Create Interactive Tour

Windows Analysis Report
http://camsapi.camsoline.com

Overview

General Information

Sample URL:	http://camsapi.camsoline.com
Analysis ID:	1644174
Infos:

Detection

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,11257995028092385795,14724108990761671776,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,11257995028092385795,14724108990761671776,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4012 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://camsapi.camsoline.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ETPRO MALWARE Observed Suspicious SSL Cert (testexample)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-20T12:03:10.311702+0100	2847912	1	Domain Observed Used for C2 Detected	199.191.50.153	443	192.168.2.5	49783	TCP

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 1.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: http://ww01.camsoline.com/?dn=camsoline.com&pbsubi... This script demonstrates high-risk behavior, including data exfiltration and potential redirection to a malicious domain. The script creates an image element and sets its source to a URL that appears to be sending sensitive information (potentially related to ad-blocking detection) to an external domain 'ww01.camsoline.com'. Additionally, if the 'abperurl' variable is defined, the script redirects the user to that URL, which could lead to a phishing or malicious site. These behaviors indicate a high risk of malicious intent.
Source: 2.28..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: http://ww01.camsoline.com/Mutual_Fund_Statements.c... This script demonstrates high-risk behaviors, including data exfiltration and potential redirection to a suspicious domain. The script creates an image element and sets its `src` attribute to a URL that appears to be sending data about the user's ad-blocking status to an external domain (`ww01.camsoline.com`). Additionally, if the `abperurl` variable is defined, the script redirects the user to that URL, which could potentially lead to a malicious or phishing site. These behaviors indicate a high risk of malicious intent.

Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=|&ap=&dt=c|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE

HTTP Parser: Number of links: 0

Source: http://camsapi.camsoline.com/

HTTP Parser: Base64 decoded: {"uuid":"658efe83-b969-4d8f-a3b8-227fc2a18060","page_time":1742468554,"page_url":"http://camsapi.camsoline.com/","page_method":"GET","page_request":{},"page_headers":{},"host":"camsapi.camsoline.com","ip":"161.77.13.4"}

Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-YV48LN7LJN&gacid=1955778790.1742468621&gtm=45je53i1h1v878563733z876770584za200zb76770584&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102813109~102814060~102879719&z=1699791022
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1072554850?random=1742468620638&cv=11&fst=1742468620638&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je53i1h1v878563733z876770584za200zb76770584&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102788824~102813109~102814060~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.fmsbonds.com%2Flp-get-muni-bonds%2F%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=Get%20Muni%20Bonds%20That%20Make%20Sense%20For%20You%20-%20FMSBonds.com&npa=0&pscdl=noapi&auid=2017591375.1742468620&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-YV48LN7LJN&gacid=1955778790.1742468621&gtm=45je53i1h1v878563733z876770584za200zb76770584&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102813109~102814060~102879719&z=1699791022
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1072554850?random=1742468620638&cv=11&fst=1742468620638&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je53i1h1v878563733z876770584za200zb76770584&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102788824~102813109~102814060~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.fmsbonds.com%2Flp-get-muni-bonds%2F%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=Get%20Muni%20Bonds%20That%20Make%20Sense%20For%20You%20-%20FMSBonds.com&npa=0&pscdl=noapi&auid=2017591375.1742468620&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config

Source: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I	HTTP Parser: No favicon
Source: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I	HTTP Parser: No favicon
Source: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU%2FI%2B5a%...	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2	HTTP Parser: No favicon
Source: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2	HTTP Parser: No favicon
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No favicon
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No favicon
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No favicon
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No favicon
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No favicon

Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No <meta name="author".. found
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No <meta name="author".. found

Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No <meta name="copyright".. found
Source: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.142:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.249.137.2:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.78:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.78:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.78:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.218.84.137:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.111.153:443 -> 192.168.2.5:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.64.90:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.249.137.3:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.76:443 -> 192.168.2.5:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.191.50.153:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.110:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.110:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.110:443 -> 192.168.2.5:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.32.98:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.78:443 -> 192.168.2.5:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.5:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.193:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.193:443 -> 192.168.2.5:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.5:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.111.153:443 -> 192.168.2.5:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.64.90:443 -> 192.168.2.5:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.64.90:443 -> 192.168.2.5:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.129:443 -> 192.168.2.5:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.5:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.218.84.137:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.67.42.25:443 -> 192.168.2.5:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.132:443 -> 192.168.2.5:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.110:443 -> 192.168.2.5:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.60.22.48:443 -> 192.168.2.5:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.231.132.73:443 -> 192.168.2.5:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.88.91:443 -> 192.168.2.5:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.228:443 -> 192.168.2.5:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.15:443 -> 192.168.2.5:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.88:443 -> 192.168.2.5:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.253.115.155:443 -> 192.168.2.5:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.226:443 -> 192.168.2.5:49947 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.226:443 -> 192.168.2.5:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.5:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.88:443 -> 192.168.2.5:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.88:443 -> 192.168.2.5:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.68:443 -> 192.168.2.5:49956 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.55.92:443 -> 192.168.2.5:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.30.30:443 -> 192.168.2.5:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.124:443 -> 192.168.2.5:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.60.22.48:443 -> 192.168.2.5:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.8.71.184:443 -> 192.168.2.5:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.228:443 -> 192.168.2.5:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.110.205.119:443 -> 192.168.2.5:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.110.205.119:443 -> 192.168.2.5:49984 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2847912 - Severity 1 - ETPRO MALWARE Observed Suspicious SSL Cert (testexample) : 199.191.50.153:443 -> 192.168.2.5:49783

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: r.search.yahoo.com to https://www.bing.com/aclick?ld=e8z0xqyfqwwd8wvkv_pkc9xzvucuwd03gwyy1vecbrsdckdouj8t-oznvsua06pp0ldkkykee1dijotdq6sysizkxtjdlffutcfwq2dfnwwv_mtvepjuoifon6irh4fdsynuizlbbyabjzttn8f_oy_67dtwpieryfl-sxbxq6glufplux&u=ahr0chmlm2elmmylmmzmyxfzc3ryzwv0lmnvbsuyznrvcgljjtjmmjalmmylm2zzbwfojtnkszy4ntvpnsuynnv0bv90zxjtjtnktxv0dwfsjti1mjbgdw5kjti1mjbtdgf0zw1lbnrzjti2dxrtx21lzgl1bsuzzhalmjznx3rpjtnka3dkltgynjcwota5nzczoti1jtnhbg9jlte5mcuynmdfzgulm2rjjti2z19jasuzzduymjayndy2miuynmdfywklm2qxmziynze0otuxndqyodg5jti2dxrtx2nvbnrlbnqlm2qxjti2zwt3jtnkbvc4elrin1lvazvletvyt3dcnk9nusuyntnejti1m0qlmjzyywmlm2rozwvkjtjisw5mbyuyyk9ujtjitxv0dwfsjtjirnvuzhmlmmjhdwlkzsuzziuyylzpc2l0jtjisgvyzselmjztc2nsa2lkjtnkndcwndfimjjlmtiwmtyznmuznzi3y2y5mtrmztcynwu&rlid=47041b22e1201636e3727cf914fe725e

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.65
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.67.42.25
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Thu, 20 Mar 2025 11:02:36 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 179cache-control: no-cachex-version: 2.145.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:36 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 1d cc 4d 0f 82 20 1c 80 f1 af 84 5a 6d 1d 3a 54 2a ca 14 97 19 f8 e7 26 d9 26 82 d6 a6 0d e5 d3 f7 72 7b 2e bf e7 b6 c4 2d cb 2d 8d a9 a5 c8 ba 22 8c 56 c9 1e 2b 59 05 8f 9d f4 37 aa 50 64 94 fe 7e 94 98 9d 44 42 31 70 33 b5 35 31 a9 b2 ea 3e 30 dd 7c 1b 82 8b 2a 86 ad 27 b1 9d d2 31 f6 44 cd 4c ed 1b 9d f6 4f 25 42 b0 79 a8 03 a8 60 06 77 b4 b9 42 88 72 d1 67 95 76 39 8e 66 f0 a9 a6 ce 18 18 ca ae a8 60 fd 7f f1 cf be de 2d 5f a6 ec 4c 54 c3 cb 4e 5e d3 9d 1c d9 24 13 74 f8 00 3d de c6 d6 b5 00 00 00 Data Ascii: M Zm:T*&&r{.--"V+Y7Pd~DB1p351>0|*'1DLO%By`wBrgv9f`-_LTN^$t=

Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: http://camsapi.camsoline.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol111%2Cpid-bodis-gcontrol444%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=1&rpbu=http%3A%2F%2Fcamsapi.camsoline.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2209915415042338&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=4911742468554258&num=0&output=afd_ads&domain_name=camsapi.camsoline.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1742468554259&u_w=1280&u_h=1024&biw=1280&bih=897&psw=1280&psh=807&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=738008665&rurl=http%3A%2F%2Fcamsapi.camsoline.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: http://camsapi.camsoline.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387IAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.camsoline.com%2F%3Fdn%3Dcamsoline.com%26pbsubid%3D658efe83-b969-4d8f-a3b8-227fc2a18060%26pid%3D9POT3387I&&__cmpfcc=1&l=en&o=1742468560607 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387IAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfNDA.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387IAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.camsoline.com%2F&o=1742468563025&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=40&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387IAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.camsoline.com%2F&o=1742468563025&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=40&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.camsoline.com%2FMutual_Fund_Statements.cfm%3Fdomain%3Dcamsoline.com%26fp%3DR8ceDLNrtNDHn15cpwkQU%252FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%252FG960dYtqe9I499WeZ%252BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%252FU2K2d5euP%252FNV5JeK02abPr%252Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%252B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%252FNyDJA%252B1Nf34gdb9%252Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%252F9v712i0WStGedLLlVLAFyJkpR4%26yep%3DUtm1MHC637QPcpRSvjJDXCflQWMmWU%252BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%252FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%252B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%252Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%252FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%252FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%252FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%252B4q48b%252FQT1v%252BNhmdyIrZfP6gFHm%252FN0Qab93KPKT6WOHqbZn%252FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%252F%252BjDigW7nKU%252FI%252B5a%252BdxyaD%252FUHIAY%252B0wrXGYZHoFs4LldJ659vlwddZ9KVNZRoBgT5RBWhLxnKDM5hCPzJhEU36RmOUuK0qLn%252FVo8REvupHcQsD30gEPaShvymU61k97iofGb14YG5JhWt2oiZ9ErAaP%252BvtoRrCugFWJQmJY%252BnXZzPrUIJWZqYMoZHFgfdiVtepN4rcPJD5K0dBdTkClC5Y3CTeHJM5Wp2LEnJMwYDCyp5Dmi%252F3AuhvMWF%252FBv6LgNnJPuWZvdlVNSf93gC4g4zPb5RzcyPeQQohY1aOyXsMQ%252FU2jj4R8AZDnsiO0UpDq3BPycjqsMQT7dk%252FPi1XjI65mWISIX87QZZAtp7TicuOnqDLKOTclsCjCR55K26jr3QwdUR9c6vqStfzo2TlRKYnKFfdpt4BzXz2pk5s17p%252Bx25f5yhHy9v1Rse6HlgEtQYNIX%252Fsw9bg9HBn7cQzMFtc6s3XlHLBQRd2YPgtwpzyhm4z2fVyRfTW8sdg1t9TKPbv96caGyniah1JtcijLG0ZR6XoS0laRPdSrbWzyDbw%252Bs0Bxzje9bQnMzcSJGj6aD%252BXj4tHzfwysd8bKISwiBYNBlCdOEYHKyoJHhpcICgrFSwum%252BtmRFvBAlf3y4ImF0EMI1AbiQqZBL9KrgvBmxBy6xrm3heiRIoUwMtmCbIRaPV4fWrAxf8Ut2PLnlRXF7dgMlYqmYaXxWfn%252BBL5%252FAMNOE7UYkCSsUohlg8sbkzT1xTQ3fOxNFLzkTqNA8PyLohmff2WYBMmhFvN70aBGEs79yl5cTJi1OD2IoOMUARC5vbe9x%252BILHl0cSCpJnzeZqPQ22ajDM%252FO4sC2n29JjXEgx%252FK8A0BNBkU%252BIkIVW%252FTCXvYWWcFY48%252BKpcKnr6VA5JBBu0W8p8Gc26RyxpnuSmmP8bKJDVP0kqy41uZ2xB6Dzi9Hk3FQd17mCxh52wQl8MCLuglqh7dGgVB4TdPUrkAjuDdvFPS4fNarD7bcLJlz1B9UZt5RMNzhUA1aVRK5VqMrBKjOXB9vIavfVMb5utQuBPHp7uUhw5f5eKh%252FkbhSezp74EYcySLszrVJ%252Fj1e35xKREqreyDbMhAMW1QehbqD3q4WHanPT49blqD%252BiCtm4%252BBoQNrK%252BYtpmnpKSWUJqNF1Lni5eb2Q%252B3YV7nNkQtK1dfc%26gtnp%3D0%26gtpp%3D0%26tp1%3D658efe83-b969-4d8f-a3b8-227fc2a18060%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DWbDrrPAiM7rnYuSye2wBP0JYcQoqb9p9etRrIDsZJ5s%253D%26pbsubid%3D658efe83-b969-4d8f-a3b8-227fc2a18060%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D4261%26ki%3D127309641%26ktd%3D0%26kld%3D1003%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230%2523645%2523217&&__cmpfcc=1&l=en&o=1742468574373 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent:
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.camsoline.com%2FMutual_Fund_Statements.cfm&o=1742468575379&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=40&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU%2FI%2B5a%2BdxyaD%2FUHIAY%2B0wrXGYZHoFs4LldJ659vlwddZ9KVNZRoBgT5RBWhLxnKDM5hCPzJhEU36RmOUuK0qLn%2FVo8REvupHcQsD30gEPaShvymU61k97iofGb14YG5JhWt2oiZ9ErAaP%2BvtoRrCugFWJQmJY%2BnXZzPrUIJWZqYMoZHFgfdiVtepN4rcPJD5K0dBdTkClC5Y3CTeHJM5Wp2LEnJMwYDCyp5Dmi%2F3AuhvMWF%2FBv6LgNnJPuWZvdlVNSf93gC4g4zPb5RzcyPeQQohY1aOyXsMQ%2FU2jj4R8AZDnsiO0UpDq3BPycjqsMQT7dk%2FPi1XjI65mWISIX87QZZAtp7TicuOnqDLKOTclsCjCR55K26jr3QwdUR9c6vqStfzo2TlRKYnKFfdpt4BzXz2pk5s17p%2Bx25f5yhHy9v1Rse6HlgEtQYNIX%2Fsw9bg9HBn7cQzMFtc6s3XlHLBQRd2YPgtwpzyhm4z2fVyRfTW8sdg1t9TKPbv96caGyniah1JtcijLG0ZR6XoS0laRPdSrbWzyDbw%2Bs0Bxzje9bQnMzcSJGj6aD%2BXj4tHzfwysd8bKISwiBYNBlCdOEYHKyoJHhpcICgrFSwum%2BtmRFvBAlf3y4ImF0EMI1AbiQqZBL9KrgvBmxBy6xrm3heiRIoUwMtmCbIRaPV4fWrAxf8Ut2PLnlRXF7dgMlYqmYaXxWfn%2BBL5%2FAMNOE7UYkCSsUohlg8sbkzT1xTQ3fOxNFLzkTqNA8PyLohmff2WYBMmhFvN70aBGEs79yl5cTJi1OD2IoOMUARC5vbe9x%2BILHl0cSCpJnzeZqPQ22ajDM%2FO4sC2n29JjXEgx%2FK8A0BNBkU%2BIkIVW%2FTCXvYWWcFY48%2BKpcKnr6VA5JBBu0W8p8Gc26RyxpnuSmmP8bKJDVP0kqy41uZ2xB6Dzi9Hk3FQd17mCxh52wQl8MCLuglqh7dGgVB4TdPUrkAjuDdvFPS4fNarD7bcLJlz1B9UZt5RMNzhUA1aVRK5VqMrBKjOXB9vIavfVMb5utQuBPHp7uUhw5f5eKh%2FkbhSezp74EYcySLszrVJ%2Fj1e35xKREqreyDbMhAMW1QehbqD3q4WHanPT49blqD%2BiCtm4%2BBoQNrK%2BYtpmnpKSWUJqNF1Lni5eb2Q%2B3YV7nNkQtK1dfc&gtnp=0&gtpp=0&tp1=658efe83-b969-4d8f-a3b8
