lu4u0Ck3b6apKbsJNB1hy+/Q9Ai0YK2UyM9i65jk=$/bCmsXubceeQre/4KeGt6Q== cf-chl-out-s: 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$z1pYecp9iudw3UOGJJYm1A== Server: cloudflare CF-RAY: 90196adb2c71c33b-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:57 UTC	408	IN	Data Raw: 69 59 57 4a 56 32 74 6d 6b 70 4a 54 67 55 74 4e 56 57 32 42 5a 4a 64 36 6a 6e 6d 64 6d 33 42 77 70 49 2b 53 6f 6f 4f 47 6e 57 57 43 64 49 6c 6d 66 4b 43 51 66 34 71 78 67 49 65 45 6d 4c 6d 34 74 70 79 39 76 4c 74 2b 63 35 62 41 6c 70 75 37 76 4d 47 31 6d 36 6a 49 71 49 75 50 68 71 79 4c 6a 35 54 4f 6b 4a 48 4a 74 61 75 55 6c 63 69 64 79 36 2f 43 6f 73 4c 56 76 62 65 67 74 72 4b 70 7a 4f 43 36 37 4e 72 6a 72 4b 36 39 33 38 37 6b 34 75 7a 6b 79 65 66 78 75 62 66 73 7a 75 4c 33 34 76 58 7a 31 37 2f 6d 33 73 6e 72 32 76 6a 36 2b 67 58 61 41 66 30 4b 37 73 2f 32 43 74 6a 72 31 4e 59 4e 32 50 73 55 30 78 67 6a 4a 76 54 34 49 69 45 6b 4b 43 73 42 2b 52 73 72 42 69 50 71 42 43 63 6c 4e 44 49 30 46 76 6a 74 46 51 2f 37 41 42 67 4e 45 42 45 42 46 43 41 37 42 30 46 Data Ascii: iYWJV2tmkpJTgUtNVW2BZJd6jnmdm3BwpI+SooOGnWWCdIlmfKCQf4qxgIeEmLm4tpy9vLt+c5bAlpu7vMG1m6jIqIuPhqyLj5TOkJHJtauUlcidy6/CosLVvbegtrKpzOC67NrjrK69387k4uzkyefxubfszuL34vXz17/m3snr2vj6+gXaAf0K7s/2Ctjr1NYN2PsU0xgjJvT4IiEkKCsB+RsrBiPqBCclNDI0FvjtFQ/7ABgNEBEBFCA7B0F
2025-01-14 00:12:57 UTC	1369	IN	Data Raw: 6c 61 71 74 6e 61 35 2b 6a 35 71 41 67 70 71 49 6e 6f 47 6d 6f 4d 2b 71 6a 34 69 69 70 71 61 53 72 36 2f 50 73 38 2f 48 6d 37 7a 65 73 62 37 4c 33 4e 4f 68 78 4e 32 66 32 4c 37 5a 74 75 6a 6f 32 2b 2f 66 77 75 4b 7a 78 64 50 68 31 39 66 61 36 65 33 55 36 64 72 72 34 66 62 52 30 62 2f 52 38 41 44 64 30 74 6a 63 36 38 62 58 41 2b 6e 49 45 73 2f 78 2f 64 54 31 46 77 59 49 34 2f 33 58 48 66 48 6f 45 77 50 73 49 78 73 57 34 52 54 33 35 75 45 61 44 52 72 73 47 52 48 76 37 43 45 46 44 50 51 6b 38 79 62 74 4b 42 30 2b 38 53 49 51 48 55 50 2b 4e 78 77 2f 4f 30 5a 45 44 44 73 68 50 54 74 44 49 44 51 70 53 43 45 76 44 69 39 5a 4f 31 45 30 54 43 63 53 4e 57 4d 72 5a 44 56 6c 49 6d 6c 58 4a 56 39 72 4f 79 78 59 58 6b 5a 6c 61 58 41 76 63 6d 6b 32 62 48 42 5a 57 6e 4a Data Ascii: laqtna5+j5qAgpqInoGmoM+qj4iipqaSr6/Ps8/Hm7zesb7L3NOhxN2f2L7Ztujo2+/fwuKzxdPh19fa6e3U6drr4fbR0b/R8ADd0tjc68bXA+nIEs/x/dT1FwYI4/3XHfHoEwPsIxsW4RT35uEaDRrsGRHv7CEFDPQk8ybtKB0+8SIQHUP+Nxw/O0ZEDDshPTtDIDQpSCEvDi9ZO1E0TCcSNWMrZDVlImlXJV9rOyxYXkZlaXAvcmk2bHBZWnJ
2025-01-14 00:12:57 UTC	1369	IN	Data Raw: 4c 79 55 6e 4c 65 79 6d 4b 47 6f 69 72 36 77 78 62 6e 43 77 73 6d 79 69 4a 50 51 71 63 61 6d 74 64 58 65 70 39 62 42 32 75 50 59 74 36 50 52 35 4c 76 56 32 4d 71 39 37 64 44 6c 71 63 50 67 36 2b 37 71 32 50 4c 77 38 75 62 75 33 75 37 6f 38 64 54 63 38 2f 62 42 77 2f 6a 36 77 62 77 4a 42 4f 33 63 37 77 58 75 43 2f 51 44 2f 65 41 55 43 4f 73 54 2b 77 33 36 46 2f 6a 2b 33 50 77 65 41 52 38 6a 2b 51 55 69 48 2f 73 66 49 52 34 61 4c 53 58 79 46 43 30 57 38 69 55 75 38 53 38 63 4c 68 73 76 2f 44 4d 66 4e 30 55 7a 45 30 63 38 4f 42 33 38 49 54 77 4a 49 44 70 4b 4f 79 51 2b 53 53 63 54 4f 46 59 36 54 79 31 5a 56 68 68 4d 57 55 4a 4c 50 31 78 5a 4a 31 52 49 50 46 35 4d 5a 79 74 51 55 47 68 53 53 46 39 73 4d 79 6c 35 62 6e 46 52 63 47 35 30 63 7a 35 67 50 56 42 53 Data Ascii: LyUnLeymKGoir6wxbnCwsmyiJPQqcamtdXep9bB2uPYt6PR5LvV2Mq97dDlqcPg6+7q2PLw8ubu3u7o8dTc8/bBw/j6wbwJBO3c7wXuC/QD/eAUCOsT+w36F/j+3PweAR8j+QUiH/sfIR4aLSXyFC0W8iUu8S8cLhsv/DMfN0UzE0c8OB38ITwJIDpKOyQ+SScTOFY6Ty1ZVhhMWUJLP1xZJ1RIPF5MZytQUGhSSF9sMyl5bnFRcG50cz5gPVBS
2025-01-14 00:12:57 UTC	1369	IN	Data Raw: 6a 44 69 49 66 51 77 6f 36 45 30 38 79 6f 31 70 66 52 6c 49 79 37 31 63 62 65 33 39 54 5a 77 4c 66 62 33 73 44 54 78 4f 48 41 78 4d 58 6d 79 4c 33 6d 78 50 4b 78 38 4e 61 76 7a 75 6a 76 7a 4e 54 31 39 4e 54 6f 39 72 37 79 35 50 50 42 75 50 72 6e 78 41 76 2b 2b 74 6f 44 41 67 72 4d 36 41 55 53 39 67 76 53 45 52 44 6a 42 52 49 48 38 42 67 52 38 78 73 4e 46 67 38 6a 38 79 45 53 2b 43 63 62 4a 68 38 59 45 50 37 72 4b 53 34 47 49 79 41 72 4d 2f 49 63 4e 51 34 7a 4c 44 33 39 47 52 45 35 4c 6a 4d 54 52 69 74 44 52 69 6b 47 44 45 4a 41 4f 69 6c 4c 4d 78 4e 4c 55 6b 34 58 47 45 74 57 46 6c 74 68 56 53 38 67 49 46 6b 7a 58 31 46 62 55 79 52 72 58 43 6c 4a 63 55 30 75 53 47 46 71 62 32 39 31 57 46 64 4e 66 56 78 52 56 47 70 36 56 45 30 32 66 46 68 36 63 6d 56 48 59 Data Ascii: jDiIfQwo6E08yo1pfRlIy71cbe39TZwLfb3sDTxOHAxMXmyL3mxPKx8NavzujvzNT19NTo9r7y5PPBuPrnxAv++toDAgrM6AUS9gvSERDjBRIH8BgR8xsNFg8j8yES+CcbJh8YEP7rKS4GIyArM/IcNQ4zLD39GRE5LjMTRitDRikGDEJAOilLMxNLUk4XGEtWFlthVS8gIFkzX1FbUyRrXClJcU0uSGFqb291WFdNfVxRVGp6VE02fFh6cmVHY
2025-01-14 00:12:57 UTC	185	IN	Data Raw: 2f 7a 37 4f 7a 79 6f 32 52 74 38 53 6e 78 38 71 63 32 4c 75 74 6d 4b 4c 45 33 4f 54 6d 73 65 6d 30 71 63 47 74 79 71 37 48 76 65 62 30 78 64 4f 6f 31 62 62 32 37 64 6e 31 2b 4f 66 49 73 74 58 58 39 73 48 57 37 73 66 31 42 4f 58 69 44 62 2f 33 37 68 49 4f 35 51 48 4d 31 4e 54 30 30 68 62 59 37 4e 50 63 38 66 7a 58 44 41 7a 32 44 39 63 67 41 52 58 6e 35 43 49 68 42 77 50 2b 4a 77 51 48 44 43 45 77 4b 78 4d 6a 39 51 38 33 2b 44 77 6e 2b 77 7a 33 45 42 33 2b 52 68 45 6b 4a 43 67 37 43 68 30 4f 41 55 59 2b 47 79 68 56 55 30 34 76 52 52 4d 79 48 79 41 3d Data Ascii: /z7Ozyo2Rt8Snx8qc2LutmKLE3OTmsem0qcGtyq7Hveb0xdOo1bb27dn1+OfIstXX9sHW7sf1BOXiDb/37hIO5QHM1NT00hbY7NPc8fzXDAz2D9cgARXn5CIhBwP+JwQHDCEwKxMj9Q83+Dwn+wz3EB3+RhEkJCg7Ch0OAUY+GyhVU04vRRMyHyA=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49778	104.18.94.41	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:12:58 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1400638156:1736810115:4fgdCy3Y0sO6QOVyobUg6DnFEglnskOp8hAFVBcFeMA/90196aba2c860f98/azt.LkitRyVgCP1Aq9jJQ6oSdrKUNyWQ22TcLb5myu0-1736813572-1.1.1.1-4CrhmbBnYDQrg_1jOyqlHt6wp241.me_OK92x_1vvMDVI7CwYc0DpClKGg_isbMZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:12:58 UTC	375	IN	HTTP/1.1 404 Not Found Date: Tue, 14 Jan 2025 00:12:58 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: CXn6jnGc/yFkHSQ5RhUP5Q==$7lFG2J0YYzN9Fqtqn1J46w== Server: cloudflare CF-RAY: 90196ae00f308cee-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:12:58 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49781	52.4.175.122	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:04 UTC	737	OUT	POST /api/v1/form/6783bca3840111e5424ee986 HTTP/1.1 Host: webflow.com Connection: keep-alive Content-Length: 1203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://offfryfjtht767755433.webflow.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:04 UTC	1203	OUT	Data Raw: 6e 61 6d 65 3d 45 6d 61 69 6c 2b 46 6f 72 6d 26 70 61 67 65 49 64 3d 36 37 38 33 62 63 61 33 38 34 30 31 31 31 65 35 34 32 34 65 65 39 39 35 26 65 6c 65 6d 65 6e 74 49 64 3d 63 31 36 64 64 62 31 66 2d 35 66 31 61 2d 33 61 36 38 2d 33 30 39 63 2d 31 30 34 64 38 31 66 63 33 36 64 37 26 64 6f 6d 61 69 6e 3d 6f 66 66 66 72 79 66 6a 74 68 74 37 36 37 37 35 35 34 33 33 2e 77 65 62 66 6c 6f 77 2e 69 6f 26 73 6f 75 72 63 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6f 66 66 66 72 79 66 6a 74 68 74 37 36 37 37 35 35 34 33 33 2e 77 65 62 66 6c 6f 77 2e 69 6f 25 32 46 26 74 65 73 74 3d 66 61 6c 73 65 26 66 69 65 6c 64 73 25 35 42 45 6d 61 69 6c 25 35 44 3d 32 72 6e 69 72 74 25 34 30 7a 6a 6b 75 2e 69 6f 26 66 69 65 6c 64 73 25 35 42 66 69 65 6c 64 25 35 44 3d 26 Data Ascii: name=Email+Form&pageId=6783bca3840111e5424ee995&elementId=c16ddb1f-5f1a-3a68-309c-104d81fc36d7&domain=offfryfjtht767755433.webflow.io&source=https%3A%2F%2Fofffryfjtht767755433.webflow.io%2F&test=false&fields%5BEmail%5D=2rnirt%40zjku.io&fields%5Bfield%5D=&
2025-01-14 00:13:05 UTC	1793	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 23 Connection: close X-Frame-Options: sameorigin Set-Cookie: wf_exp_uniqueId=3c926fc4-43ee-4a9b-938c-afd8e8e7ee0c; Max-Age=31536000; Domain=webflow.com; Path=/; Expires=Wed, 14 Jan 2026 00:13:04 GMT; Secure; SameSite=None Set-Cookie: wfsession=; Path=/api/v1/form/6783bca3840111e5424ee986; Expires=Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: wfsession=; Path=/api; Expires=Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: wflogin=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure; httponly Set-Cookie: wflogin=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=webflow.com; samesite=none; secure; httponly Set-Cookie: wf_user=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=webflow.com; samesite=none; secure; httponly Set-Cookie: wf_logout=1736813584812; path=/; expires=Fri, 12 Jan 2035 00:13:04 GMT; domain=webflow.com; samesite=none; secure Set-Cookie: wfsession=_-o0qSMwx4EePGna6yTyhA.Jl15jYLGwhAnrzqcvMj8WQj9D4eHfpV8TprECqKNko11SjDU4IpSN6F1lWUEJyTEP9oELsRT6s2US56yJ3C8Ag.1736813584813.86400000.REy3yA5iJDEBPJPmXMGkYN_8pq1GlSzBAEEMqzyE4ho; path=/; samesite=none; secure; httponly X-RateLimit-Remaining: 49 X-RateLimit-Limit: 50 X-RateLimit-Reset: 1736813645 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,PUT,POST,PATCH,DELETE Access-Control-Allow-Headers: Content-Type,x-xsrf-token,x-requested-with,x-client-app-version,x-content-type-options ETag: W/"17-Phm4T2XiBw6ecOe3QW2ET4NsgFw" X-Response-Time: 312.794ms Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: frame-ancestors 'self' https://*.webflow.com https://webflow.com; report-uri https://webflow.report-uri.com/r/d/csp/reportOnly
2025-01-14 00:13:05 UTC	23	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 63 6f 64 65 22 3a 32 30 30 7d Data Ascii: {"msg":"ok","code":200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49784	18.210.65.74	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:05 UTC	371	OUT	GET /api/v1/form/6783bca3840111e5424ee986 HTTP/1.1 Host: webflow.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:05 UTC	1710	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 23 Connection: close X-Frame-Options: sameorigin Set-Cookie: wf_exp_uniqueId=bc095bdc-87ea-4f38-8b8b-d7cf58aa8aa9; Max-Age=31536000; Domain=webflow.com; Path=/; Expires=Wed, 14 Jan 2026 00:13:05 GMT; Secure; SameSite=None Set-Cookie: wfsession=; Path=/api/v1/form/6783bca3840111e5424ee986; Expires=Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: wfsession=; Path=/api; Expires=Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: wflogin=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure; httponly Set-Cookie: wflogin=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=webflow.com; samesite=none; secure; httponly Set-Cookie: wf_user=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=webflow.com; samesite=none; secure; httponly Set-Cookie: wf_logout=1736813585758; path=/; expires=Fri, 12 Jan 2035 00:13:05 GMT; domain=webflow.com; samesite=none; secure Set-Cookie: wfsession=Ny1TuAvD2Y2f3rtaRpFg_Q.fOcbco7ObqQraShZ-iGJMXas0K9W8EnslYG-aKXyre34br7aMBGyqhl9GNr7UzM_VQIqmm4A8BGdKhtwVLKrxA.1736813585758.86400000.DXE-ByD0bCRjgFu9hrro1f51c_pXYEbbdZhNhpbztWI; path=/; samesite=none; secure; httponly Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,PUT,POST,PATCH,DELETE Access-Control-Allow-Headers: Content-Type,x-xsrf-token,x-requested-with,x-client-app-version,x-content-type-options ETag: W/"17-Phm4T2XiBw6ecOe3QW2ET4NsgFw" X-Response-Time: 6.620ms Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: frame-ancestors 'self' https://*.webflow.com https://webflow.com; report-uri https://webflow.report-uri.com/r/d/csp/reportOnly
2025-01-14 00:13:05 UTC	23	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 63 6f 64 65 22 3a 32 30 30 7d Data Ascii: {"msg":"ok","code":200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49783	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:05 UTC	990	OUT	GET /d/folders/4?reason=invalid_cred&guce_referrer=aHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8&guce_referrer_sig=AQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_ HTTP/1.1 Host: mail.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:06 UTC	873	IN	HTTP/1.1 302 Found expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only referrer-policy: origin-when-cross-origin strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 1; mode=block x-omg-env: norrin-blue--istio-production-ir2-c9967759-bhwz7 location: https://login.yahoo.com?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_ vary: Accept content-type: text/html; charset=utf-8 content-length: 468
2025-01-14 00:13:06 UTC	2977	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 63 68 69 6c 64 2d 73 72 63 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 3b 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6e 71 2f 61 64 73 2f 6d 62 2f 6e 61 74 69 76 65 2f 2a 20 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 63 6d 70 2e 6f 61 74 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 2e 67 69 66 20 68 74 74 70 73 3a 2f 2f 73 6d 65 74 72 69 63 73 2e 61 74 74 2e 63 6f 6d 2f 69 64 20 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 64 20 Data Ascii: content-security-policy: child-src blob: 'self';connect-src 'self' https://.yimg.com https://.yahoo.com https://s.yimg.com/nq/ads/mb/native/* https://service.cmp.oath.com https://www.yahoo.com/p.gif https://smetrics.att.com/id https://dpm.demdex.net/id
2025-01-14 00:13:06 UTC	227	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 31 3d 64 3d 41 51 41 42 42 42 4b 73 68 57 63 43 45 4b 4e 50 2d 38 58 71 38 32 5a 7a 66 30 62 34 57 53 46 34 37 54 77 46 45 67 45 42 41 51 48 39 68 6d 65 50 5a 39 78 48 30 69 4d 41 5f 65 4d 41 41 41 26 53 3d 41 51 41 41 41 6d 71 44 31 75 58 67 58 34 51 76 57 64 67 30 53 43 33 6d 47 33 45 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 31 34 20 4a 61 6e 20 32 30 32 36 20 30 36 3a 31 33 3a 30 36 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 35 37 36 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a Data Ascii: Set-Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly
2025-01-14 00:13:06 UTC	391	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 33 3d 64 3d 41 51 41 42 42 42 4b 73 68 57 63 43 45 4b 4e 50 2d 38 58 71 38 32 5a 7a 66 30 62 34 57 53 46 34 37 54 77 46 45 67 45 42 41 51 48 39 68 6d 65 50 5a 39 78 48 30 69 4d 41 5f 65 4d 41 41 41 26 53 3d 41 51 41 41 41 6d 71 44 31 75 58 67 58 34 51 76 57 64 67 30 53 43 33 6d 47 33 45 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 31 34 20 4a 61 6e 20 32 30 32 36 20 30 36 3a 31 33 3a 30 36 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 35 37 36 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 31 53 3d 64 3d 41 51 41 42 42 42 4b 73 68 Data Ascii: Set-Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnlySet-Cookie: A1S=d=AQABBBKsh
2025-01-14 00:13:06 UTC	468	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 63 6f 6d 3f 2e 73 72 63 3d 79 6d 26 61 6d 70 3b 70 73 70 69 64 3d 31 35 39 36 30 30 30 30 31 26 61 6d 70 3b 61 63 74 69 76 69 74 79 3d 6d 61 69 6c 2d 64 69 72 65 63 74 26 61 6d 70 3b 2e 6c 61 6e 67 3d 65 6e 2d 55 53 26 61 6d 70 3b 2e 69 6e 74 6c 3d 75 73 26 61 6d 70 3b 2e 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 64 25 32 46 66 6f 6c 64 65 72 73 25 32 46 34 25 33 46 72 65 61 73 6f 6e 25 33 44 69 6e 76 61 6c 69 64 5f 63 72 65 64 25 32 36 67 75 63 65 5f 72 65 66 65 72 72 65 72 25 33 44 61 48 52 30 63 48 4d 36 4c 79 39 68 64 48 51 74 65 57 46 6f 62 32 38 75 59 Data Ascii: <p>Found. Redirecting to https://login.yahoo.com?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49785	67.195.204.151	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:06 UTC	1417	OUT	GET /?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_ HTTP/1.1 Host: login.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://offfryfjtht767755433.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
2025-01-14 00:13:07 UTC	3479	IN	HTTP/1.1 200 OK Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 0 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6ZxzI835pgoSVfSt2tQD_6cNDQfuvk5_qK81EmQDohRp5_tzoNput9Plo52VjHhSBuneg6FmTTVn1PIR2bv2tZ.TtW2cJuLhfcMMaew838G9na2qRR84ZloUXT7D3lsJNbKQM7MurXuP92puyLxGbrHU4ttSFLOeazoV.bEPSOHxjOAvbHK4A-~A; path=/; domain=login.yahoo.com; secure; HttpOnly Content-Type: text/html; charset=utf-8 Content-Length: 43933 Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://ws.progrss.yahoo.com https://udc.yahoo.com https://jsapi.login.yahoo.com https://www.yahoo.com https://3p-udc.yahoo.com https://3p-geo.yahoo.com https://guce.yahoo.com/ https://ups.analytics.yahoo.com https://api.taboola.com/1.2/json/taboola-usersync/user.sync;default-src 'self' https://s.yimg.com https://s1.yimg.com https://login.yahoo.net;font-src https://s.yimg.com https://s1.yimg.com;frame-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com https://gpt.mail.yahoo.net/sandbox https://guce.oath.com/ https://opus.analytics.yahoo.com https://tsdtocl.com/ https://pfs.yahoo.com;img-src 'self' data: https://yahoo.com https://ct.yimg.com https://s.yimg.com https://s1.yimg.com https://tw.yimg.com https://geo.yahoo.com https://socialprofiles.zenfs.com https://*. [TRUNCATED] Vary: Accept-Encoding Date: Tue, 14 Jan 2025 00:13:07 GMT Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2025-01-14 00:13:07 UTC	3975	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 53 74 65 6e 63 69 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 67 72 69 64 20 6c 69 67 68 74 2d 74 68 65 6d 65 20 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f Data Ascii: <!DOCTYPE html><html id="Stencil" lang="en-US" class="no-js grid light-theme "> <head> <meta charset="utf-8"> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"/> <meta name="fo
2025-01-14 00:13:07 UTC	16384	IN	Data Raw: 43 25 32 32 6c 69 6d 69 74 65 64 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 74 61 72 67 65 74 69 6e 67 43 6f 6e 66 69 67 25 32 32 25 33 41 25 37 42 25 32 32 6c 61 6e 67 25 32 32 25 33 41 25 32 32 65 6e 2d 55 53 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 25 32 32 25 33 41 25 32 32 6d 62 72 2d 77 68 61 74 73 61 70 70 2d 61 63 25 32 43 6d 62 72 2d 70 61 73 73 6b 65 79 2d 75 6e 72 2d 72 65 67 25 32 43 6d 62 72 2d 77 68 61 74 73 61 70 70 2d 6e 61 63 25 32 32 25 32 43 25 32 32 73 70 61 63 65 49 64 25 32 32 25 33 41 25 32 32 37 39 34 32 30 30 31 32 33 25 32 32 25 32 43 25 32 32 61 64 4c 6f 63 61 74 69 6f 6e 25 32 32 25 33 41 25 32 32 66 75 6c 6c 5f 73 63 72 65 65 6e 25 32 32 25 32 43 25 32 32 61 67 65 25 32 32 25 33 41 25 32 32 30 25 32 32 25 32 43 25 Data Ascii: C%22limited%22%3Afalse%2C%22targetingConfig%22%3A%7B%22lang%22%3A%22en-US%22%2C%22bucket%22%3A%22mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%22%2C%22spaceId%22%3A%22794200123%22%2C%22adLocation%22%3A%22full_screen%22%2C%22age%22%3A%220%22%2C%
2025-01-14 00:13:07 UTC	16384	IN	Data Raw: 30 32 41 3b 28 2b 35 39 34 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 36 38 39 22 20 76 61 6c 75 65 3d 22 50 46 22 20 3e 46 72 65 6e 63 68 20 50 6f 6c 79 6e 65 73 69 61 20 26 23 78 32 30 32 41 3b 28 2b 36 38 39 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 32 34 31 22 20 76 61 6c 75 65 3d 22 47 41 22 20 3e 47 61 62 6f 6e 20 26 23 78 32 30 32 41 3b 28 2b 32 34 31 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 Data Ascii: 02A;(+594)‬</option> <option role="option" data-code="+689" value="PF" >French Polynesia ‪(+689)‬</option> <option role="option" data-code="+241" value="GA" >Gabon ‪(+241)‬</option> <option role="
2025-01-14 00:13:07 UTC	7190	IN	Data Raw: 3d 22 79 6d 61 69 6c 2e 63 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 34 22 3e 79 6d 61 69 6c 2e 63 6f 6d 3c 2f 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 66 69 6c 6c 3d 22 67 6d 61 69 6c 2e 63 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 35 22 3e 67 6d 61 69 6c 2e 63 6f 6d 3c 2f 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 66 69 6c 6c 3d 22 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 36 22 3e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 3c 2f 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 66 69 6c 6c 3d 22 61 6f 6c 2e 63 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 37 22 3e 61 6f 6c 2e 63 6f 6d 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 Data Ascii: ="ymail.com" tabindex="4">ymail.com</li><li data-fill="gmail.com" tabindex="5">gmail.com</li><li data-fill="outlook.com" tabindex="6">outlook.com</li><li data-fill="aol.com" tabindex="7">aol.com</li> </ul> </div> <di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49787	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:07 UTC	585	OUT	GET /wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:08 UTC	562	IN	HTTP/1.1 200 OK x-amz-id-2: ro64e1MtHm5y87V/WwWrabNlBx1bq4Nmle6+w6pthFMmwibb2i61R+JEK+GVccuuZTzO+j4okE8= x-amz-request-id: QVZG6B9Y6B8ATJV8 Date: Tue, 14 Jan 2025 00:13:09 GMT Last-Modified: Wed, 08 Jan 2025 04:25:33 GMT ETag: "fbb649f7c85310f4cc51dacbdf506c3c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: text/css Content-Length: 708761 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:08 UTC	738	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 4c 69 67 68 74 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 4c 69 67 68 74 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 68 74 74 70 73 Data Ascii: @font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 4c 69 67 68 74 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 4c 69 67 68 74 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 Data Ascii: s/2017/Yahoo_Sans-Light.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff) format("woff");font-weight:300;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/s
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 Data Ascii: url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff) format("woff");font-weight:500;font-style:normal}@font-face{font-family:"Yahoo Sans";font-displa
2025-01-14 00:13:08 UTC	196	IN	Data Raw: 6f 6c 64 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 42 6f 6c 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 Data Ascii: old.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Ext
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 72 61 42 6f 6c 64 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 42 6c 61 63 6b 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 42 6c 61 Data Ascii: raBold.woff) format("woff");font-weight:800;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bla
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 43 65 6e 74 72 61 20 4e 6f 32 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 62 77 2f 66 6f 6e 74 73 2f 63 65 6e 74 72 61 2d 6e 6f 32 2d 6c 69 67 68 74 2d 69 74 61 6c 69 63 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 43 65 6e 74 72 61 20 4e 6f 32 22 3b Data Ascii: mat("woff2");font-weight:300;font-style:normal}@font-face{font-family:"Centra No2";font-display:block;src:url(https://s.yimg.com/bw/fonts/centra-no2-light-italic.woff2) format("woff2");font-weight:300;font-style:italic}@font-face{font-family:"Centra No2";
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 2e 79 69 6d 67 2e 63 6f 6d 2f 62 77 2f 66 6f 6e 74 73 2f 63 65 6e 74 72 61 2d 6e 6f 32 2d 65 78 74 72 61 62 6f 6c 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 43 65 6e 74 72 61 20 4e 6f 32 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 62 77 2f 66 6f 6e 74 73 2f 63 65 6e 74 72 61 2d 6e 6f 32 2d 65 78 74 72 61 62 6f 6c 64 2d 69 74 61 6c 69 63 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b Data Ascii: .yimg.com/bw/fonts/centra-no2-extrabold.woff2) format("woff2");font-weight:800;font-style:normal}@font-face{font-family:"Centra No2";font-display:block;src:url(https://s.yimg.com/bw/fonts/centra-no2-extrabold-italic.woff2) format("woff2");font-weight:800;
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 74 6d 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 2e 38 33 65 6d 20 30 7d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 37 65 6d 3b 6d 61 72 67 69 6e 3a 31 65 6d 20 30 7d 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: tml{font-size:100%;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}h2{font-size:1.5em;margin:.83em 0}h3{font-size:1.17em;margin:1em 0}h4{font-size
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 69 6e 70 75 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2a 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b Data Ascii: input{line-height:normal}button,select{text-transform:none}button,html input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer;*overflow:visible}button[disabled],html input[disabled]{cursor:default}input[type=check
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 75 72 65 2d 75 2d 37 2d 38 2c 2e 70 75 72 65 2d 75 2d 31 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 35 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 37 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 31 31 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 31 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 32 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 33 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 34 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 35 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 36 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 37 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 38 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 39 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 30 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 31 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 32 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 33 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 34 2d 32 34 2c 2e 70 75 72 65 Data Ascii: ure-u-7-8,.pure-u-1-12,.pure-u-5-12,.pure-u-7-12,.pure-u-11-12,.pure-u-1-24,.pure-u-2-24,.pure-u-3-24,.pure-u-4-24,.pure-u-5-24,.pure-u-6-24,.pure-u-7-24,.pure-u-8-24,.pure-u-9-24,.pure-u-10-24,.pure-u-11-24,.pure-u-12-24,.pure-u-13-24,.pure-u-14-24,.pure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49786	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:07 UTC	626	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:08 UTC	648	IN	HTTP/1.1 200 OK x-amz-id-2: AYg34mvY7bNPeR4k8CyWivvMEuMcPsjAWc9b35kCAu1HtfNIz4dK3ABpg4mJoFZc0AebE1azb40= x-amz-request-id: A9EM9F038WFDY53C Date: Mon, 13 Jan 2025 15:58:51 GMT Last-Modified: Sun, 12 Jan 2025 21:30:30 GMT ETag: "cd166981c96c6d0f4b5a7d798c25878e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Tue, 14 Jan 2025 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Content-Length: 1346 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 29658 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 2a 50 4c 54 45 47 70 4c 61 02 d3 61 01 d3 61 02 d3 72 19 e1 60 01 d2 60 01 d2 60 01 d2 60 01 d3 62 05 d5 61 03 d4 60 01 d2 65 09 d7 60 01 d2 05 db 6c 10 00 00 00 0e 74 52 4e 53 00 54 7b 6a 0a b3 ff e1 93 2a 3d ca 19 f3 50 61 75 3e 00 00 04 b9 49 44 41 54 78 da ed 9a eb 8e 23 29 0c 46 8b 8b 8b 8b f1 fb bf ee aa 27 d2 26 b6 31 14 b5 35 1a 2d 13 ab ff 74 82 c0 07 cc 87 0d 39 be f6 b5 af 5d 30 e7 df 16 fe 9c 1b d1 33 fb 8d 9e c0 f9 b6 f4 e7 80 fd c9 2c 6f 0f 9c 38 70 d9 1d b8 72 5e 3c 76 07 06 0e ec 76 07 6e 9c 97 e2 e6 c0 5a b2 f6 06 d6 92 b5 3b b0 e3 bc 70 ec 0d ac 25 6b 77 e0 c2 79 d3 b1 3b 70 e6 c0 7e 77 e0 48 1c b8 6d 0e ac 25 6b 77 60 e4 c0 f5 89 Data Ascii: PNGIHDRHPLTEGpLaaar````ba`e`ltRNST{j=Pau>IDATx#)F'&15-t9]03,o8pr^<vvnZ;p%kwy;p~wHm%kw`
2025-01-14 00:13:08 UTC	46	IN	Data Raw: 5b fa cb 24 cb 0d 2a ff fd cf 24 d8 9f 37 e6 ec df 7f f5 f8 da d7 fe 87 f6 0f 42 2a 9e da f5 7e d6 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: [$$7B~IIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49788	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:07 UTC	626	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:08 UTC	648	IN	HTTP/1.1 200 OK x-amz-id-2: D2C4uJdk49OuAfqKetWz8af8rgkluNlNqtP9Pt0p6aTG8bQhu7yNtdGofDq6BZJziYl08h7a2qk= x-amz-request-id: R7X6YDJ13BSACWQH Date: Mon, 13 Jan 2025 15:19:52 GMT Last-Modified: Sun, 12 Jan 2025 21:30:30 GMT ETag: "dd31f56b9e4dff40eb87447c3dc55b84" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Tue, 14 Jan 2025 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Content-Length: 1391 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 31997 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:08 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 33 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cf d1 8a 61 00 00 00 10 74 52 4e 53 00 85 18 aa e0 f6 3d 09 b9 54 cc 2a 76 ed 98 68 e1 23 f6 e8 00 00 04 db 49 44 41 54 78 5e ed 9a db 92 db 20 0c 86 39 4a 9c f1 fb 3f 6d a7 d9 0b af 90 65 4c 9a 69 67 e8 fe 77 d9 38 86 4f 08 49 88 55 0f f4 a3 1f fd 28 96 53 fd df 01 98 52 ca df 99 49 38 4e b9 7f 07 5c 0e a2 b6 3d b0 a3 c0 79 77 60 a0 bc 49 ed 0e 1c 28 70 dc 1d d8 50 de 8a bb 03 6b 0a ac d5 de c0 3c 64 ed 0e 1c 29 6f 50 7b 03 f3 90 b5 3b 70 a6 bc 4e ed 0d cc 43 d6 ee c0 58 29 b0 d9 1a Data Ascii: PNGIHDRH3PLTEGpLatRNS=T*vh#IDATx^ 9J?meLigw8OIU(SRI8N\=yw`I(pPk<d)oP{;pNCX)
2025-01-14 00:13:08 UTC	91	IN	Data Raw: 15 17 82 6e 56 93 57 ac d4 d3 a0 b6 57 a3 15 f9 f6 c2 4a 03 fb e6 e2 ff a6 b4 b7 78 c8 da 5e c0 ce 66 9b cb 6e 1d b2 e6 f7 e2 db 4b ff 6f 21 8b 5d a9 6f ae f8 bf 85 ac 40 4f 57 db 0b f5 77 c1 8e 88 fb eb 47 bf 00 33 aa 7a 26 16 d7 c0 61 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nVWWJx^fnKo!]o@OWwG3z&aIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49790	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:08 UTC	391	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:09 UTC	648	IN	HTTP/1.1 200 OK x-amz-id-2: AqffhWjHa/l6EMZ+qouCvlihhWLGdxzMlaaSwmxGRO2Z5aIDQAyX75BUtf4rhVd0U9S5h5zlR/8= x-amz-request-id: SG4JBG5H7489TZNZ Date: Mon, 13 Jan 2025 10:09:57 GMT Last-Modified: Sun, 12 Jan 2025 21:30:30 GMT ETag: "cd166981c96c6d0f4b5a7d798c25878e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Tue, 14 Jan 2025 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Content-Length: 1346 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 50594 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 2a 50 4c 54 45 47 70 4c 61 02 d3 61 01 d3 61 02 d3 72 19 e1 60 01 d2 60 01 d2 60 01 d2 60 01 d3 62 05 d5 61 03 d4 60 01 d2 65 09 d7 60 01 d2 05 db 6c 10 00 00 00 0e 74 52 4e 53 00 54 7b 6a 0a b3 ff e1 93 2a 3d ca 19 f3 50 61 75 3e 00 00 04 b9 49 44 41 54 78 da ed 9a eb 8e 23 29 0c 46 8b 8b 8b 8b f1 fb bf ee aa 27 d2 26 b6 31 14 b5 35 1a 2d 13 ab ff 74 82 c0 07 cc 87 0d 39 be f6 b5 af 5d 30 e7 df 16 fe 9c 1b d1 33 fb 8d 9e c0 f9 b6 f4 e7 80 fd c9 2c 6f 0f 9c 38 70 d9 1d b8 72 5e 3c 76 07 06 0e ec 76 07 6e 9c 97 e2 e6 c0 5a b2 f6 06 d6 92 b5 3b b0 e3 bc 70 ec 0d ac 25 6b 77 e0 c2 79 d3 b1 3b 70 e6 c0 7e 77 e0 48 1c b8 6d 0e ac 25 6b 77 60 e4 c0 f5 89 Data Ascii: PNGIHDRHPLTEGpLaaar````ba`e`ltRNST{j=Pau>IDATx#)F'&15-t9]03,o8pr^<vvnZ;p%kwy;p~wHm%kw`
2025-01-14 00:13:09 UTC	46	IN	Data Raw: 5b fa cb 24 cb 0d 2a ff fd cf 24 d8 9f 37 e6 ec df 7f f5 f8 da d7 fe 87 f6 0f 42 2a 9e da f5 7e d6 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: [$$7B~IIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49789	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:08 UTC	528	OUT	GET /ss/rapid-3.53.39.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:09 UTC	682	IN	HTTP/1.1 200 OK x-amz-id-2: 4tmFHcZubURPtfbg+dCRySEWF6f4Nr3ozDcBc1GluXa6c0NXlRJCjMOkBBEG2ZTh9gjYYWWzKyg= x-amz-request-id: MFV2Q0X0KN7Z99F5 Date: Sun, 12 Jan 2025 19:26:18 GMT Last-Modified: Thu, 20 Oct 2022 22:18:00 GMT ETag: "3ad90205296656e070371a83d5201160" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: qQB6rmWhCi0nbuLvxW7W.stvcSOa1X3q Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 51141 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 103612 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 6c 29 7b 76 61 72 20 63 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 74 3f 28 75 5b 6e 5d 3d 69 2c 6e 3d 63 5b 6e 5d 2c 6c 26 26 6e 26 26 6e 2e 6c 6f 67 26 26 6c 2e 73 65 74 28 6e 2e 6b 65 79 2c 69 29 29 3a 30 3c 6f 2b 72 26 26 28 6f 2d 2d 2c 73 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 61 28 6f 29 26 26 73 28 29 7d 3b 76 61 72 20 65 3d 6e 75 6c 6c 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 Data Ascii: ){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}-1!==t?(u[n]=i,n=c[n],l&&n&&n.log&&l.set(n.key,i)):0<o+r&&(o--,s())}e.fpc&&".yahoo.com"!==a(o)&&s()};var e=null;try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 6c 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 72 69 63 68 76 69 65 77 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 79 71 6c 69 64 3d 65 2c 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 3d 6e 7d 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 Data Ascii: it_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new le).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=function(){var e="richview";function t(e,t,n){this.yqlid=e,this.eventName=t,this.spaceidPrefix=n}t.prototype={getYQLI
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 5d 3d 74 2c 74 68 69 73 2e 63 6f 75 6e 74 2b 2b 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 79 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 79 Data Ascii: ]=t,this.count++)},get:function(e){return this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&y.isObj(e))for(var t in e)y.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&y.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|y
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 72 3d 22 75 64 63 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3b 21 30 21 3d 3d 65 2e 66 70 63 26 26 22 79 61 68 6f 6f 2e 63 6f 6d 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 3b 72 3d 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 63 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 75 65 2c 6b 65 79 73 3a 6c 2c 72 65 66 65 72 72 65 72 3a 65 2e 72 65 66 65 72 72 65 72 2c 67 65 74 52 65 66 65 72 72 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 2e 6e 6f 72 6d 28 79 2e 63 6c 72 65 66 28 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 72 65 Data Ascii: eo.yahoo.com",r="udc.yahoo.com";!0!==e.fpc&&"yahoo.com"===document.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r);r={override:i,version:ce,comboName:ue,keys:l,referrer:e.referrer,getReferrer:function(){return y.norm(y.clref((void 0!==this.re
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 63 6b 5f 69 6e 70 75 74 3a 65 2e 74 72 61 63 6b 5f 69 6e 70 75 74 7c 7c 22 72 61 70 69 64 2d 74 72 61 63 6b 2d 69 6e 70 75 74 22 2c 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 3a 65 2e 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 2d 77 69 74 68 2d 63 6c 69 63 6b 69 64 22 2c 61 6e 63 5f 70 6f 73 5f 61 74 74 72 3a 22 64 61 74 61 2d 72 61 70 69 64 5f 70 22 2c 61 6e 63 5f 76 39 79 5f 61 74 74 72 3a 22 64 61 74 61 2d 76 39 79 22 2c 64 65 62 3a 21 30 3d 3d 3d 65 2e 64 65 62 75 67 2c 6c 64 62 67 3a 30 3c 65 2e 6c 64 62 67 7c 7c 30 3c 6e 2e 69 6e 64 65 78 4f 66 28 22 79 68 6c 64 65 62 75 67 3d 31 22 29 2c 61 64 64 6d 6f 64 5f 74 69 6d 65 6f 75 74 3a 65 2e 61 64 64 6d 6f 64 75 6c 65 73 5f 74 69 6d 65 6f 75 74 7c 7c 33 30 30 2c 75 6c 74 5f 74 6f Data Ascii: ck_input:e.track_input\|\|"rapid-track-input",click_id_class:e.click_id_class\|\|"rapid-with-clickid",anc_pos_attr:"data-rapid_p",anc_v9y_attr:"data-v9y",deb:!0===e.debug,ldbg:0<e.ldbg\|\|0<n.indexOf("yhldebug=1"),addmod_timeout:e.addmodules_timeout\|\|300,ult_to
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 55 49 44 3d 79 2e 61 75 67 28 7b 7d 2c 61 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 63 75 73 74 6f 6d 55 49 44 20 6d 75 73 74 20 62 65 20 61 6e 20 4f 62 6a 65 63 74 20 77 69 74 68 20 22 69 64 22 20 61 6e 64 20 22 74 79 70 65 22 27 29 2c 72 2e 63 75 73 74 6f 6d 55 49 44 3d 6e 75 6c 6c 29 29 3b 76 61 72 20 61 2c 6f 3d 2b 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 79 2e 69 73 4e 75 6d 28 6f 29 3f 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3d 28 6e 3d 37 30 30 2c 28 61 3d 6f 29 3c 28 6f 3d 33 30 30 29 3f 6f 3a 6e 3c 61 3f 6e 3a 61 29 3a 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3d 37 30 30 2c 72 2e 6c 64 62 67 26 26 31 65 34 21 3d 72 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e Data Ascii: UID=y.aug({},a):(console.error('customUID must be an Object with "id" and "type"'),r.customUID=null));var a,o=+r.compr_timeout;return y.isNum(o)?r.compr_timeout=(n=700,(a=o)<(o=300)?o:n<a?n:a):r.compr_timeout=700,r.ldbg&&1e4!=r.click_timeout&&console.warn
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 28 22 26 22 29 29 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 29 7c 7c 32 3c 3d 28 6f 3d 61 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 69 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 30 5d 29 2c 73 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 31 5d 29 2c 6f 3d 21 72 2e 74 65 73 74 28 69 29 2c 45 28 22 51 75 65 72 79 70 61 72 61 6d 73 20 64 65 63 6f 64 65 64 3a 20 22 2b 69 2b 22 20 3a 20 22 2b 73 29 2c 45 28 22 42 6c 61 63 6b 6c 69 73 74 20 66 69 6c 74 65 72 3a 20 22 2b 6f 29 2c 6f 26 26 74 2e 73 65 74 28 69 2c 73 29 29 7d 76 61 72 20 6c 3d 28 6c 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 3a 24 Data Ascii: ("&"))!a.hasOwnProperty(s)\|\|2<=(o=a[s].split("=")).length&&(i=decodeURIComponent(o[0]),s=decodeURIComponent(o[1]),o=!r.test(i),E("Queryparams decoded: "+i+" : "+s),E("Blacklist filter: "+o),o&&t.set(i,s))}var l=(l=window.location.protocol\|\|"").replace(/:$
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 69 2c 6e 2e 70 70 29 2c 4e 28 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 28 5b 65 5d 2c 74 2c 21 30 2c 69 2c 6e 29 7d 29 29 7d 2c 73 65 6e 64 55 4c 54 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 7b 7d 2c 74 3d 48 28 22 70 22 2c 6e 65 77 20 64 28 69 3d 65 26 26 65 2e 64 61 74 61 3f 65 2e 64 61 74 61 3a 69 29 2c 74 7c 7c 30 29 3b 65 2e 74 79 70 65 26 26 28 74 2b 3d 22 26 5f 56 3d 22 2b 65 2e 74 79 70 65 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 29 2c 70 28 74 2c 6e 29 7d 2c 73 65 6e 64 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 73 65 6e 64 55 4c 54 45 76 65 6e 74 28 65 2c 74 29 7d 2c 73 65 6e 64 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 76 61 72 Data Ascii: i,n.pp),N(P(function(){return R([e],t,!0,i,n)}))},sendULTEvent:function(e,t,n){var i={},t=H("p",new d(i=e&&e.data?e.data:i),t\|\|0);e.type&&(t+="&_V="+e.type.spaceidPrefix),p(t,n)},sendEvents:function(e,t){this.sendULTEvent(e,t)},sendClick:function(i,o){var
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 74 70 73 3a 2f 2f 27 2b 44 2e 67 65 6f 5f 68 6f 73 74 2b 27 2f 62 2e 68 74 6d 6c 22 27 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 3c 69 66 72 61 6d 65 20 22 2b 74 2b 27 20 6e 61 6d 65 3d 22 27 2b 65 2b 27 22 3e 3c 2f 69 66 72 61 6d 65 3e 27 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 6e 61 6d 65 3d 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 2c 69 3d 79 2e 6d 61 6b 65 28 22 66 6f 72 6d 22 29 2c 6f 3d 79 2e 6d 61 6b 65 28 22 69 6e 70 75 74 22 29 2c 72 3d 6d 28 29 2c 61 3d 6d 28 29 2c 73 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 63 68 61 72 73 65 Data Ascii: tps://'+D.geo_host+'/b.html"'),document.createElement("<iframe "+t+' name="'+e+'"></iframe>')):document.createElement("iframe")).name=e,n}function T(e,t){var n=null,i=y.make("form"),o=y.make("input"),r=m(),a=m(),s="application/x-www-form-urlencoded;charse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49792	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:08 UTC	391	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:09 UTC	648	IN	HTTP/1.1 200 OK x-amz-id-2: D2C4uJdk49OuAfqKetWz8af8rgkluNlNqtP9Pt0p6aTG8bQhu7yNtdGofDq6BZJziYl08h7a2qk= x-amz-request-id: R7X6YDJ13BSACWQH Date: Mon, 13 Jan 2025 15:19:52 GMT Last-Modified: Sun, 12 Jan 2025 21:30:30 GMT ETag: "dd31f56b9e4dff40eb87447c3dc55b84" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Tue, 14 Jan 2025 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Content-Length: 1391 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 31998 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 33 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cf d1 8a 61 00 00 00 10 74 52 4e 53 00 85 18 aa e0 f6 3d 09 b9 54 cc 2a 76 ed 98 68 e1 23 f6 e8 00 00 04 db 49 44 41 54 78 5e ed 9a db 92 db 20 0c 86 39 4a 9c f1 fb 3f 6d a7 d9 0b af 90 65 4c 9a 69 67 e8 fe 77 d9 38 86 4f 08 49 88 55 0f f4 a3 1f fd 28 96 53 fd df 01 98 52 ca df 99 49 38 4e b9 7f 07 5c 0e a2 b6 3d b0 a3 c0 79 77 60 a0 bc 49 ed 0e 1c 28 70 dc 1d d8 50 de 8a bb 03 6b 0a ac d5 de c0 3c 64 ed 0e 1c 29 6f 50 7b 03 f3 90 b5 3b 70 a6 bc 4e ed 0d cc 43 d6 ee c0 58 29 b0 d9 1a Data Ascii: PNGIHDRH3PLTEGpLatRNS=T*vh#IDATx^ 9J?meLigw8OIU(SRI8N\=yw`I(pPk<d)oP{;pNCX)
2025-01-14 00:13:09 UTC	91	IN	Data Raw: 15 17 82 6e 56 93 57 ac d4 d3 a0 b6 57 a3 15 f9 f6 c2 4a 03 fb e6 e2 ff a6 b4 b7 78 c8 da 5e c0 ce 66 9b cb 6e 1d b2 e6 f7 e2 db 4b ff 6f 21 8b 5d a9 6f ae f8 bf 85 ac 40 4f 57 db 0b f5 77 c1 8e 88 fb eb 47 bf 00 33 aa 7a 26 16 d7 c0 61 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nVWWJx^fnKo!]o@OWwG3z&aIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49791	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:09 UTC	566	OUT	GET /wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/bundle.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:09 UTC	627	IN	HTTP/1.1 200 OK x-amz-id-2: g3J6Y6pjVoZkd6kDQ07B0FhsDyRtug6A3BK1x7hNChnhBVBdFZtR3q6+oZb/hm/y+EWiULvMGkQ= x-amz-request-id: M7XQCH2FSNA99M3D Date: Wed, 08 Jan 2025 05:40:10 GMT Last-Modified: Wed, 08 Jan 2025 04:25:33 GMT ETag: "14bf381a72adaa2223c20a8728bd6fa4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 193175 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 498780 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 66 29 7b 69 66 28 21 6e 5b 69 5d 29 7b 69 66 28 21 65 5b 69 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 66 26 26 63 29 72 65 74 75 72 6e 20 63 28 69 2c 21 30 29 3b 69 66 28 75 29 72 65 74 75 72 6e 20 75 28 69 2c 21 30 29 3b 76 61 72 20 61 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 69 2b 22 27 22 29 3b 74 68 72 6f 77 20 61 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 61 7d 76 61 72 20 70 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d Data Ascii: (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}}
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 5d 2c 6e 5b 31 5d 2b 3d 6e 5b 32 5d 3e 3e 3e 31 36 2c 6e 5b 32 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 31 5d 2a 74 5b 33 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 32 5d 2a 74 5b 32 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 33 5d 2a 74 5b 31 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 30 5d 2b 3d 65 5b 30 5d 2a 74 5b 33 5d 2b 65 5b 31 5d 2a 74 5b 32 5d 2b 65 5b 32 5d 2a 74 5b 31 5d 2b 65 5b 33 5d 2a 74 5b 30 5d 2c 6e 5b 30 5d 26 3d 36 35 35 33 35 2c 5b 6e 5b 30 5d 3c 3c 31 36 7c 6e 5b 31 5d 2c 6e 5b 32 5d 3c 3c 31 36 7c 6e 5b 33 5d 5d 7d 2c 6e 3d 66 75 Data Ascii: ],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]t[3],n[0]+=n[1]>>>16,n[1]&=65535,n[1]+=e[2]t[2],n[0]+=n[1]>>>16,n[1]&=65535,n[1]+=e[3]t[1],n[0]+=n[1]>>>16,n[1]&=65535,n[0]+=e[0]t[3]+e[1]t[2]+e[2]t[1]+e[3]*t[0],n[0]&=65535,[n[0]<<16\|n[1],n[2]<<16\|n[3]]},n=fu
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 2c 67 29 2c 63 3d 6e 28 63 2c 32 37 29 2c 63 3d 65 28 63 2c 64 29 2c 63 3d 65 28 74 28 63 2c 5b 30 2c 35 5d 29 2c 5b 30 2c 31 33 39 30 32 30 38 38 30 39 5d 29 2c 66 3d 74 28 66 2c 6d 29 2c 66 3d 6e 28 66 2c 33 33 29 2c 66 3d 74 28 66 2c 68 29 2c 64 3d 72 28 64 2c 66 29 2c 64 3d 6e 28 64 2c 33 31 29 2c 64 3d 65 28 64 2c 63 29 2c 64 3d 65 28 74 28 64 2c 5b 30 2c 35 5d 29 2c 5b 30 2c 39 34 34 33 33 31 34 34 35 5d 29 3b 73 77 69 74 63 68 28 67 3d 5b 30 2c 30 5d 2c 66 3d 5b 30 2c 30 5d 2c 73 29 7b 63 61 73 65 20 31 35 3a 66 3d 72 28 66 2c 61 28 5b 30 2c 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 54 2b 31 34 29 5d 2c 34 38 29 29 3b 63 61 73 65 20 31 34 3a 66 3d 72 28 66 2c 61 28 5b 30 2c 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 54 2b 31 33 29 5d 2c 34 30 29 29 3b 63 Data Ascii: ,g),c=n(c,27),c=e(c,d),c=e(t(c,[0,5]),[0,1390208809]),f=t(f,m),f=n(f,33),f=t(f,h),d=r(d,f),d=n(d,31),d=e(d,c),d=e(t(d,[0,5]),[0,944331445]);switch(g=[0,0],f=[0,0],s){case 15:f=r(f,a([0,o.charCodeAt(T+14)],48));case 14:f=r(f,a([0,o.charCodeAt(T+13)],40));c
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 73 3a 5b 5d 2c 65 78 74 65 6e 64 65 64 4a 73 46 6f 6e 74 73 3a 21 31 7d 2c 73 63 72 65 65 6e 3a 7b 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 3a 21 30 7d 2c 70 6c 75 67 69 6e 73 3a 7b 73 6f 72 74 50 6c 75 67 69 6e 73 46 6f 72 3a 5b 2f 70 61 6c 65 6d 6f 6f 6e 2f 69 5d 2c 65 78 63 6c 75 64 65 49 45 3a 21 31 7d 2c 65 78 74 72 61 43 6f 6d 70 6f 6e 65 6e 74 73 3a 5b 5d 2c 65 78 63 6c 75 64 65 73 3a 7b 65 6e 75 6d 65 72 61 74 65 44 65 76 69 63 65 73 3a 21 30 2c 70 69 78 65 6c 52 61 74 69 6f 3a 21 30 2c 64 6f 4e 6f 74 54 72 61 63 6b 3a 21 30 2c 66 6f 6e 74 73 46 6c 61 73 68 3a 21 30 7d 2c 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 3a 22 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 45 52 52 4f 52 3a 22 65 72 72 6f 72 22 2c 45 58 43 4c 55 44 Data Ascii: s:[],extendedJsFonts:!1},screen:{detectScreenOrientation:!0},plugins:{sortPluginsFor:[/palemoon/i],excludeIE:!1},extraComponents:[],excludes:{enumerateDevices:!0,pixelRatio:!0,doNotTrack:!0,fontsFlash:!0},NOT_AVAILABLE:"not available",ERROR:"error",EXCLUD
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 42 4c 45 29 3b 76 61 72 20 72 3d 6e 65 77 20 61 28 31 2c 34 34 31 30 30 2c 34 34 31 30 30 29 2c 69 3d 72 2e 63 72 65 61 74 65 4f 73 63 69 6c 6c 61 74 6f 72 28 29 3b 69 2e 74 79 70 65 3d 22 74 72 69 61 6e 67 6c 65 22 2c 69 2e 66 72 65 71 75 65 6e 63 79 2e 73 65 74 56 61 6c 75 65 41 74 54 69 6d 65 28 31 65 34 2c 72 2e 63 75 72 72 65 6e 74 54 69 6d 65 29 3b 76 61 72 20 6f 3d 72 2e 63 72 65 61 74 65 44 79 6e 61 6d 69 63 73 43 6f 6d 70 72 65 73 73 6f 72 28 29 3b 73 28 5b 5b 22 74 68 72 65 73 68 6f 6c 64 22 2c 2d 35 30 5d 2c 5b 22 6b 6e 65 65 22 2c 34 30 5d 2c 5b 22 72 61 74 69 6f 22 2c 31 32 5d 2c 5b 22 72 65 64 75 63 74 69 6f 6e 22 2c 2d 32 30 5d 2c 5b 22 61 74 74 61 63 6b 22 2c 30 5d 2c 5b 22 72 65 6c 65 61 73 65 22 2c 2e 32 35 5d 5d 2c 66 75 6e 63 74 69 6f Data Ascii: BLE);var r=new a(1,44100,44100),i=r.createOscillator();i.type="triangle",i.frequency.setValueAtTime(1e4,r.currentTime);var o=r.createDynamicsCompressor();s([["threshold",-50],["knee",40],["ratio",12],["reduction",-20],["attack",0],["release",.25]],functio
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 28 65 29 7b 76 61 72 20 74 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 77 69 64 74 68 2c 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 5d 3b 72 65 74 75 72 6e 20 65 2e 73 63 72 65 65 6e 2e 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 26 26 74 2e 73 6f 72 74 28 29 2e 72 65 76 65 72 73 65 28 29 2c 74 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 28 42 28 74 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 57 69 64 74 68 26 26 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 29 7b 76 61 72 20 74 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 2c 77 69 6e 64 6f 77 2e 73 63 72 65 Data Ascii: (e){var t=[window.screen.width,window.screen.height];return e.screen.detectScreenOrientation&&t.sort().reverse(),t},C=function(e,t){e(B(t))},B=function(e){if(window.screen.availWidth&&window.screen.availHeight){var t=[window.screen.availHeight,window.scre
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 73 70 61 63 65 22 2c 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 73 65 72 69 66 22 5d 2c 61 3d 5b 22 41 6e 64 61 6c 65 20 4d 6f 6e 6f 22 2c 22 41 72 69 61 6c 22 2c 22 41 72 69 61 6c 20 42 6c 61 63 6b 22 2c 22 41 72 69 61 6c 20 48 65 62 72 65 77 22 2c 22 41 72 69 61 6c 20 4d 54 22 2c 22 41 72 69 61 6c 20 4e 61 72 72 6f 77 22 2c 22 41 72 69 61 6c 20 52 6f 75 6e 64 65 64 20 4d 54 20 42 6f 6c 64 22 2c 22 41 72 69 61 6c 20 55 6e 69 63 6f 64 65 20 4d 53 22 2c 22 42 69 74 73 74 72 65 61 6d 20 56 65 72 61 20 53 61 6e 73 20 4d 6f 6e 6f 22 2c 22 42 6f 6f 6b 20 41 6e 74 69 71 75 61 22 2c 22 42 6f 6f 6b 6d 61 6e 20 4f 6c 64 20 53 74 79 6c 65 22 2c 22 43 61 6c 69 62 72 69 22 2c 22 43 61 6d 62 72 69 61 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 2c 22 43 65 6e 74 75 Data Ascii: space","sans-serif","serif"],a=["Andale Mono","Arial","Arial Black","Arial Hebrew","Arial MT","Arial Narrow","Arial Rounded MT Bold","Arial Unicode MS","Bitstream Vera Sans Mono","Book Antiqua","Bookman Old Style","Calibri","Cambria","Cambria Math","Centu