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.camsoline.com%2FMutual_Fund_Statements.cfm&o=1742468575379&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=40&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rdclk/dWU9NGVjdjdsMWp0bnRldSZ1dD0xNzQyNDY4NTc0NTI5JnVvPTgyNjY5OTE4MjAxNDI0Jmx0PTImcz0yJmVzPU1WZWVrMnU3ZWFpb0VWN1ZWMkZWSGpRam1EQkRWSG0xV1JMSDFabDc4WUNQcHVfbVJfSENVV2FiUy5nd1hLNzllQ0FjcUdqekh5dGdjdy0t/RV=2/RE=1745060574/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8Z0xqyFQWWD8wvkV_pKc9xzVUCUwD03gwyY1vECbRsDCKDouj8T-oZnVsUa06PP0LdkkYkee1dIjotDq6SySIzKXTJDLffUTCfWQ2dFNWWV_MtVEpjUoifon6irH4fdSYNUiZlbbYaBJzTTn8f_OY_67dtwPIERyfL-sXBXQ6GluFPluX%26u%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%26rlid%3d47041b22e1201636e3727cf914fe725e/RK=2/RS=peKwmQHJMij2Xe9FqnW048yqJ8U- HTTP/1.1Host: r.search.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU%2FI%2B5a%2BdxyaD%2FUHIAY%2B0wrXGYZHoFs4LldJ659vlwddZ9KVNZRoBgT5RBWhLxnKDM5hCPzJhEU36RmOUuK0qLn%2FVo8REvupHcQsD30gEPaShvymU61k97iofGb14YG5JhWt2oiZ9ErAaP%2BvtoRrCugFWJQmJY%2BnXZzPrUIJWZqYMoZHFgfdiVtepN4rcPJD5K0dBdTkClC5Y3CTeHJM5Wp2LEnJMwYDCyp5Dmi%2F3AuhvMWF%2FBv6LgNnJPuWZvdlVNSf93gC4g4zPb5RzcyPeQQohY1aOyXsMQ%2FU2jj4R8AZDnsiO0U
Source: global traffic	HTTP traffic detected: GET /topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e HTTP/1.1Host: faqsstreet.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/jquery.central.js HTTP/1.1Host: cdn.faqsstreet.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=e942abc661a9f&h=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fsmah%3DK6855i5%26utm_term%3DMutual%2520Fund%2520Statements%26utm_medium%3Dp%26g_ti%3Dkwd-82670909773925%3Aloc-190%26g_de%3Dc%26g_ci%3D522024662%26g_ai%3D1322714951442889%26utm_content%3D1%26ekw%3DmW8zTH7Yok5ey5XOwB6OMQ%253D%253D%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%3F%2BVisit%2BHere!%26msclkid%3D47041b22e1201636e3727cf914fe725e&&__cmpfcc=1&l=en&o=1742468587402 HTTP/1.1Host: d.delivery.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/search/ads.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfODUzNTYucl9ST1cubF9lbi5kXzI3NzQyLnhfMTUudi5wLnRfMjc3NDIueHRfMTMz.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=2389368831&pcsa=false&channel=98929%2B31738%2B4366%2B37306%2B86146&client=pub-8279817424936971&r=m&hl=en&cpp=3%3A&ivt=0&rpbu=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fekw%3D1%26rlh%3D7b42863eb113ccfa5c5a8f5fb181b843%26plh%3D7b42863eb113ccfa5c5a8f5fb181b843%26sm_tsh%3DXLpqKMn9JKsCfP9WDkWWBhV%252FffEUfhWyC55n8ieCOiM%253D%26smssid%3D1%26smest%3DEubu0w2PmuEXr9idBKWn5g%253D%253D%26g_ci%3D522024662%26g_ai%3D1322714951442889%26g_de%3Dc%26smah%3DK6855i5%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%253F%2BVisit%2BHere%2521%26msclkid%3D47041b22e1201636e3727cf914fe725e&rpqp=s&terms=10%20mutual%20funds%2C%20how%20to%20diversify%20mutual%20funds%2C%20best%20mutual%20funds%20for%20retirement%2C%20find%20mutual%20fund%2C%20mutual%20fund%20investment%2C%20mutual%20fund%20business%2C%20best%20bond%20mutual%20funds%2C%20how%20to%20invest%20in%20mutual%20funds%20online&kw=Need%20Info%20On%20Mutual%20Funds%20Guide%3F%20Visit%20Here!&ie=utf-8&oe=utf-8&type=3&ipp=utm_term%2Cutm_medium%2Cg_ti%2Cg_de%2Cg_ci%2Cg_ai%2Cutm_content%2Crac%2Cmsclkid&rs_tt=c&fexp=21404%2C17301437%2C17301438%2C17301442%2C17301548%2C17301266%2C72717108&format=r5%7Cr5&nocache=211742468589186&num=0&output=afd_ads&domain_name=faqsstreet.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1742468589201&u_w=1280&u_h=1024&biw=1280&bih=897&psw=1280&psh=897&frm=0&uio=--&cont=afscontainer1%7Cafscontainer2&drt=0&jsid=csa&nfp=1&jsv=735462593&rurl=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fsmah%3DK6855i5%26utm_term%3DMutual%2520Fund%2520Statements%26utm_medium%3Dp%26g_ti%3Dkwd-82670909773925%3Aloc-190%26g_de%3Dc%26g_ci%3D522024662%26g_ai%3D1322714951442889%26utm_content%3D1%26ekw%3DmW8zTH7Yok5ey5XOwB6OMQ%253D%253D%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%3F%2BVisit%2BHere!%26msclkid%3D47041b22e1201636e3727cf914fe725e&referer=http%3A%2F%2Fww01.camsoline.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=85356&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F&o=1742468589823&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=133&dv=15& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20250318/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gpp_sid=-1&client=ca-pub-8279817424936971&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1742468590&plaf=1%3A2%2C2%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C8%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fsmah%3DK6855i5%26utm_term%3DMutual%2520Fund%2520Statements%26utm_medium%3Dp%26g_ti%3Dkwd-82670909773925%3Aloc-190%26g_de%3Dc%26g_ci%3D522024662%26g_ai%3D1322714951442889%26utm_content%3D1%26ekw%3DmW8zTH7Yok5ey5XOwB6OMQ%253D%253D%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%3F%2BVisit%2BHere!%26msclkid%3D47041b22e1201636e3727cf914fe725e&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiapm=0.15&aiapmi=0.33938&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742468589271&bpp=4&bdt=1895&idt=913&shv=r20250318&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=564430942195&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=897&scr_x=0&scr_y=0&eid=95354562&oid=2&pvsid=4385106675293143&tmod=1627517775&uas=0&nvt=1&fsapi=1&ref=http%3A%2F%2Fww01.camsoline.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=964 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept
Source: global traffic	HTTP traffic detected: GET /adsense/search/ads.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i3kd/?c_dt={%22NA%22:0}&dt=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 HTTP/1.1Host: faqsstreet.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/Ly9jZ.jpg?eurl=Ly9jZG4uZmFxc3N0cmVldC5jb20vY29udGVudC5nZXRzbWFydGluc2lnaHRzLmNvbS93cC1jb250ZW50L3VwbG9hZHMvMjAyMi8wOS9BR3VpZGVUb0ludmVzdGluZ0luTXV0dWFsRnVuZHMuanBn HTTP/1.1Host: cdn.faqsstreet.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.faqsstreet.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20250318&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://faqsstreet.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=85356&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F&o=1742468589823&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=133&dv=15& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=pub-8279817424936971&output=uds_ads_only&zx=9ibh9mvj7ic9&cd_fexp=72717108&aqid=7_XbZ773D_3CnboP94G02Ac&psid=2389368831&pbt=bs&adbx=268.5&adby=331&adbh=512&adbw=728&adbah=98%2C98%2C98%2C98%2C98&adbn=master-1&eawp=partner-pub-8279817424936971&errv=735462593&csala=1797%7C31%7C2312%7C2%7C-66&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2/232/runner.html HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=pub-8279817424936971&output=uds_ads_only&zx=h0iczoklbvyg&cd_fexp=72717108&aqid=7_XbZ773D_3CnboP94G02Ac&psid=2389368831&pbt=bv&adbx=268.5&adby=331&adbh=512&adbw=728&adbah=98%2C98%2C98%2C98%2C98&adbn=master-1&eawp=partner-pub-8279817424936971&errv=735462593&csala=1797%7C31%7C2312%7C2%7C-66&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=pub-8279817424936971&output=uds_ads_only&zx=f4wowqveioa6&cd_fexp=72717108&aqid=7_XbZ773D_3CnboP94G02Ac&psid=2389368831&pbt=bs&adbx=268.5&adby=1763.5625&adbh=512&adbw=728&adbah=98%2C98%2C98%2C98%2C98&adbn=slave-1-1&eawp=partner-pub-8279817424936971&errv=735462593&csala=1782%7C46%7C2312%7C2%7C241&lle=0&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i3kd/?c_dt={%22NA%22:0}&dt=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 HTTP/1.1Host: faqsstreet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.faqsstreet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/Ly9jZ.jpg?eurl=Ly9jZG4uZmFxc3N0cmVldC5jb20vY29udGVudC5nZXRzbWFydGluc2lnaHRzLmNvbS93cC1jb250ZW50L3VwbG9hZHMvMjAyMi8wOS9BR3VpZGVUb0ludmVzdGluZ0luTXV0dWFsRnVuZHMuanBn HTTP/1.1Host: cdn.faqsstreet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spx/logPerfData HTTP/1.1Host: faqsstreet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0
Source: global traffic	HTTP traffic detected: GET /generate_204?PnTj1Q HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/sodar?id=sodar2&v=232&t=2&li=gda_r20250318&jk=4385106675293143&bg=!u7iluPfNAAaCZO-FomQ7ADQBe5WfOJlPN0TpHieYbFgsFavyX3eUgrqyZ5iEwPF9zQqrHjryXdZfdKxeqSi7QPPzk7REAgAAArlSAAAAJGgBB34AOB30E4DmGPWWXGVzXJXW6Zyj_b70fDXMKk714MOQIDKabtIQtI_kiFza32SF62cCk529Ue-lj4XqmQUtmXH4vHEFcVe2HZYSEohcAWY1Tr7ZaFwgAz-dYulMqfpJvzLIOf6Jx9TH055XAOvEIOGiuowa7Kt6OmZ4xCmurcCybyx8hJbuKzUGuQElJSpHFrhgVCtL-8HaS00Tv_F0RijQQ037LOIupjlLVNK39gjtL6xnfIHXqcmNJHdOK-3j-3H6ZLF2jA43Tj7IpIwe3PjwJoKHRXIRPKxpap5QV8OWpRB9_OLWqVsMi75W6rHbXmB2vThqwEVUORyioFInEOeAkbe7qpxRKIW8NVek7vHYu483X09233lXHMWMUWlGcBmjXces1C-FIEmIBMv-vkAg-qRB1KDZZIstaMoqQBFpd9mohsy_3qUD8TRnQlv6hqb7NwDkSC_cPyK7OtVdEBD2pIE9ZHlmBjnKHO6OIN6iwKR_xwXqen2uANuPApVcE8Tf2rya94xd6m-CT6tzY1cv98eZ5S_wAwaujzJ14KrVorsF2UwkVfSnxLuhTq7wKcaeUq7dF_ZqKX2dtugj99vfiRz8cMrTkENtWyoBpvq0IHyDKwdvsvGO19Z6WYz1wBc3f1h7sdnNh72BHMHYYqA9o9CsA0kOYkUnMedrarjxraReEccHDLV5E0VNiVE359See8PPIlaVpPlwdm3Nthw_IJfbyO8MzIqJWB9L_Lc4W_nVIDzrndATKad3DIhc60bDtj0m3An96chZKB63KfMzg9OmdZy-0tiwlOQ8kGz6zgDB8eIJkrFfiBjvV8zNZEMEEFMmzn7uOJWRBOmjq5T_cbzwsc6aP5ywRJ6n9pCIpaE_mKaHbPveRaM_C9tpQhsUkL8JljbrX7L8OvZZgpDgb6DHWypYkZvyu2_zj9_vHl4SyUtzVaaeE-MsYfoVjZF_5JBY2cGF4aXNps8TXBXLLp0IXCRmVPkImJ0Izy-HqYM85EBWUo68wpPEptSIB85HqMjHZq5KFrBIsPpZ9yZLA4LQ7Oc8BtIZe3e6LTbJNUyFrOf25bgM9Ng8jBdeIEljR8dslLtAUjzylYMKxBeA07-iW5bbqYr_A2VDooMuUB0MHQh3GNE1m_Y7Uv44dqmzdPVG7hL-LmlfTAuCLGQisWrDFk1A3HM4ScI6p3ZN1xR53RFSwZF95n4CiPnj4c-rZ-gWUGLHevs4dpnR1_Po2-fwiQo33xZB7dyFTL3qGAv3FR79DNrDCNaiAr-fGlMS1M-ze-0b-qdY2U1QzyyRim0ByugqG5NjhEuuTwlI2Bafm6FcTL7JYXib9FM7qPoEvcaNAyxXFJBIWgCQcqcgIx3jY7zH_mX0WqZkTwZ2M6qDmGJQMoxw5Vmuk01D6-Nv9lq1vGVdsR4h4RrOwxtJAlzDLy5T6RSGdgj71kfCfcGD_mbDIa9bzeFwTbXGDdNVNCdkzXXePtmkAWl7nYR4wa2DFJaYZBPyHOmpGHtZ62jNVcBL2wk1_zMRAel5WF1pmIKelC-38AtuaASAqlCbjbcaSfo_fa-I74aAo-iGVGKPhdfqhIlS9No9KOOzs3062mPXAkNzxZv9W3ePgvPjpUTk9kmG89DolwKXkzG3jokTiocYcKq86bywAQhyRgZWlUSB5OtB3JEzi1iw5_tO6bprmIDpT4U1wPHHDttXjFPslTvAz7cqk1czYPiIdFNmPJ32-0OgRWRsbdPyy_DAHrcpi-jX7aUYmycmh1Y2WTnK7XfMCIGWzCVLuUaJHZCapcd9xLAutR9YL6rdEZvcEl0mXaV_C_Qg--HbPe6Muyb1wx435aUwmDQ HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2 HTTP/1.1Host: faqsstreet.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=e942abc661a9f&h=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fekw%3D1%26rlh%3D7b42863eb113ccfa5c5a8f5fb181b843%26plh%3D7b42863eb113ccfa5c5a8f5fb181b843%26sm_tsh%3DXLpqKMn9JKsCfP9WDkWWBhV%2FffEUfhWyC55n8ieCOiM%253D%26smssid%3D1%26smest%3DEubu0w2PmuEXr9idBKWn5g%253D%253D%26g_ci%3D522024662%26g_ai%3D1322714951442889%26g_de%3Dc%26smah%3DK6855i5%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%3F%2BVisit%2BHere!%26msclkid%3D47041b22e1201636e3727cf914fe725e%26s%3DHighest%2BPaying%2BMunicipal%2BBonds%26rsToken%3DChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Fww01.camsoline.com%252F%26nm%3D5%26nx%3D223%26ny%3D27%26is%3D728x512%26clkt%3D2&&__cmpfcc=1&l=en&o=1742468603968 HTTP/1.1Host: d.delivery.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=2389368831&pcsa=false&channel=98929%2B31738%2B4366%2B37306%2B86146&client=pub-8279817424936971&q=Highest%20Paying%20Municipal%20Bonds&r=m&sct=ID%3Dccd1c10817fb98fc%3AT%3D1742468590%3ART%3D1742468590%3AS%3DALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ&sc_status=6&hl=en&cpp=3%3A&ivt=0&rpbu=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fekw%3D2%26rlh%3D7e46341b693c5abac1fd1ae228c49282%26plh%3D7b42863eb113ccfa5c5a8f5fb181b843%26g_ci%3D522024662%26g_ai%3D1322714951442889%26g_de%3Dc%26smah%3DK6855i5%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%253F%2BVisit%2BHere%2521%26smest%3DEubu0w2PmuEXr9idBKWn5g%253D%253D%26sm_tsh%3DXLpqKMn9JKsCfP9WDkWWBhV%252FffEUfhWyC55n8ieCOiM%253D%26smssid%3D1&rpqp=s&ie=utf-8&oe=utf-8&type=0&afdt=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&fexp=21404%2C17301437%2C17301438%2C17301442%2C17301548%2C17301266%2C72717107&format=n2%7Cn2&ad=n4&nocache=3911742468604603&num=0&output=uds_ads_only&v=3&bsl=8&pac=0&u_his=2&u_tz=-240&dt=1742468604604&u_w=1280&u_h=1024&biw=1280&bih=897&psw=1280&psh=897&frm=0&uio=--&cont=afscontainer1%7Cafscontainer2&drt=0&jsid=csa&nfp=1&jsv=735462593&rurl=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fekw%3D1%26rlh%3D7b42863eb113ccfa5c5a8f5fb181b843%26plh%3D7b42863eb113ccfa5c5a8f5fb181b843%26sm_tsh%3DXLpqKMn9JKsCfP9WDkWWBhV%2FffEUfhWyC55n8ieCOiM%253D%26smssid%3D1%26smest%3DEubu0w2PmuEXr9idBKWn5g%253D%253D%26g_ci%3D522024662%26g_ai%3D1322714951442889%26g_de%3Dc%26smah%3DK6855i5%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%3F%2BVisit%2BHere!%26msclkid%3D47041b22e1201636e3727cf914fe725e%26s%3DHighest%2BPaying%2BMunicipal%2BBonds%26rsToken%3DChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Fww01.camsoline.com%252F%26nm%3D5%26nx%3D223%26ny%3D27%26is%3D728x512%26clkt%3D2&referer=https%3A%2F%2Fsyndicatedsearch.goog%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g