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 75 73 22 2c 22 41 6e 67 73 61 6e 61 20 4e 65 77 22 2c 22 41 6e 67 73 61 6e 61 55 50 43 22 2c 22 41 6e 74 69 71 75 65 20 4f 6c 69 76 65 22 2c 22 41 70 61 72 61 6a 69 74 61 22 2c 22 41 70 70 6c 65 20 43 68 61 6e 63 65 72 79 22 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 41 70 70 6c 65 20 53 44 20 47 6f 74 68 69 63 20 4e 65 6f 22 2c 22 41 72 61 62 69 63 20 54 79 70 65 73 65 74 74 69 6e 67 22 2c 22 41 52 43 48 45 52 22 2c 22 41 52 4e 4f 20 50 52 4f 22 2c 22 41 72 72 75 73 20 42 54 22 2c 22 41 75 72 6f 72 61 20 43 6e 20 42 54 22 2c 22 41 76 61 6e 74 47 61 72 64 65 20 42 6b 20 42 54 22 2c 22 41 76 61 6e 74 47 61 72 64 65 20 4d 64 20 42 54 22 2c 22 41 56 45 4e 49 52 22 2c 22 41 79 75 74 68 61 79 61 22 2c 22 42 61 6e 64 79 22 2c 22 42 61 6e Data Ascii: us","Angsana New","AngsanaUPC","Antique Olive","Aparajita","Apple Chancery","Apple Color Emoji","Apple SD Gothic Neo","Arabic Typesetting","ARCHER","ARNO PRO","Arrus BT","Aurora Cn BT","AvantGarde Bk BT","AvantGarde Md BT","AVENIR","Ayuthaya","Bandy","Ban
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 20 47 6f 74 68 69 63 20 4c 69 67 68 74 22 2c 22 43 6f 70 70 65 72 70 6c 47 6f 74 68 20 42 64 20 42 54 22 2c 22 43 6f 72 62 65 6c 22 2c 22 43 6f 72 64 69 61 20 4e 65 77 22 2c 22 43 6f 72 64 69 61 55 50 43 22 2c 22 43 6f 72 6e 65 72 73 74 6f 6e 65 22 2c 22 43 6f 72 6f 6e 65 74 22 2c 22 43 75 63 6b 6f 6f 22 2c 22 43 75 72 6c 7a 20 4d 54 22 2c 22 44 61 75 6e 50 65 6e 68 22 2c 22 44 61 75 70 68 69 6e 22 2c 22 44 61 76 69 64 22 2c 22 44 42 20 4c 43 44 20 54 65 6d 70 22 2c 22 44 45 4c 49 43 49 4f 55 53 22 2c 22 44 65 6e 6d 61 72 6b 22 2c 22 44 46 4b 61 69 2d 53 42 22 2c 22 44 69 64 6f 74 22 2c 22 44 69 6c 6c 65 6e 69 61 55 50 43 22 2c 22 44 49 4e 22 2c 22 44 6f 6b 43 68 61 6d 70 61 22 2c 22 44 6f 74 75 6d 22 2c 22 44 6f Data Ascii: ","Copperplate Gothic Light","CopperplGoth Bd BT","Corbel","Cordia New","CordiaUPC","Cornerstone","Coronet","Cuckoo","Curlz MT","DaunPenh","Dauphin","David","DB LCD Temp","DELICIOUS","Denmark","DFKai-SB","Didot","DilleniaUPC","DIN","DokChampa","Dotum","Do
2025-01-14 00:13:09 UTC	1300	IN	Data Raw: 20 4d 4e 22 2c 22 48 61 65 74 74 65 6e 73 63 68 77 65 69 6c 65 72 22 2c 22 48 61 72 6c 6f 77 20 53 6f 6c 69 64 20 49 74 61 6c 69 63 22 2c 22 48 61 72 72 69 6e 67 74 6f 6e 22 2c 22 48 65 61 74 68 65 72 22 2c 22 48 65 69 74 69 20 53 43 22 2c 22 48 65 69 74 69 20 54 43 22 2c 22 48 45 4c 56 22 2c 22 48 65 72 61 6c 64 22 2c 22 48 69 67 68 20 54 6f 77 65 72 20 54 65 78 74 22 2c 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 22 48 69 72 61 67 69 6e 6f 20 4d 69 6e 63 68 6f 20 50 72 6f 4e 22 2c 22 48 6f 65 66 6c 65 72 20 54 65 78 74 22 2c 22 48 75 6d 61 6e 73 74 20 35 32 31 20 43 6e 20 42 54 22 2c 22 48 75 6d 61 6e 73 74 35 32 31 20 42 54 22 2c 22 48 75 6d 61 6e 73 74 35 32 31 20 4c 74 20 42 54 22 2c 22 49 6d 70 72 69 6e 74 20 Data Ascii: MN","Haettenschweiler","Harlow Solid Italic","Harrington","Heather","Heiti SC","Heiti TC","HELV","Herald","High Tower Text","Hiragino Kaku Gothic ProN","Hiragino Mincho ProN","Hoefler Text","Humanst 521 Cn BT","Humanst521 BT","Humanst521 Lt BT","Imprint

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49794	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:09 UTC	660	OUT	GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:10 UTC	617	IN	HTTP/1.1 200 OK x-amz-id-2: trtZkjyXbfUuxpBYupuDfxUSpAPb+jBRsRkS36HvaxrlyRmNlivZqT2H5Vu2F+KbW/q5yZdnipQ= x-amz-request-id: J26BG26RTAWZGFV2 Date: Sun, 12 Jan 2025 11:48:14 GMT Last-Modified: Fri, 24 Apr 2020 17:13:52 GMT ETag: "ac8c4fbeda6efad9549cb41b992a8b3a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Content-Length: 1246 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 131097 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:10 UTC	1246	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 39 20 28 38 36 31 32 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 59 (86127) - https://sketch.com --> <tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49793	65.9.66.17	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:10 UTC	839	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
2025-01-14 00:13:10 UTC	674	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9424 Connection: close Last-Modified: Tue, 17 Dec 2024 18:00:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 13 Jan 2025 23:39:46 GMT ETag: "2907cf83061833352832f902cf60546e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 58b39782bf40f627ace295c1c6f59840.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: UVxJtvOI_d3dG8tOD2iEuHB_BLXNwdTrnIEmZBovHUJl8LMRWzrPsw== Age: 2005 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' cache-control: max-age=3600
2025-01-14 00:13:10 UTC	9424	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5b 5c 77 5d 2b 5c 2e 28 5b 5c 77 5d 2b 7c 63 6f 2e 75 6b 29 24 2f 29 5b 30 5d 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 22 22 7d 7d 3b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 3d 22 29 2c 6f 3d 28 74 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 Data Ascii: (()=>{"use strict";var n=function(n){if(n)return n;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(n){return""}};const t=function(n,t){for(var e="".concat(n,"="),o=(t\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49798	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:10 UTC	1077	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200123&yhlCT=2&yhlBTMS=1736813588531&yhlClientVer=3.53.39&yhlRnd=cX2eGWESkNvvkYhG&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 2408 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
2025-01-14 00:13:10 UTC	2408	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 42 4b 73 68 57 63 43 45 4b 4e 50 2d 38 58 71 38 32 5a 7a 66 30 62 34 57 53 46 34 37 54 77 46 45 67 45 42 41 51 48 39 68 6d 65 50 5a 39 78 48 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6d 71 44 31 75 58 67 58 34 51 76 57 64 67 30 53 43 33 6d 47 33 45 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 33 39 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 56 45 52 53 49 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA%26S%3DAQAAAmqD1uXgX4QvWdg0SC3mG3E%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.39%22%2C%22A_cn%22%3A%22VERSI
2025-01-14 00:13:10 UTC	593	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://login.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Tue, 14 Jan 2025 00:13:09 GMT server: ATS Age: 1 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49795	3.161.82.31	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:10 UTC	525	OUT	GET /cmp.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:10 UTC	639	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 262888 Connection: close Last-Modified: Thu, 14 Nov 2024 18:50:18 GMT x-amz-expiration: expiry-date="Thu, 15 Nov 2029 00:00:00 GMT", rule-id="webapp-standard-lifecycle" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 00:02:44 GMT ETag: "286fbb8385e48697dc5f956d4825ed84" X-Cache: Hit from cloudfront Via: 1.1 adffa554e502bb59dc89f14ddc6170ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: SK_1EOMFntYSNCy9sCdUGxjRKnENTqGWGT4sgVYzUirMuSzyrUfBLw== Age: 627 cache-control: max-age=3600
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 37 2e 30 2e 30 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 31 30 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 7.0.0 Copyright 2018 Oath Holdings, Inc. /!function(){var e={1040:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 64 22 2c 65 2c 21 30 2c 6e 65 77 20 72 2e 50 69 6e 67 44 61 74 61 28 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 29 29 3b 74 68 69 73 2e 69 6e 76 6f 6b 65 43 61 6c 6c 62 61 63 6b 28 74 29 7d 7d 74 2e 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 43 6f 6d 6d 61 6e 64 3d 73 7d 2c 33 37 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 43 6f 6d 6d 61 6e 64 3d 76 6f 69 64 20 30 3b 74 2e 43 6f 6d 6d 61 6e 64 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 3d 21 30 2c 74 68 69 73 2e 63 6d 70 41 Data Ascii: d",e,!0,new r.PingData(this.cmpApiContext));this.invokeCallback(t)}}t.AddEventListenerCommand=s},3717:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Command=void 0;t.Command=class{constructor(e,t,n){this.success=!0,this.cmpA
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 7b 66 6f 72 28 3b 65 2e 6c 65 6e 67 74 68 25 32 34 3e 30 3b 29 65 2b 3d 22 30 22 3b 72 65 74 75 72 6e 20 65 7d 7d 74 2e 54 72 61 64 69 74 69 6f 6e 61 6c 42 61 73 65 36 34 55 72 6c 45 6e 63 6f 64 65 72 3d 72 2c 72 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 72 7d 2c 32 34 35 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 6e 29 3b 72 26 26 21 28 Data Ascii: {for(;e.length%24>0;)e+="0";return e}}t.TraditionalBase64UrlEncoder=r,r.instance=new r},2456:function(e,t,n){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(e,t,n,i){void 0===i&&(i=n);var r=Object.getOwnPropertyDescriptor(t,n);r&&!(
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 44 61 74 65 74 69 6d 65 45 6e 63 6f 64 65 72 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 69 3d 6e 28 37 36 34 32 29 2c 72 3d 6e 28 35 32 35 39 29 3b 74 2e 44 61 74 65 74 69 6d 65 45 6e 63 6f 64 65 72 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 65 6e 63 6f 64 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 72 2e 46 69 78 65 64 49 6e 74 65 67 65 72 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 67 65 74 54 69 6d 65 28 29 2f 31 30 30 29 2c 33 36 29 3a 72 2e 46 69 78 65 64 49 6e 74 65 67 65 72 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 30 2c 33 36 29 7d 73 74 61 74 69 63 20 64 65 63 6f 64 65 28 65 29 7b 69 66 28 21 2f 5e 5b 30 2d Data Ascii: erty(t,"__esModule",{value:!0}),t.DatetimeEncoder=void 0;const i=n(7642),r=n(5259);t.DatetimeEncoder=class{static encode(e){return e?r.FixedIntegerEncoder.encode(Math.round(e.getTime()/100),36):r.FixedIntegerEncoder.encode(0,36)}static decode(e){if(!/^[0-
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 49 45 4c 44 5f 4e 41 4d 45 53 3d 5b 6e 2e 56 45 52 53 49 4f 4e 2c 6e 2e 43 52 45 41 54 45 44 2c 6e 2e 4c 41 53 54 5f 55 50 44 41 54 45 44 2c 6e 2e 43 4d 50 5f 49 44 2c 6e 2e 43 4d 50 5f 56 45 52 53 49 4f 4e 2c 6e 2e 43 4f 4e 53 45 4e 54 5f 53 43 52 45 45 4e 2c 6e 2e 43 4f 4e 53 45 4e 54 5f 4c 41 4e 47 55 41 47 45 2c 6e 2e 56 45 4e 44 4f 52 5f 4c 49 53 54 5f 56 45 52 53 49 4f 4e 2c 6e 2e 50 4f 4c 49 43 59 5f 56 45 52 53 49 4f 4e 2c 6e 2e 49 53 5f 53 45 52 56 49 43 45 5f 53 50 45 43 49 46 49 43 2c 6e 2e 55 53 45 5f 4e 4f 4e 5f 53 54 41 4e 44 41 52 44 5f 53 54 41 43 4b 53 2c 6e 2e 53 50 45 43 49 41 4c 5f 46 45 41 54 55 52 45 5f 4f 50 54 49 4e 53 2c 6e 2e 50 55 52 50 4f 53 45 5f 43 4f 4e 53 45 4e 54 53 2c 6e 2e 50 55 52 50 4f 53 45 5f 4c 45 47 49 54 49 4d 41 Data Ascii: IELD_NAMES=[n.VERSION,n.CREATED,n.LAST_UPDATED,n.CMP_ID,n.CMP_VERSION,n.CONSENT_SCREEN,n.CONSENT_LANGUAGE,n.VENDOR_LIST_VERSION,n.POLICY_VERSION,n.IS_SERVICE_SPECIFIC,n.USE_NON_STANDARD_STACKS,n.SPECIAL_FEATURE_OPTINS,n.PURPOSE_CONSENTS,n.PURPOSE_LEGITIMA
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 7c 7c 30 3d 3d 3d 74 68 69 73 2e 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 64 69 72 74 79 29 26 26 28 74 68 69 73 2e 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 3d 74 68 69 73 2e 65 6e 63 6f 64 65 53 65 63 74 69 6f 6e 28 74 68 69 73 2e 73 65 67 6d 65 6e 74 73 29 2c 74 68 69 73 2e 64 69 72 74 79 3d 21 31 2c 74 68 69 73 2e 64 65 63 6f 64 65 64 3d 21 30 29 2c 74 68 69 73 2e 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 7d 64 65 63 6f 64 65 28 65 29 7b 74 68 69 73 2e 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 3d 65 2c 74 68 69 73 2e 64 69 72 74 79 3d 21 31 2c 74 68 69 73 2e 64 65 63 6f 64 65 64 3d 21 31 7d 7d 7d 2c 37 38 36 36 3a 66 75 6e 63 74 69 Data Ascii: eturn(null==this.encodedString\|\|0===this.encodedString.length\|\|this.dirty)&&(this.encodedString=this.encodeSection(this.segments),this.dirty=!1,this.decoded=!0),this.encodedString}decode(e){this.encodedString=e,this.dirty=!1,this.decoded=!1}}},7866:functi
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 61 64 65 72 56 31 2e 49 44 29 29 2c 65 2e 70 75 74 28 6c 2e 48 65 61 64 65 72 56 31 46 69 65 6c 64 2e 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6e 65 77 20 73 2e 45 6e 63 6f 64 61 62 6c 65 46 69 78 65 64 49 6e 74 65 67 65 72 28 36 2c 75 2e 48 65 61 64 65 72 56 31 2e 56 45 52 53 49 4f 4e 29 29 2c 65 2e 70 75 74 28 6c 2e 48 65 61 64 65 72 56 31 46 69 65 6c 64 2e 53 45 43 54 49 4f 4e 5f 49 44 53 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6e 65 77 20 6f 2e 45 6e 63 6f 64 61 62 6c 65 46 69 62 6f 6e 61 63 63 69 49 6e 74 65 67 65 72 52 61 6e 67 65 28 5b 5d 29 29 2c 65 7d 65 6e 63 6f 64 65 53 65 67 6d 65 6e 74 28 65 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 69 74 53 74 72 69 6e 67 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 65 2c 74 68 69 73 2e 67 65 74 Data Ascii: aderV1.ID)),e.put(l.HeaderV1Field.VERSION.toString(),new s.EncodableFixedInteger(6,u.HeaderV1.VERSION)),e.put(l.HeaderV1Field.SECTION_IDS.toString(),new o.EncodableFibonacciIntegerRange([])),e}encodeSegment(e){let t=this.bitStringEncoder.encode(e,this.get
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 28 30 21 3d 6e 29 74 68 72 6f 77 20 6e 65 77 20 63 2e 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 75 73 63 61 20 6d 73 70 61 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 6d 6f 64 65 20 2f 20 73 61 6c 65 20 6f 70 74 20 6f 75 74 20 6e 6f 74 69 63 65 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 3a 20 7b 22 2b 72 2b 22 20 2f 20 22 2b 6e 2b 22 7d 22 29 3b 69 66 28 30 21 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 63 2e 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 75 73 63 61 20 6d 73 70 61 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 6d 6f 64 65 20 2f 20 73 68 61 72 69 6e 67 20 6f 70 74 20 6f 75 74 20 6e 6f 74 69 63 65 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 3a 20 7b 22 2b 72 2b 22 20 2f 20 22 2b 65 Data Ascii: (0!=n)throw new c.ValidationError("Invalid usca mspa service provider mode / sale opt out notice combination: {"+r+" / "+n+"}");if(0!=e)throw new c.ValidationError("Invalid usca mspa service provider mode / sharing opt out notice combination: {"+r+" / "+e
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 66 28 32 3d 3d 72 26 26 31 21 3d 6f 29 74 68 72 6f 77 20 6e 65 77 20 63 2e 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 75 73 76 61 20 6d 73 70 61 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 2f 20 6f 70 74 20 6f 75 74 20 6f 70 74 69 6f 6e 20 6d 6f 64 65 73 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 3a 20 7b 22 2b 72 2b 22 20 2f 20 22 2b 6f 2b 22 7d 22 29 7d 7d 74 2e 55 73 46 6c 43 6f 72 65 53 65 67 6d 65 6e 74 3d 67 7d 2c 33 31 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 55 73 4d 74 43 6f 72 65 53 65 67 6d 65 6e 74 3d 76 Data Ascii: f(2==r&&1!=o)throw new c.ValidationError("Invalid usva mspa service provider / opt out option modes combination: {"+r+" / "+o+"}")}}t.UsFlCoreSegment=g},3175:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.UsMtCoreSegment=v
2025-01-14 00:13:10 UTC	16384	IN	Data Raw: 20 6d 6f 64 65 73 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 3a 20 7b 22 2b 72 2b 22 20 2f 20 22 2b 72 2b 22 7d 22 29 3b 69 66 28 30 21 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 63 2e 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 75 73 63 74 20 6d 73 70 61 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 6d 6f 64 65 20 2f 20 73 61 6c 65 20 6f 70 74 20 6f 75 74 20 6e 6f 74 69 63 65 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 3a 20 7b 22 2b 72 2b 22 20 2f 20 22 2b 65 2b 22 7d 22 29 7d 65 6c 73 65 20 69 66 28 32 3d 3d 72 26 26 31 21 3d 6f 29 74 68 72 6f 77 20 6e 65 77 20 63 2e 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 75 73 63 74 20 6d 73 70 61 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 2f 20 6f 70 Data Ascii: modes combination: {"+r+" / "+r+"}");if(0!=e)throw new c.ValidationError("Invalid usct mspa service provider mode / sale opt out notice combination: {"+r+" / "+e+"}")}else if(2==r&&1!=o)throw new c.ValidationError("Invalid usct mspa service provider / op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49796	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:10 UTC	626	OUT	GET /bw/fonts/yahoo-sans-cr4-vf.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:10 UTC	686	IN	HTTP/1.1 200 OK x-amz-id-2: F6ni1ReB1JzvPKpAKGFf4EzxbEe2bDlTPFe80MRL+iDJ2YbuxzwCNtT34DYqw0ewJav55K1SXsLqmiNYxe3PPuqoEmXnGajI x-amz-request-id: CKXJHABX1C11ZY4J Date: Mon, 13 Jan 2025 12:02:00 GMT Last-Modified: Thu, 11 Jul 2024 15:03:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: WkgxPbZwJF4WkJjtpMrUGccT4d.GnFPQ Accept-Ranges: bytes Content-Type: binary/octet-stream Content-Length: 34588 Server: ATS Referrer-Policy: no-referrer-when-downgrade Etag: "492a0a160b8da9414134282ef8b62f78" Age: 43871 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin ATS-Carp-Promotion: 1
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 87 1c 00 11 00 00 00 01 15 14 00 00 86 b5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 24 1b 82 85 48 1c 85 42 06 60 3f 53 54 41 54 64 27 1a 00 85 10 2f 42 0a 81 8f 24 f8 72 30 ee 0c 01 36 02 24 03 87 6c 0b 84 04 00 04 20 05 86 56 07 20 5b b7 06 71 cb 80 46 f5 00 00 f0 a5 ef 21 11 85 7d 58 44 55 ed 87 64 aa aa aa b7 84 e0 ee 55 fb 0f 10 7e fa e5 b7 3f fc e9 2f 7f fb c7 bf fe f3 bf 3f 42 86 b9 a1 47 78 9b 36 7f 29 c6 eb d2 39 ec db 8b 70 27 3e 82 70 27 3e c0 b8 34 84 d0 9a 70 08 57 61 8c c3 2a c0 d6 ff ff fe 85 65 bd 69 1c e9 a4 59 a4 73 3e 64 21 0b 9d 50 64 59 9b 4e 1a 22 cd 87 2c 94 73 3a e9 a4 1e 29 dd b7 cf 67 5f ad 7f 6f e6 5e d4 a2 33 37 1f 09 ff cf c9 2c 9d a9 09 2e 1a 33 99 c9 4c cd a7 Data Ascii: wOF2$HB`?STATd'/B$r06$l V [qF!}XDUdU~?/?BGx6)9p'>p'>4pWa*eiYs>d!PdYN",s:)g_o^37,.3L
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 59 a8 71 bc 4a ea 1c 41 7c cc e4 13 0d 61 12 57 01 ad 74 93 a4 96 4b dc 87 a3 0a 79 b5 81 26 1a 58 a2 1e f5 6b 40 df 51 a3 df 35 a8 9f b9 41 dd ea 53 83 91 a9 56 f5 ea 61 72 99 8d 9b f9 5c a1 9b 38 c7 2a aa 75 91 3e 6e a7 92 87 59 a6 2a 6e d2 f7 f4 ab 44 6f b3 89 6c 9d d1 47 fa 4c 33 e9 d5 97 7a 5f df 52 84 4b 3f e9 7f 2c 62 01 bb 31 f4 7f d6 b1 86 ed cc 63 8b 7e d0 9b 4c 67 b1 64 b8 d8 af 17 a9 d3 7f e9 d3 c9 6e 4a 49 e2 da b9 bb aa 96 d9 ad c7 4c 3f 43 fa 80 f4 80 43 bb b3 de 56 28 c9 a4 e7 9f 7d 3c 18 09 b2 aa e5 44 d8 4f e1 0f ff 76 be 11 1b ce b5 b4 f9 d2 81 b0 df 19 43 bb e1 22 e3 f8 59 b2 c8 66 1a 73 59 b7 e5 67 67 f0 a4 ff fa bd d7 df ba 0f 4e ae d0 76 37 59 64 e1 c6 75 d1 2b f3 17 e0 24 a7 59 82 8b 1c 5c b8 dd 09 fa ef ac c3 4e 60 b3 ab 98 14 53 Data Ascii: YqJA\|aWtKy&Xk@Q5ASVar\8u>nYnDolGL3z_RK?,b1c~LgdnJIL?CCV(}<DOvC"YfsYggNv7Ydu+$Y\N`S
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 77 61 4e ad b0 96 aa a5 7e 29 ea 80 2b 92 30 8f 59 e9 71 a7 86 15 f2 84 06 a9 4c df 14 1c a7 46 0d ed 9f 71 e8 d6 8d 79 38 4c b5 23 ee e8 87 9f 59 43 ba 27 d4 44 8b 52 ed 95 04 d2 bd a1 22 82 f2 86 8b 09 a9 21 74 46 04 27 86 37 e1 c8 71 7e 25 a6 60 cc c3 5b c7 06 dd 64 6a 45 a8 eb a2 3c d4 75 45 d4 fa a6 15 ed 63 23 a1 b3 1c 49 f7 86 96 f4 fe 98 8e 22 42 aa 08 5d c0 51 43 ec a3 83 9d d0 59 16 1c c9 a3 83 15 d6 b2 af 16 51 4d 79 fb 54 9d 8b 15 75 c7 ae 3b f6 b2 63 6b d1 59 59 fb 14 2d c7 fa 17 0f 2e 87 6e 5d 64 39 d4 b3 58 53 77 ec cc b1 fb 98 61 b2 4f 93 c3 ed 65 6a 45 f0 c2 d5 59 f0 c2 a5 cb 81 73 ce ae 7c 31 af 1e fc be 1e 6c 5c 6e b7 6b b9 8b 6b 2e 05 bf 5f ce 52 a3 7e b3 94 5a c5 83 d5 34 68 6e f0 1c b3 ce 8c ce 9c ef 0f 7e d4 91 87 c1 36 32 fb 6d e3 Data Ascii: waN~)+0YqLFqy8L#YC'DR"!tF'7q~%`[djE<uEc#I"B]QCYQMyTu;ckYY-.n]d9XSwaOejEYs\|1l\nkk._R~Z4hn~62m
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: bf e7 cf ae 52 e8 d2 47 40 53 8c 95 8b f5 5f 7d a4 bf 41 57 94 66 17 f3 ee d0 a0 a7 6a 8c 50 7d 1d f5 e0 d0 35 5a 1c 6b c2 eb c0 72 c3 48 05 1c 72 e0 53 70 8c 24 eb dc 6a 3e 88 a4 1e b7 df 1d ca 0c 2b cb e7 4b d7 cc f2 d4 68 31 c2 c5 67 73 a4 43 0b 7f 79 be 6e cb b1 f4 59 c4 b5 58 bb 7c 1e 69 44 c4 27 0c 47 4a a3 af 6a 7c d7 13 4e 1f aa 02 86 18 b0 57 ca f0 ca 23 74 cc 63 0e 47 9d 61 82 53 03 ec 63 c0 93 1e f1 3c 41 16 58 c7 35 7f ad 9a 6c ab 1a a5 03 9b 89 d7 87 92 36 ad 51 db 7e 29 c9 0c 1f e3 50 6e 18 ea 5b 71 f0 77 4f 73 20 7d 71 00 87 43 5c 8a 03 dc b2 83 67 96 fd 13 e4 d6 68 f1 d7 95 25 8b c8 b2 53 ca 70 21 f3 5c e3 e8 9a 0a 1f 8c c9 8c ea cf b4 35 63 dc af f9 68 f0 0e b7 f4 60 d3 83 be 2c f0 74 36 0b fa bf 59 80 cd 21 3a 3c d3 ff cb d0 cc 7a 91 82 Data Ascii: RG@S_}AWfjP}5ZkrHrSp$j>+Kh1gsCynYX\|iD'GJj\|NW#tcGaSc<AX5l6Q~)Pn[qwOs }qC\gh%Sp!\5ch`,t6Y!:<z
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 69 ef 15 f3 f8 4e ae c0 04 0f 91 72 7a d5 a6 68 a6 6f 3d 67 8d 90 88 9b 33 5e e9 3d 7b 86 50 a6 6b b8 e7 b9 ef 58 64 bb 71 ec d9 b8 aa 2c d9 33 b3 5a 9d 4b 9f ef 9a d1 b7 3a fe d2 e5 5b d2 cf 41 2e a6 69 8d 39 8f 57 ba e0 0b 9b 3e 15 eb 65 de 93 ab d5 ea cf 7b 8f db 5a 0f 8f cd 63 8e 70 cb e7 55 c8 9d 67 7c 07 74 b8 be 55 c7 ff f7 20 4f 24 e2 bd d7 3d d7 b8 7e 5b ff 0f ab d2 d1 1c ca 70 8d f1 e1 86 e0 07 fe 9c d6 9e 03 1d f6 f1 94 83 bd 9b 36 f2 ec 2f f8 85 68 b5 35 46 99 fb 1e 85 08 8d 58 5f b4 e5 53 09 d1 83 8c 05 ad fa 9b 27 d6 af 54 b2 4f 7f ed cc 4f c5 c3 71 34 29 fa 44 7a d0 97 0e ef 20 26 7b 78 68 a2 8f cf d4 c6 05 0f 40 23 9f 45 59 68 28 27 2d 16 36 9c 94 5e b4 e8 94 1a aa ec 60 ce 73 21 f8 33 54 85 86 33 f1 33 f4 1f 5b 2e 3a fc 8e 67 fa 36 98 59 Data Ascii: iNrzho=g3^={PkXdq,3ZK:[A.i9W>e{ZcpUg\|tU O$=~[p6/h5FX_S'TOOq4)Dz &{xh@#EYh('-6^`s!3T33[.:g6Y
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: e5 43 01 fa e7 8b 3e 5d e2 df 09 cd 52 2b 02 ca 65 21 42 4a 7f 96 cd b7 c8 9f 62 af 3b 8a ae d2 80 13 4d 4a 77 fe 4c 9e b1 17 15 2f cb 38 a5 b8 c6 b9 fa 16 32 e5 2a 40 36 ae c4 e3 6b 5f 73 72 b9 99 0f c0 b7 b3 a5 fd 3e df 87 68 75 9d 51 f4 b9 87 5b 67 4b 0b d0 ad de a1 99 e5 2a e2 bf 6d b4 38 f5 72 bd 9e aa 71 e4 d1 4b 7d de a0 8d 85 16 d0 56 93 d0 cb 99 e8 d6 33 5d bd fb 7e 0c 47 4c c6 3c 10 91 99 64 04 57 e4 46 27 fc 1e 1b ab bb 96 da cf f3 b6 1c f9 c2 9b af eb b3 70 44 2a 37 3e 60 14 b3 4b a6 bc f5 41 e9 b3 6d 0d 31 40 ae 1e a0 96 2b f8 52 e2 19 c1 8f 11 54 69 c9 3c af e6 32 84 eb d7 6f 39 f2 94 19 eb 71 3a 5e ca 46 7c 8c 6f af 61 94 e8 d7 ba e6 67 e8 08 9f 56 87 71 a0 36 e7 38 04 55 bc 1f 75 27 bb a2 0b 0b b0 bc 08 5b c3 b5 8c cd a1 f4 c5 27 48 67 84 Data Ascii: C>]R+e!BJb;MJwL/82@6k_sr>huQ[gKm8rqK}V3]~GL<dWF'pD*7>`KAm1@+RTi<2o9q:^F\|oagVq68Uu'['Hg
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 59 ac d8 d5 8f 16 3a 4d 4d bc ec 5d 90 94 a9 73 b6 1e 98 ea 96 bd 01 6b d4 f8 f6 fd 38 3b 61 f6 03 38 88 b3 44 e0 84 c3 29 6e a3 b6 fa d6 9e 4f 53 67 ed 5a c4 db 9c d5 78 64 6b 74 d8 27 7b 00 75 fe ff d3 62 a0 7d df 94 9b d7 1e e7 7e 34 e8 ce f6 4f c6 03 4c f5 ce 7c f5 72 fc 3d e3 06 bd 54 92 71 0f 17 3c d4 25 63 df 77 78 59 d9 98 6f ef 8e 21 85 ae ff 4f 33 12 e8 f9 ff 33 f4 8e 0a f7 6b b1 b5 56 51 6b 75 e9 6a dd 18 b3 64 6b 50 4c aa 2e ec 67 dd d0 43 f2 f5 db 9f ab 55 73 ef 79 21 ec db 1d e9 0a 21 10 8a f7 ef f3 04 b9 ee 1e 36 b3 f2 e2 21 f1 3a 43 fb 60 a8 1d f6 52 e1 af 4b b7 7f 4a bd 03 ed 8b ed f6 97 70 ff 54 3f b8 bd 27 de 10 e2 f6 96 f8 15 17 fa 54 bc cb f5 ed ef b4 e6 8d 9c 03 f1 1b 21 ac b5 c8 9c ae 0f ef 5e 72 bc 79 b7 30 15 9f b0 05 2d 3e fd b2 Data Ascii: Y:MM]sk8;a8D)nOSgZxdkt'{ub}~4OL\|r=Tq<%cwxYo!O33kVQkujdkPL.gCUsy!!6!:C`RKJpT?'T!^ry0->
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 54 e0 61 ce b3 7b 3e 69 6b de 11 ad 73 ce c7 e1 c0 aa f1 d4 aa 3d 36 47 3a cb 16 0d 4f ec 25 db a8 ea 1f 65 74 88 26 4b 56 9e 41 38 8b 05 1e a2 1a ac 38 06 2b ba c3 57 d1 dd 60 20 69 01 ec 41 8b f5 50 0b ce 80 6b 7e 8c df 73 c7 5e 32 6b e5 b9 a5 62 4d 3e 69 88 70 33 c4 de a6 87 3d be 88 e6 d1 e7 97 b3 f2 3c 53 31 7d 65 8e 3f 83 71 d6 11 9b 05 0c 76 61 f2 d2 8e e8 17 74 91 b1 eb 99 76 cf 41 53 6c e3 36 cf b4 57 27 fa ad 25 dd 1c 41 9f ae ee f0 63 f4 78 aa 63 f0 63 7a 04 43 54 79 6e a9 9f 0a ff a2 58 3a 52 83 f6 f0 aa 70 8e 37 32 79 df 23 dd de cc 74 96 92 cf dd cd 4a 35 78 cf fb 3c 5f a5 37 12 ee 26 70 12 f5 f6 12 38 61 41 0f df 83 95 a7 94 5f cd 6b ea 2c ef a9 ef f1 96 fc b5 2d 81 06 cf be 93 4a b2 80 df 6f c6 e3 87 ce b4 b9 c0 a3 9b 23 f9 16 5d 5c b3 94 Data Ascii: Ta{>iks=6G:O%et&KVA88+W` iAPk~s^2kbM>ip3=<S1}e?qvatvASl6W'%AcxcczCTynX:Rp72y#tJ5x<_7&p8aA_k,-Jo#]\
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 58 0d 8e 75 4c 5f b5 54 f4 77 4d 7e ae 11 b6 87 32 e5 ca 78 c0 b7 1c ff 42 18 d1 a6 cc aa 6d 77 37 6b ed 8d 23 9a d1 8f 30 d6 9d 98 c8 2f fa ab a1 0e dc 94 ff 10 eb da a3 ea 7a 50 1e 84 88 ba 44 13 a1 8f a2 66 86 21 5c bd c1 4e e0 ec f6 21 72 ec 22 47 ab d7 8d 23 86 83 4d f4 d9 45 60 df 1b 74 71 d5 0f 78 91 c3 c5 c7 57 7d 68 47 fc 07 ae 79 88 32 ff 68 e5 69 f9 ed e1 17 ad 3c b7 11 7a 48 da 4a 03 0f 28 bd c0 7f ba b9 af 3a 39 c7 17 b5 c7 2e be 66 1d 7d c6 38 8a 55 b0 2d 6a 73 5d 0f 74 b3 c8 4a a4 25 a8 7c b1 48 32 e6 22 60 c9 36 87 9c 04 4b f2 0b fc d0 fa 2b eb 24 af e9 ad e8 cb ed 60 94 66 b8 64 34 12 1e e4 56 8d 0b 61 a8 db 93 91 87 8f 54 cc 43 14 e9 a3 4f cf 7b 36 0b be a9 37 81 cb 7e 64 d2 2c 3e 6b 55 c4 83 ee 3a 16 ec bb 3c 80 19 0d 6d 1e 38 09 7e bc Data Ascii: XuL_TwM~2xBmw7k#0/zPDf!\N!r"G#ME`tqxW}hGy2hi<zHJ(:9.f}8U-js]tJ%\|H2"`6K+$`fd4VaTCO{67~d,>kU:<m8~
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: b4 61 29 3a 88 9e 88 0f e2 99 0e 13 df 98 2c cc da cf 05 5b a2 cf 9f 6a a8 fa 68 7a 0d f2 26 b3 12 46 72 d2 07 e8 7a 43 c6 f4 26 f8 9a 58 92 b1 e1 9b f1 d2 26 1b 71 a1 4f 05 0d f1 77 44 09 78 6e 22 a8 b1 6b f6 58 58 55 c6 73 a4 1f b2 23 1e c2 d7 5a a2 65 bf 9b fd 85 5d d5 b8 f7 04 02 91 f0 b6 f8 62 d1 41 d7 8e ac fd 0e 9a 93 63 c6 7d 8e b9 ed b7 c8 95 f2 47 c3 3b 57 f6 7b bb 22 2d 90 6c a7 ea da 80 8b 22 34 93 15 eb 84 3f b9 ee f8 d0 5e 16 57 62 3b 7e 19 b2 23 b1 a5 db d1 a3 70 38 47 7f 2c 85 0f eb 3a f1 64 dc 7b 13 dd e6 b1 97 64 47 e6 24 e6 6c 4c eb e5 f9 8b 3d b7 39 11 d7 93 cb fb c7 89 02 46 0b 68 f2 c6 5e b2 7f 0e b2 c0 52 88 7e b1 db cc 8e d0 4c 30 52 77 eb 1d 80 c9 3a 82 23 72 46 da e5 b9 4c 05 19 d9 49 74 2f 1a e7 bb 3e bc 3a cf 05 99 d1 29 2a 76 Data Ascii: a):,[jhz&FrzC&X&qOwDxn"kXXUs#Ze]bAc}G;W{"-l"4?^Wb;~#p8G,:d{dG$lL=9Fh^R~L0Rw:#rFLIt/>:)*v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49799	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:10 UTC	353	OUT	GET /ss/rapid-3.53.39.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:10 UTC	682	IN	HTTP/1.1 200 OK x-amz-id-2: 4tmFHcZubURPtfbg+dCRySEWF6f4Nr3ozDcBc1GluXa6c0NXlRJCjMOkBBEG2ZTh9gjYYWWzKyg= x-amz-request-id: MFV2Q0X0KN7Z99F5 Date: Sun, 12 Jan 2025 19:26:18 GMT Last-Modified: Thu, 20 Oct 2022 22:18:00 GMT ETag: "3ad90205296656e070371a83d5201160" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: qQB6rmWhCi0nbuLvxW7W.stvcSOa1X3q Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 51141 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 103613 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 6c 29 7b 76 61 72 20 63 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 74 3f 28 75 5b 6e 5d 3d 69 2c 6e 3d 63 5b 6e 5d 2c 6c 26 26 6e 26 26 6e 2e 6c 6f 67 26 26 6c 2e 73 65 74 28 6e 2e 6b 65 79 2c 69 29 29 3a 30 3c 6f 2b 72 26 26 28 6f 2d 2d 2c 73 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 61 28 6f 29 26 26 73 28 29 7d 3b 76 61 72 20 65 3d 6e 75 6c 6c 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 Data Ascii: ){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}-1!==t?(u[n]=i,n=c[n],l&&n&&n.log&&l.set(n.key,i)):0<o+r&&(o--,s())}e.fpc&&".yahoo.com"!==a(o)&&s()};var e=null;try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 6c 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 72 69 63 68 76 69 65 77 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 79 71 6c 69 64 3d 65 2c 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 3d 6e 7d 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 Data Ascii: it_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new le).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=function(){var e="richview";function t(e,t,n){this.yqlid=e,this.eventName=t,this.spaceidPrefix=n}t.prototype={getYQLI
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 5d 3d 74 2c 74 68 69 73 2e 63 6f 75 6e 74 2b 2b 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 79 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 79 Data Ascii: ]=t,this.count++)},get:function(e){return this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&y.isObj(e))for(var t in e)y.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&y.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|y
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 72 3d 22 75 64 63 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3b 21 30 21 3d 3d 65 2e 66 70 63 26 26 22 79 61 68 6f 6f 2e 63 6f 6d 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 3b 72 3d 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 63 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 75 65 2c 6b 65 79 73 3a 6c 2c 72 65 66 65 72 72 65 72 3a 65 2e 72 65 66 65 72 72 65 72 2c 67 65 74 52 65 66 65 72 72 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 2e 6e 6f 72 6d 28 79 2e 63 6c 72 65 66 28 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 72 65 Data Ascii: eo.yahoo.com",r="udc.yahoo.com";!0!==e.fpc&&"yahoo.com"===document.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r);r={override:i,version:ce,comboName:ue,keys:l,referrer:e.referrer,getReferrer:function(){return y.norm(y.clref((void 0!==this.re
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 63 6b 5f 69 6e 70 75 74 3a 65 2e 74 72 61 63 6b 5f 69 6e 70 75 74 7c 7c 22 72 61 70 69 64 2d 74 72 61 63 6b 2d 69 6e 70 75 74 22 2c 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 3a 65 2e 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 2d 77 69 74 68 2d 63 6c 69 63 6b 69 64 22 2c 61 6e 63 5f 70 6f 73 5f 61 74 74 72 3a 22 64 61 74 61 2d 72 61 70 69 64 5f 70 22 2c 61 6e 63 5f 76 39 79 5f 61 74 74 72 3a 22 64 61 74 61 2d 76 39 79 22 2c 64 65 62 3a 21 30 3d 3d 3d 65 2e 64 65 62 75 67 2c 6c 64 62 67 3a 30 3c 65 2e 6c 64 62 67 7c 7c 30 3c 6e 2e 69 6e 64 65 78 4f 66 28 22 79 68 6c 64 65 62 75 67 3d 31 22 29 2c 61 64 64 6d 6f 64 5f 74 69 6d 65 6f 75 74 3a 65 2e 61 64 64 6d 6f 64 75 6c 65 73 5f 74 69 6d 65 6f 75 74 7c 7c 33 30 30 2c 75 6c 74 5f 74 6f Data Ascii: ck_input:e.track_input\|\|"rapid-track-input",click_id_class:e.click_id_class\|\|"rapid-with-clickid",anc_pos_attr:"data-rapid_p",anc_v9y_attr:"data-v9y",deb:!0===e.debug,ldbg:0<e.ldbg\|\|0<n.indexOf("yhldebug=1"),addmod_timeout:e.addmodules_timeout\|\|300,ult_to
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 55 49 44 3d 79 2e 61 75 67 28 7b 7d 2c 61 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 63 75 73 74 6f 6d 55 49 44 20 6d 75 73 74 20 62 65 20 61 6e 20 4f 62 6a 65 63 74 20 77 69 74 68 20 22 69 64 22 20 61 6e 64 20 22 74 79 70 65 22 27 29 2c 72 2e 63 75 73 74 6f 6d 55 49 44 3d 6e 75 6c 6c 29 29 3b 76 61 72 20 61 2c 6f 3d 2b 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 79 2e 69 73 4e 75 6d 28 6f 29 3f 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3d 28 6e 3d 37 30 30 2c 28 61 3d 6f 29 3c 28 6f 3d 33 30 30 29 3f 6f 3a 6e 3c 61 3f 6e 3a 61 29 3a 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3d 37 30 30 2c 72 2e 6c 64 62 67 26 26 31 65 34 21 3d 72 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e Data Ascii: UID=y.aug({},a):(console.error('customUID must be an Object with "id" and "type"'),r.customUID=null));var a,o=+r.compr_timeout;return y.isNum(o)?r.compr_timeout=(n=700,(a=o)<(o=300)?o:n<a?n:a):r.compr_timeout=700,r.ldbg&&1e4!=r.click_timeout&&console.warn
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 28 22 26 22 29 29 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 29 7c 7c 32 3c 3d 28 6f 3d 61 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 69 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 30 5d 29 2c 73 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 31 5d 29 2c 6f 3d 21 72 2e 74 65 73 74 28 69 29 2c 45 28 22 51 75 65 72 79 70 61 72 61 6d 73 20 64 65 63 6f 64 65 64 3a 20 22 2b 69 2b 22 20 3a 20 22 2b 73 29 2c 45 28 22 42 6c 61 63 6b 6c 69 73 74 20 66 69 6c 74 65 72 3a 20 22 2b 6f 29 2c 6f 26 26 74 2e 73 65 74 28 69 2c 73 29 29 7d 76 61 72 20 6c 3d 28 6c 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 3a 24 Data Ascii: ("&"))!a.hasOwnProperty(s)\|\|2<=(o=a[s].split("=")).length&&(i=decodeURIComponent(o[0]),s=decodeURIComponent(o[1]),o=!r.test(i),E("Queryparams decoded: "+i+" : "+s),E("Blacklist filter: "+o),o&&t.set(i,s))}var l=(l=window.location.protocol\|\|"").replace(/:$
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 69 2c 6e 2e 70 70 29 2c 4e 28 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 28 5b 65 5d 2c 74 2c 21 30 2c 69 2c 6e 29 7d 29 29 7d 2c 73 65 6e 64 55 4c 54 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 7b 7d 2c 74 3d 48 28 22 70 22 2c 6e 65 77 20 64 28 69 3d 65 26 26 65 2e 64 61 74 61 3f 65 2e 64 61 74 61 3a 69 29 2c 74 7c 7c 30 29 3b 65 2e 74 79 70 65 26 26 28 74 2b 3d 22 26 5f 56 3d 22 2b 65 2e 74 79 70 65 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 29 2c 70 28 74 2c 6e 29 7d 2c 73 65 6e 64 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 73 65 6e 64 55 4c 54 45 76 65 6e 74 28 65 2c 74 29 7d 2c 73 65 6e 64 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 76 61 72 Data Ascii: i,n.pp),N(P(function(){return R([e],t,!0,i,n)}))},sendULTEvent:function(e,t,n){var i={},t=H("p",new d(i=e&&e.data?e.data:i),t\|\|0);e.type&&(t+="&_V="+e.type.spaceidPrefix),p(t,n)},sendEvents:function(e,t){this.sendULTEvent(e,t)},sendClick:function(i,o){var
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 74 70 73 3a 2f 2f 27 2b 44 2e 67 65 6f 5f 68 6f 73 74 2b 27 2f 62 2e 68 74 6d 6c 22 27 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 3c 69 66 72 61 6d 65 20 22 2b 74 2b 27 20 6e 61 6d 65 3d 22 27 2b 65 2b 27 22 3e 3c 2f 69 66 72 61 6d 65 3e 27 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 6e 61 6d 65 3d 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 2c 69 3d 79 2e 6d 61 6b 65 28 22 66 6f 72 6d 22 29 2c 6f 3d 79 2e 6d 61 6b 65 28 22 69 6e 70 75 74 22 29 2c 72 3d 6d 28 29 2c 61 3d 6d 28 29 2c 73 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 63 68 61 72 73 65 Data Ascii: tps://'+D.geo_host+'/b.html"'),document.createElement("<iframe "+t+' name="'+e+'"></iframe>')):document.createElement("iframe")).name=e,n}function T(e,t){var n=null,i=y.make("form"),o=y.make("input"),r=m(),a=m(),s="application/x-www-form-urlencoded;charse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49797	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:10 UTC	624	OUT	GET /bw/fonts/centra-no2-bold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.yimg.com/wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:10 UTC	657	IN	HTTP/1.1 200 OK x-amz-id-2: CTXgV/K/P+GTzokjprYMKNz07tBt+XDPKniauwk7G9fCeYDS1nm1bs1OcL9MWscPCfdGd2HO9Pg= x-amz-request-id: 4H6875NTEVHYE6YC Date: Mon, 13 Jan 2025 16:55:40 GMT Last-Modified: Sat, 13 Jul 2024 00:12:23 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: qDegSYWb9M7tgdPp_cUvHAGtT5pbzmjd Accept-Ranges: bytes Content-Type: font/woff2 Content-Length: 39888 Server: ATS Referrer-Policy: no-referrer-when-downgrade Etag: "f7ffc5f925d3b186f552cde1c3e99691" Age: 26251 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin ATS-Carp-Promotion: 1
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 9b d0 00 0b 00 00 00 01 9f 1c 00 00 9a bd 00 00 00 00 00 00 9b 0c 00 00 00 c4 00 00 01 cc 00 00 00 00 00 00 00 00 0d 83 e0 38 1b 81 f6 12 1c b2 7c 06 60 00 88 44 01 36 02 24 03 94 54 04 06 05 94 1c 07 20 5b 59 9e 91 90 01 b0 9e d5 de 1e 22 0a fb b0 22 92 93 56 0f 99 aa aa aa aa 09 09 81 1d aa 1a 00 f0 07 3f fa c9 cf 7e f1 ab df fc ee 0f 7f fa cb df fe f1 af ff fc cf ff fd 45 60 dc c4 c7 3a cf f7 43 38 2a ac b6 03 f4 84 78 84 97 b5 ef d5 cc ec 4b 4e ef 21 a5 69 0a e5 fc 30 f4 50 d5 f3 db c7 d9 3a 6b 77 7e 18 11 99 18 23 05 89 2c ff 53 97 bd 9f e4 b8 a8 d2 79 ae 62 2f 70 19 42 bb 50 d1 68 d6 d2 e6 cf c8 92 17 b0 68 8e b9 23 c0 1a 08 fa 27 9d 36 ff ad 24 7b 9d 1c 10 76 cc 1d 00 62 95 fa 10 69 20 4f b3 d3 94 c4 20 bf 0e 24 07 d8 Data Ascii: wOF2OTTO8\|`D6$T [Y""V?~E`:C8*xKN!i0P:kw~#,Syb/pBPhh#'6${vbi O $
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: b7 19 68 26 9a d9 66 8d d9 6c 76 99 13 e6 9c b9 69 1e 9a b7 02 e2 2d 81 12 2e 49 24 bb e4 96 62 52 46 2a 49 3d e9 28 5d a4 97 8c 92 e9 32 4f 96 c8 2a d9 26 27 e5 bc 5c 97 47 f2 4e 51 45 bd 34 4c 53 69 06 2d a0 65 b5 8a d6 d6 06 da 4c db 68 77 1d a0 13 74 9a 2e d4 8d ba 5d 77 ea 21 3d a1 97 f4 b1 be d6 cf fa c7 aa f5 b7 71 36 8d cd 6f 4b da 2a b6 be 6d 69 3b da de 76 b4 5d 68 57 db ad f6 88 bd 68 9f d8 77 f6 bf f3 74 21 2e d6 a5 70 d9 5d 41 57 da 55 75 f5 5d 4b d7 d9 f5 75 c3 dd 44 37 db 2d 75 eb dd 4e 77 d8 9d 75 d7 dd 43 f7 9a 87 54 5f 53 fd 67 8c a5 61 d9 58 01 56 8a 55 61 f5 58 6b 16 ce bc 6c 10 1b cb 66 b0 55 6c 27 3b c9 2e b0 7b ec 39 fb c0 7e f2 94 3c 0d cf c7 4b f3 da bc 09 ef c2 a3 b9 9b f7 e4 c3 f8 24 3e 8f af e3 7b f9 69 7e 9b bf e0 3f 85 12 59 Data Ascii: h&flvi-.I$bRFI=(]2O&'\GNQE4LSi-eLhwt.]w!=q6oK*mi;v]hWhwt!.p]AWUu]KuD7-uNwuCT_SgaXVUaXklfUl';.{9~<K$>{i~?Y
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 71 ec b6 84 88 5a 0b ed 28 6f 5c 61 8d d2 42 a1 50 e9 68 ca d3 d1 3e 0d 4e 2d d1 59 58 92 dd 66 84 3c e1 79 0b 24 24 34 58 55 9d e3 cc 71 dc 1c 92 b7 e1 16 ec 1a 07 ef ec d9 02 f6 6b 3d 2d 06 d9 dd 68 a9 27 75 5a 5c 84 98 cc a4 6d c9 80 54 3b d6 0f be aa 90 8b 95 3a 14 ab 8c d6 1e 47 99 12 97 8a fc 59 df dd 73 47 65 c2 af 41 91 00 0d 9f 5b 1d 39 ba d1 c6 4c a0 51 a8 35 c0 9e f4 54 2d c8 4c ca f6 5e 3c 03 64 cd a1 bd 32 89 72 5d 7d ac 07 05 6e 0a 34 05 6a ee 2a 22 11 77 83 51 e4 62 06 a1 13 29 6e fc 46 1f 5a cc b1 70 d4 a7 c5 e1 41 96 9e 16 3c 08 67 95 bf 28 5a dd ef 55 ad 15 c4 8b 88 76 ed c6 9b 87 3b 18 6a 72 6f 16 52 1d 95 44 56 42 bc 8b a2 a5 f7 2c 0a 9a 31 fe a2 88 9c 31 32 3e 69 05 ec 18 69 a9 86 69 d0 d1 8b 42 1b d7 e0 54 c1 be e2 59 12 84 25 41 58 Data Ascii: qZ(o\aBPh>N-YXf<y$$4XUqk=-h'uZ\mT;:GYsGeA[9LQ5T-L^<d2r]}n4j*"wQb)nFZpA<g(ZUv;jroRDVB,112>iiiBTY%AX
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 11 90 84 59 44 14 f1 14 c9 49 ba 47 ee 23 6f 21 7f a2 88 28 13 28 0f a8 7a ea 5c 5a 3a ad 9d 76 90 8e a6 d7 d3 2f 33 b4 8c 4d cc 04 66 35 f3 3a 4b c0 1a c5 3a c7 86 b3 07 b1 af 72 40 4e 35 67 05 e7 0b 57 cb 1d c6 bd c2 e3 f2 26 f1 6e f1 85 fc 89 fc 5b 02 8f 60 bc e0 88 10 14 ba 85 35 c2 33 a2 34 51 58 b4 55 0c 11 07 c5 7b 25 09 12 b3 a4 45 b2 5e f2 5c ca 91 d6 48 af c9 12 64 1a d9 2b f9 0a 05 59 b1 47 e9 56 1e 52 d9 55 c7 d4 45 ea 7b 1a b7 66 9f 56 ab 7d ab b3 e8 d6 e9 65 fa 05 86 04 43 a5 e1 b2 51 6f dc 6a c2 99 56 98 d1 e6 e9 16 8a 65 99 15 63 1d 63 fd 65 ab b3 7d b7 cf 74 30 1c a7 9c ed ae 58 d7 68 d7 0b b7 ce dd e8 5e e1 be e5 21 78 8a 3c 13 3d 5b 3c 77 3c 7f bc 21 ef 02 5f 94 0f f0 d5 f9 e6 f9 fe fb eb fc 73 fc 47 fc 9f 02 f4 40 77 60 55 e0 6a 30 31 Data Ascii: YDIG#o!((z\Z:v/3Mf5:K:r@N5gW&n[`534QXU{%E^\Hd+YGVRUE{fV}eCQojVecce}t0Xh^!x<=[<w<!_sG@w`Uj01
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 0e 3e ca 14 0a 5f f2 47 e8 9d 8a d3 69 f7 14 f4 92 42 a7 4d 8b 1a 6f a2 4e bd fe 80 03 1c 7f f9 1d ba aa db 1b be bc a9 a2 97 94 3a 6d 62 c2 24 13 2d a0 de 14 40 8b 54 1d 46 c5 c2 95 f7 85 ab a6 01 de c8 85 9f d6 e6 8f 8f 32 66 53 6f f8 d2 2c 85 76 b6 58 b1 53 c4 2c f4 86 2f 66 ab e4 67 a0 b6 3d fd a8 ad 12 c8 fb be 14 d1 f6 17 3f 6a ab ea 0e c6 c2 05 7e e8 0a 37 b8 68 1a e0 ad 6d 30 f0 00 b8 50 02 fc b0 1b 5d 69 37 dc 70 06 2e f6 cf 45 dd c6 a4 28 64 e2 33 b8 c1 45 d3 00 6f 2d d6 23 53 c6 16 7c 46 5b e0 86 43 70 b1 7b b6 58 e1 2d ea 70 22 06 ae 30 41 8f 71 70 d3 e4 c0 07 33 79 2b ad 6d 09 4f 91 d1 66 0a 39 d4 51 37 13 cd a7 fe d4 8f e6 d1 3c f4 a1 7e 58 88 79 30 c3 82 99 ea 1d 7b 2b d2 23 44 fa 62 d3 f0 69 7e 26 ea e0 fb 0e 1d d1 f1 cd 5b 38 34 56 85 8d Data Ascii: >_GiBMoN:mb$-@TF2fSo,vXS,/fg=?j~7hm0P]i7p.E(d3Eo-#S\|F[Cp{X-p"0Aqp3y+mOf9Q7<~Xy0{+#Dbi~&[84V
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 95 df 48 79 d9 db 37 a4 2a 74 83 4a 85 e8 ab db b3 f3 8d 7c b8 81 3a fa 7a 93 e3 c2 d0 93 49 cb 15 94 e0 ae 90 b4 ec e4 e2 85 46 e1 72 8e 7d bb fa 56 53 51 4f de dd 24 8a 8b 82 ef 93 6e d7 d6 d6 68 70 f0 61 ed 03 2d 2e 0d 7e d3 6c e6 b7 e4 c9 45 21 65 77 8b f2 ef 96 ce cd 9f 6c 9d 1b 32 45 79 68 38 7b e6 cc d9 c4 af b7 6e 8c de b2 6d d3 c6 ad a7 cf 29 42 4e 60 03 bc 34 47 af 40 f6 0d 3d f9 4a a5 bf 0f 7b 08 b3 06 8b 9a d1 ea 2d fc fa f2 17 5e 2e 47 ae 4f 4a 3b a0 7a 8b bd ab ac 3f fe 50 55 f6 a3 d2 43 5c 7a 60 43 d4 0a 93 ac 31 79 7c a5 5c 50 91 3f a1 b6 7b a8 b5 c2 2b b4 a8 a7 25 a6 c7 70 7b 2d 9b 08 f7 32 b8 b1 cd f9 1e cf 97 33 23 53 17 87 46 44 84 86 5d 59 9e 95 7d 25 35 53 c1 7c c3 2e 0a a3 33 55 62 4c cf e1 fc 19 6c 32 9c 1a e0 74 07 37 f9 7a 19 ce Data Ascii: Hy7*tJ\|:zIFr}VSQO$nhpa-.~lE!ewl2Eyh8{nm)BN`4G@=J{-^.GOJ;z?PUC\z`C1y\|\P?{+%p{-23#SFD]Y}%5S\|.3UbLl2t7z
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 62 da d5 ef 8a a5 d3 63 a9 a2 8e f8 8e e9 0d ad 7c 9d 08 cb d7 af d9 43 d2 da 48 83 ca 6f 8a ac fe ca 69 f4 1e 8c 19 8d c6 99 1a 23 d4 af f6 89 74 3c b9 ab a5 5c ea eb b2 76 42 72 e1 ab c5 88 f5 be 97 b7 0c 93 bb 4f e4 52 df c0 f8 e3 e9 16 0c e3 bd 65 ff ad 45 74 2e 1a 34 e7 8b f9 b4 de 5a 84 da f6 36 b0 43 62 a6 cb 2d d6 71 74 12 35 da 13 01 14 80 21 7d bd 8f d5 e5 84 e3 64 4e 2c 03 c3 29 40 be 85 21 02 b9 89 11 34 44 d0 2d 32 8e 5c c4 03 47 3f 52 24 7c d9 87 69 86 63 fe 9d 21 b3 26 33 38 17 79 ee 9b 34 3e ad 28 18 18 3f 11 ec 53 54 8b 5d e3 36 30 60 30 4e fe b2 60 aa e7 18 ac 65 72 89 38 48 cd f2 b5 b0 ac 79 f3 c2 42 e7 cf cf 0c 2d 2c cc cc ba a6 f4 f0 a2 67 7a c0 15 97 3f fa df 60 3e ff 2e 7b 2f 19 ae 64 26 57 49 b7 7e 45 02 fe 06 7f bb 1d 7a 2f 0d 08 Data Ascii: bc\|CHoi#t<\vBrOReEt.4Z6Cb-qt5!}dN,)@!4D-2\G?R$\|ic!&38y4>(?ST]60`0N`er8HyB-,gz?`>.{/d&WI~Ez/
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: d6 be 06 07 77 c4 7b e2 45 9a 58 58 68 e2 7e 98 02 5d f9 ff 1b b5 9b 2f 4f 47 b5 1d b1 7e 44 36 38 84 2e c0 19 d0 4f 08 64 f7 58 71 eb ce 8a fd 8c 11 b6 a9 6b 23 e2 33 0e a3 8b 30 8e 67 30 2b 66 87 e6 01 b6 b6 a1 93 3b 2e 8f c5 19 72 86 33 26 c2 48 46 c4 eb e3 b5 03 2c 81 1c 51 62 91 90 1f 62 45 96 00 07 89 e2 db 44 6e 33 4b bf 59 fc b5 1d 4e e4 00 07 1c 83 03 39 c0 49 9f 06 4f fc 17 ee 2c 95 0f e3 bb 64 96 30 5e ba be 6c d2 a5 71 26 72 36 93 40 66 f2 fa 40 6d e0 5c 75 2f b9 e4 aa ca 22 c7 c2 9d ef 92 58 82 dd 85 62 e5 fb 77 4a ef df bf 33 65 e4 c8 a9 53 46 8e 9c 5a 7a 5f d1 fd bd 1d 4e e4 c0 b8 8d 13 66 44 eb 2b b3 2f 27 4f b6 15 61 06 56 5c 29 cd 4c 2b 5f 57 65 82 f3 07 08 30 c3 cb 8c 36 e4 3c 2e 78 f5 ac a5 2a 2e 91 a7 c4 b6 b6 58 25 ae 20 56 66 c5 23 Data Ascii: w{EXXh~]/OG~D68.OdXqk#30g0+f;.r3&HF,QbbEDn3KYN9IO,d0^lq&r6@f@m\u/"XbwJ3eSFZz_NfD+/'OaV\)L+_We06<.x*.X% Vf#
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 41 68 53 55 92 52 98 72 8a 6c 9c 00 f3 c0 24 58 c6 1c f9 ae 68 cd 71 9e aa c5 12 03 8c 22 e6 f3 5d 02 79 8b d4 96 aa a8 2d aa ac c1 18 1d f2 63 31 93 86 ff b7 6c fa 93 b6 2c b6 da d6 d1 80 11 e7 df 20 9e 22 cb e8 41 37 cc b8 21 74 13 3d e9 86 05 37 04 ea 21 62 b8 7d 97 00 9d f8 11 b7 3f d2 6d 81 87 f9 8a 96 77 9c f7 01 22 8d c3 11 8c c0 1e 81 fa 8a de a4 f8 42 11 e8 0b 11 23 68 3f 8d a7 83 02 fa 8a 1f d1 5d d0 65 d3 7a 74 e1 3f be e9 5e 14 6b e1 44 eb e5 a6 aa 9b e8 72 43 c5 1a 7e 55 c6 e7 ef 4c af a8 23 5e cd 09 f3 ec 3b b7 45 08 73 a3 57 6e 5e 68 8a de 78 e8 e8 66 95 74 d2 ae 84 cb bb b2 4c 6b b9 e4 a6 fa 4f 2a fa 64 3e ca de 8f f7 62 75 7c 3e df 25 db 7b 91 03 d6 8a ec 35 ed a0 74 c1 9f 8f 82 03 ed 95 58 1d 76 21 4b d0 1d 8d 41 6b ef 66 14 43 d4 a7 c3 Data Ascii: AhSURrl$Xhq"]y-c1l, "A7!t=7!b}?mw"B#h?]ezt?^kDrC~UL#^;EsWn^hxftLkO*d>bu\|>%{5tXv!KAkfC
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 59 ca b5 2b 2a ed 47 90 5c 7f eb 66 5d dd ed 19 a3 82 a6 4d 0f 0a 9a 7e ab 4e 59 32 df c3 ae d8 0d 07 4d 06 3c b1 07 5e 5a 5e 8d 43 f2 c7 c8 67 a7 af 9f aa b2 e6 ca c7 fc b9 0f 48 3b 2f e4 b6 40 fd c5 9f 5c 49 3b af 68 04 1c 4a 92 23 8a 26 c5 ef 72 4e 58 b3 e4 d8 12 13 c9 16 57 d2 93 17 44 d2 c2 02 7f b4 81 16 be 2a 79 ed 90 47 cf 9a 11 34 7a e6 cd da aa 1b 37 6b eb ae cf 1a a3 e8 7c 4f 7c bb 8b 63 b1 73 30 9f 3b 88 77 11 4a fe 10 a9 68 94 43 90 7c d5 aa 28 71 9e 01 a7 0f c6 77 7e 19 64 8d 14 af 14 1a 11 19 61 56 e2 88 24 88 fb f5 a6 31 56 f9 32 ba 7c b0 52 a6 cd 53 64 1a 39 4a 60 1f ef db 19 7d cb d5 56 4c a9 f3 b8 41 1c f5 34 01 87 94 c3 56 4b 46 98 95 f2 e9 ad 32 f2 35 0b a6 d4 79 12 f4 4d 6c 84 31 63 df f3 a6 df 95 29 06 4b 2b 6b fc 4d f7 cb be 58 cf Data Ascii: Y+G\f]M~NY2M<^Z^CgH;/@\I;hJ#&rNXWDyG4z7k\|O\|cs0;wJhC\|(qw~daV$1V2\|RSd9J`}VLA4VKF25yMl1c)K+kMX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49800	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:10 UTC	391	OUT	GET /wm/mbr/45a29c2e92c89879554f8ddc9de9a63ebe558b31/bundle.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:10 UTC	627	IN	HTTP/1.1 200 OK x-amz-id-2: g3J6Y6pjVoZkd6kDQ07B0FhsDyRtug6A3BK1x7hNChnhBVBdFZtR3q6+oZb/hm/y+EWiULvMGkQ= x-amz-request-id: M7XQCH2FSNA99M3D Date: Wed, 08 Jan 2025 05:40:10 GMT Last-Modified: Wed, 08 Jan 2025 04:25:33 GMT ETag: "14bf381a72adaa2223c20a8728bd6fa4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 193175 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 498781 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 66 29 7b 69 66 28 21 6e 5b 69 5d 29 7b 69 66 28 21 65 5b 69 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 66 26 26 63 29 72 65 74 75 72 6e 20 63 28 69 2c 21 30 29 3b 69 66 28 75 29 72 65 74 75 72 6e 20 75 28 69 2c 21 30 29 3b 76 61 72 20 61 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 69 2b 22 27 22 29 3b 74 68 72 6f 77 20 61 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 61 7d 76 61 72 20 70 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d Data Ascii: (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}}
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 5d 2c 6e 5b 31 5d 2b 3d 6e 5b 32 5d 3e 3e 3e 31 36 2c 6e 5b 32 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 31 5d 2a 74 5b 33 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 32 5d 2a 74 5b 32 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 33 5d 2a 74 5b 31 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 30 5d 2b 3d 65 5b 30 5d 2a 74 5b 33 5d 2b 65 5b 31 5d 2a 74 5b 32 5d 2b 65 5b 32 5d 2a 74 5b 31 5d 2b 65 5b 33 5d 2a 74 5b 30 5d 2c 6e 5b 30 5d 26 3d 36 35 35 33 35 2c 5b 6e 5b 30 5d 3c 3c 31 36 7c 6e 5b 31 5d 2c 6e 5b 32 5d 3c 3c 31 36 7c 6e 5b 33 5d 5d 7d 2c 6e 3d 66 75 Data Ascii: ],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]t[3],n[0]+=n[1]>>>16,n[1]&=65535,n[1]+=e[2]t[2],n[0]+=n[1]>>>16,n[1]&=65535,n[1]+=e[3]t[1],n[0]+=n[1]>>>16,n[1]&=65535,n[0]+=e[0]t[3]+e[1]t[2]+e[2]t[1]+e[3]*t[0],n[0]&=65535,[n[0]<<16\|n[1],n[2]<<16\|n[3]]},n=fu
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 2c 67 29 2c 63 3d 6e 28 63 2c 32 37 29 2c 63 3d 65 28 63 2c 64 29 2c 63 3d 65 28 74 28 63 2c 5b 30 2c 35 5d 29 2c 5b 30 2c 31 33 39 30 32 30 38 38 30 39 5d 29 2c 66 3d 74 28 66 2c 6d 29 2c 66 3d 6e 28 66 2c 33 33 29 2c 66 3d 74 28 66 2c 68 29 2c 64 3d 72 28 64 2c 66 29 2c 64 3d 6e 28 64 2c 33 31 29 2c 64 3d 65 28 64 2c 63 29 2c 64 3d 65 28 74 28 64 2c 5b 30 2c 35 5d 29 2c 5b 30 2c 39 34 34 33 33 31 34 34 35 5d 29 3b 73 77 69 74 63 68 28 67 3d 5b 30 2c 30 5d 2c 66 3d 5b 30 2c 30 5d 2c 73 29 7b 63 61 73 65 20 31 35 3a 66 3d 72 28 66 2c 61 28 5b 30 2c 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 54 2b 31 34 29 5d 2c 34 38 29 29 3b 63 61 73 65 20 31 34 3a 66 3d 72 28 66 2c 61 28 5b 30 2c 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 54 2b 31 33 29 5d 2c 34 30 29 29 3b 63 Data Ascii: ,g),c=n(c,27),c=e(c,d),c=e(t(c,[0,5]),[0,1390208809]),f=t(f,m),f=n(f,33),f=t(f,h),d=r(d,f),d=n(d,31),d=e(d,c),d=e(t(d,[0,5]),[0,944331445]);switch(g=[0,0],f=[0,0],s){case 15:f=r(f,a([0,o.charCodeAt(T+14)],48));case 14:f=r(f,a([0,o.charCodeAt(T+13)],40));c
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 73 3a 5b 5d 2c 65 78 74 65 6e 64 65 64 4a 73 46 6f 6e 74 73 3a 21 31 7d 2c 73 63 72 65 65 6e 3a 7b 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 3a 21 30 7d 2c 70 6c 75 67 69 6e 73 3a 7b 73 6f 72 74 50 6c 75 67 69 6e 73 46 6f 72 3a 5b 2f 70 61 6c 65 6d 6f 6f 6e 2f 69 5d 2c 65 78 63 6c 75 64 65 49 45 3a 21 31 7d 2c 65 78 74 72 61 43 6f 6d 70 6f 6e 65 6e 74 73 3a 5b 5d 2c 65 78 63 6c 75 64 65 73 3a 7b 65 6e 75 6d 65 72 61 74 65 44 65 76 69 63 65 73 3a 21 30 2c 70 69 78 65 6c 52 61 74 69 6f 3a 21 30 2c 64 6f 4e 6f 74 54 72 61 63 6b 3a 21 30 2c 66 6f 6e 74 73 46 6c 61 73 68 3a 21 30 7d 2c 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 3a 22 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 45 52 52 4f 52 3a 22 65 72 72 6f 72 22 2c 45 58 43 4c 55 44 Data Ascii: s:[],extendedJsFonts:!1},screen:{detectScreenOrientation:!0},plugins:{sortPluginsFor:[/palemoon/i],excludeIE:!1},extraComponents:[],excludes:{enumerateDevices:!0,pixelRatio:!0,doNotTrack:!0,fontsFlash:!0},NOT_AVAILABLE:"not available",ERROR:"error",EXCLUD
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 42 4c 45 29 3b 76 61 72 20 72 3d 6e 65 77 20 61 28 31 2c 34 34 31 30 30 2c 34 34 31 30 30 29 2c 69 3d 72 2e 63 72 65 61 74 65 4f 73 63 69 6c 6c 61 74 6f 72 28 29 3b 69 2e 74 79 70 65 3d 22 74 72 69 61 6e 67 6c 65 22 2c 69 2e 66 72 65 71 75 65 6e 63 79 2e 73 65 74 56 61 6c 75 65 41 74 54 69 6d 65 28 31 65 34 2c 72 2e 63 75 72 72 65 6e 74 54 69 6d 65 29 3b 76 61 72 20 6f 3d 72 2e 63 72 65 61 74 65 44 79 6e 61 6d 69 63 73 43 6f 6d 70 72 65 73 73 6f 72 28 29 3b 73 28 5b 5b 22 74 68 72 65 73 68 6f 6c 64 22 2c 2d 35 30 5d 2c 5b 22 6b 6e 65 65 22 2c 34 30 5d 2c 5b 22 72 61 74 69 6f 22 2c 31 32 5d 2c 5b 22 72 65 64 75 63 74 69 6f 6e 22 2c 2d 32 30 5d 2c 5b 22 61 74 74 61 63 6b 22 2c 30 5d 2c 5b 22 72 65 6c 65 61 73 65 22 2c 2e 32 35 5d 5d 2c 66 75 6e 63 74 69 6f Data Ascii: BLE);var r=new a(1,44100,44100),i=r.createOscillator();i.type="triangle",i.frequency.setValueAtTime(1e4,r.currentTime);var o=r.createDynamicsCompressor();s([["threshold",-50],["knee",40],["ratio",12],["reduction",-20],["attack",0],["release",.25]],functio
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 28 65 29 7b 76 61 72 20 74 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 77 69 64 74 68 2c 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 5d 3b 72 65 74 75 72 6e 20 65 2e 73 63 72 65 65 6e 2e 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 26 26 74 2e 73 6f 72 74 28 29 2e 72 65 76 65 72 73 65 28 29 2c 74 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 28 42 28 74 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 57 69 64 74 68 26 26 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 29 7b 76 61 72 20 74 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 2c 77 69 6e 64 6f 77 2e 73 63 72 65 Data Ascii: (e){var t=[window.screen.width,window.screen.height];return e.screen.detectScreenOrientation&&t.sort().reverse(),t},C=function(e,t){e(B(t))},B=function(e){if(window.screen.availWidth&&window.screen.availHeight){var t=[window.screen.availHeight,window.scre
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 73 70 61 63 65 22 2c 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 73 65 72 69 66 22 5d 2c 61 3d 5b 22 41 6e 64 61 6c 65 20 4d 6f 6e 6f 22 2c 22 41 72 69 61 6c 22 2c 22 41 72 69 61 6c 20 42 6c 61 63 6b 22 2c 22 41 72 69 61 6c 20 48 65 62 72 65 77 22 2c 22 41 72 69 61 6c 20 4d 54 22 2c 22 41 72 69 61 6c 20 4e 61 72 72 6f 77 22 2c 22 41 72 69 61 6c 20 52 6f 75 6e 64 65 64 20 4d 54 20 42 6f 6c 64 22 2c 22 41 72 69 61 6c 20 55 6e 69 63 6f 64 65 20 4d 53 22 2c 22 42 69 74 73 74 72 65 61 6d 20 56 65 72 61 20 53 61 6e 73 20 4d 6f 6e 6f 22 2c 22 42 6f 6f 6b 20 41 6e 74 69 71 75 61 22 2c 22 42 6f 6f 6b 6d 61 6e 20 4f 6c 64 20 53 74 79 6c 65 22 2c 22 43 61 6c 69 62 72 69 22 2c 22 43 61 6d 62 72 69 61 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 2c 22 43 65 6e 74 75 Data Ascii: space","sans-serif","serif"],a=["Andale Mono","Arial","Arial Black","Arial Hebrew","Arial MT","Arial Narrow","Arial Rounded MT Bold","Arial Unicode MS","Bitstream Vera Sans Mono","Book Antiqua","Bookman Old Style","Calibri","Cambria","Cambria Math","Centu
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 75 73 22 2c 22 41 6e 67 73 61 6e 61 20 4e 65 77 22 2c 22 41 6e 67 73 61 6e 61 55 50 43 22 2c 22 41 6e 74 69 71 75 65 20 4f 6c 69 76 65 22 2c 22 41 70 61 72 61 6a 69 74 61 22 2c 22 41 70 70 6c 65 20 43 68 61 6e 63 65 72 79 22 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 41 70 70 6c 65 20 53 44 20 47 6f 74 68 69 63 20 4e 65 6f 22 2c 22 41 72 61 62 69 63 20 54 79 70 65 73 65 74 74 69 6e 67 22 2c 22 41 52 43 48 45 52 22 2c 22 41 52 4e 4f 20 50 52 4f 22 2c 22 41 72 72 75 73 20 42 54 22 2c 22 41 75 72 6f 72 61 20 43 6e 20 42 54 22 2c 22 41 76 61 6e 74 47 61 72 64 65 20 42 6b 20 42 54 22 2c 22 41 76 61 6e 74 47 61 72 64 65 20 4d 64 20 42 54 22 2c 22 41 56 45 4e 49 52 22 2c 22 41 79 75 74 68 61 79 61 22 2c 22 42 61 6e 64 79 22 2c 22 42 61 6e Data Ascii: us","Angsana New","AngsanaUPC","Antique Olive","Aparajita","Apple Chancery","Apple Color Emoji","Apple SD Gothic Neo","Arabic Typesetting","ARCHER","ARNO PRO","Arrus BT","Aurora Cn BT","AvantGarde Bk BT","AvantGarde Md BT","AVENIR","Ayuthaya","Bandy","Ban
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 20 47 6f 74 68 69 63 20 4c 69 67 68 74 22 2c 22 43 6f 70 70 65 72 70 6c 47 6f 74 68 20 42 64 20 42 54 22 2c 22 43 6f 72 62 65 6c 22 2c 22 43 6f 72 64 69 61 20 4e 65 77 22 2c 22 43 6f 72 64 69 61 55 50 43 22 2c 22 43 6f 72 6e 65 72 73 74 6f 6e 65 22 2c 22 43 6f 72 6f 6e 65 74 22 2c 22 43 75 63 6b 6f 6f 22 2c 22 43 75 72 6c 7a 20 4d 54 22 2c 22 44 61 75 6e 50 65 6e 68 22 2c 22 44 61 75 70 68 69 6e 22 2c 22 44 61 76 69 64 22 2c 22 44 42 20 4c 43 44 20 54 65 6d 70 22 2c 22 44 45 4c 49 43 49 4f 55 53 22 2c 22 44 65 6e 6d 61 72 6b 22 2c 22 44 46 4b 61 69 2d 53 42 22 2c 22 44 69 64 6f 74 22 2c 22 44 69 6c 6c 65 6e 69 61 55 50 43 22 2c 22 44 49 4e 22 2c 22 44 6f 6b 43 68 61 6d 70 61 22 2c 22 44 6f 74 75 6d 22 2c 22 44 6f Data Ascii: ","Copperplate Gothic Light","CopperplGoth Bd BT","Corbel","Cordia New","CordiaUPC","Cornerstone","Coronet","Cuckoo","Curlz MT","DaunPenh","Dauphin","David","DB LCD Temp","DELICIOUS","Denmark","DFKai-SB","Didot","DilleniaUPC","DIN","DokChampa","Dotum","Do
2025-01-14 00:13:10 UTC	1300	IN	Data Raw: 20 4d 4e 22 2c 22 48 61 65 74 74 65 6e 73 63 68 77 65 69 6c 65 72 22 2c 22 48 61 72 6c 6f 77 20 53 6f 6c 69 64 20 49 74 61 6c 69 63 22 2c 22 48 61 72 72 69 6e 67 74 6f 6e 22 2c 22 48 65 61 74 68 65 72 22 2c 22 48 65 69 74 69 20 53 43 22 2c 22 48 65 69 74 69 20 54 43 22 2c 22 48 45 4c 56 22 2c 22 48 65 72 61 6c 64 22 2c 22 48 69 67 68 20 54 6f 77 65 72 20 54 65 78 74 22 2c 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 22 48 69 72 61 67 69 6e 6f 20 4d 69 6e 63 68 6f 20 50 72 6f 4e 22 2c 22 48 6f 65 66 6c 65 72 20 54 65 78 74 22 2c 22 48 75 6d 61 6e 73 74 20 35 32 31 20 43 6e 20 42 54 22 2c 22 48 75 6d 61 6e 73 74 35 32 31 20 42 54 22 2c 22 48 75 6d 61 6e 73 74 35 32 31 20 4c 74 20 42 54 22 2c 22 49 6d 70 72 69 6e 74 20 Data Ascii: MN","Haettenschweiler","Harlow Solid Italic","Harrington","Heather","Heiti SC","Heiti TC","HELV","Herald","High Tower Text","Hiragino Kaku Gothic ProN","Hiragino Mincho ProN","Hoefler Text","Humanst 521 Cn BT","Humanst521 BT","Humanst521 Lt BT","Imprint

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49802	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:10 UTC	368	OUT	GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:11 UTC	617	IN	HTTP/1.1 200 OK x-amz-id-2: trtZkjyXbfUuxpBYupuDfxUSpAPb+jBRsRkS36HvaxrlyRmNlivZqT2H5Vu2F+KbW/q5yZdnipQ= x-amz-request-id: J26BG26RTAWZGFV2 Date: Sun, 12 Jan 2025 11:48:14 GMT Last-Modified: Fri, 24 Apr 2020 17:13:52 GMT ETag: "ac8c4fbeda6efad9549cb41b992a8b3a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Content-Length: 1246 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 131098 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:11 UTC	1246	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 39 20 28 38 36 31 32 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 59 (86127) - https://sketch.com --> <tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49803	65.9.66.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:11 UTC	665	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
2025-01-14 00:13:11 UTC	674	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9424 Connection: close Last-Modified: Tue, 17 Dec 2024 18:00:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 13 Jan 2025 23:39:46 GMT ETag: "2907cf83061833352832f902cf60546e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e39402e2cf62b31f7774452c905f38f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: nq7hWImBAA5jhMlWKpN93odNFPaeH_zJqogPuH-3_BwoM-V0veSMdQ== Age: 2006 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' cache-control: max-age=3600
2025-01-14 00:13:11 UTC	9424	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5b 5c 77 5d 2b 5c 2e 28 5b 5c 77 5d 2b 7c 63 6f 2e 75 6b 29 24 2f 29 5b 30 5d 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 22 22 7d 7d 3b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 3d 22 29 2c 6f 3d 28 74 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 Data Ascii: (()=>{"use strict";var n=function(n){if(n)return n;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(n){return""}};const t=function(n,t){for(var e="".concat(n,"="),o=(t\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49806	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:11 UTC	751	OUT	GET /sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 HTTP/1.1 Host: gpt.mail.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:11 UTC	1164	IN	HTTP/1.1 200 OK expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-omg-env: norrin-green--gam-production-ir2-66c5677bcb-hzdfh content-type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src https:; script-src 'nonce-ilvhRjBFbdajTfXavycx5Q==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:; sandbox allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts; block-all-mixed-content; frame-ancestors https://mail.yahoo.com https://.mail.yahoo.com https://mail.aol.com https://.mail.aol.com https://login.yahoo.com https://.login.yahoo.com https://login.aol.com https://.login.aol.com https://devbox.login.aol.com:8080 https://devbox.login.yahoo.com:8080; report-uri https://csp.yahoo.com/beacon/csp?src=mail-gam vary: Accept-Encoding date: Tue, 14 Jan 2025 00:13:11 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Transfer-Encoding: chunked Connection: close
2025-01-14 00:13:11 UTC	5	IN	Data Raw: 34 34 39 0d 0a Data Ascii: 449
2025-01-14 00:13:11 UTC	1097	IN	Data Raw: 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 65 63 75 72 65 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 73 65 63 75 72 65 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 Data Ascii: <!doctype html><html><head> <link rel="dns-prefetch" href="//securepubads.g.doubleclick.net"><link rel="preconnect" href="//securepubads.g.doubleclick.net"><link rel="dns-prefetch" href="//pagead2.googlesyndication.com"><link rel="preconnect"
2025-01-14 00:13:11 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49807	3.161.82.108	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:11 UTC	350	OUT	GET /cmp.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:11 UTC	639	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 262888 Connection: close Last-Modified: Thu, 14 Nov 2024 18:50:18 GMT x-amz-expiration: expiry-date="Thu, 15 Nov 2029 00:00:00 GMT", rule-id="webapp-standard-lifecycle" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 00:02:44 GMT ETag: "286fbb8385e48697dc5f956d4825ed84" X-Cache: Hit from cloudfront Via: 1.1 0c32b42e3b5070fcbe6b5b320d0621b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: 7MBLoSBbF8f2ILkl6xPgto8GXhqdrXlOSyIUFBc23LeRYUUZYS_cXw== Age: 628 cache-control: max-age=3600
2025-01-14 00:13:11 UTC	16384	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 37 2e 30 2e 30 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 31 30 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 7.0.0 Copyright 2018 Oath Holdings, Inc. /!function(){var e={1040:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S
2025-01-14 00:13:11 UTC	16384	IN	Data Raw: 64 22 2c 65 2c 21 30 2c 6e 65 77 20 72 2e 50 69 6e 67 44 61 74 61 28 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 29 29 3b 74 68 69 73 2e 69 6e 76 6f 6b 65 43 61 6c 6c 62 61 63 6b 28 74 29 7d 7d 74 2e 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 43 6f 6d 6d 61 6e 64 3d 73 7d 2c 33 37 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 43 6f 6d 6d 61 6e 64 3d 76 6f 69 64 20 30 3b 74 2e 43 6f 6d 6d 61 6e 64 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 3d 21 30 2c 74 68 69 73 2e 63 6d 70 41 Data Ascii: d",e,!0,new r.PingData(this.cmpApiContext));this.invokeCallback(t)}}t.AddEventListenerCommand=s},3717:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Command=void 0;t.Command=class{constructor(e,t,n){this.success=!0,this.cmpA
2025-01-14 00:13:11 UTC	16384	IN	Data Raw: 7b 66 6f 72 28 3b 65 2e 6c 65 6e 67 74 68 25 32 34 3e 30 3b 29 65 2b 3d 22 30 22 3b 72 65 74 75 72 6e 20 65 7d 7d 74 2e 54 72 61 64 69 74 69 6f 6e 61 6c 42 61 73 65 36 34 55 72 6c 45 6e 63 6f 64 65 72 3d 72 2c 72 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 72 7d 2c 32 34 35 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 6e 29 3b 72 26 26 21 28 Data Ascii: {for(;e.length%24>0;)e+="0";return e}}t.TraditionalBase64UrlEncoder=r,r.instance=new r},2456:function(e,t,n){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(e,t,n,i){void 0===i&&(i=n);var r=Object.getOwnPropertyDescriptor(t,n);r&&!(
2025-01-14 00:13:11 UTC	14808	IN	Data Raw: 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 44 61 74 65 74 69 6d 65 45 6e 63 6f 64 65 72 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 69 3d 6e 28 37 36 34 32 29 2c 72 3d 6e 28 35 32 35 39 29 3b 74 2e 44 61 74 65 74 69 6d 65 45 6e 63 6f 64 65 72 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 65 6e 63 6f 64 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 72 2e 46 69 78 65 64 49 6e 74 65 67 65 72 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 67 65 74 54 69 6d 65 28 29 2f 31 30 30 29 2c 33 36 29 3a 72 2e 46 69 78 65 64 49 6e 74 65 67 65 72 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 30 2c 33 36 29 7d 73 74 61 74 69 63 20 64 65 63 6f 64 65 28 65 29 7b 69 66 28 21 2f 5e 5b 30 2d Data Ascii: erty(t,"__esModule",{value:!0}),t.DatetimeEncoder=void 0;const i=n(7642),r=n(5259);t.DatetimeEncoder=class{static encode(e){return e?r.FixedIntegerEncoder.encode(Math.round(e.getTime()/100),36):r.FixedIntegerEncoder.encode(0,36)}static decode(e){if(!/^[0-
2025-01-14 00:13:11 UTC	16384	IN	Data Raw: 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 43 46 45 55 56 32 5f 56 45 4e 44 4f 52 53 5f 44 49 53 43 4c 4f 53 45 44 5f 53 45 47 4d 45 4e 54 5f 46 49 45 4c 44 5f 4e 41 4d 45 53 3d 74 2e 54 43 46 45 55 56 32 5f 56 45 4e 44 4f 52 53 5f 41 4c 4c 4f 57 45 44 5f 53 45 47 4d 45 4e 54 5f 46 49 45 4c 44 5f 4e 41 4d 45 53 3d 74 2e 54 43 46 45 55 56 32 5f 50 55 42 4c 49 53 48 45 52 5f 50 55 52 50 4f 53 45 53 5f 53 45 47 4d 45 4e 54 5f 46 49 45 4c 44 5f 4e 41 4d 45 53 3d 74 2e 54 43 46 45 55 56 32 5f 43 4f 52 45 5f 53 45 47 4d 45 4e 54 5f 46 49 45 4c 44 5f 4e 41 4d 45 53 3d 74 2e 54 63 66 45 75 56 32 46 69 65 6c 64 3d 76 6f 69 64 20 30 2c 28 69 3d 6e 3d 74 2e 54 63 66 45 75 Data Ascii: .defineProperty(t,"__esModule",{value:!0}),t.TCFEUV2_VENDORS_DISCLOSED_SEGMENT_FIELD_NAMES=t.TCFEUV2_VENDORS_ALLOWED_SEGMENT_FIELD_NAMES=t.TCFEUV2_PUBLISHER_PURPOSES_SEGMENT_FIELD_NAMES=t.TCFEUV2_CORE_SEGMENT_FIELD_NAMES=t.TcfEuV2Field=void 0,(i=n=t.TcfEu
2025-01-14 00:13:11 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 29 2c 65 5b 69 5d 3d 74 5b 6e 5d 7d 29 2c 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 65 78 70 6f 72 74 53 74 61 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 3d 3d 3d 6e 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 7c 7c 69 28 74 2c 65 2c 6e 29 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 72 28 6e 28 32 34 35 36 29 2c 74 29 2c 72 28 6e 28 31 30 33 31 29 2c 74 29 2c 72 28 6e 28 31 30 39 Data Ascii: :function(e,t,n,i){void 0===i&&(i=n),e[i]=t[n]}),r=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|i(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),r(n(2456),t),r(n(1031),t),r(n(109
2025-01-14 00:13:11 UTC	16384	IN	Data Raw: 63 6f 6e 74 61 69 6e 73 4b 65 79 28 65 29 7d 67 65 74 46 69 65 6c 64 56 61 6c 75 65 28 65 29 7b 69 66 28 74 68 69 73 2e 64 65 63 6f 64 65 64 7c 7c 28 74 68 69 73 2e 64 65 63 6f 64 65 53 65 67 6d 65 6e 74 28 74 68 69 73 2e 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 2c 74 68 69 73 2e 66 69 65 6c 64 73 29 2c 74 68 69 73 2e 64 69 72 74 79 3d 21 31 2c 74 68 69 73 2e 64 65 63 6f 64 65 64 3d 21 30 29 2c 74 68 69 73 2e 66 69 65 6c 64 73 2e 63 6f 6e 74 61 69 6e 73 4b 65 79 28 65 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 65 29 2e 67 65 74 56 61 6c 75 65 28 29 3b 74 68 72 6f 77 20 6e 65 77 20 69 2e 49 6e 76 61 6c 69 64 46 69 65 6c 64 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 66 69 65 6c 64 3a 20 27 22 2b 65 2b 22 27 22 29 7d 73 65 74 Data Ascii: containsKey(e)}getFieldValue(e){if(this.decoded\|\|(this.decodeSegment(this.encodedString,this.fields),this.dirty=!1,this.decoded=!0),this.fields.containsKey(e))return this.fields.get(e).getValue();throw new i.InvalidFieldError("Invalid field: '"+e+"'")}set
2025-01-14 00:13:12 UTC	16384	IN	Data Raw: 46 69 78 65 64 49 6e 74 65 67 65 72 28 32 2c 30 29 2e 77 69 74 68 56 61 6c 69 64 61 74 6f 72 28 65 29 29 2c 69 7d 65 6e 63 6f 64 65 53 65 67 6d 65 6e 74 28 65 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 69 74 53 74 72 69 6e 67 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 65 2c 74 68 69 73 2e 67 65 74 46 69 65 6c 64 4e 61 6d 65 73 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 61 73 65 36 34 55 72 6c 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 74 29 7d 64 65 63 6f 64 65 53 65 67 6d 65 6e 74 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 65 26 26 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 66 69 65 6c 64 73 2e 72 65 73 65 74 28 74 29 3b 74 72 79 7b 6c 65 74 20 6e 3d 74 68 69 73 2e 62 61 73 65 36 34 55 72 6c 45 6e 63 6f 64 65 72 2e 64 65 63 6f 64 65 28 Data Ascii: FixedInteger(2,0).withValidator(e)),i}encodeSegment(e){let t=this.bitStringEncoder.encode(e,this.getFieldNames());return this.base64UrlEncoder.encode(t)}decodeSegment(e,t){null!=e&&0!==e.length\|\|this.fields.reset(t);try{let n=this.base64UrlEncoder.decode(
2025-01-14 00:13:12 UTC	16384	IN	Data Raw: 6c 69 64 61 74 65 28 29 7b 6c 65 74 20 65 3d 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 75 2e 55 73 46 6c 46 69 65 6c 64 2e 53 41 4c 45 5f 4f 50 54 5f 4f 55 54 5f 4e 4f 54 49 43 45 29 2e 67 65 74 56 61 6c 75 65 28 29 2c 74 3d 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 75 2e 55 73 46 6c 46 69 65 6c 64 2e 53 41 4c 45 5f 4f 50 54 5f 4f 55 54 29 2e 67 65 74 56 61 6c 75 65 28 29 2c 6e 3d 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 75 2e 55 73 46 6c 46 69 65 6c 64 2e 54 41 52 47 45 54 45 44 5f 41 44 56 45 52 54 49 53 49 4e 47 5f 4f 50 54 5f 4f 55 54 5f 4e 4f 54 49 43 45 29 2e 67 65 74 56 61 6c 75 65 28 29 2c 69 3d 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 75 2e 55 73 46 6c 46 69 65 6c 64 2e 54 41 52 47 45 54 45 44 5f 41 44 56 45 52 54 49 53 Data Ascii: lidate(){let e=this.fields.get(u.UsFlField.SALE_OPT_OUT_NOTICE).getValue(),t=this.fields.get(u.UsFlField.SALE_OPT_OUT).getValue(),n=this.fields.get(u.UsFlField.TARGETED_ADVERTISING_OPT_OUT_NOTICE).getValue(),i=this.fields.get(u.UsFlField.TARGETED_ADVERTIS
2025-01-14 00:13:12 UTC	16384	IN	Data Raw: 65 74 20 6e 3d 74 68 69 73 2e 62 61 73 65 36 34 55 72 6c 45 6e 63 6f 64 65 72 2e 64 65 63 6f 64 65 28 65 29 3b 74 68 69 73 2e 62 69 74 53 74 72 69 6e 67 45 6e 63 6f 64 65 72 2e 64 65 63 6f 64 65 28 6e 2c 74 68 69 73 2e 67 65 74 46 69 65 6c 64 4e 61 6d 65 73 28 29 2c 74 29 7d 63 61 74 63 68 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 61 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 64 65 63 6f 64 65 20 55 73 4f 72 43 6f 72 65 53 65 67 6d 65 6e 74 20 27 22 2b 65 2b 22 27 22 29 7d 7d 76 61 6c 69 64 61 74 65 28 29 7b 6c 65 74 20 65 3d 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 75 2e 55 73 4f 72 46 69 65 6c 64 2e 53 41 4c 45 5f 4f 50 54 5f 4f 55 54 5f 4e 4f 54 49 43 45 29 2e 67 65 74 56 61 6c 75 65 28 29 2c 74 3d 74 68 69 73 Data Ascii: et n=this.base64UrlEncoder.decode(e);this.bitStringEncoder.decode(n,this.getFieldNames(),t)}catch(t){throw new a.DecodingError("Unable to decode UsOrCoreSegment '"+e+"'")}}validate(){let e=this.fields.get(u.UsOrField.SALE_OPT_OUT_NOTICE).getValue(),t=this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49804	34.253.93.164	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:11 UTC	905	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E
2025-01-14 00:13:11 UTC	472	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, User-Agent, X-Forwarded-For, X-Oath-Gcrumb Server: guce Date: Tue, 14 Jan 2025 00:13:11 GMT Connection: close Access-Control-Allow-Origin: https://login.yahoo.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Access-Control-Allow-Methods: HEAD, GET, OPTIONS
2025-01-14 00:13:11 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 33 70 72 62 6f 34 35 6a 6f 62 62 30 69 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"3prbo45jobb0i","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49809	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:12 UTC	1007	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2025-01-14 00:13:12 UTC	575	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:12 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://login.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC=19cw~2my0;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:12 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:12 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:12 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 30 52 62 6f 4d 61 4e 45 32 75 49 65 57 6b 34 46 4b 61 46 31 5f 62 76 51 68 49 45 78 41 6a 65 59 7e 41 22 7d Data Ascii: {"axid": "y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A"}
2025-01-14 00:13:12 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49810	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:12 UTC	631	OUT	POST /beacon/csp?src=mbr_account HTTP/1.1 Host: csp.yahoo.com Connection: keep-alive Content-Length: 2632 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:12 UTC	2632	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 3f 2e 73 72 63 3d 79 6d 26 70 73 70 69 64 3d 31 35 39 36 30 30 30 30 31 26 61 63 74 69 76 69 74 79 3d 6d 61 69 6c 2d 64 69 72 65 63 74 26 2e 6c 61 6e 67 3d 65 6e 2d 55 53 26 2e 69 6e 74 6c 3d 75 73 26 2e 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 64 25 32 46 66 6f 6c 64 65 72 73 25 32 46 34 25 33 46 72 65 61 73 6f 6e 25 33 44 69 6e 76 61 6c 69 64 5f 63 72 65 64 25 32 36 67 75 63 65 5f 72 65 66 65 72 72 65 72 25 33 44 61 48 52 30 63 48 4d 36 4c 79 39 68 64 48 51 74 65 57 46 6f 62 32 38 75 59 58 52 30 4c 6d 35 6c 64 43 38 25 32 36 Data Ascii: {"csp-report":{"document-uri":"https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26
2025-01-14 00:13:12 UTC	209	IN	HTTP/1.1 204 No Content Date: Tue, 14 Jan 2025 00:13:12 GMT Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Cache-Control: no-store, no-cache, private, max-age=0 Expires: -1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49812	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:12 UTC	623	OUT	GET /nq/nr/taboolajs/taboola/cmp_utils_1.3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:12 UTC	652	IN	HTTP/1.1 200 OK x-amz-id-2: WisGplKy+w3Ap5vOCn6i7CLf2QdaaDpUpt4Oll4kTqYjtjCIGyU/IXFRqx36cooioWvjiU/YLBzxwqGKgqGytg== x-amz-request-id: 2YKXA0EWBHRJMQN4 Date: Thu, 02 Jan 2025 06:54:47 GMT Last-Modified: Tue, 26 Mar 2024 09:41:05 GMT ETag: "42fb6ddad005c2d48b61aea5bd980694" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript; charset=utf8 Content-Length: 2623 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1012706 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 2f 2a 21 20 c2 a9 20 32 30 32 34 20 59 61 68 6f 6f 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 70 3a 22 22 7d 3b 28 28 29 3d 3e 7b 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 20 6d 75 73 74 20 62 65 20 73 65 74 20 62 65 66 6f 72 65 20 72 75 6e 6e 69 6e 67 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 22 29 0a 20 20 20 20 3b 74 2e 70 3d 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 74 3d 3e 7b 0a 20 20 20 20 66 6f 72 28 76 61 72 20 Data Ascii: /! 2024 Yahoo Holdings, Inc. /(()=>{var t={p:""};(()=>{ if(!window.ymailAssetHost)throw new Error("window.ymailAssetHost must be set before running this application.") ;t.p=window.ymailAssetHost})(),(()=>{"use strict";var t=t=>{ for(var
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 61 6c 53 74 61 74 75 73 26 26 65 28 74 2c 21 30 29 3a 65 28 76 6f 69 64 20 30 2c 21 31 29 0a 20 20 20 20 7d 29 29 7d 29 28 28 28 65 2c 6e 29 3d 3e 7b 28 65 3d 3e 7b 76 61 72 20 6e 2c 72 3b 69 66 28 21 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 29 7b 0a 20 20 20 20 69 66 28 77 69 6e 64 6f 77 3d 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 72 65 74 75 72 6e 20 76 6f 69 64 20 65 28 7b 6d 73 67 3a 22 41 50 49 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 2c 21 31 29 0a 20 20 20 20 3b 6e 3d 74 28 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 29 2c 72 3d 7b 7d 2c 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 3d 28 74 2c 61 2c 65 2c 6f 29 3d 3e 7b 69 66 28 6e 29 7b 76 61 72 20 73 3d 69 28 29 2c 70 3d 7b 0a 20 20 20 20 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d Data Ascii: alStatus&&e(t,!0):e(void 0,!1) }))})(((e,n)=>{(e=>{var n,r;if(!window.__tcfapi){ if(window===window.top)return void e({msg:"API not found"},!1) ;n=t("__tcfapiLocator"),r={},window.__tcfapi=(t,a,e,o)=>{if(n){var s=i(),p={ __tcfapiCall:{comm
2025-01-14 00:13:12 UTC	23	IN	Data Raw: 29 29 0a 20 20 20 20 7d 29 29 7d 29 29 7d 29 28 29 7d 29 28 29 3b 0a Data Ascii: )) }))}))})()})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49813	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:12 UTC	608	OUT	GET /aaq/benji/benji-2.2.29.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:12 UTC	679	IN	HTTP/1.1 200 OK x-amz-id-2: IqDgcN7BovC8h3RiGwFVDnVg9gb4ViKYgdoF9q7CLstNAPS/BT7a/g2nA/ojNC3Woile31M2FZg= x-amz-request-id: HN5GR2B57CJVDBQN Date: Wed, 08 Jan 2025 21:42:49 GMT Last-Modified: Wed, 08 Jan 2025 20:32:56 GMT ETag: "eb77e519f9ed8e141ab475af8f0a3614" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: mPaqgNFqPMhjFJvKY0X7kIiaiHNVS5rl Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 103748 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 441024 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 61 73 73 65 72 74 69 76 65 3a 7b 7d 2c 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 70 62 6a 73 3a 7b 71 75 65 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 7c 7c 28 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 2e 6d 61 70 28 28 65 3d 3e 65 2e 74 68 65 6e 28 28 65 3d 3e 28 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 29 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 28 7b 72 Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{assertive:{},benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({r
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 31 33 33 30 22 3a 5b 34 30 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 31 5d 7d 2c 4c 69 67 68 74 68 6f 75 73 65 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 49 6e 66 69 6e 69 74 79 22 3a 5b 39 2c 31 36 5d 7d 2c 73 69 7a 65 3a 5b 32 2c 32 5d 7d 2c 53 6d 61 72 74 41 73 73 65 74 57 69 64 67 65 74 4c 61 72 67 65 3a 7b 73 69 7a 65 3a 5b 38 30 30 2c 36 33 35 5d 7d 2c 53 70 6f 74 6c 69 67 68 74 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 34 38 30 22 3a 5b 38 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 32 5d 7d 2c 54 72 61 64 65 4e 6f 77 3a 7b 73 69 7a 65 3a 5b 32 38 30 2c 35 35 5d 7d 7d 2c 52 3d 7b 22 5b 31 34 34 30 2c 31 30 32 34 5d 22 3a 22 4c 6f 67 69 6e 22 2c 22 5b 32 2c 32 5d 22 3a 22 4c 69 67 68 74 68 6f 75 73 65 22 2c 22 5b 32 38 30 2c 35 35 5d Data Ascii: 1330":[40,9]},size:[3,1]},Lighthouse:{breakpoints:{"0,Infinity":[9,16]},size:[2,2]},SmartAssetWidgetLarge:{size:[800,635]},Spotlight:{breakpoints:{"0,480":[8,9]},size:[3,2]},TradeNow:{size:[280,55]}},R={"[1440,1024]":"Login","[2,2]":"Lighthouse","[280,55]
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 7a 65 64 41 64 73 3a 21 30 7d 2c 74 65 3d 7b 41 64 58 3a 5b 35 32 38 35 38 31 32 32 31 38 5d 2c 48 6f 75 73 65 3a 5b 35 32 38 36 38 34 33 37 36 32 2c 35 33 33 35 32 35 32 32 32 38 5d 2c 59 61 68 6f 6f 50 72 65 62 69 64 3a 5b 35 34 36 32 36 31 37 31 39 31 5d 7d 2c 6e 65 3d 22 62 65 6e 6a 69 3a 72 65 6e 64 65 72 22 2c 69 65 3d 22 62 65 6e 6a 69 3a 6d 6f 75 6e 74 65 64 22 2c 73 65 3d 22 62 65 6e 6a 69 3a 72 65 61 64 79 22 2c 6f 65 3d 22 74 61 62 46 6f 63 75 73 22 2c 72 65 3d 22 75 73 65 72 41 63 74 69 6f 6e 22 2c 61 65 3d 7b 61 6f 6c 3a 22 61 6f 6c 22 2c 61 74 74 3a 22 61 74 74 22 2c 62 69 7a 6d 61 69 6c 3a 22 62 69 7a 6d 61 69 6c 22 2c 66 72 6f 6e 74 69 65 72 3a 22 66 72 6f 6e 74 69 65 72 22 2c 66 74 72 3a 22 66 72 6f 6e 74 69 65 72 22 2c 72 6f 67 65 72 73 Data Ascii: zedAds:!0},te={AdX:[5285812218],House:[5286843762,5335252228],YahooPrebid:[5462617191]},ne="benji:render",ie="benji:mounted",se="benji:ready",oe="tabFocus",re="userAction",ae={aol:"aol",att:"att",bizmail:"bizmail",frontier:"frontier",ftr:"frontier",rogers
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 2e 61 6f 6c 2c 64 65 2e 65 6e 67 61 64 67 65 74 2c 64 65 2e 74 65 63 68 63 72 75 6e 63 68 2c 64 65 2e 72 69 76 61 6c 73 2c 64 65 2e 61 75 74 6f 62 6c 6f 67 5d 29 3b 76 61 72 20 67 65 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 76 61 6c 69 64 53 69 74 65 3d 22 76 61 6c 69 64 53 69 74 65 22 7d 28 67 65 7c 7c 28 67 65 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 70 65 3d 22 74 61 62 6f 6f 6c 61 44 65 62 75 67 22 2c 66 65 3d 22 73 63 72 69 70 74 49 64 22 2c 6d 65 3d 60 68 74 74 70 73 3a 2f 2f 63 61 64 6d 75 73 2e 73 63 72 69 70 74 2e 61 63 2f 24 7b 66 65 7d 2f 73 63 72 69 70 74 2e 6a 73 60 2c 62 65 3d 60 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 66 31 30 64 35 30 39 63 2f 24 7b 66 65 7d 2e 6a 73 60 2c 79 65 3d 21 30 2c 45 65 3d 7b 5b 64 Data Ascii: .aol,de.engadget,de.techcrunch,de.rivals,de.autoblog]);var ge;!function(e){e.validSite="validSite"}(ge\|\|(ge={}));const pe="taboolaDebug",fe="scriptId",me=`https://cadmus.script.ac/${fe}/script.js`,be=`https://s.yimg.com/aaq/f10d509c/${fe}.js`,ye=!0,Ee={[d
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 31 39 37 38 30 39 37 31 35 2c 39 38 30 37 35 31 38 34 36 2c 39 38 30 37 35 31 38 34 38 2c 39 38 30 37 35 31 38 35 30 2c 39 38 30 37 35 31 38 32 32 2c 39 38 30 37 35 31 38 34 37 2c 39 38 30 37 35 31 39 32 36 2c 39 38 30 37 35 31 39 32 37 2c 39 38 30 37 35 31 39 32 38 2c 31 31 39 37 38 30 39 38 32 35 2c 31 31 39 37 38 30 39 38 32 36 2c 31 31 39 37 38 30 39 38 32 37 2c 31 31 39 37 38 30 39 38 32 32 2c 39 35 39 35 32 33 38 35 34 2c 39 35 39 35 32 33 38 35 36 2c 31 31 39 37 38 30 39 38 33 37 2c 31 31 39 37 38 30 39 38 33 38 2c 31 31 39 37 38 30 39 38 33 39 2c 31 31 39 37 38 30 39 38 32 38 2c 31 31 39 37 38 30 39 38 32 39 2c 31 31 39 37 38 30 39 38 33 30 2c 31 31 39 37 38 30 39 38 33 32 2c 39 35 39 35 32 33 38 35 33 2c 39 35 39 35 32 33 38 33 39 2c 31 31 39 37 Data Ascii: 197809715,980751846,980751848,980751850,980751822,980751847,980751926,980751927,980751928,1197809825,1197809826,1197809827,1197809822,959523854,959523856,1197809837,1197809838,1197809839,1197809828,1197809829,1197809830,1197809832,959523853,959523839,1197
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 5f 65 6e 67 61 64 67 65 74 5f 6e 65 74 77 6f 72 6b 3d 22 79 61 68 6f 6f 2d 65 6e 67 61 64 67 65 74 2d 6e 65 74 77 6f 72 6b 22 2c 65 2e 79 61 68 6f 6f 74 77 68 6b 5f 6e 65 74 77 6f 72 6b 3d 22 79 61 68 6f 6f 74 77 68 6b 2d 6e 65 74 77 6f 72 6b 22 2c 65 2e 79 61 68 6f 6f 5f 68 70 5f 61 74 74 3d 22 79 61 68 6f 6f 2d 68 70 2d 61 74 74 22 7d 28 49 65 7c 7c 28 49 65 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 76 65 3d 7b 64 65 66 61 75 6c 74 3a 49 65 2e 61 6f 6c 5f 77 65 62 74 65 73 74 2c 5b 67 65 2e 76 61 6c 69 64 53 69 74 65 5d 3a 49 65 2e 76 61 6c 69 64 50 75 62 6c 69 73 68 65 72 49 64 7d 2c 41 65 3d 7b 5f 72 69 64 3a 22 79 72 69 64 22 2c 6c 70 73 74 61 69 64 3a 22 70 73 74 61 69 64 22 2c 70 61 72 74 6e 65 72 3a 22 63 6f 62 72 61 6e 64 22 7d 2c 43 65 3d 5b 6d 2c 62 Data Ascii: _engadget_network="yahoo-engadget-network",e.yahootwhk_network="yahootwhk-network",e.yahoo_hp_att="yahoo-hp-att"}(Ie\|\|(Ie={}));const ve={default:Ie.aol_webtest,[ge.validSite]:Ie.validPublisherId},Ae={_rid:"yrid",lpstaid:"pstaid",partner:"cobrand"},Ce=[m,b
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 72 67 69 6e 50 65 72 63 65 6e 74 3a 35 30 7d 2c 4f 65 3d 22 52 45 4e 44 45 52 5f 53 55 43 43 45 45 44 45 44 22 2c 4e 65 3d 22 52 45 4e 44 45 52 5f 46 41 49 4c 45 44 22 2c 6a 65 3d 22 53 4c 4f 54 5f 52 45 51 55 45 53 54 45 44 22 2c 55 65 3d 22 47 41 4d 5f 41 44 5f 50 41 47 45 5f 4c 4f 41 44 5f 43 4f 4d 50 4c 45 54 45 22 2c 4d 65 3d 22 53 4c 4f 54 5f 52 45 53 50 4f 4e 53 45 5f 52 45 43 45 49 56 45 44 22 2c 7a 65 3d 22 49 4d 50 52 45 53 53 49 4f 4e 5f 56 49 45 57 41 42 4c 45 22 2c 46 65 3d 22 59 50 42 5f 41 44 5f 53 54 41 43 4b 5f 52 45 53 4f 4c 56 45 44 22 2c 78 65 3d 7b 61 6c 6c 6f 77 4f 76 65 72 6c 61 79 45 78 70 61 6e 73 69 6f 6e 3a 21 31 2c 61 6c 6c 6f 77 50 75 73 68 45 78 70 61 6e 73 69 6f 6e 3a 21 31 2c 73 61 6e 64 62 6f 78 3a 21 30 7d 3b 76 61 72 20 Data Ascii: rginPercent:50},Oe="RENDER_SUCCEEDED",Ne="RENDER_FAILED",je="SLOT_REQUESTED",Ue="GAM_AD_PAGE_LOAD_COMPLETE",Me="SLOT_RESPONSE_RECEIVED",ze="IMPRESSION_VIEWABLE",Fe="YPB_AD_STACK_RESOLVED",xe={allowOverlayExpansion:!1,allowPushExpansion:!1,sandbox:!0};var
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 2d 5b 30 2d 39 61 2d 66 5d 7b 34 7d 2d 5b 30 2d 39 61 2d 66 5d 7b 34 7d 2d 5b 30 2d 39 61 2d 66 5d 7b 34 7d 2d 5b 30 2d 39 61 2d 66 5d 7b 31 32 7d 2f 2c 22 22 29 7d 7d 2c 75 73 65 48 69 73 74 6f 72 79 43 68 61 6e 67 65 54 72 69 67 67 65 72 3a 21 30 7d 2c 65 6e 74 69 74 79 49 64 3a 22 77 6e 73 72 76 42 4a 6d 45 50 72 54 66 72 6e 46 58 22 2c 66 6c 6f 6f 72 3a 7b 61 64 64 54 6f 48 61 73 68 4b 65 79 3a 21 31 2c 63 75 72 72 65 6e 63 79 3a 22 55 53 44 22 2c 65 6e 61 62 6c 65 64 3a 21 31 2c 6c 69 6d 69 74 3a 7b 70 65 72 63 65 6e 74 61 67 65 3a 2e 39 35 7d 2c 70 72 65 62 69 64 3a 21 30 2c 70 72 69 63 65 42 75 63 6b 65 74 73 3a 7b 69 6e 63 72 65 6d 65 6e 74 3a 2e 30 31 2c 6d 61 78 3a 31 30 30 2c 6d 69 6e 3a 30 7d 7d 7d 2c 5a 65 3d 5b 22 61 6f 6c 22 2c 22 61 74 74 Data Ascii: -[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,"")}},useHistoryChangeTrigger:!0},entityId:"wnsrvBJmEPrTfrnFX",floor:{addToHashKey:!1,currency:"USD",enabled:!1,limit:{percentage:.95},prebid:!0,priceBuckets:{increment:.01,max:100,min:0}}},Ze=["aol","att
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 29 2c 6f 3d 3d 3d 74 3f 73 3d 61 2d 31 3a 69 3d 61 2b 31 3b 65 6c 73 65 20 69 66 28 22 64 6f 77 6e 22 3d 3d 3d 6e 29 66 6f 72 28 69 3d 65 2e 74 6f 70 2c 73 3d 65 2e 62 6f 74 74 6f 6d 3b 69 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 65 2e 6c 65 66 74 2c 61 29 2c 6f 3d 3d 3d 74 3f 69 3d 61 2b 31 3a 73 3d 61 2d 31 3b 65 6c 73 65 20 69 66 28 22 6c 65 66 74 22 3d 3d 3d 6e 29 66 6f 72 28 69 3d 65 2e 6c 65 66 74 2c 73 3d 65 2e 72 69 67 68 74 3b 69 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2c 65 2e 74 6f 70 29 2c 6f 3d Data Ascii: ),o===t?s=a-1:i=a+1;else if("down"===n)for(i=e.top,s=e.bottom;i<=s;)a=Math.floor((i+s)/2),o=document.elementFromPoint(e.left,a),o===t?i=a+1:s=a-1;else if("left"===n)for(i=e.left,s=e.right;i<=s;)a=Math.floor((i+s)/2),o=document.elementFromPoint(a,e.top),o=
2025-01-14 00:13:12 UTC	1300	IN	Data Raw: 2c 61 3d 79 74 28 7b 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 64 6f 77 6e 22 29 2c 63 3d 79 74 28 7b 62 6f 74 74 6f 6d 3a 61 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 6c 65 66 74 22 29 3b 72 65 74 75 72 6e 28 61 2d 65 29 2a 28 79 74 28 7b 62 6f 74 74 6f 6d 3a 61 2c 6c 65 66 74 3a 63 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 72 69 67 68 74 22 29 2d 63 29 2f 6e 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 30 7d 7d 28 7b 62 6f 74 74 6f 6d 3a 64 2c 6c 65 66 74 3a 72 2c 72 69 67 68 74 3a 61 2c 74 6f 70 3a 63 7d 2c 74 2c 6c 29 3b 72 65 74 75 72 6e 20 65 3e 3d 2e 35 7d 72 65 74 75 72 6e 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 28 74 29 7b 63 Data Ascii: ,a=yt({bottom:s,left:o,right:r,top:e},t,"down"),c=yt({bottom:a,left:o,right:r,top:e},t,"left");return(a-e)*(yt({bottom:a,left:c,right:r,top:e},t,"right")-c)/n}catch(e){return 0}}({bottom:d,left:r,right:a,top:c},t,l);return e>=.5}return!0};function _t(t){c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49808	34.241.10.95	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:12 UTC	753	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2025-01-14 00:13:12 UTC	206	IN	HTTP/1.1 200 OK Connection: close Server: guce Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Date: Tue, 14 Jan 2025 00:13:12 GMT
2025-01-14 00:13:12 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 33 70 72 62 6f 34 35 6a 6f 62 62 30 69 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"3prbo45jobb0i","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49816	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:13 UTC	857	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2my0; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A
2025-01-14 00:13:14 UTC	467	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:13 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cw~2my0;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:13 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:14 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:14 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 30 52 62 6f 4d 61 4e 45 32 75 49 65 57 6b 34 46 4b 61 46 31 5f 62 76 51 68 49 45 78 41 6a 65 59 7e 41 22 7d Data Ascii: {"axid": "y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A"}
2025-01-14 00:13:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 00:13:14 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-14 00:13:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	53372	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:13 UTC	374	OUT	GET /nq/nr/taboolajs/taboola/cmp_utils_1.3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:13 UTC	672	IN	HTTP/1.1 200 OK x-amz-id-2: wY/inYZur8G383cfWuudgt4/bpLFzlTqBmqts5UBbw/Dog0RNpgcFgMqbtMgqvTaZf/Df47Fg4s/7RfaBvQuQQeDEEcl7UYKXbgITuvXKdc= x-amz-request-id: 62NEDYKWXF574JZ0 Date: Sat, 30 Nov 2024 10:07:45 GMT Last-Modified: Tue, 26 Mar 2024 09:41:05 GMT ETag: "42fb6ddad005c2d48b61aea5bd980694" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript; charset=utf8 Content-Length: 2623 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 3852329 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 2f 2a 21 20 c2 a9 20 32 30 32 34 20 59 61 68 6f 6f 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 70 3a 22 22 7d 3b 28 28 29 3d 3e 7b 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 20 6d 75 73 74 20 62 65 20 73 65 74 20 62 65 66 6f 72 65 20 72 75 6e 6e 69 6e 67 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 22 29 0a 20 20 20 20 3b 74 2e 70 3d 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 74 3d 3e 7b 0a 20 20 20 20 66 6f 72 28 76 61 72 20 Data Ascii: /! 2024 Yahoo Holdings, Inc. /(()=>{var t={p:""};(()=>{ if(!window.ymailAssetHost)throw new Error("window.ymailAssetHost must be set before running this application.") ;t.p=window.ymailAssetHost})(),(()=>{"use strict";var t=t=>{ for(var
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 61 6c 53 74 61 74 75 73 26 26 65 28 74 2c 21 30 29 3a 65 28 76 6f 69 64 20 30 2c 21 31 29 0a 20 20 20 20 7d 29 29 7d 29 28 28 28 65 2c 6e 29 3d 3e 7b 28 65 3d 3e 7b 76 61 72 20 6e 2c 72 3b 69 66 28 21 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 29 7b 0a 20 20 20 20 69 66 28 77 69 6e 64 6f 77 3d 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 72 65 74 75 72 6e 20 76 6f 69 64 20 65 28 7b 6d 73 67 3a 22 41 50 49 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 2c 21 31 29 0a 20 20 20 20 3b 6e 3d 74 28 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 29 2c 72 3d 7b 7d 2c 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 3d 28 74 2c 61 2c 65 2c 6f 29 3d 3e 7b 69 66 28 6e 29 7b 76 61 72 20 73 3d 69 28 29 2c 70 3d 7b 0a 20 20 20 20 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d Data Ascii: alStatus&&e(t,!0):e(void 0,!1) }))})(((e,n)=>{(e=>{var n,r;if(!window.__tcfapi){ if(window===window.top)return void e({msg:"API not found"},!1) ;n=t("__tcfapiLocator"),r={},window.__tcfapi=(t,a,e,o)=>{if(n){var s=i(),p={ __tcfapiCall:{comm
2025-01-14 00:13:13 UTC	23	IN	Data Raw: 29 29 0a 20 20 20 20 7d 29 29 7d 29 29 7d 29 28 29 7d 29 28 29 3b 0a Data Ascii: )) }))}))})()})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	53371	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:13 UTC	634	OUT	GET /nq/nr/js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:13 UTC	616	IN	HTTP/1.1 200 OK x-amz-id-2: pTRgFVk3i8t2FdPOZi7XJ3Glpj40LUpbp2e067j88MHX3um1pAqTlskwKMsfUReIJpFzUOzWE2g= x-amz-request-id: 7JCK78PX171G44P3 Date: Fri, 10 Jan 2025 22:30:33 GMT Last-Modified: Fri, 10 Jan 2025 20:48:09 GMT ETag: "a66162b5a3cb7f8cdd34ec0f60b588b0" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=2592000 Accept-Ranges: bytes Content-Type: application/javascript; charset=utf8 Content-Length: 13611 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 265361 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 2f 2a 21 20 c2 a9 20 32 30 32 35 20 59 61 68 6f 6f 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 6a 73 2f 67 70 74 5f 73 61 6e 64 62 6f 78 5f 62 66 65 30 30 34 61 63 64 33 35 32 65 62 39 36 63 39 62 65 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 2e 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 70 3a 22 22 7d 3b 28 28 29 3d 3e 7b 0a 69 66 28 21 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 20 6d 75 73 74 20 62 65 20 73 65 74 20 62 65 66 6f 72 65 20 72 75 6e 6e 69 6e 67 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 Data Ascii: /! 2025 Yahoo Holdings, Inc. For license information, see js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js.LICENSE.txt. /(()=>{var e={p:""};(()=>{if(!window.ymailAssetHost)throw new Error("window.ymailAssetHost must be set before running this applicat
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 5f 6c 69 73 74 22 3b 6c 65 74 20 75 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 65 2e 4c 52 45 43 3d 22 4c 52 45 43 22 2c 0a 65 2e 4c 52 45 43 34 3d 22 4c 52 45 43 34 22 2c 65 2e 4d 4f 4e 3d 22 4d 4f 4e 22 2c 65 2e 53 4b 59 3d 22 53 4b 59 22 2c 65 2e 46 55 4c 4c 5f 50 41 4e 45 3d 22 46 55 4c 4c 5f 50 41 4e 45 22 2c 65 2e 46 55 4c 4c 5f 53 43 52 45 45 4e 3d 22 46 55 4c 4c 5f 53 43 52 45 45 4e 22 2c 0a 65 2e 48 4f 52 49 5a 4f 4e 5f 44 45 53 4b 54 4f 50 3d 22 48 4f 52 49 5a 4f 4e 5f 44 45 53 4b 54 4f 50 22 2c 0a 65 2e 48 4f 52 49 5a 4f 4e 5f 4d 4f 42 49 4c 45 3d 22 48 4f 52 49 5a 4f 4e 5f 4d 4f 42 49 4c 45 22 2c 65 2e 42 49 4c 4c 42 4f 41 52 44 3d 22 42 49 4c 4c 42 4f 41 52 44 22 2c 0a 65 2e 46 4c 55 49 44 3d 22 46 4c 55 49 44 22 2c 65 2e 53 50 4f 54 4c 49 Data Ascii: _list";let u;!function(e){e.LREC="LREC",e.LREC4="LREC4",e.MON="MON",e.SKY="SKY",e.FULL_PANE="FULL_PANE",e.FULL_SCREEN="FULL_SCREEN",e.HORIZON_DESKTOP="HORIZON_DESKTOP",e.HORIZON_MOBILE="HORIZON_MOBILE",e.BILLBOARD="BILLBOARD",e.FLUID="FLUID",e.SPOTLI
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 6e 22 2c 5b 6f 2e 41 4f 4c 5f 4c 4f 47 49 4e 5d 3a 22 61 6f 6c 5f 6c 6f 67 69 6e 22 0a 7d 2c 77 3d 2f 5e 28 68 74 74 70 73 3a 5c 2f 5c 2f 28 5b 61 2d 7a 30 2d 39 2d 5d 2b 5b 2e 5d 29 2a 28 6d 61 69 6c 7c 6c 6f 67 69 6e 29 5c 2e 28 61 6f 6c 7c 79 61 68 6f 6f 29 5c 2e 63 6f 6d 29 24 2f 2c 5f 3d 2f 5e 28 68 74 74 70 73 3a 5c 2f 5c 2f 28 3f 3a 6e 6f 72 72 69 6e 5c 2e 29 3f 28 61 6c 70 68 61 2d 7c 63 61 6e 61 72 79 2d 29 3f 28 67 70 74 7c 67 61 6d 29 5c 2e 6d 61 69 6c 5c 2e 28 61 6f 6c 7c 79 61 68 6f 6f 7c 79 61 68 6f 6f 73 61 6e 64 62 6f 78 29 5c 2e 6e 65 74 29 24 2f 0a 3b 63 6f 6e 73 74 20 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 6c 65 74 7b 6d 6f 64 65 3a 69 2c 61 70 70 4e 61 6d 65 3a 6f 2c 74 61 72 67 65 74 4f 72 69 67 69 6e 3a Data Ascii: n",[o.AOL_LOGIN]:"aol_login"},w=/^(https:\/\/([a-z0-9-]+[.])*(mail\|login)\.(aol\|yahoo)\.com)$/,_=/^(https:\/\/(?:norrin\.)?(alpha-\|canary-)?(gpt\|gam)\.mail\.(aol\|yahoo\|yahoosandbox)\.net)$/;const b=class{constructor(t){let{mode:i,appName:o,targetOrigin:
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 65 28 6e 29 7d 0a 3b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 26 26 28 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 29 2c 0a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 6e 75 6c 6c 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6e 29 2c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 6e 7d 0a 64 65 74 61 63 68 4c 69 73 74 65 6e 65 72 28 29 7b 0a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 26 26 28 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 29 2c 0a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 6e 75 6c 6c Data Ascii: e(n)};this.listener&&(window.removeEventListener("message",this.listener),this.listener=null),window.addEventListener("message",n),this.listener=n}detachListener(){this.listener&&(window.removeEventListener("message",this.listener),this.listener=null
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 3a 6e 2c 6d 65 73 73 61 67 65 43 6c 69 65 6e 74 3a 74 7d 3d 65 3b 6c 65 74 20 69 3b 72 65 74 75 72 6e 20 65 3d 3e 7b 76 61 72 20 73 2c 72 0a 3b 63 6f 6e 73 74 20 6c 3d 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 28 73 3d 65 2e 64 61 74 61 29 3f 76 6f 69 64 20 30 3a 73 2e 69 64 2c 63 3d 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 28 72 3d 65 2e 64 61 74 61 29 3f 76 6f 69 64 20 30 3a 72 2e 73 69 7a 65 2c 45 3d 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6e 61 6d 65 29 21 3d 3d 4f 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 0a 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 74 2c 69 2c 6f 3d 7b 7d 2c 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b Data Ascii: :n,messageClient:t}=e;let i;return e=>{var s,r;const l=null==e\|\|null==(s=e.data)?void 0:s.id,c=null==e\|\|null==(r=e.data)?void 0:r.size,E=(null==e?void 0:e.name)!==O,m=function(e,n){if(null==e)return{};var t,i,o={},s=Object.keys(e);for(i=0;i<s.length;i++
2025-01-14 00:13:13 UTC	1048	IN	Data Raw: 45 44 49 55 4d 5f 52 45 43 54 41 4e 47 4c 45 3f 28 69 26 26 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 69 29 2c 0a 69 3d 28 29 3d 3e 7b 79 28 52 2c 68 29 0a 7d 2c 69 28 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 69 29 29 3a 69 26 26 28 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 69 29 2c 0a 69 3d 6e 75 6c 6c 29 29 2c 74 29 7b 63 6f 6e 73 74 20 65 3d 4d 28 7b 7d 2c 6d 2c 7b 70 6f 73 69 74 69 6f 6e 3a 52 2c 69 73 45 6d 70 74 79 3a 45 2c 73 69 7a 65 3a 63 7d 29 0a 3b 74 2e 73 65 6e 64 52 65 71 75 65 73 74 4d 65 73 73 61 67 65 28 64 2e 53 4c 4f 54 5f 52 45 4e 44 45 52 5f Data Ascii: EDIUM_RECTANGLE?(i&&window.removeEventListener("resize",i),i=()=>{y(R,h)},i(),window.addEventListener("resize",i)):i&&(window.removeEventListener("resize",i),i=null)),t){const e=M({},m,{position:R,isEmpty:E,size:c});t.sendRequestMessage(d.SLOT_RENDER_