Source: global traffic	HTTP traffic detected: GET /api/get?wn-wid=al.-3015&dt=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%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&ctwcf=QXJiUGx1Z2luLkNlbnRyYWxDb25maWcvTUcvUlM0Qy9TaGFyZWRTZXR0aW5ncy93aWRnZXRfZGVm&term=Highest+Paying+Municipal+Bonds&lg=1&load_html=1 HTTP/1.1Host: faqsstreet.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=85356&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F&o=1742468604913&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=133&dv=15& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /spx/logM/?&dt=eyJsb2dfdHlwZSI6ImFkX2Jsb2NrX2ltcHJlc3Npb24iLCJzdGF0dXMiOiJzdWNjZXNzIiwibG9nX2hhc2giOiI3ZTQ2MzQxYjY5M2M1YWJhYzFmZDFhZTIyOGM0OTI4MiIsImtleV92YWx1ZSI6IjdlNDYzNDFiNjkzYzVhYmFjMWZkMWFlMjI4YzQ5MjgyIiwia2Fma2FfdG9waWNfbmFtZSI6IlNWLUVWRU5UX0FQUExJQ0FUSU9OX0xPR1MifQ== HTTP/1.1Host: faqsstreet.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.1.1742468603.0.0.0; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.1.1742468604.0.0.0; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __cmpcccx85356=aCQOl5vhAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga=GA1.2.1691318616.1742468591
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/right_chevron_icon.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/get?wn-wid=al.-3015&dt=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%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&ctwcf=QXJiUGx1Z2luLkNlbnRyYWxDb25maWcvTUcvUlM0Qy9TaGFyZWRTZXR0aW5ncy93aWRnZXRfZGVm&term=Highest+Paying+Municipal+Bonds&lg=1&load_html=1 HTTP/1.1Host: faqsstreet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.1.1742468604.0.0.0; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __cmpcccx85356=aCQOl5vhAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.1.1742468604.0.0.0
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=85356&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F&o=1742468604913&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=133&dv=15& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/right_chevron_icon.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spx/logM/?&dt=eyJsb2dfdHlwZSI6ImFkX2Jsb2NrX2ltcHJlc3Npb24iLCJzdGF0dXMiOiJzdWNjZXNzIiwibG9nX2hhc2giOiI3ZTQ2MzQxYjY5M2M1YWJhYzFmZDFhZTIyOGM0OTI4MiIsImtleV92YWx1ZSI6IjdlNDYzNDFiNjkzYzVhYmFjMWZkMWFlMjI4YzQ5MjgyIiwia2Fma2FfdG9waWNfbmFtZSI6IlNWLUVWRU5UX0FQUExJQ0FUSU9OX0xPR1MifQ== HTTP/1.1Host: faqsstreet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.1.1742468604.0.0.0; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __cmpcccx85356=aCQOl5vhAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.1.1742468604.0.0.0
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=pub-8279817424936971&output=uds_ads_only&zx=go7ylpsp1yv6&cd_fexp=72717107&aqid=_fXbZ6_PO5KWnboPiIjo4Aw&psid=2389368831&pbt=bs&adbx=325.5&adby=170.984375&adbh=416&adbw=614&adbah=416&adbn=master-1&eawp=partner-pub-8279817424936971&errv=735462593&csala=26%7C31%7C1090%7C3%7C35&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=pub-8279817424936971&output=uds_ads_only&zx=qiguxc2qxsbp&cd_fexp=72717107&aqid=_fXbZ6_PO5KWnboPiIjo4Aw&psid=2389368831&pbt=bv&adbx=325.5&adby=170.984375&adbh=416&adbw=614&adbah=416&adbn=master-1&eawp=partner-pub-8279817424936971&errv=735462593&csala=26%7C31%7C1090%7C3%7C35&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=pub-8279817424936971&output=uds_ads_only&zx=2pl89yixs49w&cd_fexp=72717107&aqid=_fXbZ6_PO5KWnboPiIjo4Aw&psid=2389368831&pbt=bs&adbx=325.5&adby=1069.984375&adbh=674&adbw=614&adbah=284%2C390&adbn=slave-1-1&eawp=partner-pub-8279817424936971&errv=735462593&csala=197%7C0%7C1090%7C3%7C191&lle=0&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a8f5fb181b843&sm_tsh=XLpqKMn9JKsCfP9WDkWWBhV/ffEUfhWyC55n8ieCOiM%3D&smssid=1&smest=Eubu0w2PmuEXr9idBKWn5g%3D%3D&g_ci=522024662&g_ai=1322714951442889&g_de=c&smah=K6855i5&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725e&s=Highest+Paying+Municipal+Bonds&rsToken=ChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw&pcsa=false&nb=0&rurl=http%3A%2F%2Fww01.camsoline.com%2F&nm=5&nx=223&ny=27&is=728x512&clkt=2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spx/logPerfData HTTP/1.1Host: faqsstreet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.1.1742468604.0.0.0; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __cmpcccx85356=aCQOl5vhAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.1.1742468604.0.0.0