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 69 6e 53 75 62 63 61 74 65 67 6f 72 79 3a 73 3d 22 22 7d 3d 65 0a 3b 69 66 28 6e 3d 3d 3d 45 29 7b 72 65 74 75 72 6e 7b 6c 6f 63 3a 22 22 2b 63 2b 28 31 3d 3d 3d 74 7c 7c 21 74 3f 22 22 3a 22 5f 22 2b 74 29 2c 72 69 3a 22 31 22 7d 7d 72 65 74 75 72 6e 20 4d 28 7b 7d 2c 69 3f 7b 0a 73 65 6e 64 65 72 64 6f 6d 61 69 6e 3a 69 7d 3a 6e 75 6c 6c 2c 6f 3f 7b 73 65 6e 64 65 72 64 6f 6d 61 69 6e 63 61 74 65 67 6f 72 79 3a 6f 7d 3a 6e 75 6c 6c 2c 73 3f 7b 0a 73 65 6e 64 65 72 64 6f 6d 61 69 6e 73 75 62 63 61 74 65 67 6f 72 79 3a 73 7d 3a 6e 75 6c 6c 2c 7b 6c 6f 63 3a 6e 2c 72 69 3a 22 31 22 7d 29 7d 2c 46 3d 65 3d 3e 7b 0a 63 6f 6e 73 74 20 6e 3d 65 2e 70 6f 73 69 74 69 6f 6e 73 7c 7c 5b 5d 2c 7b 73 65 6e 64 65 72 4d 61 74 63 68 65 64 50 72 65 6d 69 75 6d 44 6f 6d Data Ascii: inSubcategory:s=""}=e;if(n===E){return{loc:""+c+(1===t\|\|!t?"":"_"+t),ri:"1"}}return M({},i?{senderdomain:i}:null,o?{senderdomaincategory:o}:null,s?{senderdomainsubcategory:s}:null,{loc:n,ri:"1"})},F=e=>{const n=e.positions\|\|[],{senderMatchedPremiumDom
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 68 69 64 64 65 6e 22 29 2c 76 6f 69 64 20 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 0a 7d 29 29 7d 2c 6b 3d 65 3d 3e 7b 76 61 72 20 6e 3b 63 6f 6e 73 74 7b 6f 6c 64 50 6f 73 69 74 69 6f 6e 73 3a 74 2c 72 65 6d 6f 76 65 43 6f 6e 74 61 69 6e 65 72 73 3a 69 3d 21 30 7d 3d 65 2c 6f 3d 74 2e 6d 61 70 28 28 65 3d 3e 7b 0a 6c 65 74 7b 64 69 76 3a 6e 7d 3d 65 3b 72 65 74 75 72 6e 20 6e 7d 29 29 3b 6e 75 6c 6c 3d 3d 28 6e 3d 77 69 6e 64 6f 77 2e 62 65 6e 6a 69 29 7c 7c 6e 2e 64 65 73 74 72 6f 79 28 6f 29 2c 69 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 5b 5d 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 76 61 72 20 6e Data Ascii: hidden"),void s.appendChild(o)}document.body.appendChild(o)}}))},k=e=>{var n;const{oldPositions:t,removeContainers:i=!0}=e,o=t.map((e=>{let{div:n}=e;return n}));null==(n=window.benji)\|\|n.destroy(o),i&&function(e){void 0===e&&(e=[]),e.forEach((e=>{var n
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 22 2c 64 65 76 69 63 65 3a 43 3d 22 22 2c 72 65 67 69 6f 6e 3a 44 3d 22 22 2c 6c 61 6e 67 3a 79 3d 22 22 2c 73 70 61 63 65 49 64 3a 4e 3d 22 22 2c 41 58 49 64 3a 53 3d 22 22 2c 41 58 49 64 73 3a 42 3d 22 22 2c 75 64 3a 54 2c 75 62 69 64 3a 55 2c 74 62 6c 61 49 64 3a 6b 3d 22 22 2c 61 64 42 6c 6f 63 6b 65 72 3a 47 3d 22 22 2c 73 65 6e 64 65 72 44 6f 6d 61 69 6e 3a 48 2c 73 65 6e 64 65 72 4b 61 6d 69 6e 6f 4c 65 76 65 6c 31 3a 56 2c 73 65 6e 64 65 72 4b 61 6d 69 6e 6f 4c 65 76 65 6c 32 3a 4b 2c 64 6d 69 43 6f 6e 73 65 6e 74 3a 78 2c 70 61 72 74 6e 65 72 3a 71 3d 22 22 7d 3d 73 2c 7b 62 75 63 6b 65 74 73 3a 59 3d 5b 5d 2c 63 6f 62 72 61 6e 64 3a 7a 3d 22 22 2c 64 76 33 36 30 3a 57 3d 22 22 7d 3d 72 2c 5a 3d 76 5b 74 5d 7c 7c 76 5b 6f 2e 4d 41 49 4c 5d 0a 3b Data Ascii: ",device:C="",region:D="",lang:y="",spaceId:N="",AXId:S="",AXIds:B="",ud:T,ubid:U,tblaId:k="",adBlocker:G="",senderDomain:H,senderKaminoLevel1:V,senderKaminoLevel2:K,dmiConsent:x,partner:q=""}=s,{buckets:Y=[],cobrand:z="",dv360:W=""}=r,Z=v[t]\|\|v[o.MAIL];
2025-01-14 00:13:13 UTC	1300	IN	Data Raw: 3d 28 74 3d 77 69 6e 64 6f 77 2e 62 65 6e 6a 69 29 26 26 74 2e 69 73 52 65 61 64 79 3f 42 28 7b 63 6c 69 65 6e 74 3a 72 2c 62 65 6e 6a 69 3a 77 69 6e 64 6f 77 2e 62 65 6e 6a 69 2c 0a 6d 65 73 73 61 67 65 43 6c 69 65 6e 74 3a 45 7d 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 6e 6a 69 3a 72 65 61 64 79 22 2c 28 28 29 3d 3e 7b 42 28 7b 63 6c 69 65 6e 74 3a 72 2c 0a 62 65 6e 6a 69 3a 77 69 6e 64 6f 77 2e 62 65 6e 6a 69 2c 6d 65 73 73 61 67 65 43 6c 69 65 6e 74 3a 45 7d 29 7d 29 29 2c 45 2e 61 74 74 61 63 68 4c 69 73 74 65 6e 65 72 28 28 65 3d 3e 7b 76 61 72 20 6e 0a 3b 69 66 28 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 28 6e 3d 65 2e 64 61 74 61 29 3f 76 6f 69 64 20 30 3a 6e 2e 6e 61 6d 65 29 3d 3d 3d 69 2e 52 Data Ascii: =(t=window.benji)&&t.isReady?B({client:r,benji:window.benji,messageClient:E}):window.addEventListener("benji:ready",(()=>{B({client:r,benji:window.benji,messageClient:E})})),E.attachListener((e=>{var n;if((null==e\|\|null==(n=e.data)?void 0:n.name)===i.R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49815	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:13 UTC	1073	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2my0; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A
2025-01-14 00:13:14 UTC	587	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:13 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://login.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:13 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:14 UTC	4	IN	Data Raw: 33 63 0d 0a Data Ascii: 3c
2025-01-14 00:13:14 UTC	60	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 65 53 31 4a 56 56 67 75 63 6b 77 35 52 54 4a 31 52 33 4a 4c 5a 47 4a 42 4f 44 4e 4c 55 31 4d 33 59 55 68 4c 61 48 56 44 52 6e 68 34 58 33 35 42 22 7d Data Ascii: {"axid": "eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B"}
2025-01-14 00:13:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 00:13:14 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-14 00:13:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	53373	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:13 UTC	359	OUT	GET /aaq/benji/benji-2.2.29.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:14 UTC	679	IN	HTTP/1.1 200 OK x-amz-id-2: IqDgcN7BovC8h3RiGwFVDnVg9gb4ViKYgdoF9q7CLstNAPS/BT7a/g2nA/ojNC3Woile31M2FZg= x-amz-request-id: HN5GR2B57CJVDBQN Date: Wed, 08 Jan 2025 21:42:49 GMT Last-Modified: Wed, 08 Jan 2025 20:32:56 GMT ETag: "eb77e519f9ed8e141ab475af8f0a3614" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: mPaqgNFqPMhjFJvKY0X7kIiaiHNVS5rl Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 103748 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 441026 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 61 73 73 65 72 74 69 76 65 3a 7b 7d 2c 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 70 62 6a 73 3a 7b 71 75 65 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 7c 7c 28 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 2e 6d 61 70 28 28 65 3d 3e 65 2e 74 68 65 6e 28 28 65 3d 3e 28 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 29 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 28 7b 72 Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{assertive:{},benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({r
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 31 33 33 30 22 3a 5b 34 30 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 31 5d 7d 2c 4c 69 67 68 74 68 6f 75 73 65 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 49 6e 66 69 6e 69 74 79 22 3a 5b 39 2c 31 36 5d 7d 2c 73 69 7a 65 3a 5b 32 2c 32 5d 7d 2c 53 6d 61 72 74 41 73 73 65 74 57 69 64 67 65 74 4c 61 72 67 65 3a 7b 73 69 7a 65 3a 5b 38 30 30 2c 36 33 35 5d 7d 2c 53 70 6f 74 6c 69 67 68 74 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 34 38 30 22 3a 5b 38 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 32 5d 7d 2c 54 72 61 64 65 4e 6f 77 3a 7b 73 69 7a 65 3a 5b 32 38 30 2c 35 35 5d 7d 7d 2c 52 3d 7b 22 5b 31 34 34 30 2c 31 30 32 34 5d 22 3a 22 4c 6f 67 69 6e 22 2c 22 5b 32 2c 32 5d 22 3a 22 4c 69 67 68 74 68 6f 75 73 65 22 2c 22 5b 32 38 30 2c 35 35 5d Data Ascii: 1330":[40,9]},size:[3,1]},Lighthouse:{breakpoints:{"0,Infinity":[9,16]},size:[2,2]},SmartAssetWidgetLarge:{size:[800,635]},Spotlight:{breakpoints:{"0,480":[8,9]},size:[3,2]},TradeNow:{size:[280,55]}},R={"[1440,1024]":"Login","[2,2]":"Lighthouse","[280,55]
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 7a 65 64 41 64 73 3a 21 30 7d 2c 74 65 3d 7b 41 64 58 3a 5b 35 32 38 35 38 31 32 32 31 38 5d 2c 48 6f 75 73 65 3a 5b 35 32 38 36 38 34 33 37 36 32 2c 35 33 33 35 32 35 32 32 32 38 5d 2c 59 61 68 6f 6f 50 72 65 62 69 64 3a 5b 35 34 36 32 36 31 37 31 39 31 5d 7d 2c 6e 65 3d 22 62 65 6e 6a 69 3a 72 65 6e 64 65 72 22 2c 69 65 3d 22 62 65 6e 6a 69 3a 6d 6f 75 6e 74 65 64 22 2c 73 65 3d 22 62 65 6e 6a 69 3a 72 65 61 64 79 22 2c 6f 65 3d 22 74 61 62 46 6f 63 75 73 22 2c 72 65 3d 22 75 73 65 72 41 63 74 69 6f 6e 22 2c 61 65 3d 7b 61 6f 6c 3a 22 61 6f 6c 22 2c 61 74 74 3a 22 61 74 74 22 2c 62 69 7a 6d 61 69 6c 3a 22 62 69 7a 6d 61 69 6c 22 2c 66 72 6f 6e 74 69 65 72 3a 22 66 72 6f 6e 74 69 65 72 22 2c 66 74 72 3a 22 66 72 6f 6e 74 69 65 72 22 2c 72 6f 67 65 72 73 Data Ascii: zedAds:!0},te={AdX:[5285812218],House:[5286843762,5335252228],YahooPrebid:[5462617191]},ne="benji:render",ie="benji:mounted",se="benji:ready",oe="tabFocus",re="userAction",ae={aol:"aol",att:"att",bizmail:"bizmail",frontier:"frontier",ftr:"frontier",rogers
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 2e 61 6f 6c 2c 64 65 2e 65 6e 67 61 64 67 65 74 2c 64 65 2e 74 65 63 68 63 72 75 6e 63 68 2c 64 65 2e 72 69 76 61 6c 73 2c 64 65 2e 61 75 74 6f 62 6c 6f 67 5d 29 3b 76 61 72 20 67 65 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 76 61 6c 69 64 53 69 74 65 3d 22 76 61 6c 69 64 53 69 74 65 22 7d 28 67 65 7c 7c 28 67 65 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 70 65 3d 22 74 61 62 6f 6f 6c 61 44 65 62 75 67 22 2c 66 65 3d 22 73 63 72 69 70 74 49 64 22 2c 6d 65 3d 60 68 74 74 70 73 3a 2f 2f 63 61 64 6d 75 73 2e 73 63 72 69 70 74 2e 61 63 2f 24 7b 66 65 7d 2f 73 63 72 69 70 74 2e 6a 73 60 2c 62 65 3d 60 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 66 31 30 64 35 30 39 63 2f 24 7b 66 65 7d 2e 6a 73 60 2c 79 65 3d 21 30 2c 45 65 3d 7b 5b 64 Data Ascii: .aol,de.engadget,de.techcrunch,de.rivals,de.autoblog]);var ge;!function(e){e.validSite="validSite"}(ge\|\|(ge={}));const pe="taboolaDebug",fe="scriptId",me=`https://cadmus.script.ac/${fe}/script.js`,be=`https://s.yimg.com/aaq/f10d509c/${fe}.js`,ye=!0,Ee={[d
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 31 39 37 38 30 39 37 31 35 2c 39 38 30 37 35 31 38 34 36 2c 39 38 30 37 35 31 38 34 38 2c 39 38 30 37 35 31 38 35 30 2c 39 38 30 37 35 31 38 32 32 2c 39 38 30 37 35 31 38 34 37 2c 39 38 30 37 35 31 39 32 36 2c 39 38 30 37 35 31 39 32 37 2c 39 38 30 37 35 31 39 32 38 2c 31 31 39 37 38 30 39 38 32 35 2c 31 31 39 37 38 30 39 38 32 36 2c 31 31 39 37 38 30 39 38 32 37 2c 31 31 39 37 38 30 39 38 32 32 2c 39 35 39 35 32 33 38 35 34 2c 39 35 39 35 32 33 38 35 36 2c 31 31 39 37 38 30 39 38 33 37 2c 31 31 39 37 38 30 39 38 33 38 2c 31 31 39 37 38 30 39 38 33 39 2c 31 31 39 37 38 30 39 38 32 38 2c 31 31 39 37 38 30 39 38 32 39 2c 31 31 39 37 38 30 39 38 33 30 2c 31 31 39 37 38 30 39 38 33 32 2c 39 35 39 35 32 33 38 35 33 2c 39 35 39 35 32 33 38 33 39 2c 31 31 39 37 Data Ascii: 197809715,980751846,980751848,980751850,980751822,980751847,980751926,980751927,980751928,1197809825,1197809826,1197809827,1197809822,959523854,959523856,1197809837,1197809838,1197809839,1197809828,1197809829,1197809830,1197809832,959523853,959523839,1197
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 5f 65 6e 67 61 64 67 65 74 5f 6e 65 74 77 6f 72 6b 3d 22 79 61 68 6f 6f 2d 65 6e 67 61 64 67 65 74 2d 6e 65 74 77 6f 72 6b 22 2c 65 2e 79 61 68 6f 6f 74 77 68 6b 5f 6e 65 74 77 6f 72 6b 3d 22 79 61 68 6f 6f 74 77 68 6b 2d 6e 65 74 77 6f 72 6b 22 2c 65 2e 79 61 68 6f 6f 5f 68 70 5f 61 74 74 3d 22 79 61 68 6f 6f 2d 68 70 2d 61 74 74 22 7d 28 49 65 7c 7c 28 49 65 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 76 65 3d 7b 64 65 66 61 75 6c 74 3a 49 65 2e 61 6f 6c 5f 77 65 62 74 65 73 74 2c 5b 67 65 2e 76 61 6c 69 64 53 69 74 65 5d 3a 49 65 2e 76 61 6c 69 64 50 75 62 6c 69 73 68 65 72 49 64 7d 2c 41 65 3d 7b 5f 72 69 64 3a 22 79 72 69 64 22 2c 6c 70 73 74 61 69 64 3a 22 70 73 74 61 69 64 22 2c 70 61 72 74 6e 65 72 3a 22 63 6f 62 72 61 6e 64 22 7d 2c 43 65 3d 5b 6d 2c 62 Data Ascii: _engadget_network="yahoo-engadget-network",e.yahootwhk_network="yahootwhk-network",e.yahoo_hp_att="yahoo-hp-att"}(Ie\|\|(Ie={}));const ve={default:Ie.aol_webtest,[ge.validSite]:Ie.validPublisherId},Ae={_rid:"yrid",lpstaid:"pstaid",partner:"cobrand"},Ce=[m,b
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 72 67 69 6e 50 65 72 63 65 6e 74 3a 35 30 7d 2c 4f 65 3d 22 52 45 4e 44 45 52 5f 53 55 43 43 45 45 44 45 44 22 2c 4e 65 3d 22 52 45 4e 44 45 52 5f 46 41 49 4c 45 44 22 2c 6a 65 3d 22 53 4c 4f 54 5f 52 45 51 55 45 53 54 45 44 22 2c 55 65 3d 22 47 41 4d 5f 41 44 5f 50 41 47 45 5f 4c 4f 41 44 5f 43 4f 4d 50 4c 45 54 45 22 2c 4d 65 3d 22 53 4c 4f 54 5f 52 45 53 50 4f 4e 53 45 5f 52 45 43 45 49 56 45 44 22 2c 7a 65 3d 22 49 4d 50 52 45 53 53 49 4f 4e 5f 56 49 45 57 41 42 4c 45 22 2c 46 65 3d 22 59 50 42 5f 41 44 5f 53 54 41 43 4b 5f 52 45 53 4f 4c 56 45 44 22 2c 78 65 3d 7b 61 6c 6c 6f 77 4f 76 65 72 6c 61 79 45 78 70 61 6e 73 69 6f 6e 3a 21 31 2c 61 6c 6c 6f 77 50 75 73 68 45 78 70 61 6e 73 69 6f 6e 3a 21 31 2c 73 61 6e 64 62 6f 78 3a 21 30 7d 3b 76 61 72 20 Data Ascii: rginPercent:50},Oe="RENDER_SUCCEEDED",Ne="RENDER_FAILED",je="SLOT_REQUESTED",Ue="GAM_AD_PAGE_LOAD_COMPLETE",Me="SLOT_RESPONSE_RECEIVED",ze="IMPRESSION_VIEWABLE",Fe="YPB_AD_STACK_RESOLVED",xe={allowOverlayExpansion:!1,allowPushExpansion:!1,sandbox:!0};var
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 2d 5b 30 2d 39 61 2d 66 5d 7b 34 7d 2d 5b 30 2d 39 61 2d 66 5d 7b 34 7d 2d 5b 30 2d 39 61 2d 66 5d 7b 34 7d 2d 5b 30 2d 39 61 2d 66 5d 7b 31 32 7d 2f 2c 22 22 29 7d 7d 2c 75 73 65 48 69 73 74 6f 72 79 43 68 61 6e 67 65 54 72 69 67 67 65 72 3a 21 30 7d 2c 65 6e 74 69 74 79 49 64 3a 22 77 6e 73 72 76 42 4a 6d 45 50 72 54 66 72 6e 46 58 22 2c 66 6c 6f 6f 72 3a 7b 61 64 64 54 6f 48 61 73 68 4b 65 79 3a 21 31 2c 63 75 72 72 65 6e 63 79 3a 22 55 53 44 22 2c 65 6e 61 62 6c 65 64 3a 21 31 2c 6c 69 6d 69 74 3a 7b 70 65 72 63 65 6e 74 61 67 65 3a 2e 39 35 7d 2c 70 72 65 62 69 64 3a 21 30 2c 70 72 69 63 65 42 75 63 6b 65 74 73 3a 7b 69 6e 63 72 65 6d 65 6e 74 3a 2e 30 31 2c 6d 61 78 3a 31 30 30 2c 6d 69 6e 3a 30 7d 7d 7d 2c 5a 65 3d 5b 22 61 6f 6c 22 2c 22 61 74 74 Data Ascii: -[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,"")}},useHistoryChangeTrigger:!0},entityId:"wnsrvBJmEPrTfrnFX",floor:{addToHashKey:!1,currency:"USD",enabled:!1,limit:{percentage:.95},prebid:!0,priceBuckets:{increment:.01,max:100,min:0}}},Ze=["aol","att
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 29 2c 6f 3d 3d 3d 74 3f 73 3d 61 2d 31 3a 69 3d 61 2b 31 3b 65 6c 73 65 20 69 66 28 22 64 6f 77 6e 22 3d 3d 3d 6e 29 66 6f 72 28 69 3d 65 2e 74 6f 70 2c 73 3d 65 2e 62 6f 74 74 6f 6d 3b 69 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 65 2e 6c 65 66 74 2c 61 29 2c 6f 3d 3d 3d 74 3f 69 3d 61 2b 31 3a 73 3d 61 2d 31 3b 65 6c 73 65 20 69 66 28 22 6c 65 66 74 22 3d 3d 3d 6e 29 66 6f 72 28 69 3d 65 2e 6c 65 66 74 2c 73 3d 65 2e 72 69 67 68 74 3b 69 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2c 65 2e 74 6f 70 29 2c 6f 3d Data Ascii: ),o===t?s=a-1:i=a+1;else if("down"===n)for(i=e.top,s=e.bottom;i<=s;)a=Math.floor((i+s)/2),o=document.elementFromPoint(e.left,a),o===t?i=a+1:s=a-1;else if("left"===n)for(i=e.left,s=e.right;i<=s;)a=Math.floor((i+s)/2),o=document.elementFromPoint(a,e.top),o=
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 2c 61 3d 79 74 28 7b 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 64 6f 77 6e 22 29 2c 63 3d 79 74 28 7b 62 6f 74 74 6f 6d 3a 61 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 6c 65 66 74 22 29 3b 72 65 74 75 72 6e 28 61 2d 65 29 2a 28 79 74 28 7b 62 6f 74 74 6f 6d 3a 61 2c 6c 65 66 74 3a 63 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 72 69 67 68 74 22 29 2d 63 29 2f 6e 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 30 7d 7d 28 7b 62 6f 74 74 6f 6d 3a 64 2c 6c 65 66 74 3a 72 2c 72 69 67 68 74 3a 61 2c 74 6f 70 3a 63 7d 2c 74 2c 6c 29 3b 72 65 74 75 72 6e 20 65 3e 3d 2e 35 7d 72 65 74 75 72 6e 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 28 74 29 7b 63 Data Ascii: ,a=yt({bottom:s,left:o,right:r,top:e},t,"down"),c=yt({bottom:a,left:o,right:r,top:e},t,"left");return(a-e)*(yt({bottom:a,left:c,right:r,top:e},t,"right")-c)/n}catch(e){return 0}}({bottom:d,left:r,right:a,top:c},t,l);return e>=.5}return!0};function _t(t){c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49811	142.250.185.98	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:13 UTC	713	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:14 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Tue, 14 Jan 2025 00:13:14 GMT Expires: Tue, 14 Jan 2025 00:13:14 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 215 / 20102 / m202501070101 / config-hash: 351499629298614181 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 111107 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 00:13:14 UTC	605	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 70 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=type
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 75 3d 7b 7d 2c 66 61 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 66 61 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 2c 77 3d 66 75 6e 63 74 Data Ascii: c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",u={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=funct
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 76 28 75 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 69 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 28 Data Ascii: unction(){return ha(aa(this))}})}return a},"es6");var ha=function(a){a={next:a};a[v(u.Symbol,"iterator")]=function(){return this};return a},ia=typeof Object.create=="function"?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if(
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 71 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 72 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d Data Ascii: (a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)qa(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ra},"es6");var sa=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c]
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 29 3f 64 65 6c 65 74 65 20 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 66 7d 2c 22 65 73 36 22 29 3b 77 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 76 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 79 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6c 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6c 2e 73 69 7a 65 21 3d 31 7c 7c 6c 2e Data Ascii: )?delete g[d][this.g]:!1};return f},"es6");w("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!v(a.prototype,"entries")\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),l=new a(y([[h,"s"]]));if(l.get(h)!="s"\|\|l.size!=1\|\|l.
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6b 3d 76 28 74 68 69 73 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 71 3b 21 28 71 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 71 3d 71 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6c 2c 71 5b 31 5d 2c 71 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b Data Ascii: rn e(this,function(h){return h.key})};c.prototype.values=function(){return e(this,function(h){return h.value})};c.prototype.forEach=function(h,l){for(var k=v(this,"entries").call(this),q;!(q=k.next()).done;)q=q.value,h.call(l,q[1],q[0],this)};c.prototype[
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 3d 3d 3d 30 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 63 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 Data Ascii: done;)this.add(d.value)}this.size=this.g.size};b.prototype.add=function(c){c=c===0?0:c;this.g.set(c,c);this.size=this.g.size;return this};b.prototype.delete=function(c){c=this.g.delete(c);this.size=this.g.size;return c};b.prototype.clear=function(){this.g
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 61 28 74 68 69 73 2c 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 21 3d 3d 2d 31 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 74 Data Ascii: ar expression");return a+""};w("String.prototype.includes",function(a){return a?a:function(b,c){return ta(this,b,"includes").indexOf(b,c\|\|0)!==-1}},"es6");w("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var e=[],f=t
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 76 28 75 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 Data Ascii: rn!1;return g>=f}},"es6");var ua=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[v(u.Symbol,"iterator")]=function(){return e};ret
2025-01-14 00:13:14 UTC	1390	IN	Data Raw: 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 42 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 42 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 20 62 21 3d 22 6f 62 6a 65 63 74 22 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c Data Ascii: thors. SPDX-License-Identifier: Apache-2.0 */ var B=this\|\|self,va=function(a){a=a.split(".");for(var b=B,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},xa=function(a){var b=typeof a;return b!="object"?b:a?Array.isArray(a)?"array":b:"nul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	53379	104.18.22.145	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	613	OUT	GET /d1tqrs7vz94d9k/script.js HTTP/1.1 Host: cadmus.script.ac Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:14 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:14 GMT Content-Type: application/javascript Content-Length: 162846 Connection: close Age: 0 Cache-Control: public,max-age=600,stale-while-revalidate=3600,stale-if-error=86400 ETag: W/"5707aff805441b04818025d7451573433422aedb" Last-Modified: Mon, 13 Jan 2025 14:24:49 GMT Server: cloudflare CF-RAY: 90196b45eab5efa7-EWR
2025-01-14 00:13:14 UTC	992	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 5b 27 43 32 6e 59 41 78 62 30 43 57 3d 3d 27 2c 27 74 4b 7a 6f 27 2c 27 41 77 35 50 44 61 3d 3d 27 2c 27 79 77 6a 56 44 78 71 36 79 4d 58 48 42 4d 53 3d 27 2c 27 6a 4e 75 39 27 2c 27 69 67 4c 55 69 61 3d 3d 27 2c 27 45 68 62 54 27 2c 27 70 73 48 43 7a 63 53 50 78 68 6d 3d 27 2c 27 79 32 7a 4e 6c 77 76 32 79 77 57 3d 27 2c 27 71 4b 39 65 77 71 3d 3d 27 2c 27 44 77 35 5a 41 67 4c 4d 44 61 3d 3d 27 2c 27 63 49 61 47 69 63 62 48 44 63 62 48 79 4d 39 31 44 64 50 5a 43 4d 6e 4b 42 32 6d 36 27 2c 27 41 68 72 30 43 68 6d 36 27 2c 27 69 68 57 47 43 33 72 48 79 32 53 36 69 61 3d 3d 27 2c 27 41 77 31 4e 77 32 66 53 44 66 30 53 69 68 6e 57 79 77 35 42 44 67 4c 30 42 67 76 44 27 2c 27 43 32 39 59 44 61 Data Ascii: (new function(){var c=['C2nYAxb0CW==','tKzo','Aw5PDa==','ywjVDxq6yMXHBMS=','jNu9','igLUia==','EhbT','psHCzcSPxhm=','y2zNlwv2ywW=','qK9ewq==','Dw5ZAgLMDa==','cIaGicbHDcbHyM91DdPZCMnKB2m6','Ahr0Chm6','ihWGC3rHy2S6ia==','Aw1Nw2fSDf0SihnWyw5BDgL0BgvD','C29YDa
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 27 2c 27 74 75 58 71 6c 4c 62 63 73 4c 6d 3d 27 2c 27 44 68 6a 48 79 32 76 4b 27 2c 27 41 68 72 54 42 65 72 48 44 67 65 3d 27 2c 27 42 4d 66 32 41 77 44 48 44 67 75 3d 27 2c 27 77 30 76 46 71 31 6e 71 78 73 61 3d 27 2c 27 42 78 76 30 7a 77 71 47 27 2c 27 79 77 6e 30 41 77 39 55 74 67 39 4e 72 67 66 30 79 71 3d 3d 27 2c 27 41 77 71 39 27 2c 27 43 32 76 55 7a 61 3d 3d 27 2c 27 42 4d 39 4b 7a 76 72 35 43 67 75 3d 27 2c 27 43 32 76 30 76 67 4c 54 7a 77 39 31 44 61 3d 3d 27 2c 27 73 66 72 6e 74 66 6e 4a 43 4d 4c 57 44 65 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 7a 4e 6a 56 42 75 6e 4f 79 78 6a 64 42 32 72 4c 27 2c 27 42 4d 66 32 41 77 44 48 44 67 4c 56 42 47 3d 3d 27 2c 27 44 67 39 74 44 68 6a 50 42 4d 43 3d 27 2c 27 79 78 62 50 71 78 76 30 42 33 62 53 79 78 4b Data Ascii: ','tuXqlLbcsLm=','DhjHy2vK','AhrTBerHDge=','BMf2AwDHDgu=','w0vFq1nqxsa=','Bxv0zwqG','ywn0Aw9Utg9Nrgf0yq==','Awq9','C2vUza==','BM9Kzvr5Cgu=','C2v0vgLTzw91Da==','sfrntfnJCMLWDevSzw1LBNq=','zNjVBunOyxjdB2rL','BMf2AwDHDgLVBG==','Dg9tDhjPBMC=','yxbPqxv0B3bSyxK
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 53 27 2c 27 43 67 66 59 7a 77 35 30 74 4d 39 4b 7a 71 3d 3d 27 2c 27 7a 78 7a 30 6c 77 48 59 44 57 3d 3d 27 2c 27 72 65 4c 77 27 2c 27 6a 49 6d 5a 6f 74 53 3d 27 2c 27 7a 67 76 53 7a 78 72 4c 27 2c 27 41 4e 6e 56 42 47 3d 3d 27 2c 27 72 32 39 30 79 32 48 48 27 2c 27 7a 4e 6a 48 42 77 76 74 43 4d 6d 3d 27 2c 27 6f 59 62 5a 79 33 6a 50 43 68 71 54 43 33 6a 4a 69 63 44 55 42 32 35 4a 7a 73 30 3d 27 2c 27 7a 67 4c 59 27 2c 27 74 49 39 62 27 2c 27 43 32 66 4d 7a 75 7a 59 79 77 31 4c 27 2c 27 77 30 76 73 75 4c 39 6e 78 30 4c 65 77 66 30 3d 27 2c 27 43 67 76 59 7a 4d 39 59 42 77 66 55 79 32 75 3d 27 2c 27 69 4c 30 55 43 68 76 30 69 68 58 38 69 67 7a 31 42 4d 6e 30 41 77 39 55 6b 67 48 30 42 77 57 50 69 68 53 47 7a 67 39 4a 44 77 31 4c 42 4e 71 55 44 33 6a 50 44 Data Ascii: S','CgfYzw50tM9Kzq==','zxz0lwHYDW==','reLw','jImZotS=','zgvSzxrL','ANnVBG==','r290y2HH','zNjHBwvtCMm=','oYbZy3jPChqTC3jJicDUB25Jzs0=','zgLY','tI9b','C2fMzuzYyw1L','w0vsuL9nx0Lewf0=','CgvYzM9YBwfUy2u=','iL0UChv0ihX8igz1BMn0Aw9UkgH0BwWPihSGzg9JDw1LBNqUD3jPD
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 76 31 6e 79 74 59 61 56 69 61 3d 3d 27 2c 27 43 4d 76 30 44 78 6a 55 69 63 61 4b 43 68 48 35 27 2c 27 79 32 4c 4b 27 2c 27 43 32 76 30 75 68 6a 56 44 67 39 30 45 78 62 4c 74 32 79 3d 27 2c 27 73 66 72 6e 74 65 72 56 79 33 76 54 7a 77 35 30 6c 4d 4c 55 41 4d 76 4a 44 61 3d 3d 27 2c 27 44 67 39 6d 42 33 44 4c 43 4b 6e 48 43 32 75 3d 27 2c 27 74 76 6e 6a 72 71 3d 3d 27 2c 27 73 66 72 6e 74 65 31 4c 7a 67 4c 48 72 77 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 6b 67 35 31 42 67 57 53 27 2c 27 69 49 61 54 70 73 61 3d 27 2c 27 6c 63 62 4a 44 77 75 36 69 61 3d 3d 27 2c 27 76 32 76 49 75 32 39 4a 41 32 76 30 27 2c 27 7a 4e 6a 56 42 71 3d 3d 27 2c 27 71 4d 4c 4b 71 77 72 48 43 68 72 4c 43 47 3d 3d 27 2c 27 41 67 76 48 7a 67 76 59 Data Ascii: XLBwvUDa==','v1nytYaVia==','CMv0DxjUicaKChH5','y2LK','C2v0uhjVDg90ExbLt2y=','sfrnterVy3vTzw50lMLUAMvJDa==','Dg9mB3DLCKnHC2u=','tvnjrq==','sfrnte1LzgLHrwXLBwvUDa==','kg51BgWS','iIaTpsa=','lcbJDwu6ia==','v2vIu29JA2v0','zNjVBq==','qMLKqwrHChrLCG==','AgvHzgvY
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 30 43 47 3d 3d 27 2c 27 79 32 48 48 43 4b 6e 56 7a 67 76 62 44 61 3d 3d 27 2c 27 7a 78 7a 30 6c 77 47 35 41 32 53 3d 27 2c 27 41 4e 6e 30 45 4d 39 4d 7a 4e 6e 4c 44 61 3d 3d 27 2c 27 42 77 39 36 73 77 35 55 7a 78 6a 74 79 33 6a 4c 7a 77 35 79 27 2c 27 70 68 6a 4a 44 64 35 33 41 77 71 39 27 2c 27 43 4d 76 55 7a 67 76 59 71 4d 58 56 79 32 54 50 42 4d 44 74 44 67 66 30 44 78 6d 3d 27 2c 27 43 4d 76 51 7a 77 6e 30 27 2c 27 43 4d 76 48 7a 68 4c 74 44 67 66 30 7a 71 3d 3d 27 2c 27 71 78 6a 59 79 78 4b 3d 27 2c 27 7a 4d 4c 59 43 33 72 66 42 67 76 54 7a 77 35 30 71 32 48 50 42 67 71 3d 27 2c 27 74 4d 39 4b 7a 71 3d 3d 27 2c 27 43 67 66 4e 7a 77 48 50 7a 67 75 3d 27 2c 27 7a 4d 4c 34 7a 77 71 3d 27 2c 27 42 4d 39 4b 7a 75 35 48 42 77 75 3d 27 2c 27 73 66 72 6e 74 Data Ascii: 0CG==','y2HHCKnVzgvbDa==','zxz0lwG5A2S=','ANn0EM9MzNnLDa==','Bw96sw5Uzxjty3jLzw5y','phjJDd53Awq9','CMvUzgvYqMXVy2TPBMDtDgf0Dxm=','CMvQzwn0','CMvHzhLtDgf0zq==','qxjYyxK=','zMLYC3rfBgvTzw50q2HPBgq=','tM9Kzq==','CgfNzwHPzgu=','zML4zwq=','BM9Kzu5HBwu=','sfrnt
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 2c 27 70 4a 57 56 27 2c 27 79 32 39 55 79 32 66 30 27 2c 27 72 4c 6a 62 74 75 75 3d 27 2c 27 72 65 39 64 76 75 31 66 74 4c 72 46 72 4c 6a 62 72 30 31 66 74 4c 72 46 74 4b 39 65 72 71 3d 3d 27 2c 27 42 4d 66 54 7a 71 3d 3d 27 2c 27 6a 67 50 5a 79 32 39 54 43 66 39 4f 41 77 72 4b 7a 77 35 46 27 2c 27 42 32 35 54 42 33 76 5a 7a 77 72 56 44 32 34 3d 27 2c 27 79 32 39 55 44 67 76 55 44 61 3d 3d 27 2c 27 43 33 72 48 79 32 53 36 69 61 3d 3d 27 2c 27 79 78 62 57 42 68 4b 3d 27 2c 27 79 77 35 4a 7a 78 6e 30 42 33 6a 70 43 4d 4c 4e 41 77 35 5a 27 2c 27 43 32 39 32 43 4d 34 54 79 32 39 55 42 4d 76 4a 44 63 31 48 7a 61 3d 3d 27 2c 27 41 77 7a 59 79 77 31 4c 6f 49 61 3d 27 2c 27 71 76 62 71 27 2c 27 73 65 6e 76 27 2c 27 43 4d 76 30 44 78 6a 55 69 68 44 50 42 4d 72 56 Data Ascii: ,'pJWV','y29Uy2f0','rLjbtuu=','re9dvu1ftLrFrLjbr01ftLrFtK9erq==','BMfTzq==','jgPZy29TCf9OAwrKzw5F','B25TB3vZzwrVD24=','y29UDgvUDa==','C3rHy2S6ia==','yxbWBhK=','yw5Jzxn0B3jpCMLNAw5Z','C292CM4Ty29UBMvJDc1Hza==','AwzYyw1LoIa=','qvbq','senv','CMv0DxjUihDPBMrV
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 3d 3d 27 2c 27 44 32 58 4e 27 2c 27 41 77 35 57 44 78 71 3d 27 2c 27 41 77 35 71 42 67 66 4a 7a 77 31 4c 42 4e 71 3d 27 2c 27 42 4d 66 32 41 77 44 48 44 67 39 59 27 2c 27 79 78 62 50 72 4e 6a 48 42 77 76 74 79 47 3d 3d 27 2c 27 75 65 39 74 76 61 3d 3d 27 2c 27 72 78 7a 4c 42 4e 72 5a 27 2c 27 79 33 6a 4c 79 78 72 4c 27 2c 27 79 78 62 57 42 67 4c 4a 79 78 72 50 42 32 34 56 45 63 31 33 44 33 43 54 7a 4d 39 59 42 73 31 31 43 4d 58 4c 42 4d 6e 56 7a 67 76 4b 27 2c 27 72 65 39 6e 71 32 39 55 44 67 76 55 44 65 58 56 79 77 72 4c 7a 61 3d 3d 27 2c 27 7a 4d 58 56 42 33 69 3d 27 2c 27 79 33 6a 4c 79 78 72 4c 76 68 6a 4c 7a 76 44 48 42 67 54 4c 43 47 3d 3d 27 2c 27 41 67 66 55 7a 67 58 4c 72 78 7a 4c 42 4e 71 3d 27 2c 27 42 33 62 48 79 32 4c 30 45 71 3d 3d 27 2c 27 Data Ascii: ==','D2XN','Aw5WDxq=','Aw5qBgfJzw1LBNq=','BMf2AwDHDg9Y','yxbPrNjHBwvtyG==','ue9tva==','rxzLBNrZ','y3jLyxrL','yxbWBgLJyxrPB24VEc13D3CTzM9YBs11CMXLBMnVzgvK','re9nq29UDgvUDeXVywrLza==','zMXVB3i=','y3jLyxrLvhjLzvDHBgTLCG==','AgfUzgXLrxzLBNq=','B3bHy2L0Eq==','
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 27 2c 27 79 78 62 57 7a 77 35 4b 27 2c 27 72 76 48 71 6c 76 72 70 27 2c 27 43 32 76 30 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 79 4d 4c 4b 7a 67 76 59 71 32 39 4b 7a 71 3d 3d 27 2c 27 73 66 72 6e 74 65 4c 67 43 4d 66 54 7a 75 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 6c 4b 39 76 76 65 6a 73 71 75 4c 6f 77 32 72 48 44 67 65 54 44 32 4c 4b 7a 32 76 30 6c 77 4c 4b 78 71 3d 3d 27 2c 27 72 4e 6a 48 42 77 75 3d 27 2c 27 79 32 66 53 42 61 3d 3d 27 2c 27 43 4e 76 55 27 2c 27 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 27 2c 27 70 68 6e 4a 43 4d 4c 57 44 64 34 4f 6b 63 4b 39 70 4e 54 4b 42 32 6e 31 42 77 76 55 44 63 35 4a 44 78 6a 59 7a 77 35 30 75 32 6e 59 41 78 62 30 69 63 79 4d 69 67 72 56 79 33 76 54 7a 77 35 30 6c 4d 6e 31 43 4e 6a 4c 42 4e 72 74 79 33 6a 50 43 68 Data Ascii: ','yxbWzw5K','rvHqlvrp','C2v0qxr0CMLIDxrL','yMLKzgvYq29Kzq==','sfrnteLgCMfTzuvSzw1LBNq=','lK9vvejsquLow2rHDgeTD2LKz2v0lwLKxq==','rNjHBwu=','y2fSBa==','CNvU','BwvZC2fNzq==','phnJCMLWDd4OkcK9pNTKB2n1BwvUDc5JDxjYzw50u2nYAxb0icyMigrVy3vTzw50lMn1CNjLBNrty3jPCh
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 33 71 3d 27 2c 27 43 32 66 55 7a 67 6a 56 45 64 30 49 27 2c 27 79 77 58 30 27 2c 27 70 68 6a 4a 44 64 35 30 7a 33 71 39 27 2c 27 7a 78 7a 30 6c 78 44 5a 45 67 38 3d 27 2c 27 43 32 76 48 43 4d 6e 4f 27 2c 27 42 4e 6d 48 27 2c 27 79 33 76 59 43 4d 76 55 44 66 72 50 42 77 75 3d 27 2c 27 7a 78 7a 30 6c 77 58 30 43 4e 61 59 27 2c 27 7a 4d 7a 4a 7a 68 61 3d 27 2c 27 76 30 44 6d 6d 47 3d 3d 27 2c 27 7a 32 76 30 72 78 7a 4c 42 4e 72 5a 27 2c 27 43 67 39 5a 41 78 72 50 42 32 34 3d 27 2c 27 6a 4d 66 4b 42 32 31 48 41 77 35 5a 70 71 3d 3d 27 2c 27 7a 78 7a 30 6c 78 62 49 79 4d 75 3d 27 2c 27 79 78 6a 4e 43 57 3d 3d 27 2c 27 79 78 62 50 76 4d 76 59 43 32 4c 56 42 4c 6e 31 7a 4d 7a 50 45 61 3d 3d 27 2c 27 7a 67 76 49 44 77 44 4e 7a 78 69 3d 27 2c 27 6c 63 62 4a 79 77 Data Ascii: 3q=','C2fUzgjVEd0I','ywX0','phjJDd50z3q9','zxz0lxDZEg8=','C2vHCMnO','BNmH','y3vYCMvUDfrPBwu=','zxz0lwX0CNaY','zMzJzha=','v0DmmG==','z2v0rxzLBNrZ','Cg9ZAxrPB24=','jMfKB21HAw5Zpq==','zxz0lxbIyMu=','yxjNCW==','yxbPvMvYC2LVBLn1zMzPEa==','zgvIDwDNzxi=','lcbJyw
2025-01-14 00:13:14 UTC	1369	IN	Data Raw: 7a 78 69 3d 27 2c 27 43 32 50 5a 27 2c 27 69 63 61 47 69 67 66 30 69 67 44 4c 44 61 3d 3d 27 2c 27 79 4d 58 56 79 47 3d 3d 27 2c 27 76 65 39 71 27 2c 27 79 32 66 53 42 67 76 59 6f 49 61 3d 27 2c 27 73 66 72 6e 74 65 6a 48 43 32 76 66 42 67 76 54 7a 77 35 30 27 2c 27 79 32 39 55 44 67 66 50 42 4e 6d 3d 27 2c 27 79 4d 58 56 79 32 53 3d 27 2c 27 7a 67 76 4d 79 78 76 53 44 66 7a 50 7a 78 43 3d 27 2c 27 73 66 7a 62 72 61 3d 3d 27 2c 27 6c 4d 72 56 79 33 76 54 7a 77 35 30 6c 61 3d 3d 27 2c 27 6e 63 34 59 6f 63 34 33 27 2c 27 43 32 48 50 7a 4e 71 3d 27 2c 27 77 30 76 73 75 4c 39 65 78 71 3d 3d 27 2c 27 79 33 44 5a 27 2c 27 43 67 66 4e 7a 78 7a 50 7a 78 43 3d 27 2c 27 7a 78 7a 4c 42 4e 72 75 45 78 62 4c 27 2c 27 43 32 76 30 73 78 72 4c 42 71 3d 3d 27 2c 27 43 33 Data Ascii: zxi=','C2PZ','icaGigf0igDLDa==','yMXVyG==','ve9q','y2fSBgvYoIa=','sfrntejHC2vfBgvTzw50','y29UDgfPBNm=','yMXVy2S=','zgvMyxvSDfzPzxC=','sfzbra==','lMrVy3vTzw50la==','nc4Yoc43','C2HPzNq=','w0vsuL9exq==','y3DZ','CgfNzxzPzxC=','zxzLBNruExbL','C2v0sxrLBq==','C3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	53378	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	659	OUT	GET /eh/prebid-config/yahoo_login-us-desktop.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:14 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: 2pmbXBGdfgCMdfK7B7IuHz8DcYYhQSsOxJFyrt530ipn+kTDBiHDhgbmJ0VT2W035IvGdpoiSlE= x-amz-request-id: 6ZNERAQ5XH9WM92W Date: Mon, 13 Jan 2025 23:57:13 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Mon, 13 Jan 2025 17:59:45 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=1800 Accept-Ranges: bytes Content-Type: application/json Content-Length: 10643 Server: ATS Referrer-Policy: no-referrer-when-downgrade Etag: "5f44fedc149f31735b3940d1ec873027" Age: 962 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 70 72 65 62 69 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 61 64 55 6e 69 74 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 5f 79 6c 6f 67 69 6e 5f 6d 61 69 6e 5f 64 74 5f 66 75 6c 6c 5f 73 63 72 65 65 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 70 6f 73 22 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 66 6f 72 6d 61 74 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 6e 6e 65 72 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "prebid": { "adUnits": { "us_ylogin_main_dt_full_screen": { "pos": 1, "formats": { "banner": { "sizes": [ [
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 69 6d 65 6f 75 74 22 3a 20 32 30 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 69 63 65 47 72 61 6e 75 6c 61 72 69 74 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 63 6b 65 74 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 61 78 22 3a 20 31 30 30 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6e 63 72 65 6d 65 6e 74 22 3a 20 30 2e 30 31 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 65 42 69 64 43 Data Ascii: imeout": 2000, "priceGranularity": { "buckets": [ { "max": 10000, "increment": 0.01 } ] }, "useBidC
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 79 61 68 6f 6f 50 72 65 62 69 64 53 65 72 76 65 72 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 70 75 72 70 6f 73 65 22 3a 20 22 6d 65 61 73 75 72 65 6d 65 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 66 6f 72 63 65 50 75 72 70 6f 73 65 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 66 Data Ascii: "yahooPrebidServer" ] }, { "purpose": "measurement", "enforcePurpose": true, "enf
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 22 69 6e 64 65 78 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 70 65 6e 78 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 6f 6e 49 64 22 3a 20 74 72 75 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 74 6f 72 61 67 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 5f 6c 69 5f 70 62 69 Data Ascii: "index": true, "openx": true, "nonId": true } }, "storage": { "name": "_li_pbi
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 22 73 68 61 72 65 64 49 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 74 6f 72 61 67 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 5f 73 68 61 72 65 64 49 44 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 68 74 6d 6c 35 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 78 70 69 72 65 73 22 3a 20 33 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 Data Ascii: "sharedId", "storage": { "name": "_sharedID", "type": "html5", "expires": 30 } } ],
2025-01-14 00:13:14 UTC	848	IN	Data Raw: 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 66 61 75 6c 74 22 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 5f 79 6c 6f 67 69 6e 5f 6d 61 69 6e 5f 64 74 5f 66 75 6c 6c 5f 73 63 72 65 65 6e 22 3a 20 30 2e 39 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 66 6f 72 63 65 6d 65 6e 74 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 66 6f 72 63 65 Data Ascii: ] }, "default": 0, "values": { "us_ylogin_main_dt_full_screen": 0.9 } }, "enforcement": { "enforce
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 46 49 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 46 52 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 47 52 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 48 52 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 48 55 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 49 45 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 49 54 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 54 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 55 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 56 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4d 54 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4e 4c Data Ascii: "FI", "FR", "GR", "HR", "HU", "IE", "IT", "LT", "LU", "LV", "MT", "NL
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 44 45 46 41 55 4c 54 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6c 6f 63 6b 4c 69 73 74 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 65 72 43 6f 75 6e 74 72 79 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 47 42 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 42 52 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } }, "DEFAULT": { "blockList": { "userCountry": [ "GB", "BR" ],
2025-01-14 00:13:14 UTC	695	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 55 53 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 69 73 61 62 6c 65 64 42 75 63 6b 65 74 52 61 74 65 22 3a 20 30 2e 30 32 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 22 62 69 64 64 65 72 53 65 74 74 69 6e 67 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 61 62 6f 6f 6c 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "US" ] }, "disabledBucketRate": 0.02 } } }, "bidderSettings": { "taboola": { "storageAllowed": [

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	53380	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	1266	OUT	POST /p?s=794200123&t=1736813593150&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=yahoo_login&partner=&lang=en-US&region=us&device=desktop&colo=bf1&bucket=mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cdmi_consent_false&rid=unknown&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.2.29&prebidVersion=unknown&yahooPrebidVersion=unknown&type=PREBID_SESSION_START HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A
2025-01-14 00:13:14 UTC	1119	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 00:13:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2025-01-14 00:13:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	53381	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	1265	OUT	POST /p?s=794200123&t=1736813593159&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=yahoo_login&partner=&lang=en-US&region=us&device=desktop&colo=bf1&bucket=mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cdmi_consent_false&rid=unknown&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.2.29&prebidVersion=unknown&yahooPrebidVersion=unknown&type=BENJI_SESSION_START HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A
2025-01-14 00:13:14 UTC	1119	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 00:13:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2025-01-14 00:13:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	53383	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	1140	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B
2025-01-14 00:13:15 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:14 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://login.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0:19e7~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:14 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:15 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:15 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 66 58 4b 35 44 63 42 45 32 75 4a 54 48 75 4d 6d 53 42 45 31 45 52 6f 65 4f 6e 52 46 65 67 38 44 7e 41 22 7d Data Ascii: {"axid": "y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A"}
2025-01-14 00:13:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 00:13:15 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-14 00:13:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	53376	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	607	OUT	GET /aaq/prebid/prebid-2.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:14 UTC	681	IN	HTTP/1.1 200 OK x-amz-id-2: GJu7Ftw+brUG1W6bjbN7SZBGIQpmRn7IQQo84drOPOvfP/w9fELSrlHkqO187fmjuMVtkMeiuO90+lkTsXWRNIMy+uTWpu3+wyrpviLFEVc= x-amz-request-id: JW1373HQP1HXG222 Date: Tue, 14 Jan 2025 00:09:38 GMT Last-Modified: Thu, 09 Jan 2025 22:52:40 GMT ETag: "2501402afe19989437b60515fd4baa23" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=1800 x-amz-version-id: e8yXKrMooLNk8HHDjDnY07a9ESsQatRT Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 499411 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 217 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 35 31 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 35 2d 30 31 2d 30 39 0a 42 75 69 6c 64 3a 20 32 2e 30 2e 34 37 0a 4d 6f 64 75 6c 65 73 3a 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 47 70 70 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 55 73 70 2c 20 63 72 69 74 65 6f 42 69 64 41 64 61 70 74 65 72 2c 20 65 6e 72 69 63 68 6d 65 6e 74 46 70 64 4d 6f 64 75 6c 65 2c 20 67 64 70 72 45 6e 66 6f 72 63 65 6d 65 6e 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 6e 61 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 73 74 61 74 65 73 2c 20 67 70 74 50 72 65 41 75 63 74 69 6f 6e 2c 20 69 78 42 69 64 41 64 61 70 74 65 72 2c 20 6b 75 65 65 Data Ascii: /* prebid.js v8.51.0Updated: 2025-01-09Build: 2.0.47Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, kuee
2025-01-14 00:13:14 UTC	941	IN	Data Raw: 65 2c 6e 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 69 3d 30 3b 69 66 28 74 29 65 3d 74 3b 65 6c 73 65 7b 66 6f 72 28 3b 69 3c 6f 26 26 21 28 69 20 69 6e 20 6e 29 3b 29 69 2b 2b 3b 65 3d 6e 5b 69 2b 2b 5d 7d 66 6f 72 28 3b 69 3c 6f 3b 29 69 20 69 6e 20 6e 26 26 28 65 3d 72 28 65 2c 6e 5b 69 5d 2c 69 2c 6e 29 29 2c 69 2b 2b 3b 72 65 74 75 72 6e 20 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 72 2c 74 29 7d 76 61 72 20 75 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 69 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 28 66 75 6e Data Ascii: e,n=Object(this),o=n.length>>>0,i=0;if(t)e=t;else{for(;i<o&&!(i in n);)i++;e=n[i++]}for(;i<o;)i in n&&(e=r(e,n[i],i,n)),i++;return e};function i(r,t){return Array.prototype.slice.call(r,t)}var u=Object.assign\|\|function(r){return o.call(i(arguments,1),(fun
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 2e 69 73 41 72 72 61 79 28 72 29 3f 72 3a 72 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 69 29 7b 76 61 72 20 75 3d 6e 5b 6f 5d 2c 66 3d 21 31 3b 72 65 74 75 72 6e 20 75 7c 7c 28 69 3d 3d 3d 65 2e 6c 65 6e 67 74 68 2d 31 3f 28 63 7c 7c 6c 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 7c 7c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 74 2b 22 3a 20 72 65 66 65 72 65 6e 63 65 64 20 27 22 2b 72 2b 22 27 20 62 75 74 20 69 74 20 77 61 73 20 6e 65 76 65 72 20 63 72 65 61 74 65 64 22 29 7d 29 29 2c 6e 5b 6f 5d 3d 76 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6e 5b 6f 5d 3d 72 2c 66 3d 21 30 7d 29 29 29 3a 6e 5b 6f 5d 3d 7b 7d 29 7d 29 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 76 Data Ascii: .isArray(r)?r:r.split(".");return o.call(e,(function(n,o,i){var u=n[o],f=!1;return u\|\|(i===e.length-1?(c\|\|l.push((function(){f\|\|console.warn(t+": referenced '"+r+"' but it was never created")})),n[o]=v((function(r){n[o]=r,f=!0}))):n[o]={})}),a)}function v
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 74 73 29 7d 7d 3b 72 65 74 75 72 6e 20 63 7c 7c 6c 2e 70 75 73 68 28 67 29 2c 72 2e 75 73 65 50 72 6f 78 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 78 79 26 26 50 72 6f 78 79 2e 72 65 76 6f 63 61 62 6c 65 3f 68 3d 6e 65 77 20 50 72 6f 78 79 28 6f 2c 64 29 3a 28 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 61 70 70 6c 79 3f 64 2e 61 70 70 6c 79 28 6f 2c 74 68 69 73 2c 69 28 61 72 67 75 6d 65 6e 74 73 29 29 3a 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 75 28 68 2c 62 29 29 2c 6e 2e 67 65 74 28 68 2e 61 66 74 65 72 29 2e 69 6e 73 74 61 6c 6c 28 65 2c 68 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 6e 2c 6f 3d 5b 5d 3b 72 2e 6c 65 6e 67 74 68 7c 7c 74 2e 6c 65 Data Ascii: ts)}};return c\|\|l.push(g),r.useProxy&&"function"==typeof Proxy&&Proxy.revocable?h=new Proxy(o,d):(h=function(){return d.apply?d.apply(o,this,i(arguments)):o.apply(this,arguments)},u(h,b)),n.get(h.after).install(e,h,(function(r,t){var n,o=[];r.length\|\|t.le
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 72 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 72 7d 2c 6e 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 72 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 72 29 7c 7c 21 72 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 65 3d 72 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 6f 3d 65 2e 63 61 6c 6c 28 72 2c 74 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f Data Ascii: "==typeof Symbol&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},n(r)}function o(r){var t=function(r,t){if("object"!=n(r)\|\|!r)return r;var e=r[Symbol.toPrimitive];if(void 0!==e){var o=e.call(r,t\|\|"default");if("object"!=n(o))return o;thro
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 6f 72 74 73 2c 6e 29 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 72 3d 5b 5d 2c 6e 2e 4f 3d 28 74 2c 65 2c 6f 2c 69 29 3d 3e 7b 69 66 28 21 65 29 7b 76 61 72 20 75 3d 31 2f 30 3b 66 6f 72 28 6c 3d 30 3b 6c 3c 72 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 65 3d 72 5b 6c 5d 5b 30 5d 2c 6f 3d 72 5b 6c 5d 5b 31 5d 2c 69 3d 72 5b 6c 5d 5b 32 5d 3b 66 6f 72 28 76 61 72 20 66 3d 21 30 2c 63 3d 30 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 28 21 31 26 69 7c 7c 75 3e 3d 69 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 2e 4f 29 2e 65 76 65 72 79 28 28 72 3d 3e 6e 2e 4f 5b 72 5d 28 65 5b 63 5d 29 29 29 3f 65 2e 73 70 6c 69 63 65 28 63 2d 2d 2c 31 29 3a 28 66 3d 21 31 2c 69 3c 75 26 26 28 75 3d 69 29 29 3b 69 66 28 66 29 7b 72 2e 73 70 6c 69 63 65 28 6c 2d Data Ascii: orts,n),i.exports}n.m=t,r=[],n.O=(t,e,o,i)=>{if(!e){var u=1/0;for(l=0;l<r.length;l++){e=r[l][0],o=r[l][1],i=r[l][2];for(var f=!0,c=0;c<e.length;c++)(!1&i\|\|u>=i)&&Object.keys(n.O).every((r=>n.O[r](e[c])))?e.splice(c--,1):(f=!1,i<u&&(u=i));if(f){r.splice(l-
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 64 6c 65 72 73 3d 7b 7d 2c 74 68 69 73 2e 69 64 3d 64 2c 74 68 69 73 2e 72 65 6e 64 65 72 4e 6f 77 3d 67 2c 74 68 69 73 2e 6c 6f 61 64 65 64 3d 75 2c 74 68 69 73 2e 63 6d 64 3d 5b 5d 2c 74 68 69 73 2e 70 75 73 68 3d 65 3d 3e 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 74 68 69 73 2e 6c 6f 61 64 65 64 3f 65 2e 63 61 6c 6c 28 29 3a 74 68 69 73 2e 63 6d 64 2e 70 75 73 68 28 65 29 3a 28 30 2c 72 2e 76 56 29 28 22 43 6f 6d 6d 61 6e 64 73 20 67 69 76 65 6e 20 74 6f 20 52 65 6e 64 65 72 65 72 2e 70 75 73 68 20 6d 75 73 74 20 62 65 20 77 72 61 70 70 65 64 20 69 6e 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 3d 6c 7c 7c 28 28 29 3d 3e 7b 74 68 69 73 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 68 69 73 2e 70 72 Data Ascii: dlers={},this.id=d,this.renderNow=g,this.loaded=u,this.cmd=[],this.push=e=>{"function"==typeof e?this.loaded?e.call():this.cmd.push(e):(0,r.vV)("Commands given to Renderer.push must be wrapped in a function")},this.callback=l\|\|(()=>{this.loaded=!0,this.pr
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 7d 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 66 69 67 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 52 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 72 65 6e 64 65 72 3d 65 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 3d 65 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 56 69 64 65 6f 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 7b 69 64 3a 74 2c 65 76 65 6e 74 4e 61 6d 65 3a 6e 7d 3d 65 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 68 Data Ascii: })},d.prototype.getConfig=function(){return this.config},d.prototype.setRender=function(e){this._render=e},d.prototype.setEventHandlers=function(e){this.handlers=e},d.prototype.handleVideoEvent=function(e){let{id:t,eventName:n}=e;"function"==typeof this.h
2025-01-14 00:13:15 UTC	1300	IN	Data Raw: 70 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 63 6f 6e 73 74 20 64 3d 7b 5b 73 5d 3a 74 2c 5b 61 5d 3a 6e 2c 5b 6f 5d 3a 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 6e 29 7d 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 69 2e 74 57 26 26 28 64 5b 63 5d 3d 65 28 6e 29 29 2c 68 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 64 2c 72 29 29 7d 7d 63 6f 6e 73 74 20 68 3d 28 30 2c 72 2e 41 5f 29 28 22 73 79 6e 63 22 2c 28 65 3d 3e 65 29 29 7d 2c 33 33 36 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 24 56 3a 28 29 3d 3e 67 2c 24 70 3a 28 29 3d 3e 6d 2c 56 78 3a 28 29 3d 3e 63 2c 5a 50 3a 28 29 3d 3e 68 2c 6c 37 3a 28 29 3d 3e 61 2c 6e 6c 3a 28 29 3d 3e 75 2c 70 34 3a 28 29 3d 3e 70 2c 75 44 3a 28 Data Ascii: p(e){return function(t,n,r){const d={[s]:t,[a]:n,[o]:"".concat(t,".").concat(n)};return t===i.tW&&(d[c]=e(n)),h(Object.assign(d,r))}}const h=(0,r.A_)("sync",(e=>e))},3366:(e,t,n)=>{n.d(t,{$V:()=>g,$p:()=>m,Vx:()=>c,ZP:()=>h,l7:()=>a,nl:()=>u,p4:()=>p,uD:(
2025-01-14 00:13:15 UTC	1300	IN	Data Raw: 61 6d 65 5d 3d 21 21 74 2e 61 70 70 6c 69 65 73 28 2e 2e 2e 6e 29 29 2c 65 5b 74 2e 6e 61 6d 65 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 3e 30 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6f 2e 69 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 21 74 28 65 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c Data Ascii: ame]=!!t.applies(...n)),e[t.name]}}function g(e){return null!=e&&("object"!=typeof e\|\|Object.keys(e).length>0)}function p(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:o.io;return function(n){return!t(e,n)}}function h(){let e=arguments.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	53375	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	385	OUT	GET /nq/nr/js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:14 UTC	639	IN	HTTP/1.1 200 OK x-amz-id-2: pTRgFVk3i8t2FdPOZi7XJ3Glpj40LUpbp2e067j88MHX3um1pAqTlskwKMsfUReIJpFzUOzWE2g= x-amz-request-id: 7JCK78PX171G44P3 Date: Fri, 10 Jan 2025 22:30:33 GMT Last-Modified: Fri, 10 Jan 2025 20:48:09 GMT ETag: "a66162b5a3cb7f8cdd34ec0f60b588b0" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=2592000 Accept-Ranges: bytes Content-Type: application/javascript; charset=utf8 Content-Length: 13611 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 265362 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 2f 2a 21 20 c2 a9 20 32 30 32 35 20 59 61 68 6f 6f 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 6a 73 2f 67 70 74 5f 73 61 6e 64 62 6f 78 5f 62 66 65 30 30 34 61 63 64 33 35 32 65 62 39 36 63 39 62 65 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 2e 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 70 3a 22 22 7d 3b 28 28 29 3d 3e 7b 0a 69 66 28 21 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 77 69 6e 64 6f 77 2e 79 6d 61 69 6c 41 73 73 65 74 48 6f 73 74 20 6d 75 73 74 20 62 65 20 73 65 74 20 62 65 66 6f 72 65 20 72 75 6e 6e 69 6e 67 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 Data Ascii: /! 2025 Yahoo Holdings, Inc. For license information, see js/gpt_sandbox_bfe004acd352eb96c9be.bundle.js.LICENSE.txt. /(()=>{var e={p:""};(()=>{if(!window.ymailAssetHost)throw new Error("window.ymailAssetHost must be set before running this applicat
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 5f 6c 69 73 74 22 3b 6c 65 74 20 75 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 65 2e 4c 52 45 43 3d 22 4c 52 45 43 22 2c 0a 65 2e 4c 52 45 43 34 3d 22 4c 52 45 43 34 22 2c 65 2e 4d 4f 4e 3d 22 4d 4f 4e 22 2c 65 2e 53 4b 59 3d 22 53 4b 59 22 2c 65 2e 46 55 4c 4c 5f 50 41 4e 45 3d 22 46 55 4c 4c 5f 50 41 4e 45 22 2c 65 2e 46 55 4c 4c 5f 53 43 52 45 45 4e 3d 22 46 55 4c 4c 5f 53 43 52 45 45 4e 22 2c 0a 65 2e 48 4f 52 49 5a 4f 4e 5f 44 45 53 4b 54 4f 50 3d 22 48 4f 52 49 5a 4f 4e 5f 44 45 53 4b 54 4f 50 22 2c 0a 65 2e 48 4f 52 49 5a 4f 4e 5f 4d 4f 42 49 4c 45 3d 22 48 4f 52 49 5a 4f 4e 5f 4d 4f 42 49 4c 45 22 2c 65 2e 42 49 4c 4c 42 4f 41 52 44 3d 22 42 49 4c 4c 42 4f 41 52 44 22 2c 0a 65 2e 46 4c 55 49 44 3d 22 46 4c 55 49 44 22 2c 65 2e 53 50 4f 54 4c 49 Data Ascii: _list";let u;!function(e){e.LREC="LREC",e.LREC4="LREC4",e.MON="MON",e.SKY="SKY",e.FULL_PANE="FULL_PANE",e.FULL_SCREEN="FULL_SCREEN",e.HORIZON_DESKTOP="HORIZON_DESKTOP",e.HORIZON_MOBILE="HORIZON_MOBILE",e.BILLBOARD="BILLBOARD",e.FLUID="FLUID",e.SPOTLI
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 6e 22 2c 5b 6f 2e 41 4f 4c 5f 4c 4f 47 49 4e 5d 3a 22 61 6f 6c 5f 6c 6f 67 69 6e 22 0a 7d 2c 77 3d 2f 5e 28 68 74 74 70 73 3a 5c 2f 5c 2f 28 5b 61 2d 7a 30 2d 39 2d 5d 2b 5b 2e 5d 29 2a 28 6d 61 69 6c 7c 6c 6f 67 69 6e 29 5c 2e 28 61 6f 6c 7c 79 61 68 6f 6f 29 5c 2e 63 6f 6d 29 24 2f 2c 5f 3d 2f 5e 28 68 74 74 70 73 3a 5c 2f 5c 2f 28 3f 3a 6e 6f 72 72 69 6e 5c 2e 29 3f 28 61 6c 70 68 61 2d 7c 63 61 6e 61 72 79 2d 29 3f 28 67 70 74 7c 67 61 6d 29 5c 2e 6d 61 69 6c 5c 2e 28 61 6f 6c 7c 79 61 68 6f 6f 7c 79 61 68 6f 6f 73 61 6e 64 62 6f 78 29 5c 2e 6e 65 74 29 24 2f 0a 3b 63 6f 6e 73 74 20 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 6c 65 74 7b 6d 6f 64 65 3a 69 2c 61 70 70 4e 61 6d 65 3a 6f 2c 74 61 72 67 65 74 4f 72 69 67 69 6e 3a Data Ascii: n",[o.AOL_LOGIN]:"aol_login"},w=/^(https:\/\/([a-z0-9-]+[.])*(mail\|login)\.(aol\|yahoo)\.com)$/,_=/^(https:\/\/(?:norrin\.)?(alpha-\|canary-)?(gpt\|gam)\.mail\.(aol\|yahoo\|yahoosandbox)\.net)$/;const b=class{constructor(t){let{mode:i,appName:o,targetOrigin:
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 65 28 6e 29 7d 0a 3b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 26 26 28 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 29 2c 0a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 6e 75 6c 6c 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6e 29 2c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 6e 7d 0a 64 65 74 61 63 68 4c 69 73 74 65 6e 65 72 28 29 7b 0a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 26 26 28 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 29 2c 0a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 6e 75 6c 6c Data Ascii: e(n)};this.listener&&(window.removeEventListener("message",this.listener),this.listener=null),window.addEventListener("message",n),this.listener=n}detachListener(){this.listener&&(window.removeEventListener("message",this.listener),this.listener=null
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 3a 6e 2c 6d 65 73 73 61 67 65 43 6c 69 65 6e 74 3a 74 7d 3d 65 3b 6c 65 74 20 69 3b 72 65 74 75 72 6e 20 65 3d 3e 7b 76 61 72 20 73 2c 72 0a 3b 63 6f 6e 73 74 20 6c 3d 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 28 73 3d 65 2e 64 61 74 61 29 3f 76 6f 69 64 20 30 3a 73 2e 69 64 2c 63 3d 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 28 72 3d 65 2e 64 61 74 61 29 3f 76 6f 69 64 20 30 3a 72 2e 73 69 7a 65 2c 45 3d 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6e 61 6d 65 29 21 3d 3d 4f 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 0a 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 74 2c 69 2c 6f 3d 7b 7d 2c 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b Data Ascii: :n,messageClient:t}=e;let i;return e=>{var s,r;const l=null==e\|\|null==(s=e.data)?void 0:s.id,c=null==e\|\|null==(r=e.data)?void 0:r.size,E=(null==e?void 0:e.name)!==O,m=function(e,n){if(null==e)return{};var t,i,o={},s=Object.keys(e);for(i=0;i<s.length;i++
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 45 44 49 55 4d 5f 52 45 43 54 41 4e 47 4c 45 3f 28 69 26 26 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 69 29 2c 0a 69 3d 28 29 3d 3e 7b 79 28 52 2c 68 29 0a 7d 2c 69 28 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 69 29 29 3a 69 26 26 28 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 69 29 2c 0a 69 3d 6e 75 6c 6c 29 29 2c 74 29 7b 63 6f 6e 73 74 20 65 3d 4d 28 7b 7d 2c 6d 2c 7b 70 6f 73 69 74 69 6f 6e 3a 52 2c 69 73 45 6d 70 74 79 3a 45 2c 73 69 7a 65 3a 63 7d 29 0a 3b 74 2e 73 65 6e 64 52 65 71 75 65 73 74 4d 65 73 73 61 67 65 28 64 2e 53 4c 4f 54 5f 52 45 4e 44 45 52 5f Data Ascii: EDIUM_RECTANGLE?(i&&window.removeEventListener("resize",i),i=()=>{y(R,h)},i(),window.addEventListener("resize",i)):i&&(window.removeEventListener("resize",i),i=null)),t){const e=M({},m,{position:R,isEmpty:E,size:c});t.sendRequestMessage(d.SLOT_RENDER_
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 44 6f 6d 61 69 6e 3a 74 2c 73 65 6e 64 65 72 44 6f 6d 61 69 6e 43 61 74 65 67 6f 72 79 3a 69 2c 73 65 6e 64 65 72 44 6f 6d 61 69 6e 53 75 62 63 61 74 65 67 6f 72 79 3a 6f 7d 3d 65 2e 74 61 72 67 65 74 69 6e 67 43 6f 6e 66 69 67 7c 7c 7b 7d 0a 3b 72 65 74 75 72 6e 20 6e 2e 72 65 64 75 63 65 28 28 28 65 2c 6e 29 3d 3e 7b 0a 63 6f 6e 73 74 7b 64 69 76 3a 73 2c 61 64 4c 6f 63 61 74 69 6f 6e 3a 72 2c 61 64 55 6e 69 74 50 61 74 68 3a 61 2c 73 69 7a 65 3a 64 2c 73 74 61 63 6b 47 72 6f 75 70 3a 6c 2c 61 64 49 6e 64 65 78 3a 63 7d 3d 6e 0a 3b 72 65 74 75 72 6e 20 65 5b 73 5d 3d 4d 28 7b 69 64 3a 73 2c 6b 76 73 3a 54 28 7b 61 64 4c 6f 63 61 74 69 6f 6e 3a 72 2c 61 64 49 6e 64 65 78 3a 63 2c 73 65 6e 64 65 72 4d 61 74 63 68 65 64 50 72 65 6d 69 75 6d 44 6f 6d 61 69 Data Ascii: Domain:t,senderDomainCategory:i,senderDomainSubcategory:o}=e.targetingConfig\|\|{};return n.reduce(((e,n)=>{const{div:s,adLocation:r,adUnitPath:a,size:d,stackGroup:l,adIndex:c}=n;return e[s]=M({id:s,kvs:T({adLocation:r,adIndex:c,senderMatchedPremiumDomai
2025-01-14 00:13:15 UTC	1300	IN	Data Raw: 72 20 6e 3b 6c 65 74 7b 64 69 76 3a 74 2c 73 74 61 63 6b 47 72 6f 75 70 3a 69 7d 3d 65 3b 76 61 72 20 6f 0a 3b 6e 75 6c 6c 3d 3d 28 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7c 7c 6e 2e 72 65 6d 6f 76 65 28 29 2c 0a 69 26 26 28 6e 75 6c 6c 3d 3d 28 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 22 2d 63 6f 6c 6c 61 70 73 65 22 29 29 7c 7c 6f 2e 72 65 6d 6f 76 65 28 29 29 7d 29 29 7d 28 74 29 7d 2c 47 3d 65 3d 3e 7b 0a 76 61 72 20 6e 3b 63 6f 6e 73 74 7b 72 65 6e 64 65 72 43 6f 6e 66 69 67 3a 74 7d 3d 65 2c 69 3d 21 74 2e 79 61 68 6f 6f 50 72 65 62 69 64 3b 55 28 74 2e 70 6f 73 69 74 69 6f 6e 73 2c 69 29 3b 63 6f 6e 73 74 20 6f 3d 46 28 74 29 0a 3b 6e 75 6c 6c 3d 3d 28 6e 3d Data Ascii: r n;let{div:t,stackGroup:i}=e;var o;null==(n=document.getElementById(t))\|\|n.remove(),i&&(null==(o=document.getElementById(t+"-collapse"))\|\|o.remove())}))}(t)},G=e=>{var n;const{renderConfig:t}=e,i=!t.yahooPrebid;U(t.positions,i);const o=F(t);null==(n=
2025-01-14 00:13:15 UTC	1300	IN	Data Raw: 5d 0a 3b 72 65 74 75 72 6e 7b 69 31 33 6e 3a 4d 28 7b 62 6b 61 3a 41 2e 74 6f 53 74 72 69 6e 67 28 29 2c 62 6b 67 3a 77 2e 74 6f 53 74 72 69 6e 67 28 29 2c 63 6f 6c 6f 3a 5f 2c 6c 75 3a 62 2c 73 69 74 65 3a 5a 2c 64 65 76 69 63 65 3a 43 2c 0a 72 65 67 69 6f 6e 3a 44 2c 6c 61 6e 67 3a 79 2c 61 78 69 64 3a 53 2c 61 78 69 64 73 3a 42 7d 2c 54 3f 7b 75 64 3a 54 7d 3a 6e 75 6c 6c 2c 55 3f 7b 75 62 69 64 3a 55 7d 3a 6e 75 6c 6c 2c 7b 74 62 6c 61 5f 69 64 3a 6b 2c 0a 62 75 63 6b 65 74 3a 59 7d 2c 6c 3f 7b 66 65 61 74 75 72 65 3a 6a 28 7b 63 6c 69 65 6e 74 3a 74 2c 62 65 6e 6a 69 46 65 61 74 75 72 65 73 3a 64 7d 29 7d 3a 6e 75 6c 6c 2c 7b 63 6f 62 72 61 6e 64 3a 71 7c 7c 7a 2c 0a 70 61 72 74 6e 65 72 3a 71 7c 7c 7a 2c 75 72 6c 3a 4c 2c 61 78 69 64 44 76 33 36 30 Data Ascii: ];return{i13n:M({bka:A.toString(),bkg:w.toString(),colo:_,lu:b,site:Z,device:C,region:D,lang:y,axid:S,axids:B},T?{ud:T}:null,U?{ubid:U}:null,{tbla_id:k,bucket:Y},l?{feature:j({client:t,benjiFeatures:d})}:null,{cobrand:q\|\|z,partner:q\|\|z,url:L,axidDv360
2025-01-14 00:13:15 UTC	1300	IN	Data Raw: 69 2e 52 45 46 52 45 53 48 29 7b 0a 63 6f 6e 73 74 7b 64 61 74 61 3a 6e 7d 3d 65 2e 64 61 74 61 2c 7b 63 6f 6e 66 69 67 3a 69 2c 73 70 61 63 65 49 64 48 61 73 43 68 61 6e 67 65 64 3a 6f 2c 72 65 64 65 66 69 6e 65 54 61 72 67 65 74 69 6e 67 3a 73 3d 21 31 2c 72 65 64 65 66 69 6e 65 50 6f 73 69 74 69 6f 6e 54 61 72 67 65 74 69 6e 67 3a 72 3d 21 31 2c 74 61 72 67 65 74 69 6e 67 43 6f 6e 66 69 67 3a 61 3d 7b 7d 7d 3d 6e 2c 7b 73 70 61 63 65 49 64 3a 64 2c 73 65 6e 64 65 72 4b 61 6d 69 6e 6f 4c 65 76 65 6c 31 3a 45 2c 73 65 6e 64 65 72 4b 61 6d 69 6e 6f 4c 65 76 65 6c 32 3a 67 2c 73 65 6e 64 65 72 44 6f 6d 61 69 6e 3a 6d 7d 3d 61 2c 49 3d 22 61 62 70 22 3d 3d 3d 61 2e 61 64 42 6c 6f 63 6b 65 72 0a 3b 76 61 72 20 74 3b 69 66 28 77 69 6e 64 6f 77 2e 5f 59 4d 49 Data Ascii: i.REFRESH){const{data:n}=e.data,{config:i,spaceIdHasChanged:o,redefineTargeting:s=!1,redefinePositionTargeting:r=!1,targetingConfig:a={}}=n,{spaceId:d,senderKaminoLevel1:E,senderKaminoLevel2:g,senderDomain:m}=a,I="abp"===a.adBlocker;var t;if(window._YMI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	53377	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	651	OUT	GET /eh/prebid-config/bp-yahoo_login.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:14 UTC	819	IN	HTTP/1.1 200 OK x-amz-id-2: sCkckqdefzOcMf/whMHbqD+o8GVT1L/zKGmHAQdszWNc6T7IJZ0nMN/kRvROhXyUUfiA1NzR6dY= x-amz-request-id: TKVVXXZ2AEHZVB6K Date: Mon, 13 Jan 2025 10:38:56 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Fri, 10 Jan 2025 23:58:42 GMT ETag: "528852ed0b19ac7db47e2154706727fd" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Accept-Ranges: bytes Content-Type: application/json Content-Length: 49630 Server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 48859 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 72 61 6e 64 50 72 6f 74 65 63 74 69 6f 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 62 61 64 76 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 31 31 31 2e 63 6f 6d 2e 74 77 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 6b 65 79 67 6f 75 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 33 6f 61 6b 73 6f 72 63 68 61 72 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 34 33 63 62 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 34 65 76 65 72 73 74 61 6d 70 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 61 78 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "brandProtection": { "badv": { "1111.com.tw": true, "1keygou.com": true, "3oaksorchard.com": true, "43cbd.com": true, "4everstamp.com": true, "aax.com": true,
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 61 69 61 64 6d 6b 32 30 32 34 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6b 6b 75 6d 75 6c 79 61 74 6f 72 79 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6b 74 75 61 6c 6e 6f 73 74 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6b 76 61 62 61 69 6b 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 63 61 70 6f 6e 65 2d 75 73 2e 63 6f 6d 2f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 67 61 6e 75 64 61 2e 67 62 2e 6e 65 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 69 63 65 63 62 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 2d Data Ascii: aiadmk2024.org": true, "akkumulyatory.ru": true, "aktualnost.ru": true, "akvabaik.ru": true, "alcapone-us.com/": true, "alganuda.gb.net": true, "alicecbd.com": true, "all-
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 71 75 61 66 69 6c 74 72 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 61 62 69 61 6e 64 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 64 6f 72 74 65 6b 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 65 73 74 61 6e 74 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 69 65 63 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 74 65 6c 73 68 63 68 69 6b 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 66 69 6b 73 69 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 Data Ascii: ue, "aquafiltr.ru": true, "arabiandate.com": true, "ardortek.com": true, "arestanti.ru": true, "ariec.ru": true, "artelshchik.ru": true, "asfiksii.ru": true, "
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 6d 74 6c 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 65 66 2e 61 70 70 61 72 61 74 6e 61 79 61 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 67 69 6c 64 69 6e 67 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 6c 6c 65 6c 69 6c 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 6e 61 75 67 68 74 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 73 74 62 72 6f 77 73 65 72 74 6f 6f 6c 73 2e 6e 65 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 73 74 69 6e 76 65 73 74 6e 6f 77 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: mtlc.com": true, "beef.apparatnaya.ru": true, "begilding.com": true, "bellelily.com": true, "benaughty.com": true, "bestbrowsertools.net": true, "bestinvestnow.com": true,
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 6e 67 69 6e 6f 72 65 70 6f 72 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 70 73 61 69 6f 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 78 2d 70 72 6f 66 69 74 73 74 72 61 74 65 67 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 78 70 72 6f 66 69 74 73 74 72 61 74 65 67 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 79 65 72 73 65 6e 61 6d 2e 67 62 2e 6e 65 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 61 76 65 62 72 6f 77 73 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 Data Ascii: com": true, "bonginoreport.com": true, "bopsaio.com": true, "box-profitstrategy.com": true, "boxprofitstrategy.com": true, "boyersenam.gb.net": true, "bravebrowser.com": true,
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 63 75 6c 61 74 6f 72 77 68 69 7a 2e 63 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 6c 65 61 62 6f 74 6f 73 61 6e 69 75 6c 75 69 2e 72 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 6c 65 6e 64 61 72 70 6c 61 6e 6e 65 72 2e 63 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 6d 6e 61 74 69 6f 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 6d 70 61 6e 69 69 2e 70 6e 6c 2e 72 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 6e 64 69 64 61 74 69 2e 70 61 72 74 69 64 75 6c 72 65 70 65 72 2e 72 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 6e 6e 61 62 65 73 74 72 65 76 69 65 77 73 2e Data Ascii: culatorwhiz.co": true, "caleabotosaniului.ro": true, "calendarplanner.co": true, "camnation.com": true, "campanii.pnl.ro": true, "candidati.partidulreper.ro": true, "cannabestreviews.
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 61 74 73 61 70 70 2e 63 6f 6d 2f 63 79 36 63 6c 61 6a 38 6e 70 77 37 31 77 64 78 66 6b 6e 33 63 73 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 68 61 74 69 76 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 68 69 64 61 73 65 73 68 2e 65 73 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 68 6f 69 63 65 2d 63 62 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 68 72 69 73 69 73 70 61 6e 74 65 6c 69 64 65 73 2e 65 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 68 75 64 69 6b 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 68 79 76 73 74 72 61 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 Data Ascii: atsapp.com/cy6claj8npw71wdxfkn3cs": true, "chative.com": true, "chidasesh.es": true, "choice-cbd.com": true, "chrisispantelides.eu": true, "chudik.ru": true, "chyvstra.ru": true,
2025-01-14 00:13:14 UTC	1300	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 6e 76 65 72 74 77 69 74 68 77 61 76 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 72 6e 65 72 74 72 61 64 65 72 2e 63 68 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 73 65 74 74 65 63 68 69 63 68 69 72 61 75 2e 72 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 73 6d 69 6e 76 61 73 69 6c 65 2e 65 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 75 67 61 72 6c 69 66 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 75 70 65 72 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 70 6c 61 79 65 72 2e 62 6c 69 6e 6b 78 2e Data Ascii: , "convertwithwave.com": true, "cornertrader.ch": true, "cosettechichirau.ro": true, "cosminvasile.eu": true, "cougarlife.com": true, "coupert.com": true, "cplayer.blinkx.
2025-01-14 00:13:15 UTC	1300	IN	Data Raw: 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 72 65 61 6d 63 6f 6e 6e 65 63 74 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 72 65 61 70 74 61 75 6e 69 74 61 2e 65 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 72 65 73 73 75 70 70 61 72 74 79 67 61 6d 65 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 72 66 65 6b 65 74 65 6a 61 6e 6f 73 2e 68 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 72 69 76 69 6e 67 66 6f 72 63 65 67 61 6d 65 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 72 75 64 67 65 72 65 70 6f 72 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 Data Ascii: com": true, "dreamconnectt.com": true, "dreaptaunita.eu": true, "dressuppartygames.com": true, "drfeketejanos.hu": true, "drivingforcegames.com": true, "drudgereport.com": true,
2025-01-14 00:13:15 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 22 65 74 68 6f 73 63 61 6e 6e 61 62 69 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 74 6f 72 6f 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 75 2e 68 64 7a 2e 68 72 2f 7a 61 73 74 69 74 61 2d 67 72 61 6e 69 63 61 2d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 75 67 65 6e 2d 74 6f 6d 61 63 2e 72 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 75 72 6f 70 61 72 6c 61 6d 65 6e 74 61 72 69 32 30 32 34 2e 72 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 76 65 72 79 64 61 79 6f 70 74 69 6d 61 6c 63 62 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 76 6f 65 Data Ascii: "ethoscannabis.com": true, "etoro.com": true, "eu.hdz.hr/zastita-granica-": true, "eugen-tomac.ro": true, "europarlamentari2024.ro": true, "everydayoptimalcbd.com": true, "evoe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	53384	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	924	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B
2025-01-14 00:13:15 UTC	479	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:14 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:14 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:15 UTC	4	IN	Data Raw: 33 63 0d 0a Data Ascii: 3c
2025-01-14 00:13:15 UTC	49	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 65 53 31 4a 56 56 67 75 63 6b 77 35 52 54 4a 31 52 33 4a 4c 5a 47 4a 42 4f 44 4e 4c 55 31 4d 33 59 55 68 4c 61 48 56 Data Ascii: {"axid": "eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHV
2025-01-14 00:13:15 UTC	11	IN	Data Raw: 44 52 6e 68 34 58 33 35 42 22 7d Data Ascii: DRnh4X35B"}
2025-01-14 00:13:15 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	53382	65.9.66.17	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:14 UTC	832	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2my0; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A
2025-01-14 00:13:15 UTC	674	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9424 Connection: close Last-Modified: Tue, 17 Dec 2024 18:00:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 13 Jan 2025 23:39:46 GMT ETag: "2907cf83061833352832f902cf60546e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 46546eb404789d29bf372f6a3fe43876.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: v1kaWrlhK1fsMMpKEHwJZ_r5SlMQc3Cv99_h38H7cijEcl-Cnmz_nw== Age: 2009 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' cache-control: max-age=3600
2025-01-14 00:13:15 UTC	9424	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5b 5c 77 5d 2b 5c 2e 28 5b 5c 77 5d 2b 7c 63 6f 2e 75 6b 29 24 2f 29 5b 30 5d 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 22 22 7d 7d 3b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 3d 22 29 2c 6f 3d 28 74 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 Data Ascii: (()=>{"use strict";var n=function(n){if(n)return n;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(n){return""}};const t=function(n,t){for(var e="".concat(n,"="),o=(t\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	53385	142.250.186.66	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	464	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:15 UTC	780	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Tue, 14 Jan 2025 00:13:15 GMT Expires: Tue, 14 Jan 2025 00:13:15 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 444 / 20102 / 31089615 / config-hash: 351499629298614181 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 109361 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 00:13:15 UTC	610	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 70 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=type
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 75 3d 7b 7d 2c 66 61 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 66 61 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: h==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",u={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 76 28 75 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 69 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 28 65 61 26 26 74 Data Ascii: on(){return ha(aa(this))}})}return a},"es6");var ha=function(a){a={next:a};a[v(u.Symbol,"iterator")]=function(){return this};return a},ia=typeof Object.create=="function"?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if(ea&&t
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 71 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 72 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 Data Ascii: {for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)qa(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ra},"es6");var sa=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];retu
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 65 74 65 20 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 66 7d 2c 22 65 73 36 22 29 3b 77 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 76 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 79 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6c 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6c 2e 73 69 7a 65 21 3d 31 7c 7c 6c 2e 67 65 74 28 7b Data Ascii: ete g[d][this.g]:!1};return f},"es6");w("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!v(a.prototype,"entries")\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),l=new a(y([[h,"s"]]));if(l.get(h)!="s"\|\|l.size!=1\|\|l.get({
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6b 3d 76 28 74 68 69 73 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 71 3b 21 28 71 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 71 3d 71 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6c 2c 71 5b 31 5d 2c 71 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 76 28 75 2e 53 Data Ascii: this,function(h){return h.key})};c.prototype.values=function(){return e(this,function(h){return h.value})};c.prototype.forEach=function(h,l){for(var k=v(this,"entries").call(this),q;!(q=k.next()).done;)q=q.value,h.call(l,q[1],q[0],this)};c.prototype[v(u.S
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 3d 3d 3d 30 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 63 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 2e 63 6c 65 61 Data Ascii: )this.add(d.value)}this.size=this.g.size};b.prototype.add=function(c){c=c===0?0:c;this.g.set(c,c);this.size=this.g.size;return this};b.prototype.delete=function(c){c=this.g.delete(c);this.size=this.g.size;return c};b.prototype.clear=function(){this.g.clea
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 61 28 74 68 69 73 2c 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 21 3d 3d 2d 31 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 Data Ascii: pression");return a+""};w("String.prototype.includes",function(a){return a?a:function(b,c){return ta(this,b,"includes").indexOf(b,c\|\|0)!==-1}},"es6");w("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var e=[],f=typeof
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 76 28 75 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 Data Ascii: return g>=f}},"es6");var ua=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[v(u.Symbol,"iterator")]=function(){return e};return e
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 42 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 20 62 21 3d 22 6f 62 6a 65 63 74 22 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 2c 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 63 3d 63 7c 7c 42 3b 61 5b 30 5d 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 63 Data Ascii: t(".");for(var b=B,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},xa=function(a){var b=typeof a;return b!="object"?b:a?Array.isArray(a)?"array":b:"null"},ya=function(a,b,c){a=a.split(".");c=c\|\|B;a[0]in c\|\|typeof c.execScript=="undefined"\|\|c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	53386	142.250.185.98	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	750	OUT	GET /pagead/managed/js/gpt/m202501070101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:15 UTC	745	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 510147 X-XSS-Protection: 0 Date: Mon, 13 Jan 2025 17:19:42 GMT Expires: Tue, 13 Jan 2026 17:19:42 GMT Cache-Control: public, immutable, max-age=31536000 Age: 24813 ETag: 273197895018558538 Content-Type: text/javascript; charset=ISO-8859-1 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 00:13:15 UTC	645	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 4d 61 74 68 2e 75 75 69 64 2e 6a 73 20 28 76 31 2e 34 29 20 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 6d 61 69 6c 74 6f 3a 72 6f 62 65 72 74 40 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 43 6f 70 79 72 69 67 68 74 20 28 Data Ascii: NTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. / / Math.uuid.js (v1.4) http://www.broofa.com mailto:robert@broofa.com Copyright (
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 6b 6f 2c 6d 6f 2c 6c 6f 2c 74 6f 2c 75 6f 2c 76 6f 2c 77 6f 2c 6e 6f 2c 78 6f 2c 6f 6f 2c 7a 6f 2c 42 6f 2c 43 6f 2c 47 6f 2c 48 6f 2c 4e 6f 2c 4d 6f 2c 52 6f 2c 57 6f 2c 58 6f 2c 59 6f 2c 5a 6f 2c 61 70 2c 62 70 2c 68 70 2c 69 70 2c 6a 70 2c 6c 70 2c 70 70 2c 71 70 2c 75 70 2c 77 70 2c 78 70 2c 79 70 2c 7a 70 2c 42 70 2c 43 70 2c 48 70 2c 49 70 2c 4a 70 2c 4e 70 2c 47 70 2c 50 70 2c 51 70 2c 52 70 2c 54 70 2c 57 70 2c 59 70 2c 5a 70 2c 24 70 2c 61 71 2c 63 71 2c 65 71 2c 66 71 2c 68 71 2c 69 71 2c 6a 71 2c 6b 71 2c 6c 71 2c 6d 71 2c 70 71 2c 71 71 2c 75 71 2c 77 71 2c 76 71 2c 7a 71 2c 41 71 2c 42 71 2c 46 71 2c 47 71 2c 49 71 2c 48 71 2c 4b 71 2c 4d 71 2c 4f 71 2c 58 71 2c 5a 71 2c 64 72 2c 66 72 2c 67 72 2c 70 72 2c 73 72 2c 71 72 2c 72 72 2c 7a 72 2c Data Ascii: ko,mo,lo,to,uo,vo,wo,no,xo,oo,zo,Bo,Co,Go,Ho,No,Mo,Ro,Wo,Xo,Yo,Zo,ap,bp,hp,ip,jp,lp,pp,qp,up,wp,xp,yp,zp,Bp,Cp,Hp,Ip,Jp,Np,Gp,Pp,Qp,Rp,Tp,Wp,Yp,Zp,$p,aq,cq,eq,fq,hq,iq,jq,kq,lq,mq,pq,qq,uq,wq,vq,zq,Aq,Bq,Fq,Gq,Iq,Hq,Kq,Mq,Oq,Xq,Zq,dr,fr,gr,pr,sr,qr,rr,zr,
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 7c 28 6c 61 28 29 3f 30 3a 68 61 28 22 45 64 67 65 22 29 29 7c 7c 28 6c 61 28 29 3f 66 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 68 61 28 22 45 64 67 2f 22 29 29 7c 7c 28 6c 61 28 29 3f 66 61 28 22 4f 70 65 72 61 22 29 3a 68 61 28 22 4f 50 52 22 29 29 7c 7c 5f 2e 6e 61 28 29 7c 7c 68 61 28 22 53 69 6c 6b 22 29 7c 7c 68 61 28 22 41 6e 64 72 6f 69 64 22 29 29 7d 3b 5f 2e 70 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 61 28 29 3f 66 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 68 61 28 22 43 68 72 6f 6d 65 22 29 7c 7c 68 61 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 6c 61 28 29 3f 30 3a 68 61 28 22 45 64 67 65 22 29 29 7c 7c 68 61 28 22 53 69 6c 6b 22 29 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 61 3d 3d 3d 76 6f Data Ascii: \|(la()?0:ha("Edge"))\|\|(la()?fa("Microsoft Edge"):ha("Edg/"))\|\|(la()?fa("Opera"):ha("OPR"))\|\|_.na()\|\|ha("Silk")\|\|ha("Android"))};_.pa=function(){return la()?fa("Chromium"):(ha("Chrome")\|\|ha("CriOS"))&&!(la()?0:ha("Edge"))\|\|ha("Silk")};sa=function(){ra===vo
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 6f 66 20 5f 2e 4f 61 29 72 65 74 75 72 6e 20 61 2e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 7d 3b 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 3e 3d 30 3b 2d 2d 64 29 64 20 69 6e 20 63 26 26 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 63 5b 64 5d 2c 64 2c 61 29 7d 3b 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 52 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 62 3e 3d 30 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f Data Ascii: of _.Oa)return a.g;throw Error("");};Qa=function(a,b){for(var c=typeof a==="string"?a.split(""):a,d=a.length-1;d>=0;--d)d in c&&b.call(void 0,c[d],d,a)};Ta=function(a,b){b=_.Ra(a,b);var c;(c=b>=0)&&Array.prototype.splice.call(a,b,1);return c};_.Ua=functio
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 3d 38 31 39 32 29 66 6f 72 28 76 61 72 20 66 3d 68 62 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 57 61 28 64 2c 65 2c 65 2b 38 31 39 32 29 29 2c 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 3b 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 7d 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: length;c++){var d=arguments[c];if(Array.isArray(d))for(var e=0;e<d.length;e+=8192)for(var f=hb.apply(null,Wa(d,e,e+8192)),g=0;g<f.length;g++)b.push(f[g]);else b.push(d)}return b};jb=function(a){a=a(function(b){b.stack=Error().stack});a.prototype=Object.cr
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 7d 72 65 74 75 72 6e 20 61 7d 3b 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 71 62 29 72 65 74 75 72 6e 20 72 62 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 Data Ascii: }return a};pb=function(a){_.t.setTimeout(function(){throw a;},0)};sb=function(a){if(!qb)return rb(a);for(var b="",c=0,d=a.length-10240;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);retu
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 3b 58 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 61 3d 61 3f 6e 65 77 20 56 62 28 61 2c 78 62 29 3a 57 62 28 29 3b 65 6c 73 65 20 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 56 62 29 69 66 28 77 62 28 61 29 29 61 3d 61 2e 6c 65 6e 67 74 68 3f 6e 65 77 20 56 62 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 2c 78 62 29 3a 57 62 28 29 3b 65 6c 73 65 7b 69 66 28 21 62 29 74 68 72 Data Ascii: on(a){return a!==null&&typeof a==="object"&&!Array.isArray(a)&&a.constructor===Object};Xb=function(a,b){if(a!=null)if(typeof a==="string")a=a?new Vb(a,xb):Wb();else if(a.constructor!==Vb)if(wb(a))a=a.length?new Vb(new Uint8Array(a),xb):Wb();else{if(!b)thr
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 7d 3b 75 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 63 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 73 63 28 61 29 3f 61 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 63 28 62 29 7d 29 3a 21 31 7d 29 7d 3b 79 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 3b 69 66 28 74 63 28 62 29 29 7b 69 66 28 21 2f 5e 5c 73 2a 28 3f 3a 2d 3f 5b 31 2d 39 5d 5c 64 2a 7c 30 29 3f 5c 73 2a 24 2f 2e 74 65 73 74 28 62 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 62 29 29 3b 7d 65 6c 73 65 20 69 66 28 76 63 28 62 29 26 26 21 5f 2e 78 28 4e 75 6d 62 65 72 2c 22 69 73 53 61 66 65 49 6e 74 65 67 65 72 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 62 29 29 74 68 72 6f 77 20 45 Data Ascii: };uc=function(){return hc(function(a){return sc(a)?a.every(function(b){return tc(b)}):!1})};yc=function(a){var b=a;if(tc(b)){if(!/^\s(?:-?[1-9]\d\|0)?\s*$/.test(b))throw Error(String(b));}else if(vc(b)&&!_.x(Number,"isSafeInteger").call(Number,b))throw E
2025-01-14 00:13:15 UTC	1390	IN	Data Raw: 28 51 62 28 29 29 61 3d 42 69 67 49 6e 74 28 61 29 2c 5f 2e 41 63 3d 4e 75 6d 62 65 72 28 61 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3e 3e 3e 30 2c 5f 2e 42 63 3d 4e 75 6d 62 65 72 28 61 3e 3e 42 69 67 49 6e 74 28 33 32 29 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3b 65 6c 73 65 7b 76 61 72 20 62 3d 2b 28 61 5b 30 5d 3d 3d 3d 22 2d 22 29 3b 5f 2e 42 63 3d 5f 2e 41 63 3d 30 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 62 2c 65 3d 28 63 2d 62 29 25 36 2b 62 3b 65 3c 3d 63 3b 64 3d 65 2c 65 2b 3d 36 29 64 3d 4e 75 6d 62 65 72 28 61 2e 73 6c 69 63 65 28 64 2c 65 29 29 2c 5f 2e 42 63 2a 3d 31 45 36 2c 5f 2e 41 63 3d 5f 2e 41 63 2a 31 45 36 2b 64 2c 5f 2e 41 63 3e 3d 34 32 39 34 39 36 37 32 39 36 26 26 Data Ascii: (Qb())a=BigInt(a),_.Ac=Number(a&BigInt(4294967295))>>>0,_.Bc=Number(a>>BigInt(32)&BigInt(4294967295));else{var b=+(a[0]==="-");_.Bc=_.Ac=0;for(var c=a.length,d=b,e=(c-b)%6+b;e<=c;d=e,e+=6)d=Number(a.slice(d,e)),_.Bc=1E6,_.Ac=_.Ac1E6+d,_.Ac>=4294967296&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	53387	104.18.22.145	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	364	OUT	GET /d1tqrs7vz94d9k/script.js HTTP/1.1 Host: cadmus.script.ac Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:15 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:15 GMT Content-Type: application/javascript Content-Length: 162846 Connection: close Age: 0 Cache-Control: public,max-age=600,stale-while-revalidate=3600,stale-if-error=86400 ETag: W/"5707aff805441b04818025d7451573433422aedb" Last-Modified: Mon, 13 Jan 2025 14:24:49 GMT Server: cloudflare CF-RAY: 90196b4b8d7d5e6b-EWR
2025-01-14 00:13:15 UTC	992	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 5b 27 43 32 6e 59 41 78 62 30 43 57 3d 3d 27 2c 27 74 4b 7a 6f 27 2c 27 41 77 35 50 44 61 3d 3d 27 2c 27 79 77 6a 56 44 78 71 36 79 4d 58 48 42 4d 53 3d 27 2c 27 6a 4e 75 39 27 2c 27 69 67 4c 55 69 61 3d 3d 27 2c 27 45 68 62 54 27 2c 27 70 73 48 43 7a 63 53 50 78 68 6d 3d 27 2c 27 79 32 7a 4e 6c 77 76 32 79 77 57 3d 27 2c 27 71 4b 39 65 77 71 3d 3d 27 2c 27 44 77 35 5a 41 67 4c 4d 44 61 3d 3d 27 2c 27 63 49 61 47 69 63 62 48 44 63 62 48 79 4d 39 31 44 64 50 5a 43 4d 6e 4b 42 32 6d 36 27 2c 27 41 68 72 30 43 68 6d 36 27 2c 27 69 68 57 47 43 33 72 48 79 32 53 36 69 61 3d 3d 27 2c 27 41 77 31 4e 77 32 66 53 44 66 30 53 69 68 6e 57 79 77 35 42 44 67 4c 30 42 67 76 44 27 2c 27 43 32 39 59 44 61 Data Ascii: (new function(){var c=['C2nYAxb0CW==','tKzo','Aw5PDa==','ywjVDxq6yMXHBMS=','jNu9','igLUia==','EhbT','psHCzcSPxhm=','y2zNlwv2ywW=','qK9ewq==','Dw5ZAgLMDa==','cIaGicbHDcbHyM91DdPZCMnKB2m6','Ahr0Chm6','ihWGC3rHy2S6ia==','Aw1Nw2fSDf0SihnWyw5BDgL0BgvD','C29YDa
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 27 2c 27 74 75 58 71 6c 4c 62 63 73 4c 6d 3d 27 2c 27 44 68 6a 48 79 32 76 4b 27 2c 27 41 68 72 54 42 65 72 48 44 67 65 3d 27 2c 27 42 4d 66 32 41 77 44 48 44 67 75 3d 27 2c 27 77 30 76 46 71 31 6e 71 78 73 61 3d 27 2c 27 42 78 76 30 7a 77 71 47 27 2c 27 79 77 6e 30 41 77 39 55 74 67 39 4e 72 67 66 30 79 71 3d 3d 27 2c 27 41 77 71 39 27 2c 27 43 32 76 55 7a 61 3d 3d 27 2c 27 42 4d 39 4b 7a 76 72 35 43 67 75 3d 27 2c 27 43 32 76 30 76 67 4c 54 7a 77 39 31 44 61 3d 3d 27 2c 27 73 66 72 6e 74 66 6e 4a 43 4d 4c 57 44 65 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 7a 4e 6a 56 42 75 6e 4f 79 78 6a 64 42 32 72 4c 27 2c 27 42 4d 66 32 41 77 44 48 44 67 4c 56 42 47 3d 3d 27 2c 27 44 67 39 74 44 68 6a 50 42 4d 43 3d 27 2c 27 79 78 62 50 71 78 76 30 42 33 62 53 79 78 4b Data Ascii: ','tuXqlLbcsLm=','DhjHy2vK','AhrTBerHDge=','BMf2AwDHDgu=','w0vFq1nqxsa=','Bxv0zwqG','ywn0Aw9Utg9Nrgf0yq==','Awq9','C2vUza==','BM9Kzvr5Cgu=','C2v0vgLTzw91Da==','sfrntfnJCMLWDevSzw1LBNq=','zNjVBunOyxjdB2rL','BMf2AwDHDgLVBG==','Dg9tDhjPBMC=','yxbPqxv0B3bSyxK
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 53 27 2c 27 43 67 66 59 7a 77 35 30 74 4d 39 4b 7a 71 3d 3d 27 2c 27 7a 78 7a 30 6c 77 48 59 44 57 3d 3d 27 2c 27 72 65 4c 77 27 2c 27 6a 49 6d 5a 6f 74 53 3d 27 2c 27 7a 67 76 53 7a 78 72 4c 27 2c 27 41 4e 6e 56 42 47 3d 3d 27 2c 27 72 32 39 30 79 32 48 48 27 2c 27 7a 4e 6a 48 42 77 76 74 43 4d 6d 3d 27 2c 27 6f 59 62 5a 79 33 6a 50 43 68 71 54 43 33 6a 4a 69 63 44 55 42 32 35 4a 7a 73 30 3d 27 2c 27 7a 67 4c 59 27 2c 27 74 49 39 62 27 2c 27 43 32 66 4d 7a 75 7a 59 79 77 31 4c 27 2c 27 77 30 76 73 75 4c 39 6e 78 30 4c 65 77 66 30 3d 27 2c 27 43 67 76 59 7a 4d 39 59 42 77 66 55 79 32 75 3d 27 2c 27 69 4c 30 55 43 68 76 30 69 68 58 38 69 67 7a 31 42 4d 6e 30 41 77 39 55 6b 67 48 30 42 77 57 50 69 68 53 47 7a 67 39 4a 44 77 31 4c 42 4e 71 55 44 33 6a 50 44 Data Ascii: S','CgfYzw50tM9Kzq==','zxz0lwHYDW==','reLw','jImZotS=','zgvSzxrL','ANnVBG==','r290y2HH','zNjHBwvtCMm=','oYbZy3jPChqTC3jJicDUB25Jzs0=','zgLY','tI9b','C2fMzuzYyw1L','w0vsuL9nx0Lewf0=','CgvYzM9YBwfUy2u=','iL0UChv0ihX8igz1BMn0Aw9UkgH0BwWPihSGzg9JDw1LBNqUD3jPD
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 76 31 6e 79 74 59 61 56 69 61 3d 3d 27 2c 27 43 4d 76 30 44 78 6a 55 69 63 61 4b 43 68 48 35 27 2c 27 79 32 4c 4b 27 2c 27 43 32 76 30 75 68 6a 56 44 67 39 30 45 78 62 4c 74 32 79 3d 27 2c 27 73 66 72 6e 74 65 72 56 79 33 76 54 7a 77 35 30 6c 4d 4c 55 41 4d 76 4a 44 61 3d 3d 27 2c 27 44 67 39 6d 42 33 44 4c 43 4b 6e 48 43 32 75 3d 27 2c 27 74 76 6e 6a 72 71 3d 3d 27 2c 27 73 66 72 6e 74 65 31 4c 7a 67 4c 48 72 77 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 6b 67 35 31 42 67 57 53 27 2c 27 69 49 61 54 70 73 61 3d 27 2c 27 6c 63 62 4a 44 77 75 36 69 61 3d 3d 27 2c 27 76 32 76 49 75 32 39 4a 41 32 76 30 27 2c 27 7a 4e 6a 56 42 71 3d 3d 27 2c 27 71 4d 4c 4b 71 77 72 48 43 68 72 4c 43 47 3d 3d 27 2c 27 41 67 76 48 7a 67 76 59 Data Ascii: XLBwvUDa==','v1nytYaVia==','CMv0DxjUicaKChH5','y2LK','C2v0uhjVDg90ExbLt2y=','sfrnterVy3vTzw50lMLUAMvJDa==','Dg9mB3DLCKnHC2u=','tvnjrq==','sfrnte1LzgLHrwXLBwvUDa==','kg51BgWS','iIaTpsa=','lcbJDwu6ia==','v2vIu29JA2v0','zNjVBq==','qMLKqwrHChrLCG==','AgvHzgvY
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 30 43 47 3d 3d 27 2c 27 79 32 48 48 43 4b 6e 56 7a 67 76 62 44 61 3d 3d 27 2c 27 7a 78 7a 30 6c 77 47 35 41 32 53 3d 27 2c 27 41 4e 6e 30 45 4d 39 4d 7a 4e 6e 4c 44 61 3d 3d 27 2c 27 42 77 39 36 73 77 35 55 7a 78 6a 74 79 33 6a 4c 7a 77 35 79 27 2c 27 70 68 6a 4a 44 64 35 33 41 77 71 39 27 2c 27 43 4d 76 55 7a 67 76 59 71 4d 58 56 79 32 54 50 42 4d 44 74 44 67 66 30 44 78 6d 3d 27 2c 27 43 4d 76 51 7a 77 6e 30 27 2c 27 43 4d 76 48 7a 68 4c 74 44 67 66 30 7a 71 3d 3d 27 2c 27 71 78 6a 59 79 78 4b 3d 27 2c 27 7a 4d 4c 59 43 33 72 66 42 67 76 54 7a 77 35 30 71 32 48 50 42 67 71 3d 27 2c 27 74 4d 39 4b 7a 71 3d 3d 27 2c 27 43 67 66 4e 7a 77 48 50 7a 67 75 3d 27 2c 27 7a 4d 4c 34 7a 77 71 3d 27 2c 27 42 4d 39 4b 7a 75 35 48 42 77 75 3d 27 2c 27 73 66 72 6e 74 Data Ascii: 0CG==','y2HHCKnVzgvbDa==','zxz0lwG5A2S=','ANn0EM9MzNnLDa==','Bw96sw5Uzxjty3jLzw5y','phjJDd53Awq9','CMvUzgvYqMXVy2TPBMDtDgf0Dxm=','CMvQzwn0','CMvHzhLtDgf0zq==','qxjYyxK=','zMLYC3rfBgvTzw50q2HPBgq=','tM9Kzq==','CgfNzwHPzgu=','zML4zwq=','BM9Kzu5HBwu=','sfrnt
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 2c 27 70 4a 57 56 27 2c 27 79 32 39 55 79 32 66 30 27 2c 27 72 4c 6a 62 74 75 75 3d 27 2c 27 72 65 39 64 76 75 31 66 74 4c 72 46 72 4c 6a 62 72 30 31 66 74 4c 72 46 74 4b 39 65 72 71 3d 3d 27 2c 27 42 4d 66 54 7a 71 3d 3d 27 2c 27 6a 67 50 5a 79 32 39 54 43 66 39 4f 41 77 72 4b 7a 77 35 46 27 2c 27 42 32 35 54 42 33 76 5a 7a 77 72 56 44 32 34 3d 27 2c 27 79 32 39 55 44 67 76 55 44 61 3d 3d 27 2c 27 43 33 72 48 79 32 53 36 69 61 3d 3d 27 2c 27 79 78 62 57 42 68 4b 3d 27 2c 27 79 77 35 4a 7a 78 6e 30 42 33 6a 70 43 4d 4c 4e 41 77 35 5a 27 2c 27 43 32 39 32 43 4d 34 54 79 32 39 55 42 4d 76 4a 44 63 31 48 7a 61 3d 3d 27 2c 27 41 77 7a 59 79 77 31 4c 6f 49 61 3d 27 2c 27 71 76 62 71 27 2c 27 73 65 6e 76 27 2c 27 43 4d 76 30 44 78 6a 55 69 68 44 50 42 4d 72 56 Data Ascii: ,'pJWV','y29Uy2f0','rLjbtuu=','re9dvu1ftLrFrLjbr01ftLrFtK9erq==','BMfTzq==','jgPZy29TCf9OAwrKzw5F','B25TB3vZzwrVD24=','y29UDgvUDa==','C3rHy2S6ia==','yxbWBhK=','yw5Jzxn0B3jpCMLNAw5Z','C292CM4Ty29UBMvJDc1Hza==','AwzYyw1LoIa=','qvbq','senv','CMv0DxjUihDPBMrV
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 3d 3d 27 2c 27 44 32 58 4e 27 2c 27 41 77 35 57 44 78 71 3d 27 2c 27 41 77 35 71 42 67 66 4a 7a 77 31 4c 42 4e 71 3d 27 2c 27 42 4d 66 32 41 77 44 48 44 67 39 59 27 2c 27 79 78 62 50 72 4e 6a 48 42 77 76 74 79 47 3d 3d 27 2c 27 75 65 39 74 76 61 3d 3d 27 2c 27 72 78 7a 4c 42 4e 72 5a 27 2c 27 79 33 6a 4c 79 78 72 4c 27 2c 27 79 78 62 57 42 67 4c 4a 79 78 72 50 42 32 34 56 45 63 31 33 44 33 43 54 7a 4d 39 59 42 73 31 31 43 4d 58 4c 42 4d 6e 56 7a 67 76 4b 27 2c 27 72 65 39 6e 71 32 39 55 44 67 76 55 44 65 58 56 79 77 72 4c 7a 61 3d 3d 27 2c 27 7a 4d 58 56 42 33 69 3d 27 2c 27 79 33 6a 4c 79 78 72 4c 76 68 6a 4c 7a 76 44 48 42 67 54 4c 43 47 3d 3d 27 2c 27 41 67 66 55 7a 67 58 4c 72 78 7a 4c 42 4e 71 3d 27 2c 27 42 33 62 48 79 32 4c 30 45 71 3d 3d 27 2c 27 Data Ascii: ==','D2XN','Aw5WDxq=','Aw5qBgfJzw1LBNq=','BMf2AwDHDg9Y','yxbPrNjHBwvtyG==','ue9tva==','rxzLBNrZ','y3jLyxrL','yxbWBgLJyxrPB24VEc13D3CTzM9YBs11CMXLBMnVzgvK','re9nq29UDgvUDeXVywrLza==','zMXVB3i=','y3jLyxrLvhjLzvDHBgTLCG==','AgfUzgXLrxzLBNq=','B3bHy2L0Eq==','
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 27 2c 27 79 78 62 57 7a 77 35 4b 27 2c 27 72 76 48 71 6c 76 72 70 27 2c 27 43 32 76 30 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 79 4d 4c 4b 7a 67 76 59 71 32 39 4b 7a 71 3d 3d 27 2c 27 73 66 72 6e 74 65 4c 67 43 4d 66 54 7a 75 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 6c 4b 39 76 76 65 6a 73 71 75 4c 6f 77 32 72 48 44 67 65 54 44 32 4c 4b 7a 32 76 30 6c 77 4c 4b 78 71 3d 3d 27 2c 27 72 4e 6a 48 42 77 75 3d 27 2c 27 79 32 66 53 42 61 3d 3d 27 2c 27 43 4e 76 55 27 2c 27 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 27 2c 27 70 68 6e 4a 43 4d 4c 57 44 64 34 4f 6b 63 4b 39 70 4e 54 4b 42 32 6e 31 42 77 76 55 44 63 35 4a 44 78 6a 59 7a 77 35 30 75 32 6e 59 41 78 62 30 69 63 79 4d 69 67 72 56 79 33 76 54 7a 77 35 30 6c 4d 6e 31 43 4e 6a 4c 42 4e 72 74 79 33 6a 50 43 68 Data Ascii: ','yxbWzw5K','rvHqlvrp','C2v0qxr0CMLIDxrL','yMLKzgvYq29Kzq==','sfrnteLgCMfTzuvSzw1LBNq=','lK9vvejsquLow2rHDgeTD2LKz2v0lwLKxq==','rNjHBwu=','y2fSBa==','CNvU','BwvZC2fNzq==','phnJCMLWDd4OkcK9pNTKB2n1BwvUDc5JDxjYzw50u2nYAxb0icyMigrVy3vTzw50lMn1CNjLBNrty3jPCh
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 33 71 3d 27 2c 27 43 32 66 55 7a 67 6a 56 45 64 30 49 27 2c 27 79 77 58 30 27 2c 27 70 68 6a 4a 44 64 35 30 7a 33 71 39 27 2c 27 7a 78 7a 30 6c 78 44 5a 45 67 38 3d 27 2c 27 43 32 76 48 43 4d 6e 4f 27 2c 27 42 4e 6d 48 27 2c 27 79 33 76 59 43 4d 76 55 44 66 72 50 42 77 75 3d 27 2c 27 7a 78 7a 30 6c 77 58 30 43 4e 61 59 27 2c 27 7a 4d 7a 4a 7a 68 61 3d 27 2c 27 76 30 44 6d 6d 47 3d 3d 27 2c 27 7a 32 76 30 72 78 7a 4c 42 4e 72 5a 27 2c 27 43 67 39 5a 41 78 72 50 42 32 34 3d 27 2c 27 6a 4d 66 4b 42 32 31 48 41 77 35 5a 70 71 3d 3d 27 2c 27 7a 78 7a 30 6c 78 62 49 79 4d 75 3d 27 2c 27 79 78 6a 4e 43 57 3d 3d 27 2c 27 79 78 62 50 76 4d 76 59 43 32 4c 56 42 4c 6e 31 7a 4d 7a 50 45 61 3d 3d 27 2c 27 7a 67 76 49 44 77 44 4e 7a 78 69 3d 27 2c 27 6c 63 62 4a 79 77 Data Ascii: 3q=','C2fUzgjVEd0I','ywX0','phjJDd50z3q9','zxz0lxDZEg8=','C2vHCMnO','BNmH','y3vYCMvUDfrPBwu=','zxz0lwX0CNaY','zMzJzha=','v0DmmG==','z2v0rxzLBNrZ','Cg9ZAxrPB24=','jMfKB21HAw5Zpq==','zxz0lxbIyMu=','yxjNCW==','yxbPvMvYC2LVBLn1zMzPEa==','zgvIDwDNzxi=','lcbJyw