Source: global traffic	HTTP traffic detected: GET /lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE HTTP/1.1Host: www.fmsbonds.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/popup-plugin-phone-collector/popup-plugin-phone-collector.css?ver=6.7.2 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-foundation-shortcodes-edited/styles/foundation-icons.css?ver=6.7.2 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/author-box-for-divi/css/author.css?ver=6.7.2 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/et-cache/226936/et-divi-dynamic-226936-late.css?ver=1741027577 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.2/css/all.min.css?ver=6.7.2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/fms-site-theme/style.css?ver=4.27.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /PROD/wp-content/uploads/2022/06/11180330/white-logo.png HTTP/1.1Host: fmsbonds-wpoffload.s3.amazonaws.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/et-cache/226936/et-core-unified-deferred-226936.min.css?ver=1741027577 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/shortcode-for-current-date/dist/script.js?ver=6.7.2 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/fms-site-theme/scripts/script.js?ver=6.7.2 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/et-cache/226936/et-divi-dynamic-226936-late.css HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /PROD/wp-content/uploads/2022/06/11180330/white-logo.png HTTP/1.1Host: fmsbonds-wpoffload.s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PROD/wp-content/uploads/2022/12/06150759/Get-Muni-Bonds-That-Make-Sense-to-You.jpg HTTP/1.1Host: fmsbonds-wpoffload.s3.amazonaws.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/divi-responsive-helper/assets/public/js/misc.min.js?ver=2.5.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/masks-form-fields/includes/js/jquery.mask.min.js?ver=v1.14.16 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Lf36wcaAAAAAB5Y9xfsKAx5BvnicaULbB5whTot&ver=3.0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/masks-form-fields/includes/js/scripts.js?ver=1.11.1 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wpcf7-redirect/js/wpcf7-redirect-script.js HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20.3 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.27.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=6.0.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/divi-toolbox/assets/js/toolbox-scripts.js?ver=1.7.4 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==
Source: global traffic	HTTP traffic detected: GET /PROD/wp-content/uploads/2022/12/06150759/Get-Muni-Bonds-That-Make-Sense-to-You.jpg HTTP/1.1Host: fmsbonds-wpoffload.s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.7.2 HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==; _gcl_aw=GCL.1742468620.EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE; _gcl_gs=2.1.k5$i1742468615$u194404666; _gcl_au=1.1.2017591375.1742468620
Source: global traffic	HTTP traffic detected: GET /companies/741688758/8e0cd69bf634ac8ee2d6/12/swap.js HTTP/1.1Host: cdn.callrail.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-json/contact-form-7/v1/contact-forms/226935/feedback/schema HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, /;q=0.1sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==; _gcl_aw=GCL.1742468620.EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE; _gcl_gs=2.1.k5$i1742468615$u194404666; _gcl_au=1.1.2017591375.1742468620; calltrk_referrer=https%3A//syndicatedsearch.goog/; calltrk_landing=https%3A//www.fmsbonds.com/lp-get-muni-bonds/%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE
Source: global traffic	HTTP traffic detected: GET /td/rul/1072554850?random=1742468620638&cv=11&fst=1742468620638&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je53i1h1v878563733z876770584za200zb76770584&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102788824~102813109~102814060~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.fmsbonds.com%2Flp-get-muni-bonds%2F%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=Get%20Muni%20Bonds%20That%20Make%20Sense%20For%20You%20-%20FMSBonds.com&npa=0&pscdl=noapi&auid=2017591375.1742468620&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-YV48LN7LJN&gacid=1955778790.1742468621&gtm=45je53i1h1v878563733z876770584za200zb76770584&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102813109~102814060~102879719&z=1699791022 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tag/uet/4047174 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /group/0/8e0cd69bf634ac8ee2d6/12/icap.js?t=1742468621017&ga=GA1.1.1955778790.1742468621&GoogleAnalytics4__ga=GA1.1.1955778790.1742468621&GoogleAnalytics4__ga_YV48LN7LJN=GS1.1.1742468620.1.0.1742468620.60.0.0&uuid=234dd56a-aef6-4c15-ad73-578e950f238d&ids%5B%5D=741688758 HTTP/1.1Host: js.callrail.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /group/0/8e0cd69bf634ac8ee2d6/12/icap.js?t=1742468621188&ga=GA1.1.1955778790.1742468621&GoogleAnalytics4__ga=GA1.1.1955778790.1742468621&GoogleAnalytics4__ga_YV48LN7LJN=GS1.1.1742468620.1.0.1742468620.60.0.0&uuid=234dd56a-aef6-4c15-ad73-578e950f238d&ids%5B%5D=741688758 HTTP/1.1Host: js.callrail.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1072554850/?random=1742468620638&cv=11&fst=1742468400000&bg=ffffff&guid=ON&async=1&gtm=45je53i1h1v878563733z876770584za200zb76770584&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102788824~102813109~102814060~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.fmsbonds.com%2Flp-get-muni-bonds%2F%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=Get%20Muni%20Bonds%20That%20Make%20Sense%20For%20You%20-%20FMSBonds.com&npa=0&pscdl=noapi&auid=2017591375.1742468620&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCjtLzMgxgUA0Mu658Ilayr0vmIy2kFeLc6CPJ14WAjUjxwX1cNIgVt&random=215950183&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Lf36wcaAAAAAB5Y9xfsKAx5BvnicaULbB5whTot&co=aHR0cHM6Ly93d3cuZm1zYm9uZHMuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=nkx9sg754lfj HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/protected-auction/v1/public-keys HTTP/1.1Host: publickeyservice.pa.aws.privacysandboxservices.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/protected-auction/v1/public-keys HTTP/1.1Host: publickeyservice.pa.gcp.privacysandboxservices.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.8.1/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CLID=568cd4d754eb4623bc2b4d77be5bbd93.20250320.20260320