2025-01-14 00:13:15 UTC	1369	IN	Data Raw: 7a 78 69 3d 27 2c 27 43 32 50 5a 27 2c 27 69 63 61 47 69 67 66 30 69 67 44 4c 44 61 3d 3d 27 2c 27 79 4d 58 56 79 47 3d 3d 27 2c 27 76 65 39 71 27 2c 27 79 32 66 53 42 67 76 59 6f 49 61 3d 27 2c 27 73 66 72 6e 74 65 6a 48 43 32 76 66 42 67 76 54 7a 77 35 30 27 2c 27 79 32 39 55 44 67 66 50 42 4e 6d 3d 27 2c 27 79 4d 58 56 79 32 53 3d 27 2c 27 7a 67 76 4d 79 78 76 53 44 66 7a 50 7a 78 43 3d 27 2c 27 73 66 7a 62 72 61 3d 3d 27 2c 27 6c 4d 72 56 79 33 76 54 7a 77 35 30 6c 61 3d 3d 27 2c 27 6e 63 34 59 6f 63 34 33 27 2c 27 43 32 48 50 7a 4e 71 3d 27 2c 27 77 30 76 73 75 4c 39 65 78 71 3d 3d 27 2c 27 79 33 44 5a 27 2c 27 43 67 66 4e 7a 78 7a 50 7a 78 43 3d 27 2c 27 7a 78 7a 4c 42 4e 72 75 45 78 62 4c 27 2c 27 43 32 76 30 73 78 72 4c 42 71 3d 3d 27 2c 27 43 33 Data Ascii: zxi=','C2PZ','icaGigf0igDLDa==','yMXVyG==','ve9q','y2fSBgvYoIa=','sfrntejHC2vfBgvTzw50','y29UDgfPBNm=','yMXVy2S=','zgvMyxvSDfzPzxC=','sfzbra==','lMrVy3vTzw50la==','nc4Yoc43','C2HPzNq=','w0vsuL9exq==','y3DZ','CgfNzxzPzxC=','zxzLBNruExbL','C2v0sxrLBq==','C3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	53388	34.95.69.49	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	574	OUT	OPTIONS /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://gpt.mail.yahoo.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:15 UTC	492	IN	HTTP/1.1 204 No Content Server: nginx/1.21.6 Date: Tue, 14 Jan 2025 00:13:15 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Max-Age: 1728000 Content-Type: text/plain; charset=utf-8 Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	53389	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	378	OUT	GET /eh/prebid-config/yahoo_login-us-desktop.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	565	IN	HTTP/1.1 200 OK x-amz-id-2: j7/Vg2w5FwGX+cs5R+XnX7VWr/pdwqobTdtZ8T/HwVKAXJH25kE+rxTw2ctCC5hBwQJlzH5v5yg= x-amz-request-id: 7Z99RPPDDRTG79KV Date: Tue, 14 Jan 2025 00:13:17 GMT Last-Modified: Mon, 13 Jan 2025 17:59:45 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=1800 Accept-Ranges: bytes Content-Type: application/json Content-Length: 10643 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "5f44fedc149f31735b3940d1ec873027" Age: 2 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 70 72 65 62 69 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 61 64 55 6e 69 74 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 5f 79 6c 6f 67 69 6e 5f 6d 61 69 6e 5f 64 74 5f 66 75 6c 6c 5f 73 63 72 65 65 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 70 6f 73 22 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 66 6f 72 6d 61 74 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 6e 6e 65 72 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "prebid": { "adUnits": { "us_ylogin_main_dt_full_screen": { "pos": 1, "formats": { "banner": { "sizes": [ [
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 69 6d 65 6f 75 74 22 3a 20 32 30 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 69 63 65 47 72 61 6e 75 6c 61 72 69 74 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 63 6b 65 74 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 61 78 22 3a 20 31 30 30 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6e 63 72 65 6d 65 6e 74 22 3a 20 30 2e 30 31 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 65 42 69 64 43 Data Ascii: imeout": 2000, "priceGranularity": { "buckets": [ { "max": 10000, "increment": 0.01 } ] }, "useBidC
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 79 61 68 6f 6f 50 72 65 62 69 64 53 65 72 76 65 72 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 70 75 72 70 6f 73 65 22 3a 20 22 6d 65 61 73 75 72 65 6d 65 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 66 6f 72 63 65 50 75 72 70 6f 73 65 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 66 Data Ascii: "yahooPrebidServer" ] }, { "purpose": "measurement", "enforcePurpose": true, "enf
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 22 69 6e 64 65 78 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 70 65 6e 78 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 6f 6e 49 64 22 3a 20 74 72 75 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 74 6f 72 61 67 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 5f 6c 69 5f 70 62 69 Data Ascii: "index": true, "openx": true, "nonId": true } }, "storage": { "name": "_li_pbi
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 22 73 68 61 72 65 64 49 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 74 6f 72 61 67 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 5f 73 68 61 72 65 64 49 44 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 68 74 6d 6c 35 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 78 70 69 72 65 73 22 3a 20 33 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 Data Ascii: "sharedId", "storage": { "name": "_sharedID", "type": "html5", "expires": 30 } } ],
2025-01-14 00:13:16 UTC	1098	IN	Data Raw: 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 66 61 75 6c 74 22 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 5f 79 6c 6f 67 69 6e 5f 6d 61 69 6e 5f 64 74 5f 66 75 6c 6c 5f 73 63 72 65 65 6e 22 3a 20 30 2e 39 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 66 6f 72 63 65 6d 65 6e 74 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 66 6f 72 63 65 Data Ascii: ] }, "default": 0, "values": { "us_ylogin_main_dt_full_screen": 0.9 } }, "enforcement": { "enforce
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 20 20 22 4e 4c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 50 54 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 53 45 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 53 49 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 53 4b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 45 46 54 41 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 43 48 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 49 53 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 49 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "NL", "PL", "PT", "RO", "SE", "SI", "SK" ], "EFTA": [ "CH", "IS", "LI",
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 22 75 73 65 72 52 65 67 69 6f 6e 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 45 55 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 45 46 54 41 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 65 72 49 64 4d 6f 64 75 6c 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 76 65 49 6e 74 65 6e 74 49 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "userRegion": [ "EU", "EFTA" ] } } }, "userIdModules": { "liveIntentId": {
2025-01-14 00:13:16 UTC	445	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 22 62 69 64 64 65 72 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 79 61 68 6f 6f 50 72 65 62 69 64 53 65 72 76 65 72 22 3a 20 7b 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 79 61 68 6f 6f 41 64 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 63 6e 22 3a 20 22 38 61 39 36 39 30 33 35 30 31 38 37 38 37 34 63 62 33 30 66 38 30 36 33 63 32 38 63 30 30 61 31 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 70 6f 73 22 3a 20 22 75 73 5f 79 6c 6f 67 69 6e 5f 6d 61 69 6e 5f 64 74 5f 66 75 6c 6c 5f 73 Data Ascii: "html5" ] } }, "bidders": { "yahooPrebidServer": {}, "yahooAds": { "dcn": "8a9690350187874cb30f8063c28c00a1", "pos": "us_ylogin_main_dt_full_s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	53392	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	976	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0:19e7~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A
2025-01-14 00:13:15 UTC	489	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:15 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0:19e7~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:15 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:15 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:15 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 66 58 4b 35 44 63 42 45 32 75 4a 54 48 75 4d 6d 53 42 45 31 45 52 6f 65 4f 6e 52 46 65 67 38 44 7e 41 22 7d Data Ascii: {"axid": "y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A"}
2025-01-14 00:13:15 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	53393	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	1061	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A; IDSYNC="19cw~2my0:19e0~2my0"
2025-01-14 00:13:15 UTC	590	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:15 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://gpt.mail.yahoo.net Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:15 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:15 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:15 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 30 52 62 6f 4d 61 4e 45 32 75 49 65 57 6b 34 46 4b 61 46 31 5f 62 76 51 68 49 45 78 41 6a 65 59 7e 41 22 7d Data Ascii: {"axid": "y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A"}
2025-01-14 00:13:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 00:13:15 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-14 00:13:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	53391	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	1192	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0:19e7~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A
2025-01-14 00:13:15 UTC	607	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:15 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://login.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:15 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:15 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:15 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 61 54 77 33 56 6c 6c 45 32 75 49 47 72 49 54 73 42 68 74 67 69 52 5a 55 56 54 5a 56 35 52 56 49 7e 41 22 7d Data Ascii: {"axid": "y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A"}
2025-01-14 00:13:15 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	53394	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	370	OUT	GET /eh/prebid-config/bp-yahoo_login.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	593	IN	HTTP/1.1 200 OK x-amz-id-2: 1Kq1Kq4ZusXcXUc6Aopu8JxTELmklT+AcHlHWyq5arwGherwAM9nl0yBChYAznYiFoulvgorfL4= x-amz-request-id: BGTF60JR5T1KVX7W Date: Mon, 13 Jan 2025 11:37:28 GMT Last-Modified: Fri, 10 Jan 2025 23:58:42 GMT ETag: "528852ed0b19ac7db47e2154706727fd" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Accept-Ranges: bytes Content-Type: application/json Content-Length: 49630 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 45349 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 72 61 6e 64 50 72 6f 74 65 63 74 69 6f 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 62 61 64 76 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 31 31 31 2e 63 6f 6d 2e 74 77 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 6b 65 79 67 6f 75 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 33 6f 61 6b 73 6f 72 63 68 61 72 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 34 33 63 62 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 34 65 76 65 72 73 74 61 6d 70 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 61 78 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "brandProtection": { "badv": { "1111.com.tw": true, "1keygou.com": true, "3oaksorchard.com": true, "43cbd.com": true, "4everstamp.com": true, "aax.com": true,
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 61 69 61 64 6d 6b 32 30 32 34 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6b 6b 75 6d 75 6c 79 61 74 6f 72 79 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6b 74 75 61 6c 6e 6f 73 74 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6b 76 61 62 61 69 6b 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 63 61 70 6f 6e 65 2d 75 73 2e 63 6f 6d 2f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 67 61 6e 75 64 61 2e 67 62 2e 6e 65 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 69 63 65 63 62 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 2d Data Ascii: aiadmk2024.org": true, "akkumulyatory.ru": true, "aktualnost.ru": true, "akvabaik.ru": true, "alcapone-us.com/": true, "alganuda.gb.net": true, "alicecbd.com": true, "all-
2025-01-14 00:13:16 UTC	344	IN	Data Raw: 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 71 75 61 66 69 6c 74 72 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 61 62 69 61 6e 64 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 64 6f 72 74 65 6b 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 65 73 74 61 6e 74 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 69 65 63 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 72 74 65 6c 73 68 63 68 69 6b 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 66 69 6b 73 69 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 Data Ascii: ue, "aquafiltr.ru": true, "arabiandate.com": true, "ardortek.com": true, "arestanti.ru": true, "ariec.ru": true, "artelshchik.ru": true, "asfiksii.ru": true, "
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 6c 65 72 65 77 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 70 69 72 61 6e 74 75 72 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 74 72 6f 6c 69 6e 65 2e 74 6f 64 61 79 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 74 72 6f 6e 61 76 74 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 6c 61 6e 74 69 73 65 76 65 6e 74 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 72 6f 66 69 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 72 65 6c 73 69 6d 69 6f 6e 2e 72 6f 22 3a 20 74 72 75 65 2c 0a 20 20 Data Ascii: ue, "aslerew.com": true, "aspiranturi.ru": true, "astroline.today": true, "astronavti.ru": true, "atlantisevents.com": true, "atrofii.ru": true, "aurelsimion.ro": true,
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 75 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 75 73 2e 63 6f 6d 2e 70 61 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 62 6c 69 6f 6b 65 6c 70 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 64 65 61 73 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 67 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 67 61 64 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 67 61 64 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 Data Ascii: true, "betus.com": true, "betus.com.pa": true, "bibliokelpt.com": true, "bidease.com": true, "bing.com": true, "bingads.com": true, "bingads.microsoft.com": true,
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 76 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 6f 6b 65 68 65 61 6c 74 68 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 6f 77 73 65 2e 6c 69 76 65 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 6f 77 73 65 68 65 72 6f 2e 6d 65 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 6f 77 73 65 72 74 6f 6f 6c 73 2e 63 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 6f 77 73 69 6e 67 77 69 74 68 77 61 76 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 75 69 6e 70 61 6c 6e 74 69 6e 67 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 74 6f 6f Data Ascii: ve.com": true, "brokehealth.com": true, "browse.live": true, "browsehero.me": true, "browsertools.co": true, "browsingwithwave.com": true, "bruinpalnting.com": true, "btoo
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 20 20 20 20 22 63 61 72 62 6f 6e 61 74 65 62 72 6f 77 73 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 72 70 61 72 74 73 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 73 65 6e 61 6e 6f 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 73 68 6d 65 72 65 2e 61 64 72 65 6e 61 6c 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 62 64 2d 76 69 74 61 6c 2e 61 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 62 64 32 34 2d 73 68 6f 70 2e 64 65 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 62 64 61 6d 65 72 69 63 61 6e 73 68 61 6d 61 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c Data Ascii: "carbonatebrowser.com": true, "carpartsd.com": true, "casenano.com": true, "cashmere.adrenal.ru": true, "cbd-vital.at": true, "cbd24-shop.de": true, "cbdamericanshaman.com": true,
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 6f 6d 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 69 74 79 73 65 72 76 6f 75 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 61 72 69 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 69 63 6b 61 6e 64 66 6c 69 72 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 6f 76 72 63 61 6e 6e 61 62 69 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 75 6a 2e 75 73 72 2e 72 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 75 74 63 68 62 61 6c 61 6e 63 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6e 74 65 69 67 6c 65 72 Data Ascii: om.au": true, "cityservous.com": true, "clarie.com": true, "clickandflirt.com": true, "clovrcannabis.com": true, "cluj.usr.ro": true, "clutchbalance.com": true, "cnteigler
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 22 63 72 74 61 2e 72 73 2f 70 72 69 6a 61 76 69 74 65 2d 73 76 61 6b 69 2d 6b 76 61 72 2d 6e 61 2d 69 7a 62 6f 72 69 6d 61 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 67 64 6e 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 62 61 6e 6e 65 72 73 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 6f 74 76 6f 72 69 5f 6f 63 69 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 33 32 30 78 31 30 30 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 75 72 61 6c 65 61 66 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 75 72 72 65 6e 74 2d 61 66 66 61 69 72 73 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 76 65 74 6f 6d 75 7a 79 6b 61 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 Data Ascii: "crta.rs/prijavite-svaki-kvar-na-izborima/?utm_source=gdn&utm_medium=banners&utm_campaign=otvori_oci&utm_content=320x100": true, "curaleaf.com": true, "current-affairs.org": true, "cvetomuzyka.ru": true,
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 37 63 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 61 72 6c 79 62 69 72 64 63 62 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 61 72 6e 69 66 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 61 72 74 68 76 69 65 77 33 36 30 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 61 73 79 2d 77 6f 72 6b 2d 32 34 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 61 73 79 63 6f 6e 76 65 72 74 70 64 66 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 61 73 79 63 72 79 70 74 6f 2e 63 6f 6d 22 3a 20 74 72 Data Ascii: true, "e7ca.com": true, "earlybirdcbd.com": true, "earnify.com": true, "earthview360.org": true, "easy-work-24.com": true, "easyconvertpdf.com": true, "easycrypto.com": tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	53395	34.95.69.49	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:15 UTC	671	OUT	POST /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Content-Length: 511 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:15 UTC	511	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 45 76 65 6e 74 73 22 2c 22 66 22 3a 22 69 6d 70 76 69 65 77 22 2c 22 6a 73 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 33 36 38 31 33 35 39 34 30 36 39 2c 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 2c 22 61 63 74 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 39 31 36 38 65 62 35 39 2d 35 35 62 61 2d 33 39 38 34 2d 35 63 62 38 2d 30 35 30 33 64 34 61 32 65 33 30 33 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 38 2e 37 22 2c 22 74 6f 70 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6a 73 74 7a 6f 66 66 73 65 74 22 3a 33 30 30 Data Ascii: {"action_name":"Events","f":"impview","jstimestamp":1736813594069,"elapsed_time":11,"action_group_id":"9168eb59-55ba-3984-5cb8-0503d4a2e303","version":"4.28.7","topLocation":"https://login.yahoo.com/","referrer":"https://login.yahoo.com/","jstzoffset":300
2025-01-14 00:13:16 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Tue, 14 Jan 2025 00:13:16 GMT Content-Type: application/octet-stream Content-Length: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Expose-Headers: Content-Length,Content-Range Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	53397	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	1425	OUT	POST /p?s=794200123&t=1736813594758&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=yahoo_login&partner=&lang=en-US&region=us&device=desktop&colo=bf1&bucket=mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cdmi_consent_false&rid=unknown&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.2.29&prebidVersion=unknown&yahooPrebidVersion=unknown&logType=INFO&message=LIVEINTENT_PRESENT_IN_CONFIG&messageDetails=LIVEINTENT&source=pbjs HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A
2025-01-14 00:13:16 UTC	1119	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 00:13:16 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2025-01-14 00:13:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	53400	67.195.204.151	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	2391	OUT	GET /logads?adType=gam&delay=timeout&spid=794200123 HTTP/1.1 Host: login.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/?.src=ym&pspid=159600001&activity=mail-direct&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd%2Ffolders%2F4%3Freason%3Dinvalid_cred%26guce_referrer%3DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%26guce_referrer_sig%3DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6Z [TRUNCATED]
2025-01-14 00:13:16 UTC	473	IN	HTTP/1.1 200 OK Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Content-Length: 2 Vary: Accept-Encoding Date: Tue, 14 Jan 2025 00:13:16 GMT Age: 0 Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2025-01-14 00:13:16 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	53398	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	582	OUT	OPTIONS /lr_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://gpt.mail.yahoo.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	595	IN	HTTP/1.1 204 No Content access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: POST access-control-allow-origin: https://gpt.mail.yahoo.net vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers date: Tue, 14 Jan 2025 00:13:16 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	53396	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	358	OUT	GET /aaq/prebid/prebid-2.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	681	IN	HTTP/1.1 200 OK x-amz-id-2: GJu7Ftw+brUG1W6bjbN7SZBGIQpmRn7IQQo84drOPOvfP/w9fELSrlHkqO187fmjuMVtkMeiuO90+lkTsXWRNIMy+uTWpu3+wyrpviLFEVc= x-amz-request-id: JW1373HQP1HXG222 Date: Tue, 14 Jan 2025 00:09:38 GMT Last-Modified: Thu, 09 Jan 2025 22:52:40 GMT ETag: "2501402afe19989437b60515fd4baa23" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=1800 x-amz-version-id: e8yXKrMooLNk8HHDjDnY07a9ESsQatRT Accept-Ranges: bytes Content-Type: application/javascript Content-Length: 499411 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 219 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 35 31 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 35 2d 30 31 2d 30 39 0a 42 75 69 6c 64 3a 20 32 2e 30 2e 34 37 0a 4d 6f 64 75 6c 65 73 3a 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 47 70 70 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 55 73 70 2c 20 63 72 69 74 65 6f 42 69 64 41 64 61 70 74 65 72 2c 20 65 6e 72 69 63 68 6d 65 6e 74 46 70 64 4d 6f 64 75 6c 65 2c 20 67 64 70 72 45 6e 66 6f 72 63 65 6d 65 6e 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 6e 61 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 73 74 61 74 65 73 2c 20 67 70 74 50 72 65 41 75 63 74 69 6f 6e 2c 20 69 78 42 69 64 41 64 61 70 74 65 72 2c 20 6b 75 65 65 Data Ascii: /* prebid.js v8.51.0Updated: 2025-01-09Build: 2.0.47Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, kuee
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 65 2c 6e 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 69 3d 30 3b 69 66 28 74 29 65 3d 74 3b 65 6c 73 65 7b 66 6f 72 28 3b 69 3c 6f 26 26 21 28 69 20 69 6e 20 6e 29 3b 29 69 2b 2b 3b 65 3d 6e 5b 69 2b 2b 5d 7d 66 6f 72 28 3b 69 3c 6f 3b 29 69 20 69 6e 20 6e 26 26 28 65 3d 72 28 65 2c 6e 5b 69 5d 2c 69 2c 6e 29 29 2c 69 2b 2b 3b 72 65 74 75 72 6e 20 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 72 2c 74 29 7d 76 61 72 20 75 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 69 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 28 66 75 6e Data Ascii: e,n=Object(this),o=n.length>>>0,i=0;if(t)e=t;else{for(;i<o&&!(i in n);)i++;e=n[i++]}for(;i<o;)i in n&&(e=r(e,n[i],i,n)),i++;return e};function i(r,t){return Array.prototype.slice.call(r,t)}var u=Object.assign\|\|function(r){return o.call(i(arguments,1),(fun
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 69 6f 6e 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 22 61 66 74 65 72 22 2c 72 2c 74 29 7d 2c 67 65 74 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 74 2e 63 6f 6e 63 61 74 28 65 29 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 3d 3d 3d 72 5b 65 5d 7d 29 29 7d 29 29 29 3b 74 72 79 7b 75 28 6e 2c 7b 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 2e 72 Data Ascii: ion(r,t){return c.call(this,e,"after",r,t)},getHooks:function(r){var n=t.concat(e);"object"==typeof r&&(n=n.filter((function(t){return Object.keys(r).every((function(e){return t[e]===r[e]}))})));try{u(n,{remove:function(){return n.forEach((function(r){r.r
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 75 5b 75 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 75 2e 70 6f 70 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 22 73 79 6e 63 22 3d 3d 3d 65 3f 66 3d 72 3a 61 26 26 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 72 29 7b 69 66 28 6f 5b 63 5d 29 7b 76 61 72 20 6e 3d 69 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 70 2e 62 61 69 6c 3d 6c 2c 6e 2e 75 6e 73 68 69 66 74 28 70 29 2c 6f 5b 63 2b 2b 5d 2e 61 70 70 6c 79 28 74 2c 6e 29 7d 22 73 79 6e 63 22 3d 3d 3d 65 3f 66 3d 72 3a 61 26 26 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 6f 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 69 28 61 72 67 75 6d Data Ascii: ==typeof u[u.length-1]&&u.pop();function l(r){"sync"===e?f=r:a&&a.apply(null,arguments)}function p(r){if(o[c]){var n=i(arguments);return p.bail=l,n.unshift(p),o[c++].apply(t,n)}"sync"===e?f=r:a&&a.apply(null,arguments)}return o[n]=function(){var n=i(argum
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 74 2c 65 29 7b 72 65 74 75 72 6e 28 74 3d 6f 28 74 29 29 69 6e 20 72 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 74 2c 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 72 5b 74 5d 3d 65 2c 72 7d 65 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 69 7d 29 7d 2c 38 35 35 34 3a 28 72 2c 74 2c 65 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 2c 74 2c 65 29 7b 74 2e 73 70 6c 69 74 26 26 28 74 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 29 3b 66 6f 72 28 76 61 72 20 6e Data Ascii: ,"string");return"symbol"==n(t)?t:String(t)}function i(r,t,e){return(t=o(t))in r?Object.defineProperty(r,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):r[t]=e,r}e.d(t,{A:()=>i})},8554:(r,t,e)=>{function n(r,t,e){t.split&&(t=t.split("."));for(var n
2025-01-14 00:13:16 UTC	31	IN	Data Raw: 6c 5d 3d 5b 65 2c 6f 2c 69 5d 7d 2c 6e 2e 6e 3d 72 3d 3e 7b 76 61 72 20 74 3d 72 26 26 72 2e Data Ascii: l]=[e,o,i]},n.n=r=>{var t=r&&r.
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 72 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 72 3b 72 65 74 75 72 6e 20 6e 2e 64 28 74 2c 7b 61 3a 74 7d 29 2c 74 7d 2c 6e 2e 64 3d 28 72 2c 74 29 3d 3e 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 29 6e 2e 6f 28 74 2c 65 29 26 26 21 6e 2e 6f 28 72 2c 65 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 5b 65 5d 7d 29 7d 2c 6e 2e 6f 3d 28 72 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 74 29 2c 28 28 29 3d 3e 7b 76 61 72 20 72 3d 7b 36 37 33 3a 30 7d 3b 6e 2e 4f 2e 6a 3d 74 3d 3e 30 3d 3d 3d 72 5b 74 5d 3b 76 61 72 20 74 3d 28 74 2c Data Ascii: __esModule?()=>r.default:()=>r;return n.d(t,{a:t}),t},n.d=(r,t)=>{for(var e in t)n.o(t,e)&&!n.o(r,e)&&Object.defineProperty(r,e,{enumerable:!0,get:t[e]})},n.o=(r,t)=>Object.prototype.hasOwnProperty.call(r,t),(()=>{var r={673:0};n.O.j=t=>0===r[t];var t=(t,
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 69 64 65 64 2c 20 70 6c 65 61 73 65 20 75 73 65 20 2e 73 65 74 52 65 6e 64 65 72 20 6f 6e 20 74 68 65 20 72 65 6e 64 65 72 65 72 22 29 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 61 2e 61 64 55 6e 69 74 73 2c 6e 3d 28 30 2c 73 2e 49 36 29 28 74 2c 28 74 3d 3e 74 2e 63 6f 64 65 3d 3d 3d 65 29 29 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 69 3d 28 30 2c 6f 2e 41 29 28 6e 2c 22 72 65 6e 64 65 72 65 72 22 29 2c 72 3d 21 21 28 69 26 26 69 2e 75 72 6c 26 26 69 2e 72 65 6e 64 65 72 29 2c 63 3d 28 30 2c 6f 2e 41 29 28 6e 2c 22 6d 65 64 69 61 54 79 70 65 73 2e 76 69 64 65 6f 2e 72 65 6e 64 65 72 65 72 22 29 2c 64 3d 21 21 28 63 26 26 63 2e 75 72 6c 26 26 63 2e 72 65 6e 64 65 72 29 3b 72 65 74 75 72 6e 21 21 28 72 26 Data Ascii: ided, please use .setRender on the renderer")};!function(e){const t=a.adUnits,n=(0,s.I6)(t,(t=>t.code===e));if(!n)return!1;const i=(0,o.A)(n,"renderer"),r=!!(i&&i.url&&i.render),c=(0,o.A)(n,"mediaTypes.video.renderer"),d=!!(c&&c.url&&c.render);return!!(r&
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 6f 72 28 3b 74 68 69 73 2e 63 6d 64 2e 6c 65 6e 67 74 68 3e 30 3b 29 74 72 79 7b 74 68 69 73 2e 63 6d 64 2e 73 68 69 66 74 28 29 2e 63 61 6c 6c 28 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 72 2e 76 56 29 28 22 45 72 72 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 20 52 65 6e 64 65 72 65 72 20 63 6f 6d 6d 61 6e 64 3a 20 22 2c 65 29 7d 7d 7d 2c 33 32 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 44 4c 3a 28 29 3d 3e 6c 2c 4d 6c 3a 28 29 3d 3e 72 2c 55 65 3a 28 29 3d 3e 69 2c 56 4a 3a 28 29 3d 3e 66 2c 68 45 3a 28 29 3d 3e 75 2c 68 71 3a 28 29 3d 3e 64 2c 6d 6f 3a 28 29 3d 3e 63 2c 71 58 3a 28 29 3d 3e 6f 2c 75 63 3a 28 29 3d 3e 61 2c 79 6c 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 69 3d 22 61 63 63 65 73 73 44 65 76 69 63 65 22 2c 72 3d 22 73 79 6e Data Ascii: or(;this.cmd.length>0;)try{this.cmd.shift().call()}catch(e){(0,r.vV)("Error processing Renderer command: ",e)}}},327:(e,t,n)=>{n.d(t,{DL:()=>l,Ml:()=>r,Ue:()=>i,VJ:()=>f,hE:()=>u,hq:()=>d,mo:()=>c,qX:()=>o,uc:()=>a,yl:()=>s});const i="accessDevice",r="syn
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 6d 64 61 74 61 22 5d 2e 6d 61 70 28 28 65 3d 3e 22 75 73 65 72 2e 22 2e 63 6f 6e 63 61 74 28 65 29 29 29 2e 63 6f 6e 63 61 74 28 22 64 65 76 69 63 65 2e 65 78 74 2e 63 64 65 70 22 29 2c 63 3d 5b 22 75 73 65 72 2e 65 69 64 73 22 2c 22 75 73 65 72 2e 65 78 74 2e 65 69 64 73 22 5d 2c 64 3d 5b 22 75 73 65 72 2e 67 65 6f 2e 6c 61 74 22 2c 22 75 73 65 72 2e 67 65 6f 2e 6c 6f 6e 22 2c 22 64 65 76 69 63 65 2e 67 65 6f 2e 6c 61 74 22 2c 22 64 65 76 69 63 65 2e 67 65 6f 2e 6c 6f 6e 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 67 65 74 28 29 7b 7d 2c 72 75 6e 28 65 2c 74 2c 6e 2c 69 2c 72 29 7b 63 6f 6e 73 74 20 6f 3d 6e 26 26 6e 5b 69 5d 3b 69 66 28 67 28 6f 29 26 26 72 28 29 29 7b 63 6f 6e 73 Data Ascii: mdata"].map((e=>"user.".concat(e))).concat("device.ext.cdep"),c=["user.eids","user.ext.eids"],d=["user.geo.lat","user.geo.lon","device.geo.lat","device.geo.lon"];function l(e){return Object.assign({get(){},run(e,t,n,i,r){const o=n&&n[i];if(g(o)&&r()){cons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	53399	34.194.178.247	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	895	OUT	GET /idex/did-004f/any?duid=dc5154c516e8--01jhh2gj4yxpk5wqcxcx9fqbp1&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.gpt.mail.yahoo.net&pu=https%3A%2F%2Flogin.yahoo.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1 Host: idx.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	543	IN	HTTP/1.1 204 No Content Date: Tue, 14 Jan 2025 00:13:16 GMT Connection: close trace-id: 32690210eef24a32 Vary: Origin Expires: Tue, 14 Jan 2025 01:13:16 GMT Set-Cookie: lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7; Max-Age=63072000; Expires=Thu, 14 Jan 2027 00:13:16 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 3 Cache-Control: max-age=3599, private Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://gpt.mail.yahoo.net Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	53401	142.250.186.66	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	501	OUT	GET /pagead/managed/js/gpt/m202501070101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	745	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 510147 X-XSS-Protection: 0 Date: Mon, 13 Jan 2025 18:21:05 GMT Expires: Tue, 13 Jan 2026 18:21:05 GMT Cache-Control: public, immutable, max-age=31536000 Age: 21131 ETag: 273197895018558538 Content-Type: text/javascript; charset=ISO-8859-1 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 00:13:16 UTC	645	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 4d 61 74 68 2e 75 75 69 64 2e 6a 73 20 28 76 31 2e 34 29 20 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 6d 61 69 6c 74 6f 3a 72 6f 62 65 72 74 40 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 43 6f 70 79 72 69 67 68 74 20 28 Data Ascii: NTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. / / Math.uuid.js (v1.4) http://www.broofa.com mailto:robert@broofa.com Copyright (
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 6b 6f 2c 6d 6f 2c 6c 6f 2c 74 6f 2c 75 6f 2c 76 6f 2c 77 6f 2c 6e 6f 2c 78 6f 2c 6f 6f 2c 7a 6f 2c 42 6f 2c 43 6f 2c 47 6f 2c 48 6f 2c 4e 6f 2c 4d 6f 2c 52 6f 2c 57 6f 2c 58 6f 2c 59 6f 2c 5a 6f 2c 61 70 2c 62 70 2c 68 70 2c 69 70 2c 6a 70 2c 6c 70 2c 70 70 2c 71 70 2c 75 70 2c 77 70 2c 78 70 2c 79 70 2c 7a 70 2c 42 70 2c 43 70 2c 48 70 2c 49 70 2c 4a 70 2c 4e 70 2c 47 70 2c 50 70 2c 51 70 2c 52 70 2c 54 70 2c 57 70 2c 59 70 2c 5a 70 2c 24 70 2c 61 71 2c 63 71 2c 65 71 2c 66 71 2c 68 71 2c 69 71 2c 6a 71 2c 6b 71 2c 6c 71 2c 6d 71 2c 70 71 2c 71 71 2c 75 71 2c 77 71 2c 76 71 2c 7a 71 2c 41 71 2c 42 71 2c 46 71 2c 47 71 2c 49 71 2c 48 71 2c 4b 71 2c 4d 71 2c 4f 71 2c 58 71 2c 5a 71 2c 64 72 2c 66 72 2c 67 72 2c 70 72 2c 73 72 2c 71 72 2c 72 72 2c 7a 72 2c Data Ascii: ko,mo,lo,to,uo,vo,wo,no,xo,oo,zo,Bo,Co,Go,Ho,No,Mo,Ro,Wo,Xo,Yo,Zo,ap,bp,hp,ip,jp,lp,pp,qp,up,wp,xp,yp,zp,Bp,Cp,Hp,Ip,Jp,Np,Gp,Pp,Qp,Rp,Tp,Wp,Yp,Zp,$p,aq,cq,eq,fq,hq,iq,jq,kq,lq,mq,pq,qq,uq,wq,vq,zq,Aq,Bq,Fq,Gq,Iq,Hq,Kq,Mq,Oq,Xq,Zq,dr,fr,gr,pr,sr,qr,rr,zr,
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 7c 28 6c 61 28 29 3f 30 3a 68 61 28 22 45 64 67 65 22 29 29 7c 7c 28 6c 61 28 29 3f 66 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 68 61 28 22 45 64 67 2f 22 29 29 7c 7c 28 6c 61 28 29 3f 66 61 28 22 4f 70 65 72 61 22 29 3a 68 61 28 22 4f 50 52 22 29 29 7c 7c 5f 2e 6e 61 28 29 7c 7c 68 61 28 22 53 69 6c 6b 22 29 7c 7c 68 61 28 22 41 6e 64 72 6f 69 64 22 29 29 7d 3b 5f 2e 70 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 61 28 29 3f 66 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 68 61 28 22 43 68 72 6f 6d 65 22 29 7c 7c 68 61 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 6c 61 28 29 3f 30 3a 68 61 28 22 45 64 67 65 22 29 29 7c 7c 68 61 28 22 53 69 6c 6b 22 29 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 61 3d 3d 3d 76 6f Data Ascii: \|(la()?0:ha("Edge"))\|\|(la()?fa("Microsoft Edge"):ha("Edg/"))\|\|(la()?fa("Opera"):ha("OPR"))\|\|_.na()\|\|ha("Silk")\|\|ha("Android"))};_.pa=function(){return la()?fa("Chromium"):(ha("Chrome")\|\|ha("CriOS"))&&!(la()?0:ha("Edge"))\|\|ha("Silk")};sa=function(){ra===vo
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 6f 66 20 5f 2e 4f 61 29 72 65 74 75 72 6e 20 61 2e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 7d 3b 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 3e 3d 30 3b 2d 2d 64 29 64 20 69 6e 20 63 26 26 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 63 5b 64 5d 2c 64 2c 61 29 7d 3b 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 52 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 62 3e 3d 30 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f Data Ascii: of _.Oa)return a.g;throw Error("");};Qa=function(a,b){for(var c=typeof a==="string"?a.split(""):a,d=a.length-1;d>=0;--d)d in c&&b.call(void 0,c[d],d,a)};Ta=function(a,b){b=_.Ra(a,b);var c;(c=b>=0)&&Array.prototype.splice.call(a,b,1);return c};_.Ua=functio
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 3d 38 31 39 32 29 66 6f 72 28 76 61 72 20 66 3d 68 62 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 57 61 28 64 2c 65 2c 65 2b 38 31 39 32 29 29 2c 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 3b 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 7d 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: length;c++){var d=arguments[c];if(Array.isArray(d))for(var e=0;e<d.length;e+=8192)for(var f=hb.apply(null,Wa(d,e,e+8192)),g=0;g<f.length;g++)b.push(f[g]);else b.push(d)}return b};jb=function(a){a=a(function(b){b.stack=Error().stack});a.prototype=Object.cr
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 7d 72 65 74 75 72 6e 20 61 7d 3b 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 71 62 29 72 65 74 75 72 6e 20 72 62 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 Data Ascii: }return a};pb=function(a){_.t.setTimeout(function(){throw a;},0)};sb=function(a){if(!qb)return rb(a);for(var b="",c=0,d=a.length-10240;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);retu
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 3b 58 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 61 3d 61 3f 6e 65 77 20 56 62 28 61 2c 78 62 29 3a 57 62 28 29 3b 65 6c 73 65 20 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 56 62 29 69 66 28 77 62 28 61 29 29 61 3d 61 2e 6c 65 6e 67 74 68 3f 6e 65 77 20 56 62 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 2c 78 62 29 3a 57 62 28 29 3b 65 6c 73 65 7b 69 66 28 21 62 29 74 68 72 Data Ascii: on(a){return a!==null&&typeof a==="object"&&!Array.isArray(a)&&a.constructor===Object};Xb=function(a,b){if(a!=null)if(typeof a==="string")a=a?new Vb(a,xb):Wb();else if(a.constructor!==Vb)if(wb(a))a=a.length?new Vb(new Uint8Array(a),xb):Wb();else{if(!b)thr
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 7d 3b 75 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 63 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 73 63 28 61 29 3f 61 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 63 28 62 29 7d 29 3a 21 31 7d 29 7d 3b 79 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 3b 69 66 28 74 63 28 62 29 29 7b 69 66 28 21 2f 5e 5c 73 2a 28 3f 3a 2d 3f 5b 31 2d 39 5d 5c 64 2a 7c 30 29 3f 5c 73 2a 24 2f 2e 74 65 73 74 28 62 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 62 29 29 3b 7d 65 6c 73 65 20 69 66 28 76 63 28 62 29 26 26 21 5f 2e 78 28 4e 75 6d 62 65 72 2c 22 69 73 53 61 66 65 49 6e 74 65 67 65 72 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 62 29 29 74 68 72 6f 77 20 45 Data Ascii: };uc=function(){return hc(function(a){return sc(a)?a.every(function(b){return tc(b)}):!1})};yc=function(a){var b=a;if(tc(b)){if(!/^\s(?:-?[1-9]\d\|0)?\s*$/.test(b))throw Error(String(b));}else if(vc(b)&&!_.x(Number,"isSafeInteger").call(Number,b))throw E
2025-01-14 00:13:16 UTC	1390	IN	Data Raw: 28 51 62 28 29 29 61 3d 42 69 67 49 6e 74 28 61 29 2c 5f 2e 41 63 3d 4e 75 6d 62 65 72 28 61 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3e 3e 3e 30 2c 5f 2e 42 63 3d 4e 75 6d 62 65 72 28 61 3e 3e 42 69 67 49 6e 74 28 33 32 29 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3b 65 6c 73 65 7b 76 61 72 20 62 3d 2b 28 61 5b 30 5d 3d 3d 3d 22 2d 22 29 3b 5f 2e 42 63 3d 5f 2e 41 63 3d 30 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 62 2c 65 3d 28 63 2d 62 29 25 36 2b 62 3b 65 3c 3d 63 3b 64 3d 65 2c 65 2b 3d 36 29 64 3d 4e 75 6d 62 65 72 28 61 2e 73 6c 69 63 65 28 64 2c 65 29 29 2c 5f 2e 42 63 2a 3d 31 45 36 2c 5f 2e 41 63 3d 5f 2e 41 63 2a 31 45 36 2b 64 2c 5f 2e 41 63 3e 3d 34 32 39 34 39 36 37 32 39 36 26 26 Data Ascii: (Qb())a=BigInt(a),_.Ac=Number(a&BigInt(4294967295))>>>0,_.Bc=Number(a>>BigInt(32)&BigInt(4294967295));else{var b=+(a[0]==="-");_.Bc=_.Ac=0;for(var c=a.length,d=b,e=(c-b)%6+b;e<=c;d=e,e+=6)d=Number(a.slice(d,e)),_.Bc=1E6,_.Ac=_.Ac1E6+d,_.Ac>=4294967296&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	53404	151.101.65.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	660	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://login.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	980	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://login.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:16 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:16 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:16 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-nyc-kteb1890037-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1736813597.659573,VS0,VE2 Vary: Accept-Encoding X-vcl-time-ms: 2 transfer-encoding: chunked
2025-01-14 00:13:16 UTC	4	IN	Data Raw: 35 33 0d 0a Data Ascii: 53
2025-01-14 00:13:16 UTC	83	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 33 34 61 38 32 35 38 32 2d 36 36 62 37 2d 34 38 38 32 2d 62 34 61 37 2d 30 31 34 31 32 35 63 32 36 30 33 63 2d 74 75 63 74 65 37 66 33 31 39 63 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 74 72 75 65 7d 7d Data Ascii: {"user":{"id":"34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c","isNewUser":true}}
2025-01-14 00:13:16 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	53409	34.95.69.49	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	336	OUT	GET /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	230	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Tue, 14 Jan 2025 00:13:16 GMT Content-Type: application/octet-stream Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	53402	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	611	OUT	GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:16 UTC	628	IN	HTTP/1.1 200 OK x-amz-id-2: Ll5aJ4fJzJpXYqG7HV7vgwbwSpo82h1R8Owumspvib4f9LUww4HuJK5QahcFPGeKE5XqvLyILmo= x-amz-request-id: PNEKC5BPT8E6X251 Date: Wed, 08 Jan 2025 12:39:00 GMT Last-Modified: Wed, 11 Sep 2019 18:01:04 GMT ETag: "b6814ae5582d7953821acbd76e977bb4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Content-Length: 1406 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 473657 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:16 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d3 08 64 00 d3 0b 66 00 d4 0f 69 00 d5 12 6b 00 d5 16 6d 00 d6 1a 70 00 d6 1c 71 00 d7 1f 73 00 d7 20 73 00 d8 24 76 00 d9 2a 7a 00 dd 3f 87 00 de 44 8a 00 df 4d 90 00 e1 56 95 00 e2 5f 9b 00 e3 62 9d 00 e3 63 9d 00 e5 6c a3 00 e6 76 a9 00 e7 79 ab 00 e7 7c ad 00 eb 92 bb 00 ed 9c c1 00 f0 ac cb 00 f1 b2 ce 00 f1 b4 d0 00 f2 b6 d1 00 f2 b8 d2 00 f3 bf d7 00 f4 c5 da 00 f6 d0 e1 00 f7 d2 e2 00 f7 d3 e3 00 f9 de ea 00 f9 e1 ec 00 fa e8 f0 00 fb ea f1 00 fc ee f4 00 fd f6 f9 00 fd f9 fb 00 fe fa fb 00 fe fb fc 00 fe fc fd 00 fe fd fd 00 fe fe fe 00 ff ff ff 00 00 Data Ascii: h( `dfikmpqs s$v*z?DMV_bclvy\|
2025-01-14 00:13:16 UTC	106	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	53403	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	1427	OUT	POST /p?s=794200123&t=1736813594769&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=yahoo_login&partner=&lang=en-US&region=us&device=desktop&colo=bf1&bucket=mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cdmi_consent_false&rid=unknown&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.2.29&prebidVersion=8.51.0&yahooPrebidVersion=2.0.47&logType=INFO&message=USER_ID_MODULE_BUCKET_CREATED&messageDetails=LIVEINTENT-98&source=pbjs HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A
2025-01-14 00:13:17 UTC	1119	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 00:13:16 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2025-01-14 00:13:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	53406	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	1103	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A
2025-01-14 00:13:17 UTC	590	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:16 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://gpt.mail.yahoo.net Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:16 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:17 UTC	4	IN	Data Raw: 33 63 0d 0a Data Ascii: 3c
2025-01-14 00:13:17 UTC	60	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 65 53 31 4a 56 56 67 75 63 6b 77 35 52 54 4a 31 52 33 4a 4c 5a 47 4a 42 4f 44 4e 4c 55 31 4d 33 59 55 68 4c 61 48 56 44 52 6e 68 34 58 33 35 42 22 7d Data Ascii: {"axid": "eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B"}
2025-01-14 00:13:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 00:13:17 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-14 00:13:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	53407	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	1008	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A
2025-01-14 00:13:17 UTC	489	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:17 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:17 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 1 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:17 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:17 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 61 54 77 33 56 6c 6c 45 32 75 49 47 72 49 54 73 42 68 74 67 69 52 5a 55 56 54 5a 56 35 52 56 49 7e 41 22 7d Data Ascii: {"axid": "y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A"}
2025-01-14 00:13:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 00:13:17 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-14 00:13:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	53408	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	1008	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A
2025-01-14 00:13:17 UTC	479	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:16 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:16 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:17 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:17 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 30 52 62 6f 4d 61 4e 45 32 75 49 65 57 6b 34 46 4b 61 46 31 5f 62 76 51 68 49 45 78 41 6a 65 59 7e 41 22 7d Data Ascii: {"axid": "y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A"}
2025-01-14 00:13:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 00:13:17 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-14 00:13:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	53405	142.250.184.194	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:16 UTC	894	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:17 UTC	710	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 105016 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 13 Jan 2025 23:30:48 GMT Expires: Tue, 14 Jan 2025 00:20:48 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Age: 2548 Last-Modified: Mon, 13 Jan 2025 20:43:06 GMT Content-Type: text/html Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 00:13:17 UTC	680	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 Data Ascii: {if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 65 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c Data Ascii: rray Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=ea[b[c]];typeof d==="function"&&typeof d.prototype[a]!="function"&&ca(d.prototype,a,{configurable:!0,
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 2c 74 61 3d 66 61 26 26 74 79 70 65 6f 66 20 76 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 29 3d 3d 22 66 75 6e 63 74 69 6f Data Ascii: .push(b.value);a=c}return a},ra=function(a){return qa(a,a)},qa=function(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a},sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)},ta=fa&&typeof v(Object,"assign")=="functio
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 2e 67 2e 46 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 67 3d 76 6f 69 64 20 30 2c 77 61 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 46 3d 21 31 3b 69 66 28 61 2e 67 2e 6c 29 7b 62 3d 61 2e 67 2e 6c 3b 61 2e 67 2e 6c 3d 6e 75 6c 6c 3b 69 66 28 62 2e 45 61 29 74 68 72 6f 77 20 62 2e 6c 61 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 28 61 2e 67 29 3b 61 2e 67 2e 69 3f 62 3d 7a 61 28 61 2c 61 2e 67 2e 69 2e 6e 65 78 74 2c 62 2c 61 2e Data Ascii: .g.F=!1,{value:b.value,done:!1}}catch(c){a.g.g=void 0,wa(a.g,c)}a.g.F=!1;if(a.g.l){b=a.g.l;a.g.l=null;if(b.Ea)throw b.la;return{value:b.return,done:!0}}return{value:void 0,done:!0}},Ca=function(a){this.next=function(b){va(a.g);a.g.i?b=za(a,a.g.i.next,b,a.