Source: global traffic	HTTP traffic detected: GET /group/0/8e0cd69bf634ac8ee2d6/12/swap_session.json HTTP/1.1Host: js.callrail.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1072554850/?random=1742468620638&cv=11&fst=1742468400000&bg=ffffff&guid=ON&async=1&gtm=45je53i1h1v878563733z876770584za200zb76770584&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102788824~102813109~102814060~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.fmsbonds.com%2Flp-get-muni-bonds%2F%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=Get%20Muni%20Bonds%20That%20Make%20Sense%20For%20You%20-%20FMSBonds.com&npa=0&pscdl=noapi&auid=2017591375.1742468620&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCjtLzMgxgUA0Mu658Ilayr0vmIy2kFeLc6CPJ14WAjUjxwX1cNIgVt&random=215950183&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-json/contact-form-7/v1/contact-forms/226935/feedback/schema HTTP/1.1Host: www.fmsbonds.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==; _gcl_gs=2.1.k5$i1742468615$u194404666; _gcl_au=1.1.2017591375.1742468620; calltrk_referrer=https%3A//syndicatedsearch.goog/; calltrk_landing=https%3A//www.fmsbonds.com/lp-get-muni-bonds/%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE; calltrk_session_id=234dd56a-aef6-4c15-ad73-578e950f238d; _gcl_aw=GCL.1742468621.EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE; _ga_YV48LN7LJN=GS1.1.1742468620.1.0.1742468620.60.0.0; _ga=GA1.1.1955778790.1742468621; _uetsid=fb484ff0057a11f08fac672eb3a16ca6; _uetvid=fb48c340057a11f0806253230e4d6f5f
Source: global traffic	HTTP traffic detected: GET /group/0/8e0cd69bf634ac8ee2d6/12/swap_session.json HTTP/1.1Host: js.callrail.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89 HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: /X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerSec-Fetch-Storage-Access: activeReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf36wcaAAAAAB5Y9xfsKAx5BvnicaULbB5whTot&co=aHR0cHM6Ly93d3cuZm1zYm9uZHMuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=nkx9sg754lfjUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6Lf36wcaAAAAAB5Y9xfsKAx5BvnicaULbB5whTot HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALcxeyrIFwCSiQUC2X2ncCOD5BjEj_mMBVK9YmNTBA2SOTRNvdrim-b6fZTWWjlozfAHIA-A_mtoucF0CBP3jso
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.fmsbonds.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.fmsbonds.com/lp-get-muni-bonds/?so=google&kw=highest%20paying%20tax%20free%20bonds&ad=571025970128&ty=search&mt=p&pt=\|&ap=&dt=c\|&gad_source=5&gclid=EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==; _gcl_gs=2.1.k5$i1742468615$u194404666; _gcl_au=1.1.2017591375.1742468620; calltrk_referrer=https%3A//syndicatedsearch.goog/; calltrk_landing=https%3A//www.fmsbonds.com/lp-get-muni-bonds/%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE; calltrk_session_id=234dd56a-aef6-4c15-ad73-578e950f238d; _gcl_aw=GCL.1742468621.EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE; _ga_YV48LN7LJN=GS1.1.1742468620.1.0.1742468620.60.0.0; _ga=GA1.1.1955778790.1742468621; _uetsid=fb484ff0057a11f08fac672eb3a16ca6; _uetvid=fb48c340057a11f0806253230e4d6f5f; _clck=uiplsm%7C2%7Cfud%7C0%7C1905; _clsk=4sqtwj%7C1742468623127%7C1%7C1%7Ca.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /c.gif HTTP/1.1Host: c.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/clr?k=6Lf36wcaAAAAAB5Y9xfsKAx5BvnicaULbB5whTot HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALcxeyrIFwCSiQUC2X2ncCOD5BjEj_mMBVK9YmNTBA2SOTRNvdrim-b6fZTWWjlozfAHIA-A_mtoucF0CBP3jso
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.fmsbonds.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2fnpvvi4tqh5g30q5eo4o2qbcv; visid_incap_1651094=vPC+kLQYT4mAxolDBj6tyAj222cAAAAAQUIPAAAAAAA4YFb4l1Oz8uyOYQefynZC; incap_ses_159_1651094=96YdWnKUSEgQl5sx7uE0Agn222cAAAAAi6T0pD4tl4MRxY4CAI8RSA==; _gcl_gs=2.1.k5$i1742468615$u194404666; _gcl_au=1.1.2017591375.1742468620; calltrk_referrer=https%3A//syndicatedsearch.goog/; calltrk_landing=https%3A//www.fmsbonds.com/lp-get-muni-bonds/%3Fso%3Dgoogle%26kw%3Dhighest%2520paying%2520tax%2520free%2520bonds%26ad%3D571025970128%26ty%3Dsearch%26mt%3Dp%26pt%3D%7C%26ap%3D%26dt%3Dc%7C%26gad_source%3D5%26gclid%3DEAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE; calltrk_session_id=234dd56a-aef6-4c15-ad73-578e950f238d; _gcl_aw=GCL.1742468621.EAIaIQobChMI78GqssGYjAMVEktHAR0IBBrMEAAYASAAEgK-tvD_BwE; _ga_YV48LN7LJN=GS1.1.1742468620.1.0.1742468620.60.0.0; _ga=GA1.1.1955778790.1742468621; _uetsid=fb484ff0057a11f08fac672eb3a16ca6; _uetvid=fb48c340057a11f0806253230e4d6f5f; _clck=uiplsm%7C2%7Cfud%7C0%7C1905; _clsk=4sqtwj%7C1742468623127%7C1%7C1%7Ca.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/clr?k=6Lf36wcaAAAAAB5Y9xfsKAx5BvnicaULbB5whTot HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALcxeyrIFwCSiQUC2X2ncCOD5BjEj_mMBVK9YmNTBA2SOTRNvdrim-b6fZTWWjlozfAHIA-A_mtoucF0CBP3jso
Source: global traffic	HTTP traffic detected: GET /c.gif?ctsa=mr&CtsSyncId=0B2430462E074D27B035AE20C3EBD657&MUID=1F0CBE5469EB676B0B93ABE1683F66DD HTTP/1.1Host: c.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.fmsbonds.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: SM=T; MUID=2024E4ECCCE169BC0699F159C8E16719
Source: global traffic	HTTP traffic detected: GET /c.gif?ctsa=mr&CtsSyncId=0B2430462E074D27B035AE20C3EBD657&MUID=1F0CBE5469EB676B0B93ABE1683F66DD HTTP/1.1Host: c.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: SM=C; MUID=1F0CBE5469EB676B0B93ABE1683F66DD; MR=0; ANONCHK=0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: camsapi.camsoline.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bzISbVNPg.js HTTP/1.1Host: camsapi.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://camsapi.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060
Source: global traffic	HTTP traffic detected: GET /_fd HTTP/1.1Host: camsapi.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060
Source: global traffic	HTTP traffic detected: GET /_zc HTTP/1.1Host: camsapi.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ
Source: global traffic	HTTP traffic detected: GET /_tr HTTP/1.1Host: camsapi.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ