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 66 3b 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 67 3d 5b 5d 3b 74 68 69 73 2e 55 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 66 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 Data Ascii: )}}}this.g=null};b.prototype.l=function(f){this.i(function(){throw f;})};var e=function(f){this.h=0;this.i=void 0;this.g=[];this.U=!1;var h=this.l();try{f(h.resolve,h.reject)}catch(k){h.reject(k)}};e.prototype.l=function(){function f(l){return function(n)
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 66 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 66 29 29 3b 66 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 66 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6b 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 67 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 67 2e 68 28 74 68 69 73 2e 67 5b 66 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 Data Ascii: nt("CustomEvent"),f.initCustomEvent("unhandledrejection",!1,!0,f));f.promise=this;f.reason=this.i;return k(f)};e.prototype.sa=function(){if(this.g!=null){for(var f=0;f<this.g.length;++f)g.h(this.g[f]);this.g=null}};var g=new b;e.prototype.xa=function(f){v
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 66 3b 72 65 74 75 72 6e 20 68 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 66 21 3d 3d 6e 75 6c 6c 7c 7c 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6b 3d 6e 65 77 20 61 28 5b 5b 66 2c 32 5d 2c 5b 68 2c 33 5d 5d 29 3b 69 66 28 6b 2e 67 65 74 28 66 29 21 3d 32 7c 7c 6b 2e 67 65 74 28 68 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6b 2e 64 65 6c 65 74 65 28 66 29 3b 6b 2e 73 65 74 28 68 2c 34 29 3b 72 65 74 75 72 6e 21 6b 2e 68 61 73 28 66 29 26 26 6b 2e 67 65 74 28 68 29 3d 3d 34 7d 63 61 74 63 68 28 6c 29 Data Ascii: f;return h==="object"&&f!==null\|\|h==="function"}if(function(){if(!a\|\|!Object.seal)return!1;try{var f=Object.seal({}),h=Object.seal({}),k=new a([[f,2],[h,3]]);if(k.get(f)!=2\|\|k.get(h)!=3)return!1;k.delete(f);k.set(h,4);return!k.has(f)&&k.get(h)==4}catch(l)
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 5d 3d 67 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 7a 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 68 3d 3d 3d 30 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 41 3f 6c 2e 41 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 41 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 48 3a 74 68 69 73 5b 31 5d 2e 48 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 Data Ascii: ]=g();this.size=0;if(h){h=z(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}};c.prototype.set=function(h,k){h=h===0?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.A?l.A.value=k:(l.A={next:this[1],H:this[1].H,head:this[1],key:h,valu
2025-01-14 00:13:17 UTC	1390	IN	Data Raw: 31 2c 41 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 68 5b 31 5d 3b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 29 7b 66 6f 72 28 3b 6c 2e 68 65 61 64 21 3d 68 5b 31 5d 3b 29 6c 3d 6c 2e 48 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 48 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 66 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 Data Ascii: 1,A:void 0}},e=function(h,k){var l=h[1];return ia(function(){if(l){for(;l.head!=h[1];)l=l.H;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},g=function(){var h={};return h.H=h.next=h.head=h},f=0;return c},"e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	53410	212.82.100.140	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	1831	OUT	GET /logads?adType=gam&delay=timeout&spid=794200123 HTTP/1.1 Host: login.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; AS=v=1&s=3yAtVlvS&d=A6786fd93\|WSFmDgn.2Sqn9Sz19oZy.ZX4yvQOW5V_uCttJo0_iBoMeJQxK3pTNMze8oQUdmdLCC0U7sUkr0gyMFOHWQiysD1Kb7Ur.eykVkHGxsvBT2380pvVzCjwopcBKZr5BRRCgBgObUqL7XpsJb0Kjs3H5OHqh2HOtU.x6z6jkYcvtebDSCUxm7S_mOXhKL3gkY6jYiJFhsfBxplNhoNB0Bsx1yDKDjfTyROIIbETgl8iqHdMCqbGKXqA2ejbTD0HRbWNxd.LocB8lJucIefM_TfJQ5btrHa5hlJoyevuMJZ4wlQojkxU.i9MbC9M1_1.Z3QuInptbUArugm6KTm94e7npulULFFtyML8uY6fuPrMwMEStxrYaifOdquQrMq6ejqFY1WplbTrX9oeuK6Je4halz3BRdK6vMp0_WT3qklO5YKULzGMaZf873c2u6.pAvJZ8xbKjeZHX0t6sw3zp9EIOCFyCm3liGyW7DLU.8GfF_7PFtlg1yUoax4zpIsC8ySH0.KcHlx40KVvxkdsRnPwspICPSVaYbToOk_qZm3IUdxwq2m_YMs3f6phnBq2Tl6LdWboKB6T8fXHm913K1TvhVARjw1EfNbt6NpGwZee59FlZS7wNrZ2._KF0H0jGh96My63l8HjbD.N1_t9VNuLCpdJnwaAkmABIR.Wqb10zZIPUB6Z [TRUNCATED]
2025-01-14 00:13:17 UTC	473	IN	HTTP/1.1 200 OK Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Content-Length: 2 Vary: Accept-Encoding Date: Tue, 14 Jan 2025 00:13:17 GMT Age: 0 Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2025-01-14 00:13:17 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	53411	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	1024	OUT	POST /lr_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Content-Length: 283 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A
2025-01-14 00:13:17 UTC	283	OUT	Data Raw: 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 22 6d 62 72 2d 77 68 61 74 73 61 70 70 2d 61 63 22 2c 22 6d 62 72 2d 70 61 73 73 6b 65 79 2d 75 6e 72 2d 72 65 67 22 2c 22 6d 62 72 2d 77 68 61 74 73 61 70 70 2d 6e 61 63 22 2c 22 64 6d 69 5f 63 6f 6e 73 65 6e 74 5f 66 61 6c 73 65 22 5d 2c 22 63 6f 6c 6f 22 3a 22 62 66 31 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 75 22 3a 22 30 22 2c 22 72 65 67 69 6f 6e 22 3a 22 75 73 22 2c 22 73 69 74 65 22 3a 22 79 61 68 6f 6f 5f 6c 6f 67 69 6e 22 2c 22 73 70 61 63 65 69 64 22 3a 22 37 39 34 32 30 30 31 32 33 22 2c 22 75 73 65 72 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 2c 22 67 70 Data Ascii: {"passthrough":{"bucket":["mbr-whatsapp-ac","mbr-passkey-unr-reg","mbr-whatsapp-nac","dmi_consent_false"],"colo":"bf1","device":"desktop","lang":"en-US","lu":"0","region":"us","site":"yahoo_login","spaceid":"794200123","usercountry":"US","gppSid":"-1","gp
2025-01-14 00:13:18 UTC	499	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://gpt.mail.yahoo.net content-type: application/json vary: Origin content-length: 148 date: Tue, 14 Jan 2025 00:13:18 GMT x-envoy-upstream-service-time: 623 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:18 UTC	148	IN	Data Raw: 7b 22 65 6e 76 65 6c 6f 70 65 73 22 3a 7b 22 5f 6c 72 5f 65 6e 76 22 3a 22 22 2c 22 5f 6c 72 5f 65 6e 76 5f 65 78 70 22 3a 31 37 33 36 38 31 35 33 39 37 2c 22 5f 6c 72 5f 61 74 73 44 69 72 65 63 74 22 3a 22 22 2c 22 5f 6c 72 5f 61 74 73 44 69 72 65 63 74 5f 65 78 70 22 3a 31 37 33 36 38 31 35 33 39 37 2c 22 5f 6c 72 5f 70 61 69 72 49 64 22 3a 22 22 2c 22 5f 6c 72 5f 70 61 69 72 49 64 5f 65 78 70 22 3a 31 37 33 36 38 31 35 33 39 37 7d 7d 0a Data Ascii: {"envelopes":{"_lr_env":"","_lr_env_exp":1736815397,"_lr_atsDirect":"","_lr_atsDirect_exp":1736815397,"_lr_pairId":"","_lr_pairId_exp":1736815397}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	53412	151.101.1.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	673	OUT	GET / HTTP/1.1 Host: tsdtocl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:17 UTC	603	IN	HTTP/1.1 200 OK Connection: close Content-Length: 786 x-amz-id-2: AEIL02d3k+8pFQQ432HxOX6JZ88zZytJ3AqJUySEzA5VG/DU1D2mAdwQHE5eQYOUStcuxO9SulY= x-amz-request-id: PGQF6ERRCDV2NB16 x-amz-replication-status: COMPLETED Last-Modified: Wed, 05 Jan 2022 19:36:57 GMT ETag: "fb5a4594b9ffef704d61bb6e6f80f145" x-amz-version-id: Qk4nobcRRphLiqVWi0NeSs0dand8kap0 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:17 GMT Via: 1.1 varnish Age: 1666 X-Served-By: cache-nyc-kteb1890020-NYC X-Cache: HIT X-Cache-Hits: 122 X-Timer: S1736813597.306002,VS0,VE0
2025-01-14 00:13:17 UTC	786	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 74 73 64 74 6f 63 6c 22 2c 74 3d 22 21 2d 23 40 22 2c 61 3d 32 3b 74 72 79 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 20 74 28 61 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 61 6d 65 73 70 61 63 65 3d 65 2c 6e 2e 69 64 3d 61 2c 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 22 2a 22 29 2c 6e 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 73 2c 63 29 7b 74 72 79 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 29 74 68 72 6f 77 20 30 3b 76 61 72 20 69 3d Data Ascii: <!doctype html><html><head><script>!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	53417	151.101.65.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	507	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:17 UTC	958	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:17 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:17 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:17 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740060-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1736813598.591642,VS0,VE3 Vary: Accept-Encoding X-vcl-time-ms: 3 transfer-encoding: chunked
2025-01-14 00:13:17 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2025-01-14 00:13:17 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 33 34 61 38 32 35 38 32 2d 36 36 62 37 2d 34 38 38 32 2d 62 34 61 37 2d 30 31 34 31 32 35 63 32 36 30 33 63 2d 74 75 63 74 65 37 66 33 31 39 63 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c","isNewUser":false}}
2025-01-14 00:13:17 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	53414	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	1080	OUT	POST /cookie_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Content-Length: 260 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:17 UTC	260	OUT	Data Raw: 7b 22 75 75 69 64 22 3a 22 33 64 37 61 31 30 65 66 2d 65 37 36 32 2d 34 36 35 65 2d 61 62 37 30 2d 30 39 61 61 32 65 32 63 32 61 30 34 22 2c 22 62 69 64 64 65 72 73 22 3a 5b 22 79 61 68 6f 6f 50 72 65 62 69 64 53 65 72 76 65 72 22 5d 2c 22 61 63 63 6f 75 6e 74 22 3a 22 79 61 68 6f 6f 22 2c 22 66 69 6c 74 65 72 53 65 74 74 69 6e 67 73 22 3a 7b 22 69 6d 61 67 65 22 3a 7b 22 62 69 64 64 65 72 73 22 3a 22 2a 22 2c 22 66 69 6c 74 65 72 22 3a 22 69 6e 63 6c 75 64 65 22 7d 2c 22 69 66 72 61 6d 65 22 3a 7b 22 62 69 64 64 65 72 73 22 3a 22 2a 22 2c 22 66 69 6c 74 65 72 22 3a 22 69 6e 63 6c 75 64 65 22 7d 7d 2c 22 67 64 70 72 22 3a 30 2c 22 75 73 5f 70 72 69 76 61 63 79 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 5f 73 69 64 22 3a 22 2d 31 22 2c 22 67 70 70 22 3a 22 44 Data Ascii: {"uuid":"3d7a10ef-e762-465e-ab70-09aa2e2c2a04","bidders":["yahooPrebidServer"],"account":"yahoo","filterSettings":{"image":{"bidders":"","filter":"include"},"iframe":{"bidders":"","filter":"include"}},"gdpr":0,"us_privacy":"1YNN","gpp_sid":"-1","gpp":"D
2025-01-14 00:13:17 UTC	519	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://gpt.mail.yahoo.net content-type: application/json; charset=utf-8 vary: Origin date: Tue, 14 Jan 2025 00:13:17 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:17 UTC	6	IN	Data Raw: 31 61 63 35 0d 0a Data Ascii: 1ac5
2025-01-14 00:13:17 UTC	1300	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 63 6f 6f 6b 69 65 22 2c 22 62 69 64 64 65 72 5f 73 74 61 74 75 73 22 3a 5b 7b 22 62 69 64 64 65 72 22 3a 22 63 6f 6e 76 65 72 73 61 6e 74 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 36 30 26 76 65 72 73 69 6f 6e 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 5f 73 69 64 3d 2d 31 26 67 70 70 3d 44 42 41 41 22 2c 22 74 79 70 65 22 3a 22 72 65 64 69 72 65 63 74 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 3a 22 74 74 64 22 2c 22 6e 6f 5f Data Ascii: {"status":"no_cookie","bidder_status":[{"bidder":"conversant","no_cookie":true,"usersync":{"url":"https://yahoo-match.dotomi.com/match/bounce/current?networkId=60&version=1&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA","type":"redirect"}},{"bidder":"ttd","no_
2025-01-14 00:13:17 UTC	1300	IN	Data Raw: 3a 2f 2f 68 62 78 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 70 62 73 26 6f 76 73 69 64 3d 73 65 74 73 74 61 74 75 73 63 6f 64 65 26 62 69 64 64 65 72 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 6d 65 64 69 61 6e 65 74 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 Data Ascii: ://hbx.media.net/cksync?cs=1&type=pbs&ovsid=setstatuscode&bidder=medianet&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dmedianet%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%2
2025-01-14 00:13:17 UTC	1300	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 70 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 70 75 62 6d 61 74 69 63 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 62 25 32 36 75 69 64 25 33 44 22 2c 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 7d 7d 2c 7b 22 62 69 64 64 Data Ascii: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D","type":"iframe"}},{"bidd
2025-01-14 00:13:17 UTC	1300	IN	Data Raw: 25 33 44 6f 70 65 6e 78 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 25 37 42 4f 50 45 4e 58 5f 49 44 25 37 44 22 2c 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 3a 22 73 68 61 72 65 74 68 72 6f 75 67 68 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 46 47 4d 72 43 4d 4d 63 2f 76 31 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e Data Ascii: %3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D","type":"iframe"}},{"bidder":"sharethrough","no_cookie":true,"usersync":{"url":"https://match.sharethrough.com/FGMrCMMc/v1?gdpr=0&gdpr_consent=&us_privacy=1YN
2025-01-14 00:13:17 UTC	863	IN	Data Raw: 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 25 35 42 55 49 44 25 35 44 22 2c 22 74 79 70 65 22 3a 22 72 65 64 69 72 65 63 74 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 3a 22 75 6e 72 75 6c 79 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 32 2f 72 6d 70 68 62 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e Data Ascii: 6gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BUID%5D","type":"redirect"}},{"bidder":"unruly","no_cookie":true,"usersync":{"url":"https://sync.1rx.io/usersync2/rmphb?gdpr=0&gdpr_consent=&us_privacy=1YNN&redir=https%3A%2F%2Fpbs.
2025-01-14 00:13:17 UTC	790	IN	Data Raw: 3d 31 59 4e 4e 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 72 65 64 69 72 65 63 74 55 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 79 69 65 6c 64 6d 6f 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 25 32 34 55 49 44 22 2c 22 74 79 70 65 22 3a 22 72 65 64 69 72 65 63 74 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 3a 22 6d 65 64 69 61 67 6f 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: =1YNN&gpp=DBAA&gpp_sid=-1&redirectUri=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dyieldmo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID","type":"redirect"}},{"bidder":"mediago","no_cookie":true,"usersync":{"url":"http
2025-01-14 00:13:17 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	53416	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	1086	OUT	POST /openrtb2/auction HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Content-Length: 2262 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:17 UTC	2262	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6d 62 72 2d 77 68 61 74 73 61 70 70 2d 61 63 2c 6d 62 72 2d 70 61 73 73 6b 65 79 2d 75 6e 72 2d 72 65 67 2c 6d 62 72 2d 77 68 61 74 73 61 70 70 2d 6e 61 63 2c 64 6d 69 5f 63 6f 6e 73 65 6e 74 5f 66 61 6c 73 65 22 2c 22 63 6c 69 65 6e 74 22 3a 22 70 62 6a 73 22 2c 22 67 61 6d 41 64 43 6f 64 65 22 3a 22 75 73 5f 79 6c 6f 67 69 6e 5f 6d 61 69 6e 5f 64 74 5f 66 75 6c 6c 5f 73 63 72 65 65 6e 22 2c 22 6c 69 76 65 69 6e 74 65 6e 74 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6c 69 76 65 52 61 6d 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 61 69 72 49 64 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 Data Ascii: {"imp":[{"ext":{"prebid":{"passthrough":{"bucket":"mbr-whatsapp-ac,mbr-passkey-unr-reg,mbr-whatsapp-nac,dmi_consent_false","client":"pbjs","gamAdCode":"us_ylogin_main_dt_full_screen","liveintentenabled":true,"liveRampEnabled":true,"pairIdEnabled":true,"sh
2025-01-14 00:13:17 UTC	777	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://gpt.mail.yahoo.net content-type: application/json set-cookie: eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; Path=/; Domain=pbs.yahoo.com; Expires=Wed, 15 Jan 2025 00:13:17 GMT; HttpOnly; Secure; SameSite=None vary: Origin x-prebid: pbs-go/unknown content-length: 678 date: Tue, 14 Jan 2025 00:13:17 GMT x-envoy-upstream-service-time: 48 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:17 UTC	678	IN	Data Raw: 7b 22 69 64 22 3a 22 30 65 65 65 66 36 62 64 2d 66 64 64 61 2d 34 35 63 64 2d 61 30 62 36 2d 61 65 36 38 34 35 39 39 35 39 63 62 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 67 70 74 2d 70 61 73 73 62 61 63 6b 5f 62 69 64 22 2c 22 69 6d 70 69 64 22 3a 22 67 70 74 2d 70 61 73 73 62 61 63 6b 22 2c 22 70 72 69 63 65 22 3a 30 2c 22 65 78 74 22 3a 7b 22 6f 72 69 67 62 69 64 63 70 6d 22 3a 30 2c 22 70 72 65 62 69 64 22 3a 7b 22 6d 65 74 61 22 3a 7b 7d 2c 22 74 61 72 67 65 74 69 6e 67 22 3a 7b 22 68 62 5f 62 69 64 64 65 72 5f 73 65 61 74 69 64 22 3a 22 44 65 66 61 75 6c 74 42 69 64 64 65 72 2d 31 22 2c 22 68 62 5f 73 6f 75 72 63 65 22 3a 22 73 32 73 22 7d 7d 7d 7d 5d 2c 22 73 65 61 74 22 3a 22 44 65 66 61 75 6c 74 42 69 64 Data Ascii: {"id":"0eeef6bd-fdda-45cd-a0b6-ae68459959cb","seatbid":[{"bid":[{"id":"gpt-passback_bid","impid":"gpt-passback","price":0,"ext":{"origbidcpm":0,"prebid":{"meta":{},"targeting":{"hb_bidder_seatid":"DefaultBidder-1","hb_source":"s2s"}}}}],"seat":"DefaultBid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	53415	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	1514	OUT	POST /p?s=794200123&t=1736813595955&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=yahoo_login&partner=&lang=en-US&region=us&device=desktop&colo=bf1&bucket=mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cdmi_consent_false&rid=unknown&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.2.29&prebidVersion=8.51.0&yahooPrebidVersion=2.0.47&type=YAHOO_PREBID_LIVEINTENT_TARGETING&hb_uid_mod=liveintentid_on_not_enriched HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:17 UTC	1119	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 00:13:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2025-01-14 00:13:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	53413	65.9.66.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	2155	OUT	GET /tag/opus-frame.html?referrer=https%3A%2F%2Flogin.yahoo.com%2F%3F.src%3Dym%26pspid%3D159600001%26activity%3Dmail-direct%26.lang%3Den-US%26.intl%3Dus%26.done%3Dhttps%253A%252F%252Fmail.yahoo.com%252Fd%252Ffolders%252F4%253Freason%253Dinvalid_cred%2526guce_referrer%253DaHR0cHM6Ly9hdHQteWFob28uYXR0Lm5ldC8%2526guce_referrer_sig%253DAQAAAHU7pOn5Py0ICYRy6HMa4wKv-pWUJKPttwmUYVl9cEoqZ_ETW9CzyJuIiL1aBFjZ3PN4uqYMO6Jn6yyQd0YZBzfrw-9c32hASyY-AWjPwakLjaO7SHo_fEzSHxF9xzPOrV6jwQTOLlozU7e9c7_ZCXa11COIdv9a-bwtrMfuShK_&tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&axids=gam%3Dy-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A%26dv360%3DeS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B%26ydsp%3Dy-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A%26tbla%3Dy-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2my0:19e0~2my0"; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:18 UTC	651	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 5503 Connection: close Date: Tue, 14 Jan 2025 00:13:19 GMT Last-Modified: Tue, 17 Dec 2024 18:00:44 GMT ETag: "19720d3a285aba8024b11fc9955795fe" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3dd91613764eafe7ad199013ce202442.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: lTqXwpAILK73ZQ8o8kp6Evk27MjGr-fDyKBZ_qOGraRaM0WLIriBGg== Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' cache-control: max-age=3600
2025-01-14 00:13:18 UTC	5503	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	53419	151.101.1.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	723	OUT	POST /OpenRTB/TaboolaHB/auction?publisher=1676624 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive Content-Length: 1638 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:17 UTC	1638	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6d 62 72 2d 77 68 61 74 73 61 70 70 2d 61 63 2c 6d 62 72 2d 70 61 73 73 6b 65 79 2d 75 6e 72 2d 72 65 67 2c 6d 62 72 2d 77 68 61 74 73 61 70 70 2d 6e 61 63 2c 64 6d 69 5f 63 6f 6e 73 65 6e 74 5f 66 61 6c 73 65 22 2c 22 63 6c 69 65 6e 74 22 3a 22 70 62 6a 73 22 2c 22 67 61 6d 41 64 43 6f 64 65 22 3a 22 75 73 5f 79 6c 6f 67 69 6e 5f 6d 61 69 6e 5f 64 74 5f 66 75 6c 6c 5f 73 63 72 65 65 6e 22 2c 22 6c 69 76 65 69 6e 74 65 6e 74 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6c 69 76 65 52 61 6d 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 61 69 72 49 64 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 Data Ascii: {"imp":[{"ext":{"prebid":{"passthrough":{"bucket":"mbr-whatsapp-ac,mbr-passkey-unr-reg,mbr-whatsapp-nac,dmi_consent_false","client":"pbjs","gamAdCode":"us_ylogin_main_dt_full_screen","liveintentenabled":true,"liveRampEnabled":true,"pairIdEnabled":true,"sh
2025-01-14 00:13:17 UTC	401	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12448 Server: nginx Content-Type: application/json;charset=utf-8 x-envoy-upstream-service-time: 72 Access-Control-Allow-Origin: https://gpt.mail.yahoo.net Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:17 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740028-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1736813598.611456,VS0,VE74
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 7b 22 69 64 22 3a 22 35 65 61 66 33 65 66 63 61 35 38 37 61 64 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 34 30 66 39 33 39 30 66 39 31 34 66 64 65 33 32 63 37 62 36 31 34 36 36 61 39 33 33 38 37 62 31 22 2c 22 69 6d 70 69 64 22 3a 22 36 63 37 38 62 38 39 38 66 64 36 31 65 62 22 2c 22 70 72 69 63 65 22 3a 30 2e 39 30 30 37 2c 22 61 64 69 64 22 3a 22 2d 33 34 39 35 34 32 39 32 34 33 32 38 38 38 38 37 34 37 31 22 2c 22 61 64 6d 22 3a 22 3c 68 74 6d 6c 3e 5c 6e 3c 68 65 61 64 3e 5c 6e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 5c 22 55 54 46 2d 38 5c 22 3e 5c 6e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 74 65 78 74 2f 68 74 6d 6c Data Ascii: {"id":"5eaf3efca587ad","seatbid":[{"bid":[{"id":"40f9390f914fde32c7b61466a93387b1","impid":"6c78b898fd61eb","price":0.9007,"adid":"-3495429243288887471","adm":"<html>\n<head>\n<meta charset=\"UTF-8\">\n<meta http-equiv=\"Content-Type\" content=\"text/html
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 30 37 36 30 63 65 61 36 36 66 31 5f 37 61 63 65 37 66 65 30 2d 30 61 62 64 2d 34 31 30 66 2d 61 36 34 32 2d 35 39 38 63 65 32 61 38 37 38 30 62 2d 74 75 63 74 65 37 66 33 31 39 64 5f 31 37 33 36 38 31 33 35 39 37 5f 31 37 33 36 38 31 33 35 39 37 5f 43 49 69 33 6a 67 59 51 30 4b 70 6d 47 4a 75 33 73 6f 36 62 6b 49 36 45 34 51 45 67 41 53 67 42 4d 4f 45 42 4f 4a 47 6b 44 6b 44 56 70 67 39 49 32 59 6a 58 41 31 44 31 41 31 67 41 59 41 42 6f 78 49 62 6d 37 50 75 48 73 4c 70 73 63 41 47 41 41 51 41 5c 22 2c 5c 22 75 69 5c 22 3a 5c 22 37 61 63 65 37 66 65 30 2d 30 61 62 64 2d 34 31 30 66 2d 61 36 34 32 2d 35 39 38 63 65 32 61 38 37 38 30 62 2d 74 75 63 74 65 37 66 33 31 39 64 5c 22 2c 5c 22 70 6c 63 5c 22 3a 5c 22 44 45 53 4b 5c 22 2c 5c 22 77 69 5c 22 3a 5c 22 Data Ascii: 0760cea66f1_7ace7fe0-0abd-410f-a642-598ce2a8780b-tucte7f319d_1736813597_1736813597_CIi3jgYQ0KpmGJu3so6bkI6E4QEgASgBMOEBOJGkDkDVpg9I2YjXA1D1A1gAYABoxIbm7PuHsLpscAGAAQA\",\"ui\":\"7ace7fe0-0abd-410f-a642-598ce2a8780b-tucte7f319d\",\"plc\":\"DESK\",\"wi\":\"
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 2d 23 40 31 30 30 30 78 36 30 30 5c 22 2c 5c 22 6f 72 69 67 69 6e 5c 22 3a 5c 22 64 65 66 61 75 6c 74 5c 22 2c 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 53 74 61 79 20 70 72 6f 74 65 63 74 65 64 20 61 73 20 79 6f 75 20 73 65 61 72 63 68 20 61 6e 64 20 62 72 6f 77 73 65 20 6f 6e 6c 69 6e 65 2e 5c 22 2c 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 72 79 20 74 68 65 20 44 75 63 6b 44 75 63 6b 47 6f 20 62 72 6f 77 73 65 72 2e 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 70 75 62 6c 69 73 68 65 64 2d 64 61 74 65 5c 22 3a 5c 22 31 37 32 34 34 33 34 32 33 32 5c 22 2c 5c 22 62 72 61 6e 64 69 6e 67 2d 74 65 78 74 5c 22 3a 5c 22 44 75 63 6b 44 75 63 6b 47 6f 5c 22 2c 5c 22 75 69 63 5c 22 3a 5c 22 74 72 75 65 5c 22 2c 5c 22 64 75 72 61 Data Ascii: -#@1000x600\",\"origin\":\"default\",\"description\":\"Stay protected as you search and browse online.\",\"title\":\"Try the DuckDuckGo browser.\",\"type\":\"text\",\"published-date\":\"1724434232\",\"branding-text\":\"DuckDuckGo\",\"uic\":\"true\",\"dura
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 6f 2e 63 6f 6d 5f 50 31 36 37 36 36 32 34 5f 53 31 36 37 36 36 32 34 5f 54 59 61 68 6f 6f 20 4c 6f 67 69 6e 20 2d 20 4d 61 69 6e 20 2d 20 44 65 73 6b 74 6f 70 20 2d 20 46 75 6c 6c 5f 53 63 72 65 65 6e 5f 57 31 34 34 30 5f 48 31 30 32 34 5f 4e 31 5c 22 2c 5c 22 75 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 64 75 63 6b 64 75 63 6b 67 6f 2e 63 6f 6d 2f 61 70 70 3f 6f 72 69 67 69 6e 3d 66 75 6e 6e 65 6c 5f 61 70 70 5f 74 61 62 6f 6f 6c 61 70 61 69 64 5f 6c 6f 67 69 6e 63 72 65 61 74 69 76 65 5f 70 72 6f 64 75 63 74 6c 69 73 74 63 6f 6d 69 63 5c 22 2c 5c 22 69 74 65 6d 2d 69 64 5c 22 3a 5c 22 7e 7e 56 31 7e 7e 2d 33 34 39 35 34 32 39 32 34 33 32 38 38 38 38 37 34 37 31 7e 7e 6d 46 37 31 53 79 4d 46 70 52 48 43 70 31 48 46 42 70 57 6f 36 49 79 57 31 45 5f 69 Data Ascii: o.com_P1676624_S1676624_TYahoo Login - Main - Desktop - Full_Screen_W1440_H1024_N1\",\"url\":\"https://duckduckgo.com/app?origin=funnel_app_taboolapaid_logincreative_productlistcomic\",\"item-id\":\"~~V1~~-3495429243288887471~~mF71SyMFpRHCp1HFBpWo6IyW1E_i
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 73 65 73 73 69 6f 6e 3d 76 32 5f 63 36 64 32 38 36 63 61 33 31 37 39 66 62 36 61 39 31 63 61 62 30 37 36 30 63 65 61 36 36 66 31 5f 37 61 63 65 37 66 65 30 2d 30 61 62 64 2d 34 31 30 66 2d 61 36 34 32 2d 35 39 38 63 65 32 61 38 37 38 30 62 2d 74 75 63 74 65 37 66 33 31 39 64 5f 31 37 33 36 38 31 33 35 39 37 5f 31 37 33 36 38 31 33 35 39 37 5f 43 49 69 33 6a 67 59 51 30 4b 70 6d 47 4a 75 33 73 6f 36 62 6b 49 36 45 34 51 45 67 41 53 67 42 4d 4f 45 42 4f 4a 47 6b 44 6b 44 56 70 67 39 49 32 59 6a 58 41 31 44 31 41 31 67 41 59 41 42 6f 78 49 62 6d 37 50 75 48 73 4c 70 73 63 41 47 41 41 51 41 26 76 69 65 77 2e 65 78 74 65 72 6e 61 6c 2d 69 64 3d 35 65 61 66 33 65 66 63 61 35 38 37 61 64 26 76 70 62 3d 45 67 52 54 51 30 39 45 47 4d 44 5a 42 43 44 67 6b 51 59 71 Data Ascii: session=v2_c6d286ca3179fb6a91cab0760cea66f1_7ace7fe0-0abd-410f-a642-598ce2a8780b-tucte7f319d_1736813597_1736813597_CIi3jgYQ0KpmGJu3so6bkI6E4QEgASgBMOEBOJGkDkDVpg9I2YjXA1D1A1gAYABoxIbm7PuHsLpscAGAAQA&view.external-id=5eaf3efca587ad&vpb=EgRTQ09EGMDZBCDgkQYq
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 51 45 67 41 53 67 42 4d 4f 45 42 4f 4a 47 6b 44 6b 44 56 70 67 39 49 32 59 6a 58 41 31 44 31 41 31 67 41 59 41 42 6f 78 49 62 6d 37 50 75 48 73 4c 70 73 63 41 47 41 41 51 41 26 76 69 65 77 2e 65 78 74 65 72 6e 61 6c 2d 69 64 3d 35 65 61 66 33 65 66 63 61 35 38 37 61 64 26 76 70 62 3d 45 67 52 54 51 30 39 45 47 4d 44 5a 42 43 44 67 6b 51 59 71 43 56 52 68 59 6d 39 76 62 47 46 49 51 6a 44 79 70 36 47 52 78 6a 49 36 47 58 56 7a 4c 6e 52 68 59 6d 39 76 62 47 46 7a 65 57 35 6b 61 57 4e 68 64 47 6c 76 62 69 35 6a 62 32 31 43 42 7a 45 32 4e 7a 59 32 4d 6a 52 4b 48 6e 6c 68 61 47 39 76 62 57 46 70 62 47 78 76 5a 32 6c 75 5a 57 34 74 61 47 56 68 5a 47 56 79 59 6d 6c 6b 5a 47 6c 75 5a 31 49 50 62 47 39 6e 61 57 34 75 65 57 46 6f 62 32 38 75 59 32 39 74 59 4a 43 64 Data Ascii: QEgASgBMOEBOJGkDkDVpg9I2YjXA1D1A1gAYABoxIbm7PuHsLpscAGAAQA&view.external-id=5eaf3efca587ad&vpb=EgRTQ09EGMDZBCDgkQYqCVRhYm9vbGFIQjDyp6GRxjI6GXVzLnRhYm9vbGFzeW5kaWNhdGlvbi5jb21CBzE2NzY2MjRKHnlhaG9vbWFpbGxvZ2luZW4taGVhZGVyYmlkZGluZ1IPbG9naW4ueWFob28uY29tYJCd
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 69 6e 6b 20 72 65 6d 6f 76 65 64 5c 22 2c 5c 22 70 6f 70 6f 76 65 72 2e 63 6f 6e 74 65 6e 74 2e 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 2e 6f 70 74 69 6f 6e 73 2e 72 65 70 65 74 69 74 69 76 65 5c 22 3a 5c 22 52 65 70 65 74 69 74 69 76 65 5c 22 2c 5c 22 70 6f 70 6f 76 65 72 2e 74 69 74 6c 65 2e 74 68 61 6e 6b 59 6f 75 5c 22 3a 5c 22 54 68 61 6e 6b 20 59 6f 75 21 5c 22 2c 5c 22 70 6f 70 6f 76 65 72 2e 74 69 74 6c 65 2e 72 65 6d 6f 76 65 64 5c 22 3a 5c 22 52 65 6d 6f 76 65 64 21 5c 22 2c 5c 22 70 6f 70 6f 76 65 72 2e 63 6f 6e 74 65 6e 74 2e 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 65 6e 73 69 76 65 5c 22 3a 5c 22 4f 66 66 65 6e 73 69 76 65 5c 22 2c 5c 22 70 6f 70 6f 76 65 72 2e 63 6f 6e 74 65 6e 74 2e 71 75 65 73 74 69 6f 6e Data Ascii: ink removed\",\"popover.content.questionnaire.options.repetitive\":\"Repetitive\",\"popover.title.thankYou\":\"Thank You!\",\"popover.title.removed\":\"Removed!\",\"popover.content.questionnaire.options.offensive\":\"Offensive\",\"popover.content.question
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 64 31 62 36 37 31 30 30 62 62 35 32 63 32 31 26 72 65 73 70 6f 6e 73 65 2e 69 64 3d 5f 5f 39 39 33 31 64 61 34 31 66 64 34 32 66 63 32 30 30 35 32 35 64 38 65 34 65 31 64 65 32 65 65 61 5f 5f 34 30 66 39 33 39 30 66 39 31 34 66 64 65 33 32 63 37 62 36 31 34 36 36 61 39 33 33 38 37 62 31 5f 5f 25 37 45 25 37 45 56 31 25 37 45 25 37 45 2d 33 34 39 35 34 32 39 32 34 33 32 38 38 38 38 37 34 37 31 25 37 45 25 37 45 6d 46 37 31 53 79 4d 46 70 52 48 43 70 31 48 46 42 70 57 6f 36 49 79 57 31 45 5f 69 79 59 4d 59 71 54 30 4c 61 67 75 7a 78 45 66 70 5a 79 43 37 64 47 56 64 76 4b 6e 53 48 73 61 48 72 4e 73 46 71 50 54 57 38 77 6a 63 33 65 34 64 49 76 51 54 4a 5f 4c 50 48 47 2d 31 35 70 54 4b 63 75 4e 42 74 79 34 68 6d 44 50 6e 35 6d 36 64 6e 34 56 6f 68 4a 6f 49 33 Data Ascii: d1b67100bb52c21&response.id=__9931da41fd42fc200525d8e4e1de2eea__40f9390f914fde32c7b61466a93387b1__%7E%7EV1%7E%7E-3495429243288887471%7E%7EmF71SyMFpRHCp1HFBpWo6IyW1E_iyYMYqT0LaguzxEfpZyC7dGVdvKnSHsaHrNsFqPTW8wjc3e4dIvQTJ_LPHG-15pTKcuNBty4hmDPn5m6dn4VohJoI3
2025-01-14 00:13:17 UTC	1378	IN	Data Raw: 69 6f 6e 73 2e 6e 6f 74 69 66 79 2d 6c 6f 73 74 3f 61 70 70 2e 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 61 70 70 2e 61 70 69 6b 65 79 3d 30 32 30 38 64 61 35 37 36 64 37 31 39 31 39 62 62 35 61 63 39 65 63 66 35 64 31 62 36 37 31 30 30 62 62 35 32 63 32 31 26 72 65 73 70 6f 6e 73 65 2e 69 64 3d 5f 5f 39 39 33 31 64 61 34 31 66 64 34 32 66 63 32 30 30 35 32 35 64 38 65 34 65 31 64 65 32 65 65 61 5f 5f 34 30 66 39 33 39 30 66 39 31 34 66 64 65 33 32 63 37 62 36 31 34 36 36 61 39 33 33 38 37 62 31 5f 5f 25 37 45 25 37 45 56 31 25 37 45 25 37 45 2d 33 34 39 35 34 32 39 32 34 33 32 38 38 38 38 37 34 37 31 25 37 45 25 37 45 6d 46 37 31 53 79 4d 46 70 52 48 43 70 31 48 46 42 70 57 6f 36 49 79 57 31 45 5f 69 79 59 4d 59 71 54 30 4c 61 67 75 7a 78 45 66 70 5a 79 43 Data Ascii: ions.notify-lost?app.type=desktop&app.apikey=0208da576d71919bb5ac9ecf5d1b67100bb52c21&response.id=__9931da41fd42fc200525d8e4e1de2eea__40f9390f914fde32c7b61466a93387b1__%7E%7EV1%7E%7E-3495429243288887471%7E%7EmF71SyMFpRHCp1HFBpWo6IyW1E_iyYMYqT0LaguzxEfpZyC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	53420	44.195.149.119	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	907	OUT	GET /j?dtstmp=1736813596061&did=did-004f&se=e30&duid=dc5154c516e8--01jhh2gj4yxpk5wqcxcx9fqbp1&tv=8.51.0&pu=https%3A%2F%2Flogin.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.gpt.mail.yahoo.net HTTP/1.1 Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7
2025-01-14 00:13:17 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:17 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: 378aebaa-ed69-4c61-8d9f-563330f986e0 set-cookie: lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7; Max-Age=63072000; Expires=Thu, 14 Jan 2027 00:13:17 GMT; Path=/j; Domain=.liadm.com; Secure; SameSite=None access-control-allow-origin: https://gpt.mail.yahoo.net access-control-allow-methods: GET access-control-allow-credentials: true access-control-expose-headers: * access-control-max-age: 86400
2025-01-14 00:13:17 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	53418	52.18.154.142	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	627	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://gpt.mail.yahoo.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:17 UTC	348	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:17 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: x-openrtb-version,Content-Type Allow: OPTIONS,POST Access-Control-Allow-Methods: OPTIONS,POST Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://gpt.mail.yahoo.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	53423	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	1171	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0"
2025-01-14 00:13:18 UTC	610	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:18 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://gpt.mail.yahoo.net Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0:19e7~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:18 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 1 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:18 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:18 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 66 58 4b 35 44 63 42 45 32 75 4a 54 48 75 4d 6d 53 42 45 31 45 52 6f 65 4f 6e 52 46 65 67 38 44 7e 41 22 7d Data Ascii: {"axid": "y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A"}
2025-01-14 00:13:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 00:13:18 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-14 00:13:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	53421	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	376	OUT	GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:18 UTC	660	IN	HTTP/1.1 200 OK x-amz-id-2: cEoDylJuPkQTSS+Ja6t40Y0V3puTdq0ZNpIEMgnU+63c0kkzssggve88sz9+gv1tZf3AAcamL9B8fOpcgFLOFecGRFDvIweL9JiefBJtDDk= x-amz-request-id: EYAGFCH7P40KKJ7T Date: Fri, 10 Jan 2025 14:43:45 GMT Last-Modified: Wed, 11 Sep 2019 18:01:04 GMT ETag: "b6814ae5582d7953821acbd76e977bb4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Content-Length: 1406 Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 293373 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2025-01-14 00:13:18 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d3 08 64 00 d3 0b 66 00 d4 0f 69 00 d5 12 6b 00 d5 16 6d 00 d6 1a 70 00 d6 1c 71 00 d7 1f 73 00 d7 20 73 00 d8 24 76 00 d9 2a 7a 00 dd 3f 87 00 de 44 8a 00 df 4d 90 00 e1 56 95 00 e2 5f 9b 00 e3 62 9d 00 e3 63 9d 00 e5 6c a3 00 e6 76 a9 00 e7 79 ab 00 e7 7c ad 00 eb 92 bb 00 ed 9c c1 00 f0 ac cb 00 f1 b2 ce 00 f1 b4 d0 00 f2 b6 d1 00 f2 b8 d2 00 f3 bf d7 00 f4 c5 da 00 f6 d0 e1 00 f7 d2 e2 00 f7 d3 e3 00 f9 de ea 00 f9 e1 ec 00 fa e8 f0 00 fb ea f1 00 fc ee f4 00 fd f6 f9 00 fd f9 fb 00 fe fa fb 00 fe fb fc 00 fe fc fd 00 fe fd fd 00 fe fe fe 00 ff ff ff 00 00 Data Ascii: h( `dfikmpqs s$v*z?DMV_bclvy\|
2025-01-14 00:13:18 UTC	106	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	53424	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:17 UTC	1076	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0"
2025-01-14 00:13:18 UTC	489	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:18 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:18 UTC	4	IN	Data Raw: 33 63 0d 0a Data Ascii: 3c
2025-01-14 00:13:18 UTC	60	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 65 53 31 4a 56 56 67 75 63 6b 77 35 52 54 4a 31 52 33 4a 4c 5a 47 4a 42 4f 44 4e 4c 55 31 4d 33 59 55 68 4c 61 48 56 44 52 6e 68 34 58 33 35 42 22 7d Data Ascii: {"axid": "eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B"}
2025-01-14 00:13:18 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	53425	151.101.1.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:18 UTC	516	OUT	GET /OpenRTB/TaboolaHB/auction?publisher=1676624 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:20 UTC	281	IN	HTTP/1.1 204 Not Found Connection: close Server: nginx x-envoy-upstream-service-time: 0 Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:18 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890093-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1736813598.256484,VS0,VE20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	53426	44.195.149.119	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:18 UTC	644	OUT	GET /j?dtstmp=1736813596061&did=did-004f&se=e30&duid=dc5154c516e8--01jhh2gj4yxpk5wqcxcx9fqbp1&tv=8.51.0&pu=https%3A%2F%2Flogin.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.gpt.mail.yahoo.net HTTP/1.1 Host: rp.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7; lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7
2025-01-14 00:13:18 UTC	347	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:18 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: 45876f42-95be-4d47-b2a2-0bc3ab4b5571 set-cookie: lidid=c1f482a6-6a7c-4d3c-bd9e-e8b01575d4c7; Max-Age=63072000; Expires=Thu, 14 Jan 2027 00:13:18 GMT; Path=/j; Domain=.liadm.com; Secure; SameSite=None
2025-01-14 00:13:18 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	53427	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:18 UTC	950	OUT	GET /cookie_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:18 UTC	373	IN	HTTP/1.1 403 Forbidden vary: Origin content-length: 0 date: Tue, 14 Jan 2025 00:13:18 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	53428	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:18 UTC	1094	OUT	GET /openrtb2/auction HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19
2025-01-14 00:13:18 UTC	479	IN	HTTP/1.1 405 Method Not Allowed allow: OPTIONS, POST content-type: text/plain; charset=utf-8 vary: Origin x-content-type-options: nosniff content-length: 19 date: Tue, 14 Jan 2025 00:13:18 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:18 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	53429	52.18.154.142	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:18 UTC	1134	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:18 UTC	1131	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 61 30 30 65 31 63 32 2d 32 62 64 35 2d 34 37 63 37 2d 39 34 34 63 2d 36 38 31 30 65 33 32 31 66 35 39 62 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 34 65 61 39 33 36 39 31 36 32 66 66 34 64 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 39 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 31 34 34 30 2c 22 68 22 3a 31 30 32 34 7d 5d 2c 22 70 6f 73 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 22 64 66 70 5f 61 Data Ascii: {"id":"9a00e1c2-2bd5-47c7-944c-6810e321f59b","cur":["USD"],"imp":[{"id":"4ea9369162ff4d","secure":1,"bidfloor":0.9,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":1440,"h":1024}],"pos":1},"ext":{"dfp_a
2025-01-14 00:13:18 UTC	488	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:18 GMT Content-Type: application/json Content-Length: 66 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: x-openrtb-version,Content-Type Allow: OPTIONS,POST Access-Control-Allow-Methods: OPTIONS,POST Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://gpt.mail.yahoo.net X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:18 UTC	66	IN	Data Raw: 7b 22 69 64 22 3a 22 39 61 30 30 65 31 63 32 2d 32 62 64 35 2d 34 37 63 37 2d 39 34 34 63 2d 36 38 31 30 65 33 32 31 66 35 39 62 22 2c 22 6e 62 72 22 3a 31 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"9a00e1c2-2bd5-47c7-944c-6810e321f59b","nbr":1,"seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	53431	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:18 UTC	1181	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0:19e7~2my0"
2025-01-14 00:13:19 UTC	610	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:18 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://gpt.mail.yahoo.net Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0:19e7~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:18 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:19 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:19 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 61 54 77 33 56 6c 6c 45 32 75 49 47 72 49 54 73 42 68 74 67 69 52 5a 55 56 54 5a 56 35 52 56 49 7e 41 22 7d Data Ascii: {"axid": "y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A"}
2025-01-14 00:13:19 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	53432	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:18 UTC	1086	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0:19e7~2my0"
2025-01-14 00:13:19 UTC	499	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:19 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2my0:19e0~2my0:19ea~2my0:19e7~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 1 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:19 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:19 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 66 58 4b 35 44 63 42 45 32 75 4a 54 48 75 4d 6d 53 42 45 31 45 52 6f 65 4f 6e 52 46 65 67 38 44 7e 41 22 7d Data Ascii: {"axid": "y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A"}
2025-01-14 00:13:19 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	53433	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:18 UTC	1085	OUT	GET /lr_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19
2025-01-14 00:13:19 UTC	373	IN	HTTP/1.1 403 Forbidden vary: Origin content-length: 0 date: Tue, 14 Jan 2025 00:13:19 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	53438	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	1384	OUT	GET /ups/58746/sync?ui=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
2025-01-14 00:13:19 UTC	748	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:19 GMT Content-Type: text/html Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://trc.taboola.com/sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&us_privacy=1YNN Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Server: ATS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	53436	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	1285	OUT	GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
2025-01-14 00:13:19 UTC	627	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:19 GMT Content-Type: text/html Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://tags.bluekai.com/site/19505?id=y-S0FzJw9E2pK3ajFl3bJjONq10grfWVWNADc-~A Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Server: ATS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	53434	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	1297	OUT	GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
2025-01-14 00:13:19 UTC	788	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:19 GMT Content-Type: text/html Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-NImngKVE2pHO0hoKEqPekNGLH6DhGNV06_g-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Server: ATS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	53435	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	1285	OUT	GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
2025-01-14 00:13:19 UTC	644	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:19 GMT Content-Type: text/html Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://aa.agkn.com/adscores/g.pixel?sid=9202214988&yho=y-725Nbs9E2p6CLtAKFBw7Q6Hpx9rmFJpwp_s-~A Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Server: ATS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	53437	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	1305	OUT	GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC=19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0
2025-01-14 00:13:19 UTC	677	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:19 GMT Content-Type: text/html Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://uipglob.semasio.net/oath/1/info?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Server: ATS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	53441	151.101.65.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	860	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:19 UTC	983	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://gpt.mail.yahoo.net Access-Control-Allow-Credentials: true Set-Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:19 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-nyc-kteb1890097-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1736813600.776734,VS0,VE2 Vary: Accept-Encoding X-vcl-time-ms: 2 transfer-encoding: chunked
2025-01-14 00:13:19 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2025-01-14 00:13:19 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 33 34 61 38 32 35 38 32 2d 36 36 62 37 2d 34 38 38 32 2d 62 34 61 37 2d 30 31 34 31 32 35 63 32 36 30 33 63 2d 74 75 63 74 65 37 66 33 31 39 63 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c","isNewUser":false}}
2025-01-14 00:13:19 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	53449	151.101.1.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	838	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:20 UTC	969	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:19 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 1797 Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:19 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740070-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1736813600.958071,VS0,VE3 X-vcl-time-ms: 3 transfer-encoding: chunked
2025-01-14 00:13:20 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2025-01-14 00:13:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2025-01-14 00:13:20 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	53443	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	1500	OUT	POST /p?s=794200123&t=1736813598447&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=yahoo_login&partner=&lang=en-US&region=us&device=desktop&colo=bf1&bucket=mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cdmi_consent_false&rid=unknown&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.2.29&prebidVersion=8.51.0&yahooPrebidVersion=2.0.47&logType=INFO&message=LI_MODULE_LOADED&source=PREBID%3ALIVEINTENT HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:20 UTC	1119	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 00:13:20 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2025-01-14 00:13:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	53442	188.125.72.139	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	1499	OUT	POST /p?s=794200123&t=1736813598449&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=yahoo_login&partner=&lang=en-US&region=us&device=desktop&colo=bf1&bucket=mbr-whatsapp-ac%2Cmbr-passkey-unr-reg%2Cmbr-whatsapp-nac%2Cdmi_consent_false&rid=unknown&limitedAds=false&NPA=false&pd=unknown&pt=unknown&usercountry=US&benjiVersion=2.2.29&prebidVersion=8.51.0&yahooPrebidVersion=2.0.47&message=timeDifference%3A432ms&type=LIVEINTENT_FINISHED_IN_TIME HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:20 UTC	1119	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 00:13:20 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Expires=Wed, 14 Jan 2026 06:13:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2025-01-14 00:13:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	53445	87.248.119.251	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	1136	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
2025-01-14 00:13:20 UTC	549	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:20 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 14-Jan-2026 00:13:20 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS
2025-01-14 00:13:20 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2025-01-14 00:13:20 UTC	48	IN	Data Raw: 7b 22 61 78 69 64 22 3a 20 22 79 2d 61 54 77 33 56 6c 6c 45 32 75 49 47 72 49 54 73 42 68 74 67 69 52 5a 55 56 54 5a 56 35 52 56 49 7e 41 22 7d Data Ascii: {"axid": "y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A"}
2025-01-14 00:13:20 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2025-01-14 00:13:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	53446	77.243.51.122	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:19 UTC	644	OUT	GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:20 UTC	291	IN	HTTP/1.1 302 Found location: https://uipus.semasio.net/oath/1/info?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external date: Tue, 14 Jan 2025 00:13:20 GMT content-length: 0 routing-server-id: -1 access-control-allow-origin: * connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	53448	52.211.89.170	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	755	OUT	GET /ibs:dpid=30646?dpuuid=y-NImngKVE2pHO0hoKEqPekNGLH6DhGNV06_g-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:20 UTC	738	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:20 GMT Content-Length: 0 Connection: close X-TID: C/uDW8MzRf8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=30646 DCS: dcs-prod-irl1-2-v069-0bd5f2040.edge-irl1.demdex.com 0 ms set-cookie: demdex=60147287448872733550594916507824635591; Max-Age=15552000; Expires=Sun, 13 Jul 2025 00:13:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	53444	52.18.154.142	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	973	OUT	GET /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:20 UTC	135	IN	HTTP/1.1 404 Not Found Date: Tue, 14 Jan 2025 00:13:20 GMT Content-Type: application/json Content-Length: 145 Connection: close
2025-01-14 00:13:20 UTC	145	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 31 2d 31 34 54 30 30 3a 31 33 3a 32 30 2e 34 30 34 2b 30 30 3a 30 30 22 2c 22 70 61 74 68 22 3a 22 2f 61 64 6d 61 78 2f 62 69 64 2f 70 61 72 74 6e 65 72 73 2f 59 50 42 4a 53 22 2c 22 73 74 61 74 75 73 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 31 34 35 39 39 66 31 34 2d 36 35 34 38 37 35 32 33 22 7d Data Ascii: {"timestamp":"2025-01-14T00:13:20.404+00:00","path":"/admax/bid/partners/YPBJS","status":404,"error":"Not Found","requestId":"14599f14-65487523"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	53447	3.254.223.93	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	611	OUT	GET /adscores/g.pixel?sid=9202214988&yho=y-725Nbs9E2p6CLtAKFBw7Q6Hpx9rmFJpwp_s-~A HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:20 UTC	766	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:20 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Axev9EIEsbQlLHdF%2FtyUKTrT09rhjyEhr; Path=/; Domain=.agkn.com; Expires=Wed, 14-Jan-2026 00:13:20 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://cms.analytics.yahoo.com/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=218993205127000050435&gdpr=&gdpr_consent=
2025-01-14 00:13:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	53452	151.101.65.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	566	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:20 UTC	958	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:20 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:20 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:20 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740076-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1736813600.347162,VS0,VE2 Vary: Accept-Encoding X-vcl-time-ms: 2 transfer-encoding: chunked
2025-01-14 00:13:20 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2025-01-14 00:13:20 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 33 34 61 38 32 35 38 32 2d 36 36 62 37 2d 34 38 38 32 2d 62 34 61 37 2d 30 31 34 31 32 35 63 32 36 30 33 63 2d 74 75 63 74 65 37 66 33 31 39 63 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c","isNewUser":false}}
2025-01-14 00:13:20 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	53450	3.33.220.150	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	726	OUT	GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:20 UTC	513	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:20 GMT Content-Length: 235 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 set-cookie: TDID=2417d054-2ba1-4d51-a183-4333e652c96e; expires=Wed, 14 Jan 2026 00:13:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIzuO6vN-O2j0QBTgB; expires=Wed, 14 Jan 2026 00:13:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2025-01-14 00:13:20 UTC	235	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	53451	142.250.184.194	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	686	OUT	GET /getconfig/sodar?sv=200&tid=gpt&tv=m202501070101&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://gpt.mail.yahoo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:20 UTC	586	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Tue, 14 Jan 2025 00:13:20 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-14 00:13:20 UTC	804	IN	Data Raw: 34 34 35 32 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 49 4b 79 46 5a 37 69 6c 49 37 32 73 39 75 38 50 78 6f 66 78 6b 41 34 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 2d 5a 72 4c 65 76 38 30 4b 61 53 6c 35 4c 48 35 4f 43 62 6e 5a 47 48 75 36 79 4c 53 62 33 74 52 47 75 77 61 78 47 56 6e 55 73 4d 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 74 55 77 42 39 76 55 6f 51 41 33 4b 63 4f 6a 4a 6e 6e 72 7a 45 2b 69 31 72 6c 56 46 33 61 71 5a 74 4d 2b 48 72 38 6b 6f 58 50 57 45 45 41 51 43 6d 47 55 2f 39 32 56 35 75 77 4f 77 79 52 62 61 56 61 45 66 56 4c 78 4d 2f 49 50 65 53 76 39 71 63 52 6f 30 64 6b 78 52 70 65 36 35 39 63 41 73 33 70 Data Ascii: 4452{"sodar_query_id":"IKyFZ7ilI72s9u8PxofxkA4","injector_basename":"sodar2","bg_hash_basename":"-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM","bg_binary":"tUwB9vUoQA3KcOjJnnrzE+i1rlVF3aqZtM+Hr8koXPWEEAQCmGU/92V5uwOwyRbaVaEfVLxM/IPeSv9qcRo0dkxRpe659cAs3p
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 42 30 50 39 6e 78 45 44 2f 47 73 41 78 59 42 67 35 74 51 4c 35 36 78 46 59 6e 4b 78 64 55 63 38 77 48 71 32 37 74 32 61 47 6c 5a 73 56 38 50 31 75 36 2b 72 65 79 73 50 31 47 36 2b 4d 63 4f 71 49 50 74 4a 55 4f 58 34 6f 35 64 65 50 35 41 63 2b 4f 5a 57 4e 53 32 31 63 62 33 42 76 68 6c 33 35 38 4f 70 68 48 51 35 2f 6e 64 64 6b 6b 4a 4f 59 61 4e 2f 43 48 6c 6a 2b 75 31 49 52 34 4a 33 71 38 73 34 79 66 76 33 43 32 6a 63 44 65 6f 47 44 76 4f 77 6e 68 62 37 4e 72 4c 68 6e 63 39 35 39 4e 53 55 6b 56 62 6e 70 62 53 71 75 32 37 54 36 2b 43 61 38 32 2f 65 5a 7a 4e 65 32 45 4e 38 53 53 56 62 7a 6e 73 31 52 62 2f 76 2b 4e 35 6d 6f 38 4d 6a 35 46 43 50 73 2b 6e 42 67 58 45 71 52 4a 67 73 78 54 6f 5a 6d 7a 74 64 4b 49 62 64 69 2b 67 47 46 6d 6f 70 59 58 77 39 6c 79 58 Data Ascii: B0P9nxED/GsAxYBg5tQL56xFYnKxdUc8wHq27t2aGlZsV8P1u6+reysP1G6+McOqIPtJUOX4o5deP5Ac+OZWNS21cb3Bvhl358OphHQ5/nddkkJOYaN/CHlj+u1IR4J3q8s4yfv3C2jcDeoGDvOwnhb7NrLhnc959NSUkVbnpbSqu27T6+Ca82/eZzNe2EN8SSVbzns1Rb/v+N5mo8Mj5FCPs+nBgXEqRJgsxToZmztdKIbdi+gGFmopYXw9lyX
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 75 64 41 79 68 2f 54 4f 38 44 6d 6f 59 4b 78 32 50 48 62 59 7a 6b 47 4f 53 32 74 41 75 69 6c 44 6d 55 32 65 34 6a 44 4c 4b 72 4b 6d 46 57 53 51 57 6b 7a 55 37 53 49 55 32 65 69 64 31 38 6f 6b 48 5a 73 31 36 70 37 4b 42 39 58 6c 6e 6e 68 76 65 75 46 39 31 47 65 41 30 79 34 42 43 49 6d 61 44 42 73 47 4a 6a 75 63 6e 65 69 71 71 4e 6d 38 55 59 6a 4f 59 79 41 53 79 4c 45 45 59 43 33 4a 70 41 70 56 50 4b 4f 48 78 6c 67 4c 73 78 64 48 2b 51 35 76 50 79 5a 76 43 35 56 30 59 35 50 48 39 44 38 48 37 6b 48 4d 5a 71 72 42 78 7a 38 74 4b 6b 59 30 4a 35 6a 55 62 5a 6a 6a 4b 43 45 30 30 48 5a 68 31 6e 49 30 39 30 4e 65 77 51 4e 55 4d 4f 63 45 48 33 70 34 79 70 41 43 47 4c 52 48 61 50 43 4a 52 63 72 61 61 70 6a 50 32 41 59 48 37 2b 57 76 4d 4b 31 2b 75 38 6d 73 37 43 49 Data Ascii: udAyh/TO8DmoYKx2PHbYzkGOS2tAuilDmU2e4jDLKrKmFWSQWkzU7SIU2eid18okHZs16p7KB9XlnnhveuF91GeA0y4BCImaDBsGJjucneiqqNm8UYjOYyASyLEEYC3JpApVPKOHxlgLsxdH+Q5vPyZvC5V0Y5PH9D8H7kHMZqrBxz8tKkY0J5jUbZjjKCE00HZh1nI090NewQNUMOcEH3p4ypACGLRHaPCJRcraapjP2AYH7+WvMK1+u8ms7CI
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 38 58 69 57 6b 53 55 69 57 49 56 54 44 44 58 77 69 6e 45 64 6b 57 72 50 67 2f 6d 73 42 34 46 76 71 6c 77 39 71 34 54 36 75 6b 2b 37 30 64 50 55 5a 2f 4a 33 67 65 4b 37 61 50 69 7a 67 76 4a 44 70 72 30 70 44 31 6a 51 33 51 6c 4e 68 7a 6b 2f 4d 65 6f 2f 75 34 61 52 69 41 45 54 4d 43 67 53 35 5a 44 6b 74 37 6d 75 75 43 70 49 4b 34 49 46 43 61 50 4a 6e 69 36 76 58 77 76 55 43 43 72 70 65 30 62 57 72 45 65 55 4c 6b 4f 55 48 41 4a 6a 36 41 7a 30 51 6b 31 6c 32 39 4f 39 59 6a 4d 74 33 57 79 73 66 70 59 67 4c 59 6e 49 4b 75 35 31 75 59 41 39 34 58 32 79 5a 66 61 6e 49 6b 37 51 77 33 69 4f 4d 42 78 39 55 58 65 67 6d 56 4c 4e 72 4c 64 4d 32 78 69 4d 70 42 6d 36 6f 41 6d 75 5a 47 56 67 67 2f 5a 70 4b 67 4d 51 4a 59 61 78 4d 63 30 64 44 55 59 77 2f 4d 52 71 50 62 65 Data Ascii: 8XiWkSUiWIVTDDXwinEdkWrPg/msB4Fvqlw9q4T6uk+70dPUZ/J3geK7aPizgvJDpr0pD1jQ3QlNhzk/Meo/u4aRiAETMCgS5ZDkt7muuCpIK4IFCaPJni6vXwvUCCrpe0bWrEeULkOUHAJj6Az0Qk1l29O9YjMt3WysfpYgLYnIKu51uYA94X2yZfanIk7Qw3iOMBx9UXegmVLNrLdM2xiMpBm6oAmuZGVgg/ZpKgMQJYaxMc0dDUYw/MRqPbe
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 55 33 33 62 5a 35 54 66 32 6a 67 39 43 6d 6b 6e 71 64 75 65 39 72 30 56 73 48 4c 4a 48 6b 45 47 35 66 30 45 66 53 4a 63 73 4c 6e 75 6b 52 65 53 45 6a 4c 6e 78 70 66 6d 51 53 4d 41 58 41 6f 49 4f 6c 51 42 4b 6b 6a 35 56 2f 44 41 5a 58 63 4a 79 6b 4a 67 76 34 32 4d 76 5a 6c 33 6d 46 75 76 6f 2f 55 2f 42 37 37 2b 36 70 4b 37 42 34 37 73 61 69 48 38 75 4d 33 72 73 57 74 4d 79 50 59 50 45 76 2f 59 73 4f 37 4c 79 70 45 73 4c 4a 54 37 2b 2f 45 56 58 68 58 42 63 69 44 49 6e 4a 33 65 6e 44 66 6f 4c 30 43 2b 6a 2b 30 39 4f 75 44 2b 76 38 54 57 4b 5a 52 34 63 4f 4c 39 5a 77 6f 67 44 59 51 53 6c 4a 78 67 55 75 56 56 63 78 51 33 30 70 77 30 49 71 33 74 49 34 65 50 38 4a 63 72 56 63 2f 4f 36 2f 4e 52 50 59 64 73 59 56 30 65 59 33 76 39 52 33 70 51 66 46 69 39 31 30 4d Data Ascii: U33bZ5Tf2jg9Cmknqdue9r0VsHLJHkEG5f0EfSJcsLnukReSEjLnxpfmQSMAXAoIOlQBKkj5V/DAZXcJykJgv42MvZl3mFuvo/U/B77+6pK7B47saiH8uM3rsWtMyPYPEv/YsO7LypEsLJT7+/EVXhXBciDInJ3enDfoL0C+j+09OuD+v8TWKZR4cOL9ZwogDYQSlJxgUuVVcxQ30pw0Iq3tI4eP8JcrVc/O6/NRPYdsYV0eY3v9R3pQfFi910M
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 36 48 6a 4f 69 70 6e 67 71 6f 55 73 6b 56 41 53 34 56 62 5a 72 69 71 73 2b 6f 44 67 54 7a 36 61 41 7a 39 4d 34 37 30 2b 59 58 47 51 44 68 30 6b 2b 47 43 4e 42 41 51 58 45 46 50 72 70 6c 32 51 34 71 41 6b 73 74 69 72 61 54 32 39 5a 70 36 45 33 68 43 6c 6c 59 63 67 6b 4c 2b 6a 6f 43 38 61 4e 6b 4c 4b 6f 73 38 50 78 4d 7a 36 71 49 56 62 58 38 62 62 52 68 6c 39 6f 47 33 32 2f 79 53 43 6b 79 37 34 2b 4a 62 4d 57 71 63 53 69 71 63 6d 52 72 53 6b 69 51 78 46 62 4b 6a 51 73 67 42 36 79 39 44 36 77 4f 36 67 38 37 61 35 45 6e 7a 76 6e 70 45 63 56 35 39 6d 4a 71 62 61 72 38 68 59 53 72 6d 65 7a 31 54 72 5a 38 57 59 34 76 41 30 37 33 4b 42 4f 2b 57 49 34 52 75 4a 73 46 78 78 5a 71 6d 43 57 42 6f 56 64 64 48 38 64 64 67 4b 71 4a 35 50 57 53 4c 37 72 61 68 2f 37 30 6b Data Ascii: 6HjOipngqoUskVAS4VbZriqs+oDgTz6aAz9M470+YXGQDh0k+GCNBAQXEFPrpl2Q4qAkstiraT29Zp6E3hCllYcgkL+joC8aNkLKos8PxMz6qIVbX8bbRhl9oG32/ySCky74+JbMWqcSiqcmRrSkiQxFbKjQsgB6y9D6wO6g87a5EnzvnpEcV59mJqbar8hYSrmez1TrZ8WY4vA073KBO+WI4RuJsFxxZqmCWBoVddH8ddgKqJ5PWSL7rah/70k
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 66 42 70 33 57 77 76 62 6e 2f 64 79 45 73 45 57 4b 2b 58 70 6e 74 59 36 49 51 69 51 6a 58 44 63 63 45 46 36 6e 48 78 6e 6a 63 78 49 42 39 41 54 53 55 43 57 4a 4c 6f 6c 62 43 68 61 65 61 76 77 75 64 63 68 47 70 6d 32 5a 5a 4c 4a 54 59 69 69 6d 49 43 48 37 38 33 56 52 43 52 63 32 47 70 45 2f 36 75 70 6a 57 2b 42 57 75 41 7a 70 45 75 63 39 47 57 71 78 51 49 51 6e 59 68 7a 4f 34 56 62 5a 6a 57 79 30 67 73 56 54 79 65 34 63 53 45 36 32 2f 53 4b 41 6f 56 52 73 6e 41 2b 44 32 2f 65 79 75 6e 77 65 6e 4c 46 2f 74 49 4e 75 65 52 53 4f 65 52 6d 41 6e 59 33 6d 45 2f 38 68 63 6e 78 74 4d 4d 73 30 4a 66 31 66 64 47 36 7a 6c 52 34 2f 44 55 43 37 46 6d 72 56 45 59 63 54 45 2b 6a 46 55 73 62 56 62 54 39 5a 6b 30 57 75 36 4c 37 6f 47 54 67 4f 79 79 7a 4f 4c 34 69 44 74 4b Data Ascii: fBp3Wwvbn/dyEsEWK+XpntY6IQiQjXDccEF6nHxnjcxIB9ATSUCWJLolbChaeavwudchGpm2ZZLJTYiimICH783VRCRc2GpE/6upjW+BWuAzpEuc9GWqxQIQnYhzO4VbZjWy0gsVTye4cSE62/SKAoVRsnA+D2/eyunwenLF/tINueRSOeRmAnY3mE/8hcnxtMMs0Jf1fdG6zlR4/DUC7FmrVEYcTE+jFUsbVbT9Zk0Wu6L7oGTgOyyzOL4iDtK
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 33 73 66 4b 4f 72 79 64 66 54 71 74 53 48 48 7a 54 38 2f 77 70 6e 48 69 6f 68 54 52 79 36 71 47 64 67 45 6c 64 38 48 41 6e 75 56 6c 4e 39 4e 6d 5a 43 4d 41 51 41 74 6b 34 45 6f 4e 2b 53 79 6a 62 54 5a 49 30 59 43 39 66 55 44 66 68 49 4b 75 35 52 41 63 65 50 75 69 4f 38 43 54 56 4a 6a 53 6d 4c 73 58 45 67 6a 34 4a 77 48 53 5a 5a 69 30 6e 72 59 68 68 56 55 50 70 31 74 77 50 6c 32 69 57 77 32 59 54 51 5a 45 48 7a 4f 68 37 49 39 48 47 68 36 76 66 6a 56 4c 4d 7a 39 67 58 76 6b 74 73 48 30 51 59 79 5a 30 36 53 65 77 51 50 51 48 59 51 65 4c 49 30 59 68 36 30 33 38 64 4b 6d 39 71 77 53 55 70 64 63 31 4e 7a 4b 6e 44 43 43 35 69 4c 4a 2b 70 56 73 6e 2f 72 4c 58 6b 41 45 64 50 71 62 64 6c 4d 6f 34 71 31 35 79 49 39 34 49 4d 42 36 53 33 74 4a 6f 70 6d 57 75 2b 35 75 Data Ascii: 3sfKOrydfTqtSHHzT8/wpnHiohTRy6qGdgEld8HAnuVlN9NmZCMAQAtk4EoN+SyjbTZI0YC9fUDfhIKu5RAcePuiO8CTVJjSmLsXEgj4JwHSZZi0nrYhhVUPp1twPl2iWw2YTQZEHzOh7I9HGh6vfjVLMz9gXvktsH0QYyZ06SewQPQHYQeLI0Yh6038dKm9qwSUpdc1NzKnDCC5iLJ+pVsn/rLXkAEdPqbdlMo4q15yI94IMB6S3tJopmWu+5u
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 64 65 4a 70 34 4e 67 63 55 43 31 62 48 44 4f 4a 4f 52 76 70 53 45 75 32 36 2b 53 67 38 45 61 78 52 61 42 58 41 43 76 30 50 55 48 6e 76 44 55 31 45 4c 49 4a 74 57 53 2b 56 59 2f 69 53 42 51 4f 71 7a 66 52 2f 30 54 61 39 54 45 37 38 77 33 4b 30 73 54 4a 46 72 31 6f 49 41 4b 57 38 47 68 71 56 72 42 59 59 58 41 4a 4e 55 6f 4f 58 4e 43 69 66 56 4a 4b 44 4b 49 42 4b 77 68 50 41 4b 72 64 56 78 32 71 39 32 36 59 33 45 38 4c 6e 4b 49 71 75 66 72 77 4e 65 5a 63 71 6d 6f 59 4d 6a 74 64 2b 44 2b 72 39 49 78 4f 47 33 76 6f 47 48 61 69 43 73 54 4c 2f 79 79 39 78 75 73 41 45 38 49 74 38 31 6f 34 4f 77 63 42 61 57 68 6b 75 59 6f 75 68 31 7a 6b 36 36 31 51 4a 51 74 4d 5a 72 66 5a 42 52 70 51 4c 44 33 65 2f 78 45 78 32 52 50 37 53 59 55 4d 38 73 47 42 30 44 30 6f 43 38 38 Data Ascii: deJp4NgcUC1bHDOJORvpSEu26+Sg8EaxRaBXACv0PUHnvDU1ELIJtWS+VY/iSBQOqzfR/0Ta9TE78w3K0sTJFr1oIAKW8GhqVrBYYXAJNUoOXNCifVJKDKIBKwhPAKrdVx2q926Y3E8LnKIqufrwNeZcqmoYMjtd+D+r9IxOG3voGHaiCsTL/yy9xusAE8It81o4OwcBaWhkuYouh1zk661QJQtMZrfZBRpQLD3e/xEx2RP7SYUM8sGB0D0oC88
2025-01-14 00:13:20 UTC	1390	IN	Data Raw: 68 2b 67 56 72 55 65 7a 66 32 7a 6c 7a 58 55 67 6e 79 71 6a 61 33 2b 56 34 55 71 72 7a 52 46 6b 2f 35 31 53 47 73 34 4d 71 73 31 38 6e 72 34 32 69 66 67 31 62 49 2b 66 77 73 49 45 57 66 66 4b 53 6b 61 46 45 50 63 30 30 78 37 59 63 37 2f 6f 57 35 50 69 47 57 66 46 58 70 31 69 33 4f 63 6b 72 72 58 4a 67 30 76 63 4f 5a 30 4a 49 78 62 70 78 68 43 74 30 6f 64 51 41 59 4e 48 74 41 33 6b 55 63 4f 78 4b 4f 4e 73 48 4f 38 50 6b 38 56 49 55 53 65 31 71 65 41 5a 35 45 79 52 62 62 61 4e 46 4a 30 61 4f 4e 56 38 33 5a 32 2f 55 78 39 4c 78 53 32 44 79 48 4a 7a 6b 31 2f 4b 6e 77 50 57 46 35 57 75 35 4a 43 4a 53 38 61 44 54 59 64 48 62 57 49 78 45 59 71 35 7a 32 32 56 32 57 62 56 62 7a 77 4d 47 46 4f 4a 58 6c 6e 58 39 6e 68 69 41 59 41 6d 4a 34 71 45 66 33 54 54 77 35 53 Data Ascii: h+gVrUezf2zlzXUgnyqja3+V4UqrzRFk/51SGs4Mqs18nr42ifg1bI+fwsIEWffKSkaFEPc00x7Yc7/oW5PiGWfFXp1i3OckrrXJg0vcOZ0JIxbpxhCt0odQAYNHtA3kUcOxKONsHO8Pk8VIUSe1qeAZ5EyRbbaNFJ0aONV83Z2/Ux9LxS2DyHJzk1/KnwPWF5Wu5JCJS8aDTYdHbWIxEYq5z22V2WbVbzwMGFOJXlnX9nhiAYAmJ4qEf3TTw5S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	53454	151.101.1.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	638	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c
2025-01-14 00:13:20 UTC	969	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:20 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 14-Jan-2026 00:13:20 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 1423 Accept-Ranges: bytes Date: Tue, 14 Jan 2025 00:13:20 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740054-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1736813601.540780,VS0,VE3 X-vcl-time-ms: 3 transfer-encoding: chunked
2025-01-14 00:13:20 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2025-01-14 00:13:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2025-01-14 00:13:20 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	53453	65.9.66.44	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	3569	OUT	GET /tag/opus-frame.html?referrer=https%3A%2F%2Fgpt.mail.yahoo.net%2Fsandbox%3Fclient%3Dlogin%26version%3D0.1%26limited%3D0%26headerBidder%3D1%26haq%3D1%26benji%3D1%23config%3D%257B%2522positions%2522%253A%255B%257B%2522adUnitPath%2522%253A%2522%252F22888152279%252Fus%252Fylogin%252Fmain%252Fdt%252Fus_ylogin_main_dt_full_screen%2522%252C%2522adLocation%2522%253A%2522full_screen%2522%252C%2522size%2522%253A%255B%255B1440%252C1024%255D%252C%255B%2522fluid%2522%255D%255D%252C%2522div%2522%253A%2522gpt-passback%2522%257D%255D%252C%2522pageUrl%2522%253A%2522https%253A%252F%252Flogin.yahoo.com%2522%252C%2522headerBidder%2522%253Atrue%252C%2522yahooPrebid%2522%253Atrue%252C%2522geoCountryCode%2522%253A%2522US%2522%252C%2522npa%2522%253Afalse%252C%2522limited%2522%253Afalse%252C%2522targetingConfig%2522%253A%257B%2522lang%2522%253A%2522en-US%2522%252C%2522bucket%2522%253A%2522mbr-whatsapp-ac%252Cmbr-passkey-unr-reg%252Cmbr-whatsapp-nac%2522%252C%2522spaceId%2522%253A%2522794200123%2522%252C%2522adLocation%2522%253A%2 [TRUNCATED] Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
2025-01-14 00:13:20 UTC	658	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 5503 Connection: close Date: Tue, 14 Jan 2025 00:13:19 GMT Last-Modified: Tue, 17 Dec 2024 18:00:44 GMT ETag: "19720d3a285aba8024b11fc9955795fe" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a383f82b5d4e98bbd66535c2c4b20c9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: bDL_RcMtu2ewjJNn-rJ_inLqBvGQWeYSkDsyrpn8Pf_HJuheYppUcg== Age: 2 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' cache-control: max-age=3600
2025-01-14 00:13:20 UTC	5503	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	53455	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	1343	OUT	GET /setuid?bidder=conversant&uid=AQAJC9JjqkKwxQIg3ULfAQEBAQEBAQCVYylcFQEBAJVjKVwV&expiration=1736900000&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19
2025-01-14 00:13:21 UTC	685	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifX19; Path=/; Domain=pbs.yahoo.com; Expires=Tue, 15 Jul 2025 00:13:20 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Tue, 14 Jan 2025 00:13:20 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:21 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	53456	50.57.31.206	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	642	OUT	GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:21 UTC	672	IN	HTTP/1.1 302 Found Location: /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external UIP-Response-Status: Ok Frontend-ID: 8 Set-Cookie: SEUNCY=70693F37AADC071D; Expires=Wed, 14 Jan 2026 00:13:20 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Tue, 14 Jan 2025 00:13:20 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	53457	52.211.89.170	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:20 UTC	629	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=60147287448872733550594916507824635591
2025-01-14 00:13:21 UTC	905	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:13:21 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: j2gSlJcjQww= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-0aad3d335.edge-irl1.demdex.com 1 ms set-cookie: dpm=60147287448872733550594916507824635591; Max-Age=15552000; Expires=Sun, 13 Jul 2025 00:13:21 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=60147287448872733550594916507824635591; Max-Age=15552000; Expires=Sun, 13 Jul 2025 00:13:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2025-01-14 00:13:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	53458	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:21 UTC	1352	OUT	GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=218993205127000050435&gdpr=&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; IDSYNC="19ac~2my0:19aj~2my0:19bn~2my0:19bu~2my0:19cu~2my0:19cw~2my0:19e0~2my0:19e7~2my0:19ea~2my0"
2025-01-14 00:13:21 UTC	389	IN	HTTP/1.1 302 Redirect Date: Tue, 14 Jan 2025 00:13:21 GMT Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=218993205127000050435&gdpr=&gdpr_consent= Content-Type: text/html Content-Language: en Content-Length: 257
2025-01-14 00:13:21 UTC	257	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 0a 3c 2f 42 3e 3c 2f 46 4f 4e 54 3e 0a 3c 48 52 3e 0a 3c 2f 42 4f 44 59 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location.</B></FONT><HR></BODY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	53459	3.33.220.150	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:21 UTC	813	OUT	GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=2417d054-2ba1-4d51-a183-4333e652c96e; TDCPM=CAEYBSgCMgsIzuO6vN-O2j0QBTgB
2025-01-14 00:13:21 UTC	516	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 00:13:21 GMT Content-Length: 233 Connection: close server: Kestrel location: https://pbs.yahoo.com/setuid?bidder=ttd&uid=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent= set-cookie: TDID=2417d054-2ba1-4d51-a183-4333e652c96e; expires=Wed, 14 Jan 2026 00:13:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwjO47q8347aPRAFOAE.; expires=Wed, 14 Jan 2026 00:13:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2025-01-14 00:13:21 UTC	233	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 74 74 64 26 75 69 64 3d 32 34 31 37 64 30 35 34 2d 32 62 61 31 2d 34 64 35 31 2d 61 31 38 33 2d 34 33 33 33 65 36 35 32 63 39 36 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 74 74 64 26 75 69 64 3d 32 34 31 37 64 30 35 34 2d 32 62 61 31 2d 34 64 35 31 2d 61 31 38 33 2d 34 33 33 33 65 36 35 32 63 39 36 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://pbs.yahoo.com/setuid?bidder=ttd&uid=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent=">https://pbs.yahoo.com/setuid?bidder=ttd&uid=2417d054-2ba1-4d51-a183-4333e652c96e&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	53460	142.250.184.194	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:21 UTC	4519	OUT	GET /gampad/ads?pvsid=1557141662676483&correlator=519642126984560&eid=31089448%2C95332149%2C31088251%2C83321073%2C31089253&output=ldjh&gdfp_req=1&vrg=202501070101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cylogin%2Cmain%2Cdt%2Cus_ylogin_main_dt_full_screen&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=320x50%7C1440x1024&fluid=height&ifi=1&sfv=1-0-40&fsfs=1&fsbs=1&eri=5&sc=1&cookie_enabled=1&cdm=gpt.mail.yahoo.net&abxe=1&dt=1736813599931&adxs=-12245933&adys=-12245933&biw=-12245933&bih=-12245933&isw=1440&ish=1024&scr_x=-12245933&scr_y=-12245933&ucis=asgd039bvznl&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Flogin.yahoo.com&loc=https%3A%2F%2Fgpt.mail.yahoo.net%2Fsandbox%3Fclient%3Dlogin%2 [TRUNCATED] Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://gpt.mail.yahoo.net X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:21 UTC	1046	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://gpt.mail.yahoo.net Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6636161179 Google-Creative-Id: 138467550613 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Tue, 14 Jan 2025 00:13:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 14-Jan-2025 00:28:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-14 00:13:21 UTC	344	IN	Data Raw: 37 63 33 33 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 79 6c 6f 67 69 6e 2f 6d 61 69 6e 2f 64 74 2f 75 73 5f 79 6c 6f 67 69 6e 5f 6d 61 69 6e 5f 64 74 5f 66 75 6c 6c 5f 73 63 72 65 65 6e 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 31 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 49 44 3d 39 63 34 66 38 66 38 63 35 64 30 63 65 36 39 35 3a 54 3d 31 37 33 36 38 31 33 36 30 31 3a 52 54 3d 31 37 33 36 38 31 33 36 30 31 3a 53 3d 41 4c 4e 49 5f 4d 5a 72 67 64 58 39 6b 46 79 5a 32 61 78 56 35 46 54 50 48 77 6b 56 4e 5a 46 49 52 67 22 2c 31 37 37 30 35 30 39 36 30 31 2c 22 2f 22 2c 22 79 61 68 6f 6f 2e 6e 65 74 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 66 62 36 66 64 38 32 66 36 30 61 3a Data Ascii: 7c33{"/22888152279/us/ylogin/main/dt/us_ylogin_main_dt_full_screen":["html",1,null,null,1,1,1,0,0,null,null,1,1,[["ID=9c4f8f8c5d0ce695:T=1736813601:RT=1736813601:S=ALNI_MZrgdX9kFyZ2axV5FTPHwkVNZFIRg",1770509601,"/","yahoo.net",1],["UID=00000fb6fd82f60a:
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 74 22 2c 32 5d 5d 2c 5b 31 33 38 34 36 37 35 35 30 36 31 33 5d 2c 5b 36 36 33 36 31 36 31 31 37 39 5d 2c 5b 35 34 36 32 36 31 37 31 39 31 5d 2c 5b 33 34 37 33 38 30 38 34 36 37 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6d 70 48 39 42 67 33 47 6a 77 79 30 6a 50 6d 6b 6f 52 7a 41 61 55 6a 47 38 59 4b 62 6d 32 51 67 6f 68 76 33 66 42 75 41 37 79 36 62 54 69 31 41 76 32 4f 45 36 79 42 64 76 4b 76 54 78 48 41 76 5a 6f 56 57 74 55 53 67 6c 46 58 2d 30 6a 30 6f 79 57 38 4f 30 66 49 44 70 2d 6b 6e 41 68 53 47 54 57 77 35 66 65 43 54 6b 36 56 46 41 45 22 2c 22 43 4e 6e 53 6a 2d 37 Data Ascii: t",2]],[138467550613],[6636161179],[5462617191],[3473808467],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsmpH9Bg3Gjwy0jPmkoRzAaUjG8YKbm2Qgohv3fBuA7y6bTi1Av2OE6yBdvKvTxHAvZoVWtUSglFX-0j0oyW8O0fIDp-knAhSGTWw5feCTk6VFAE","CNnSj-7
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 76 61 72 20 63 61 3d 78 26 26 78 5b 36 31 30 34 30 31 33 30 31 5d 3b 77 3d 63 61 21 3d 6e 75 6c 6c 3f 63 61 3a 21 31 3b 76 61 72 20 42 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 42 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 72 65 74 75 72 6e 20 77 3f 42 3f 42 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 3d 3e 62 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 75 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e Data Ascii: var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}return
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 20 61 3e 3d 72 61 26 26 61 3c 3d 73 61 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 4a 28 61 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 6c 65 74 20 62 3d 22 22 2c 63 3d 30 3b 63 6f 6e 73 74 20 64 Data Ascii: (typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(J(a))return}else if(a!=null&&a instanceof Uint8Array){let b="",c=0;const d
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 61 5b 49 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 71 61 28 63 5b 64 5d 29 29 29 7b 62 7c 3d 32 35 36 3b 63 3d 64 2d 28 62 26 35 31 32 3f 30 3a 2d 31 29 3b 69 66 28 63 3e 3d 31 30 32 34 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 76 74 6c 6d 74 22 29 3b 62 3d 62 26 2d 33 33 35 32 31 36 36 35 7c 28 63 26 31 30 32 33 29 3c 3c 31 35 7d 7d 61 5b 49 5d 3d 62 7d 74 68 69 73 2e 6c 3d 61 7d 74 6f 4a 53 4f 4e 28 29 7b 63 6f 6e 73 74 20 61 3d 21 4d 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 26 26 28 4d 3d 7a 61 29 2c 43 61 28 74 68 69 73 29 7d Data Ascii: a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b\|=256;c=d-(b&512?0:-1);if(c>=1024)throw Error("pvtlmt");b=b&-33521665\|(c&1023)<<15}}a[I]=b}this.l=a}toJSON(){const a=!M;try{return a&&(M=za),Ca(this)}
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4c 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 22 29 3b 66 75 6e 63 74 69 Data Ascii: er(b,c,!1)}function Ka(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)};var La=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?=[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$");functi
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 5a 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 63 3d 58 61 28 75 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 62 29 7b 63 6f 6e 73 74 20 64 3d 65 3d 3e 7b 62 26 26 62 28 65 29 3b 4b 61 28 63 2c 22 6c 6f 61 64 22 2c 64 29 3b 4b 61 28 63 2c 22 65 72 72 6f 72 22 2c 64 29 7d 3b 51 28 63 2c 22 6c 6f 61 64 22 2c 64 29 3b 51 28 63 2c 22 65 72 72 6f 72 22 2c 64 29 7d 63 2e 73 72 63 3d 61 Data Ascii: ment){return a.createElement("img")};function Ya(a,b=null){Za(a,b)}function Za(a,b){u.google_image_requests\|\|(u.google_image_requests=[]);const c=Xa(u.document);if(b){const d=e=>{b&&b(e);Ka(c,"load",d);Ka(c,"error",d)};Q(c,"load",d);Q(c,"error",d)}c.src=a
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 5c 5c 64 2b 28 3f 3a 2e 7c 5c 5c 6e 29 2a 29 5c 5c 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 5c 5c 6e 20 2a 22 2c 22 67 22 29 2c 22 5c 5c 6e 22 29 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 64 29 7b 62 3d 63 3b 62 72 65 61 6b 20 61 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 3b 63 6f 6e 73 74 20 67 62 3d 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 22 29 3b 76 61 72 20 68 62 3d 63 6c 61 73 73 7b 63 6f 6e Data Ascii: ce(RegExp("((https?:/../)[^/:]:\\\\d+(?:.\|\\n))\\\\2"),"$1");b=a.replace(RegExp("\\n ","g"),"\\n");break a}catch(d){b=c;break a}b=void 0}return b};const gb=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)");var hb=class{con
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 7c 7c 28 64 3d 30 29 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 70 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 30 29 2c 65 3c 32 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 62 28 Data Ascii: \|"&";c=c\|\|",$";typeof c==="string"&&(c=c.split(""));if(a instanceof Array){if(d\|\|(d=0),d<c.length){const f=[];for(let g=0;g<a.length;g++)f.push(pb(a[g],b,c,d+1,e));return f.join(c[d])}}else if(typeof a==="object")return e\|\|(e=0),e<2?encodeURIComponent(ob(
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 62 3d 6e 65 77 20 65 62 28 62 2c 7b 6d 65 73 73 61 67 65 3a 66 62 28 62 29 7d 29 29 3b 67 3d 62 3b 69 66 28 67 2e 6d 73 67 29 7b 62 3d 45 3b 76 61 72 20 6c 3d 67 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 62 2e 67 2e 70 75 73 68 28 32 29 3b 62 2e 69 5b 32 5d 3d 56 28 22 6d 73 67 22 2c 6c 29 7d 76 61 72 20 6b 3d 67 2e 6d 65 74 61 7c 7c 7b 7d 3b 6c 3d 6b 3b 69 66 28 74 68 69 73 2e 69 29 74 72 79 7b 74 68 69 73 2e 69 28 6c 29 7d 63 61 74 63 68 28 76 29 7b 7d 69 66 28 64 29 74 72 79 7b 64 28 6c 29 7d 63 61 74 63 68 28 76 29 7b 7d 64 3d 45 3b 6b 3d 5b 6b 5d 3b 64 2e 67 2e 70 75 73 68 28 33 29 3b 64 2e 69 5b 33 5d 3d 6b 3b 64 3d 75 3b 6b 3d 5b 5d 3b 6c 65 74 20 57 3b 6c 3d 6e 75 6c 6c 3b 64 6f 7b 76 61 72 20 68 3d 64 3b 74 72 79 7b 76 61 Data Ascii: b=new eb(b,{message:fb(b)}));g=b;if(g.msg){b=E;var l=g.msg.substring(0,512);b.g.push(2);b.i[2]=V("msg",l)}var k=g.meta\|\|{};l=k;if(this.i)try{this.i(l)}catch(v){}if(d)try{d(l)}catch(v){}d=E;k=[k];d.g.push(3);d.i[3]=k;d=u;k=[];let W;l=null;do{var h=d;try{va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	53463	142.250.184.194	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:21 UTC	405	OUT	GET /getconfig/sodar?sv=200&tid=gpt&tv=m202501070101&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:21 UTC	586	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Tue, 14 Jan 2025 00:13:21 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-14 00:13:21 UTC	804	IN	Data Raw: 34 34 37 65 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 49 61 79 46 5a 39 48 31 49 61 79 76 37 5f 55 50 6e 63 58 61 6b 41 63 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 2d 5a 72 4c 65 76 38 30 4b 61 53 6c 35 4c 48 35 4f 43 62 6e 5a 47 48 75 36 79 4c 53 62 33 74 52 47 75 77 61 78 47 56 6e 55 73 4d 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 74 55 77 43 57 46 68 77 6a 37 2f 4d 37 37 4b 52 68 47 47 36 33 65 49 35 51 72 78 75 65 72 4a 50 6a 31 58 30 72 56 44 30 6f 77 52 69 58 51 79 6a 38 59 5a 6f 75 54 6d 65 73 2b 39 39 52 70 35 75 54 64 51 61 50 43 5a 79 41 64 31 45 32 30 39 6e 42 34 74 63 62 55 64 63 4a 4b 50 6f 2f 46 54 65 43 46 Data Ascii: 447e{"sodar_query_id":"IayFZ9H1Iayv7_UPncXakAc","injector_basename":"sodar2","bg_hash_basename":"-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM","bg_binary":"tUwCWFhwj7/M77KRhGG63eI5QrxuerJPj1X0rVD0owRiXQyj8YZouTmes+99Rp5uTdQaPCZyAd1E209nB4tcbUdcJKPo/FTeCF
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 4c 77 30 72 35 7a 69 4b 37 42 6f 70 71 79 56 6f 4a 38 6a 44 75 79 31 42 34 42 65 54 52 48 4e 38 51 71 33 49 31 46 44 53 43 31 6c 42 39 4b 34 62 70 31 39 59 59 6d 75 54 49 56 78 43 72 37 34 66 4a 35 72 2b 48 32 30 74 33 75 4a 47 50 6f 4d 44 66 56 32 59 44 33 57 52 73 50 72 57 42 57 74 77 45 61 57 56 54 7a 4d 4d 70 49 48 53 73 74 78 59 44 7a 78 4c 65 78 6e 4d 6a 6d 52 5a 33 76 41 64 49 52 31 48 69 72 51 6f 46 77 76 6c 65 35 6f 61 78 2b 53 73 7a 76 37 76 73 58 6b 42 62 50 41 4b 6b 64 7a 6a 79 68 47 41 44 53 48 4f 77 49 30 64 5a 31 65 53 30 6d 30 32 76 4e 49 4f 5a 6d 58 64 68 53 6f 67 75 6b 57 6a 59 63 77 54 56 59 4c 41 6d 73 69 55 63 62 46 45 6b 33 56 30 61 45 79 61 2b 74 68 34 79 33 52 53 72 51 2b 5a 43 39 55 31 4e 30 34 75 77 62 55 56 4a 4c 73 31 4c 62 39 Data Ascii: Lw0r5ziK7BopqyVoJ8jDuy1B4BeTRHN8Qq3I1FDSC1lB9K4bp19YYmuTIVxCr74fJ5r+H20t3uJGPoMDfV2YD3WRsPrWBWtwEaWVTzMMpIHSstxYDzxLexnMjmRZ3vAdIR1HirQoFwvle5oax+Sszv7vsXkBbPAKkdzjyhGADSHOwI0dZ1eS0m02vNIOZmXdhSogukWjYcwTVYLAmsiUcbFEk3V0aEya+th4y3RSrQ+ZC9U1N04uwbUVJLs1Lb9
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 61 46 69 2f 48 42 65 75 59 32 4d 6a 30 31 77 49 49 44 70 54 44 30 59 4e 33 2b 76 2b 46 38 4b 68 70 41 49 56 34 67 75 44 55 4d 57 39 4a 36 48 6c 72 65 6e 56 79 4c 36 5a 4d 58 4f 73 6f 46 45 6b 54 4d 7a 49 38 41 2b 35 49 32 71 56 6d 55 6e 47 48 72 41 71 77 52 30 4a 69 78 46 30 71 39 47 4d 65 55 52 33 4b 31 48 37 66 61 36 6d 52 35 4d 34 6a 36 4d 57 6b 76 34 4a 4d 57 2b 44 59 48 43 64 79 62 33 54 4a 33 6b 30 68 62 58 51 35 78 6c 68 52 42 4d 73 44 53 67 35 64 50 37 46 6e 6e 66 46 58 59 64 4f 34 74 2f 32 41 57 6b 52 48 34 75 53 61 2b 47 79 51 68 6f 4a 56 4b 4d 72 75 56 46 61 2f 6b 4b 5a 48 4d 75 54 6f 33 75 6e 51 62 72 53 7a 6e 42 75 32 6b 59 47 37 39 6e 6e 4b 33 48 4b 46 6a 71 66 6e 30 69 30 63 72 70 2b 57 34 52 46 41 52 50 46 70 4a 66 42 42 77 6d 57 6a 77 32 Data Ascii: aFi/HBeuY2Mj01wIIDpTD0YN3+v+F8KhpAIV4guDUMW9J6HlrenVyL6ZMXOsoFEkTMzI8A+5I2qVmUnGHrAqwR0JixF0q9GMeUR3K1H7fa6mR5M4j6MWkv4JMW+DYHCdyb3TJ3k0hbXQ5xlhRBMsDSg5dP7FnnfFXYdO4t/2AWkRH4uSa+GyQhoJVKMruVFa/kKZHMuTo3unQbrSznBu2kYG79nnK3HKFjqfn0i0crp+W4RFARPFpJfBBwmWjw2
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 67 37 55 31 44 71 69 30 57 2f 73 45 78 4e 65 4d 7a 34 37 59 55 4a 63 55 73 30 71 39 6b 74 66 69 6f 58 33 37 74 44 41 2f 41 56 36 78 46 37 79 68 6c 49 4c 6f 73 64 56 75 2f 61 52 70 2b 41 66 2b 74 78 53 6b 6d 74 72 62 4e 32 62 6d 69 62 61 75 4d 63 6c 71 39 4e 6f 62 71 6f 48 53 37 64 6f 76 44 4b 46 31 30 49 61 30 53 56 30 58 66 32 62 49 69 57 4d 45 30 57 58 5a 65 6f 4c 4c 2f 68 57 6d 4a 65 52 64 45 65 6e 53 37 70 79 46 38 7a 36 68 2b 79 58 75 6e 62 48 74 75 66 70 6b 65 53 76 45 41 6c 33 2f 62 38 70 56 32 6d 54 48 4d 52 56 6a 52 6f 2b 78 79 4a 71 6f 67 66 6a 72 55 46 65 46 50 61 59 49 70 58 61 64 48 63 6f 71 41 66 4a 6e 67 4c 6c 49 55 70 58 74 58 48 46 7a 67 58 71 45 77 6c 4e 4d 6e 74 79 41 41 41 41 7a 42 5a 45 49 79 48 78 43 2f 6c 73 63 5a 34 54 72 69 69 63 Data Ascii: g7U1Dqi0W/sExNeMz47YUJcUs0q9ktfioX37tDA/AV6xF7yhlILosdVu/aRp+Af+txSkmtrbN2bmibauMclq9NobqoHS7dovDKF10Ia0SV0Xf2bIiWME0WXZeoLL/hWmJeRdEenS7pyF8z6h+yXunbHtufpkeSvEAl3/b8pV2mTHMRVjRo+xyJqogfjrUFeFPaYIpXadHcoqAfJngLlIUpXtXHFzgXqEwlNMntyAAAAzBZEIyHxC/lscZ4Triic
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 6e 4d 76 2f 4a 35 34 39 64 63 75 42 39 53 32 70 6b 71 75 75 31 74 59 73 6c 4c 67 52 69 6e 75 31 51 31 62 65 4a 4f 69 69 74 68 52 6f 34 58 46 51 33 4a 62 77 6c 66 42 4d 76 51 78 34 58 76 6c 6f 6d 6d 57 6f 66 6c 33 2f 4c 57 64 4a 31 79 46 4c 41 73 45 2b 6e 38 6e 6d 72 61 67 41 65 6b 35 79 2b 57 36 43 65 4e 6d 73 4d 76 4a 43 54 73 67 7a 66 41 2b 32 49 45 4c 36 70 68 66 6b 4b 73 4c 2f 2b 49 59 55 45 5a 59 55 4d 50 35 32 78 2b 45 37 63 56 4d 2f 72 45 35 44 63 32 72 34 32 49 67 4a 71 72 57 32 47 66 32 7a 7a 6e 70 30 4c 6e 33 6a 6f 43 53 6a 63 35 61 65 2b 39 6b 37 35 33 77 55 6a 69 4b 32 6f 72 55 41 46 61 68 35 56 4e 49 45 59 4e 4f 49 68 51 33 6d 52 72 57 46 6a 57 77 42 30 7a 6c 6b 4f 4d 74 51 6b 43 75 5a 42 53 72 6a 4d 69 58 54 4c 78 73 6f 34 30 76 49 70 73 63 Data Ascii: nMv/J549dcuB9S2pkquu1tYslLgRinu1Q1beJOiithRo4XFQ3JbwlfBMvQx4XvlommWofl3/LWdJ1yFLAsE+n8nmragAek5y+W6CeNmsMvJCTsgzfA+2IEL6phfkKsL/+IYUEZYUMP52x+E7cVM/rE5Dc2r42IgJqrW2Gf2zznp0Ln3joCSjc5ae+9k753wUjiK2orUAFah5VNIEYNOIhQ3mRrWFjWwB0zlkOMtQkCuZBSrjMiXTLxso40vIpsc
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 67 38 78 47 66 33 4d 59 78 78 6e 42 33 44 53 48 66 55 36 4b 6b 6d 2f 42 72 36 6e 6d 30 6d 46 50 5a 43 30 7a 47 31 70 33 62 43 50 56 55 55 33 76 71 78 35 48 57 45 61 62 68 4a 49 68 6c 30 4d 4f 37 67 45 4b 34 53 68 72 53 41 77 42 63 70 41 59 48 69 65 34 55 49 66 77 78 4c 6f 42 32 7a 33 46 45 68 66 4a 44 50 5a 35 79 50 4c 6e 6f 50 38 49 59 6c 44 78 79 73 46 61 4e 4e 38 68 68 6c 50 4b 4d 43 6b 36 67 57 48 71 76 4f 42 4f 57 41 49 54 71 50 78 63 33 49 2f 45 33 43 35 6a 31 55 75 38 58 52 61 39 2b 55 2f 43 78 39 38 33 65 2b 33 46 41 68 6b 37 30 6e 6d 32 52 32 64 5a 34 74 67 70 2f 42 47 62 47 46 34 64 48 47 5a 70 69 52 78 61 42 72 61 6b 67 63 79 55 41 61 30 47 49 52 4f 38 41 42 52 6e 4a 5a 55 48 4f 41 79 64 4a 57 64 51 78 76 4c 39 59 51 6e 31 4b 65 68 76 53 32 34 Data Ascii: g8xGf3MYxxnB3DSHfU6Kkm/Br6nm0mFPZC0zG1p3bCPVUU3vqx5HWEabhJIhl0MO7gEK4ShrSAwBcpAYHie4UIfwxLoB2z3FEhfJDPZ5yPLnoP8IYlDxysFaNN8hhlPKMCk6gWHqvOBOWAITqPxc3I/E3C5j1Uu8XRa9+U/Cx983e+3FAhk70nm2R2dZ4tgp/BGbGF4dHGZpiRxaBrakgcyUAa0GIRO8ABRnJZUHOAydJWdQxvL9YQn1KehvS24
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 42 6e 6f 55 35 4b 6f 70 52 67 33 42 43 33 58 56 59 72 36 50 7a 78 65 58 57 45 7a 59 77 36 46 4e 4a 77 30 55 6d 30 6c 45 49 62 50 2b 63 31 61 45 4e 34 48 65 54 2f 37 45 36 6e 6a 41 58 59 36 68 73 67 49 6e 48 50 64 43 72 56 7a 58 32 41 75 58 43 48 32 73 6d 2b 5a 72 68 58 52 2b 66 6b 55 61 52 4c 30 59 79 66 61 72 6b 4d 5a 52 4e 74 44 77 4f 51 69 47 72 64 36 32 67 4a 57 4f 56 51 41 34 52 4d 59 72 4c 79 73 5a 69 4f 71 41 78 55 63 35 72 33 59 74 65 2f 52 4f 48 6e 31 36 32 33 2b 48 59 71 56 79 35 7a 38 78 59 4e 4a 33 7a 56 2b 41 32 34 56 66 56 33 57 70 76 41 38 6e 36 57 47 53 37 71 46 6c 50 35 45 39 4f 46 44 65 49 79 69 4f 68 45 6f 6a 43 75 52 4c 30 30 2f 66 61 77 68 30 32 67 63 6d 73 7a 38 45 2b 61 39 57 7a 58 45 79 65 30 55 74 47 64 66 2f 4c 63 44 49 67 49 69 Data Ascii: BnoU5KopRg3BC3XVYr6PzxeXWEzYw6FNJw0Um0lEIbP+c1aEN4HeT/7E6njAXY6hsgInHPdCrVzX2AuXCH2sm+ZrhXR+fkUaRL0YyfarkMZRNtDwOQiGrd62gJWOVQA4RMYrLysZiOqAxUc5r3Yte/ROHn1623+HYqVy5z8xYNJ3zV+A24VfV3WpvA8n6WGS7qFlP5E9OFDeIyiOhEojCuRL00/fawh02gcmsz8E+a9WzXEye0UtGdf/LcDIgIi
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 50 2b 59 39 5a 76 48 39 5a 63 55 45 71 58 44 4e 4c 35 6a 30 4b 67 44 4a 42 34 79 2f 6a 31 4f 44 32 43 6f 47 67 6c 50 32 54 2f 4d 69 54 44 6e 4f 31 75 76 32 64 48 4a 77 70 47 6f 31 30 54 65 38 55 65 74 41 34 69 68 30 7a 6e 52 38 4f 34 49 30 76 75 41 4b 6e 52 65 51 39 77 32 58 65 69 58 74 6d 6f 36 75 4a 6e 6a 67 67 6a 6d 67 61 66 6d 69 47 5a 71 4b 6a 55 41 50 58 50 65 33 32 43 78 34 4c 51 59 6d 43 59 6c 4d 2f 37 2f 7a 71 49 77 61 36 35 36 58 71 58 77 75 2b 45 39 79 2b 4d 79 67 49 6e 57 4d 62 71 47 4e 6e 6b 48 47 4d 52 41 31 4b 44 6c 35 6b 63 2f 4c 54 6e 52 65 7a 74 50 54 32 6b 6b 62 57 6e 56 33 56 6e 69 6c 49 35 50 63 7a 46 4c 6d 72 42 4d 63 7a 54 61 4e 33 45 37 66 66 6f 6b 73 73 64 6f 73 56 79 37 35 7a 56 6d 34 4b 79 6b 2b 64 64 37 4c 73 77 59 46 48 4f 72 Data Ascii: P+Y9ZvH9ZcUEqXDNL5j0KgDJB4y/j1OD2CoGglP2T/MiTDnO1uv2dHJwpGo10Te8UetA4ih0znR8O4I0vuAKnReQ9w2XeiXtmo6uJnjggjmgafmiGZqKjUAPXPe32Cx4LQYmCYlM/7/zqIwa656XqXwu+E9y+MygInWMbqGNnkHGMRA1KDl5kc/LTnReztPT2kkbWnV3VnilI5PczFLmrBMczTaN3E7ffokssdosVy75zVm4Kyk+dd7LswYFHOr
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 38 50 31 64 55 34 5a 39 54 55 54 4c 46 6e 53 62 76 46 5a 4c 70 78 47 6d 35 67 33 68 5a 38 47 47 51 58 51 73 44 56 67 44 4b 75 79 6e 74 77 42 76 4e 6f 32 43 79 63 7a 53 31 4c 47 36 49 49 48 2f 42 70 6b 36 51 68 79 30 63 45 71 4d 73 76 65 4e 44 64 36 55 33 70 66 47 73 53 78 63 71 47 4d 34 5a 4b 6c 6b 34 41 70 57 69 66 33 5a 48 31 6b 71 56 79 73 74 52 37 57 41 69 37 56 73 58 5a 35 70 76 36 2f 4e 6c 36 5a 42 75 75 76 55 48 47 6a 79 43 68 67 4d 6f 42 76 6e 50 39 44 47 6f 39 7a 37 4b 50 51 6f 4e 50 78 6e 39 68 66 46 54 7a 7a 72 74 6f 59 65 79 36 6d 2f 79 65 4f 74 48 61 7a 4f 47 6e 6d 46 36 36 74 4d 6f 66 64 77 38 33 79 46 63 56 6f 46 56 50 72 79 70 30 71 71 69 4c 61 32 37 2b 55 6c 36 77 33 63 62 6d 58 2b 41 38 61 42 52 31 58 38 70 58 46 6f 31 4c 33 32 2b 63 6e Data Ascii: 8P1dU4Z9TUTLFnSbvFZLpxGm5g3hZ8GGQXQsDVgDKuyntwBvNo2CyczS1LG6IIH/Bpk6Qhy0cEqMsveNDd6U3pfGsSxcqGM4ZKlk4ApWif3ZH1kqVystR7WAi7VsXZ5pv6/Nl6ZBuuvUHGjyChgMoBvnP9DGo9z7KPQoNPxn9hfFTzzrtoYey6m/yeOtHazOGnmF66tMofdw83yFcVoFVPryp0qqiLa27+Ul6w3cbmX+A8aBR1X8pXFo1L32+cn
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 5a 7a 44 66 35 4e 6f 58 31 77 70 75 51 35 39 4f 47 54 7a 59 31 75 61 69 75 38 47 71 65 47 32 42 77 54 7a 2b 45 38 42 44 49 5a 34 48 52 51 35 4e 4f 51 64 39 37 71 57 2b 4b 74 2f 51 6a 6f 58 77 48 36 4b 6a 62 53 42 7a 79 72 76 6a 61 58 54 67 35 4e 72 50 4e 39 4d 39 4d 2f 32 74 39 4c 67 78 61 59 31 30 47 73 66 79 79 75 6a 4b 68 70 42 35 6c 6b 41 68 67 6d 72 55 50 53 53 36 2b 7a 4e 78 52 69 65 6f 39 73 73 53 65 53 5a 41 38 50 63 45 63 68 44 36 72 57 4b 55 6e 48 2f 31 6a 37 33 56 43 38 52 45 59 67 71 61 49 69 75 6f 67 4e 44 42 7a 67 4f 79 61 6b 53 35 35 5a 48 43 79 4c 70 54 68 6b 36 67 76 65 79 58 54 6f 64 74 67 38 6d 44 31 71 4b 32 4a 65 73 72 65 70 55 46 68 65 6e 4e 4e 63 39 47 6f 38 36 36 59 53 4d 4e 52 7a 75 7a 4a 62 51 63 32 75 66 6f 49 31 73 59 55 39 30 Data Ascii: ZzDf5NoX1wpuQ59OGTzY1uaiu8GqeG2BwTz+E8BDIZ4HRQ5NOQd97qW+Kt/QjoXwH6KjbSBzyrvjaXTg5NrPN9M9M/2t9LgxaY10GsfyyujKhpB5lkAhgmrUPSS6+zNxRieo9ssSeSZA8PcEchD6rWKUnH/1j73VC8REYgqaIiuogNDBzgOyakS55ZHCyLpThk6gveyXTodtg8mD1qK2JesrepUFhenNNc9Go866YSMNRzuzJbQc2ufoI1sYU90

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	53462	172.217.16.129	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:21 UTC	615	OUT	GET /sodar/sodar2.js HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gpt.mail.yahoo.net/sandbox?client=login&version=0.1&limited=0&headerBidder=1&haq=1&benji=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:21 UTC	665	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 17945 Date: Tue, 14 Jan 2025 00:13:21 GMT Expires: Tue, 14 Jan 2025 00:13:21 GMT Cache-Control: private, max-age=3000 ETag: "1727224258380615" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 00:13:21 UTC	725	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 67 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 67 20 69 6e 20 72 3f 66 3d 72 3a 66 3d 6e 3b 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 67 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 67 5d 3b 69 66 28 21 28 65 20 69 6e 20 66 29 29 62 72 65 61 6b 20 61 3b 66 3d 66 5b 65 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 70 26 26 63 3d 3d 3d 22 65 73 36 22 3f 66 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 6b 28 72 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,va
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: {var b=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&a[w(r.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var fa=typeof Object.create=="function"
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 74 75 72 6e 20 48 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 67 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 68 2c 63 29 3b 69 66 28 21 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 67 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 67 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 67 2e 6d 3d 21 31 2c 67 3b 76 61 72 20 66 3d 67 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 45 28 61 2e 67 2c 65 29 2c 48 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 66 29 3b 72 Data Ascii: turn H(a)}function G(a,b,c,d){try{var g=b.call(a.g.h,c);if(!(g instanceof Object))throw new TypeError("Iterator result "+g+" is not an object");if(!g.done)return a.g.m=!1,g;var f=g.value}catch(e){return a.g.h=null,E(a.g,e),H(a)}a.g.h=null;d.call(a.g,f);r
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6d 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 65 29 7d 3b 76 61 72 20 67 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 65 2e 6c 65 6e 67 Data Ascii: .prototype.h=function(e){if(this.g==null){this.g=[];var h=this;this.i(function(){h.m()})}this.g.push(e)};var g=n.setTimeout;c.prototype.i=function(e){g(e,0)};c.prototype.m=function(){for(;this.g&&this.g.length;){var e=this.g;this.g=[];for(var h=0;h<e.leng
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 65 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 65 29 29 3b 65 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 65 2e Data Ascii: d")return!0;typeof e==="function"?e=new e("unhandledrejection",{cancelable:!0}):typeof h==="function"?e=new h("unhandledrejection",{cancelable:!0}):(e=n.document.createEvent("CustomEvent"),e.initCustomEvent("unhandledrejection",!1,!0,e));e.promise=this;e.
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 0a 78 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6e 7d 2c 22 65 73 5f 32 30 32 30 22 29 3b 78 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 67 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 62 5b Data Ascii: ),l=h.next();while(!l.done)})};return b},"es6");x("globalThis",function(a){return a\|\|n},"es_2020");x("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var g=[],f=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&b[
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 61 66 72 61 6d 65 22 5d 29 2c 74 61 3d 50 28 73 61 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 73 72 63 3d 72 61 28 62 29 3b 76 61 72 20 63 2c 64 3b 28 63 3d 28 62 3d 28 64 3d 28 63 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 Data Ascii: ww.google.com/recaptcha/api2/aframe"]),ta=P(sa);function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};function ua(a,b){a.src=ra(b);var c,d;(c=(b=(d=(c=(a.ownerDocument&&a.ownerDocument.defaultView\|\|window).document).querySelector)==null?void 0
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 69 73 2e 4a 3d 62 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6f 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 63 3b 74 68 69 73 2e 69 3d 28 64 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 64 29 3f 50 28 7a 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3a 50 28 41 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 49 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 77 69 74 63 68 28 62 2e 67 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 46 28 62 2c 43 61 28 61 29 2c 32 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 46 28 62 2c 44 61 28 61 29 2c 33 29 3b 63 61 73 65 20 33 3a 69 66 28 21 28 61 2e 6f 3e 30 29 29 7b 62 2e 67 3d 34 3b 62 72 65 61 6b 7d 72 65 74 Data Ascii: is.J=b;this.h=g;this.o=c===void 0?0:c;this.i=(d===void 0?0:d)?P(za,encodeURIComponent(a)):P(Aa,encodeURIComponent(a))}function Ba(a){return I(function(b){switch(b.g){case 1:return F(b,Ca(a),2);case 2:return F(b,Da(a),3);case 3:if(!(a.o>0)){b.g=4;break}ret
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 69 66 28 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 72 65 74 75 72 6e 20 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 5b 30 5d 3b 76 61 72 20 62 3d 6e 65 77 20 72 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 5b 62 2c 63 5d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 47 63 4c 4b 68 4f 6d 73 3d 3d 3d 76 6f 69 64 20 30 3f 31 33 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 6a 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 2c 62 29 7b 53 2e 63 61 Data Ascii: }function Ja(){var a=window;if(a.GoogleDX5YKUSk)return a.GoogleDX5YKUSk[0];var b=new r.Promise(function(c){a.GoogleDX5YKUSk=[b,c]});return b}function Ka(){return window.GoogleGcLKhOms===void 0?13:1};function S(a,b){this.h=a;this.j=b}function La(a,b){S.ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	53464	142.250.184.194	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:21 UTC	403	OUT	GET /pagead/js/car.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Accept: application/javascript Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:13:21 UTC	812	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Shared-Storage-Cross-Origin-Worklet-Allowed: ?1 Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 3596 X-XSS-Protection: 0 Date: Tue, 14 Jan 2025 00:09:46 GMT Expires: Tue, 14 Jan 2025 01:09:46 GMT Cache-Control: public, max-age=3600 Age: 215 ETag: 15082643155581105206 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 00:13:21 UTC	578	IN	Data Raw: 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 65 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 66 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 69 66 28 66 21 3d 3d 66 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 Data Ascii: /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var e=this\|\|self;/ Copyright Google LLC SPDX-License-Identifier: Apache-2.0 */ var f={};function g(){if(f!==f)throw Error("Bad secret");};function h(a){retur
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 62 29 7b 74 68 72 6f 77 20 62 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 72 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 67 28 29 3b 74 68 69 73 2e 67 3d 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 61 29 7b 70 3d 3d 3d 76 6f 69 64 20 30 26 26 28 70 3d 71 28 29 29 3b 76 61 72 20 62 3d 70 3b 72 65 74 75 72 6e 20 6e 65 77 20 72 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 76 61 72 20 76 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 67 28 29 3b 74 68 69 73 2e 68 3d 61 7d 74 6f 53 Data Ascii: ateScript:b,createScriptURL:b})}catch(b){throw b;}return a};var r=class{constructor(a){g();this.g=a}toString(){return this.g+""}};function t(a){p===void 0&&(p=q());var b=p;return new r(b?b.createScriptURL(a):a)};var v=class{constructor(a){g();this.h=a}toS
2025-01-14 00:13:21 UTC	1390	IN	Data Raw: 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 2f 5e 64 61 74 61 3a 2f 2e 74 65 73 74 28 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 44 61 74 61 20 55 52 4c 73 20 63 61 6e 6e 6f 74 20 68 61 76 65 20 65 78 70 72 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 74 65 6d 70 6c 61 74 65 20 6c 69 74 65 72 61 6c 20 69 6e 70 75 74 2e 22 29 3b 69 66 28 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 64 29 7c 7c 2f 5e 5c 2f 5c 2f 2f 2e 74 65 73 74 28 64 29 29 7b 76 61 72 20 63 3d 64 2e 69 6e 64 65 78 4f 66 28 22 2f 2f 22 29 2b 32 3b 76 61 72 20 75 3d 64 2e 69 6e 64 65 78 4f 66 28 22 2f 22 2c 63 29 3b 69 66 28 75 3c 3d 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 27 74 20 69 6e 74 65 72 70 6f 6c 61 74 65 20 64 61 74 61 20 69 6e 20 61 20 75 72 Data Ascii: toLowerCase();if(/^data:/.test(d))throw Error("Data URLs cannot have expressions in the template literal input.");if(/^https:\/\//.test(d)\|\|/^\/\//.test(d)){var c=d.indexOf("//")+2;var u=d.indexOf("/",c);if(u<=c)throw Error("Can't interpolate data in a ur
2025-01-14 00:13:21 UTC	238	IN	Data Raw: 69 6f 6e 53 74 61 72 74 29 3a 44 61 74 65 2e 6e 6f 77 28 29 3b 61 3d 61 77 61 69 74 20 61 2e 73 68 61 72 65 64 53 74 6f 72 61 67 65 2e 67 65 74 28 22 70 73 5f 63 63 74 22 29 3b 61 3d 4e 75 6d 62 65 72 28 61 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 30 3b 62 3d 28 62 2d 61 29 2f 38 36 34 45 35 3b 72 65 74 75 72 6e 20 62 3c 30 3f 30 3a 62 3c 31 31 3f 31 3a 62 3c 35 30 3f 32 3a 62 3c 31 30 38 3f 33 3a 62 3c 31 38 33 3f 34 3a 62 3c 32 38 34 3f 35 3a 62 3c 34 32 32 3f 36 3a 37 7d 3b 63 6f 6e 73 74 20 41 3d 67 6c 6f 62 61 6c 54 68 69 73 3b 63 6c 61 73 73 20 42 7b 61 73 79 6e 63 20 72 75 6e 28 29 7b 72 65 74 75 72 6e 20 7a 28 29 7d 7d 41 2e 72 65 67 69 73 74 65 72 28 22 70 73 5f 63 61 75 73 22 2c 42 29 3b 0a Data Ascii: ionStart):Date.now();a=await a.sharedStorage.get("ps_cct");a=Number(a);if(!a)return 0;b=(b-a)/864E5;return b<0?0:b<11?1:b<50?2:b<108?3:b<183?4:b<284?5:b<422?6:7};const A=globalThis;class B{async run(){return z()}}A.register("ps_caus",B);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	53465	50.57.31.206	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:21 UTC	676	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-TNm8iDFE2oObj8XajvZ7JIrAL31CYK2Y97k-~A&sInitiator=external HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=70693F37AADC071D
2025-01-14 00:13:21 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 7 Set-Cookie: SEUNCY=70693F37AADC071D; Expires=Wed, 14 Jan 2026 00:13:21 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Tue, 14 Jan 2025 00:13:21 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2025-01-14 00:13:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	53466	87.248.119.252	443	4284	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:13:21 UTC	1412	OUT	GET /setuid?bidder=conversant&uid=AQAJC9JjqkKwxQIg3ULfAQEBAQEBAQCVYylcFQEBAJVjKVwV&expiration=1736900000&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A3=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; A1S=d=AQABBBKshWcCEKNP-8Xq82Zzf0b4WSF47TwFEgEBAQH9hmePZ9xH0iMA_eMAAA&S=AQAAAmqD1uXgX4QvWdg0SC3mG3E; cmp=t=1736813591&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-0RboMaNE2uIeWk4FKaF1_bvQhIExAjeY~A&dv360=eS1JVVguckw5RTJ1R3JLZGJBODNLU1M3YUhLaHVDRnh4X35B&ydsp=y-fXK5DcBE2uJTHuMmSBE1ERoeOnRFeg8D~A&tbla=y-aTw3VllE2uIGrITsBhtgiRZUVTZV5RVI~A; tbla_id=34a82582-66b7-4882-b4a7-014125c2603c-tucte7f319c; eids=eyJlaWRzIjpbeyJzb3VyY2UiOiJwdWJjaWQub3JnIiwidWlkcyI6W3siaWQiOiIyNTYyNjI5My0zNTk4LTQ2MjMtYmU1YS1iMjhlYzI0NGVhZGYiLCJhdHlwZSI6MX1dfV19; uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIwLjk2MjkwOTYwNFoifX19
2025-01-14 00:13:22 UTC	685	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUpDOUpqcWtLd3hRSWczVUxmQVFFQkFRRUJBUUNWWXlsY0ZRRUJBSlZqS1Z3ViIsImV4cGlyZXMiOiIyMDI1LTAxLTI4VDAwOjEzOjIyLjAxNTg0MDUzNloifX19; Path=/; Domain=pbs.yahoo.com; Expires=Tue, 15 Jul 2025 00:13:22 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Tue, 14 Jan 2025 00:13:22 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2025-01-14 00:13:22 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Target ID:	0
Start time:	19:12:37
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:12:40
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 --field-trial-handle=2512,i,3008821820161670398,12908520785371167314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:12:47
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://offfryfjtht767755433.webflow.io/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://offfryfjtht767755433.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Windows Analysis Report
https://offfryfjtht767755433.webflow.io/