Source: global traffic	HTTP traffic detected: GET /?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I HTTP/1.1Host: ww01.camsoline.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://camsapi.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ
Source: global traffic	HTTP traffic detected: GET /px.js?ch=1 HTTP/1.1Host: ww01.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387IAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725
Source: global traffic	HTTP traffic detected: GET /px.js?ch=2 HTTP/1.1Host: ww01.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387IAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387IAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/arrrow.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Origin: http://ww01.camsoline.comAccept: /Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Origin: http://ww01.camsoline.comAccept: /Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff2 HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Origin: http://ww01.camsoline.comAccept: /Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/arrrow.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww01.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387IAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725; __cmpcccx68884=aCQOl5o-AA-MBdpiY1k0GNWplGiMoIxRpqTGFZQWAaEIwVoYDOiClejCAGGGO-nmkUwzrzNYhdE_SBG9EJfNwkRuJKO8Kinm
Source: global traffic	HTTP traffic detected: GET /Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU%2FI%2B5a%2BdxyaD%2FUHIAY%2B0wrXGYZHoFs4LldJ659vlwddZ9KVNZRoBgT5RBWhLxnKDM5hCPzJhEU36RmOUuK0qLn%2FVo8REvupHcQsD30gEPaShvymU61k97iofGb14YG5JhWt2oiZ9ErAaP%2BvtoRrCugFWJQmJY%2BnXZzPrUIJWZqYMoZHFgfdiVtepN4rcPJD5K0dBdTkClC5Y3CTeHJM5Wp2LEnJMwYDCyp5Dmi%2F3AuhvMWF%2FBv6LgNnJPuWZvdlVNSf93gC4g4zPb5RzcyPeQQohY1aOyXsMQ%2FU2jj4R8AZDnsiO0UpDq3BPycjqsMQT7dk%2FPi1XjI65mWISIX87QZZAtp7TicuOnqDLKOTclsCjCR55K26jr3QwdUR9c6vqStfzo2TlRKYnKFfdpt4BzXz2pk5s17p%2Bx25f5yhHy9v1Rse6HlgEtQYNIX%2Fsw9bg9HBn7cQzMFtc6s3XlHLBQRd2YPgtwpzyhm4z2fVyRfTW8sdg1t9TKPbv96caGyniah1JtcijLG0ZR6XoS0laRPdSrbWzyDbw%2Bs0Bxzje9bQnMzcSJGj6aD%2BXj4tHzfwysd8bKISwiBYNBlCdOEYHKyoJHhpcICgrFSwum%2BtmRFvBAlf3y4ImF0EMI1AbiQqZBL9KrgvBmxBy6xrm3heiRIoUwMtmCbIRaPV4fWrAxf8Ut2PLnlRXF7dgMlYqmYaXxWfn%2BBL5%2FAMNOE7UYkCSsUohlg8sbkzT1xTQ3fOxNFLzkTqNA8PyLohmff2WYBMmhFvN70aBGEs79yl5cTJi1OD2IoOMUARC5vbe9x%2BILHl0cSCpJnzeZqPQ22ajDM%2FO4sC2n29JjXEgx%2FK8A0BNBkU%2BIkIVW%2FTCXvYWWcFY48%2BKpcKnr6VA5JBBu0W8p8Gc26RyxpnuSmmP8bKJDVP0kqy41uZ2xB6Dzi9Hk3FQd17mCxh52wQl8MCLuglqh7dGgVB4TdPUrkAjuDdvFPS4fNarD7bcLJlz1B9UZt5RMNzhUA1aVRK5VqMrBKjOXB9vIavfVMb5utQuBPHp7uUhw5f5eKh%2FkbhSezp74EYcySLszrVJ%2Fj1e35xKREqreyDbMhAMW1QehbqD3q4WHanPT49blqD%2BiCtm4%2BBoQNrK%2BYtpmnpKSWUJqNF1Lni5eb2Q%2B3YV7nNkQtK1dfc&gtnp=0&gtpp=0&tp1=658efe83-b969-4d8f-a3b8-227fc2a18060&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=WbDrrPAiM7rnYuSye2wBP0JYcQoqb9p9etRrIDsZJ5s%3D&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&gtnp=0&gtpp=0&kt=210&&kbc=4261&ki=127309641&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230%23645%23217 HTTP/1.1Host: ww01.camsoline.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b
Source: global traffic	HTTP traffic detected: GET /px.js?ch=1 HTTP/1.1Host: ww01.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU%2FI%2B5a%2BdxyaD%2FUHIAY%2B0wrXGYZHoFs4LldJ659vlwddZ9KVNZRoBgT5RBWhLxnKDM5hCPzJhEU36RmOUuK0qLn%2FVo8REvupHcQsD30gEPaShvymU61k97iofGb14YG5JhWt2oiZ9ErAaP%2BvtoRrCugFWJQmJY%2BnXZzPrUIJWZqYMoZHFgfdiVtepN4rcPJD5K0dBdTkClC5Y3CTeHJM5Wp2LEnJMwYDCyp5Dmi%2F3AuhvMWF%2FBv6LgNnJPuWZvdlVNSf93gC4g4zPb5RzcyPeQQohY1aOyXsMQ%2FU2jj4R8AZDnsiO0UpDq3BPycjqsMQT7dk%2FPi1XjI65mWISIX87QZZAtp7TicuOnqDLKOTclsCjCR55K26jr3QwdUR9c6vqStfzo2TlRKYnKFfdpt4BzXz2pk5s17p%2Bx25f5yhHy9v1Rse6HlgEtQYNIX%2Fsw9bg9HBn7cQzMFtc6s3XlHLBQRd2YPgtwpzyhm4z2fVyRfTW8sdg1t9TKPbv96caGyniah1JtcijLG0ZR6XoS0laRPdSrbWzyDbw%2Bs0Bxzje9bQnMzcSJGj6aD%2BXj4tHzfwysd8bKISwiBYNBlCdOEYHKyoJHhpcICgrFSwum%2BtmRFvBAlf3y4ImF0EMI1AbiQqZBL9KrgvBmxBy6xrm3heiRIoUwMtmCbIRaPV4fWrAxf8Ut2PLnlRXF7dgMlYqmYaXxWfn%2BBL5%2FAMNOE7UYkCSsUohlg8sbkzT1xTQ3fOxNFLzkTqNA8PyLohmff2WYBMmhFvN70aBGEs79yl5cTJi1OD2IoOMUARC5vbe9x%2BILHl0cSCpJnzeZqPQ22ajDM%2FO4sC2n29JjXEgx%2FK8A0BNBkU%2BIkIVW%2FTCXvYWWcFY48%2BKpcKnr6VA5JBBu0W8p8Gc26RyxpnuSmmP8bKJDVP0kqy41uZ2xB6Dzi9Hk3FQd17mCxh52wQl8MCLuglqh7dGgVB4TdPUrkAjuDdvFPS4fNarD7bcLJlz1B9UZt5RMNzhUA1aVRK5VqMrBKjOXB9vIavfVMb5utQuBPHp7uUhw5f5eKh%2FkbhSezp74EYcySLszrVJ%2Fj1e35xKREqreyDbMhAMW1QehbqD3q4WHanPT49blqD%2BiCtm4%2BBoQNrK%2BYtpmnpKSWUJqNF1Lni5eb2Q%2B3YV7nNkQtK1dfc&gtnp=0&gtpp=0&tp1=658efe83-b969-4d8f-a3b8-227fc2a18060&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=WbDrrPAiM7rnYuSye2wBP0JYcQoqb9p9etRrIDsZJ5s%3D&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&gtnp=0&gtpp=0&kt=210&&kbc=4261&ki=127309641&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230%23645%23217Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725; __c
Source: global traffic	HTTP traffic detected: GET /px.js?ch=2 HTTP/1.1Host: ww01.camsoline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU%2FI%2B5a%2BdxyaD%2FUHIAY%2B0wrXGYZHoFs4LldJ659vlwddZ9KVNZRoBgT5RBWhLxnKDM5hCPzJhEU36RmOUuK0qLn%2FVo8REvupHcQsD30gEPaShvymU61k97iofGb14YG5JhWt2oiZ9ErAaP%2BvtoRrCugFWJQmJY%2BnXZzPrUIJWZqYMoZHFgfdiVtepN4rcPJD5K0dBdTkClC5Y3CTeHJM5Wp2LEnJMwYDCyp5Dmi%2F3AuhvMWF%2FBv6LgNnJPuWZvdlVNSf93gC4g4zPb5RzcyPeQQohY1aOyXsMQ%2FU2jj4R8AZDnsiO0UpDq3BPycjqsMQT7dk%2FPi1XjI65mWISIX87QZZAtp7TicuOnqDLKOTclsCjCR55K26jr3QwdUR9c6vqStfzo2TlRKYnKFfdpt4BzXz2pk5s17p%2Bx25f5yhHy9v1Rse6HlgEtQYNIX%2Fsw9bg9HBn7cQzMFtc6s3XlHLBQRd2YPgtwpzyhm4z2fVyRfTW8sdg1t9TKPbv96caGyniah1JtcijLG0ZR6XoS0laRPdSrbWzyDbw%2Bs0Bxzje9bQnMzcSJGj6aD%2BXj4tHzfwysd8bKISwiBYNBlCdOEYHKyoJHhpcICgrFSwum%2BtmRFvBAlf3y4ImF0EMI1AbiQqZBL9KrgvBmxBy6xrm3heiRIoUwMtmCbIRaPV4fWrAxf8Ut2PLnlRXF7dgMlYqmYaXxWfn%2BBL5%2FAMNOE7UYkCSsUohlg8sbkzT1xTQ3fOxNFLzkTqNA8PyLohmff2WYBMmhFvN70aBGEs79yl5cTJi1OD2IoOMUARC5vbe9x%2BILHl0cSCpJnzeZqPQ22ajDM%2FO4sC2n29JjXEgx%2FK8A0BNBkU%2BIkIVW%2FTCXvYWWcFY48%2BKpcKnr6VA5JBBu0W8p8Gc26RyxpnuSmmP8bKJDVP0kqy41uZ2xB6Dzi9Hk3FQd17mCxh52wQl8MCLuglqh7dGgVB4TdPUrkAjuDdvFPS4fNarD7bcLJlz1B9UZt5RMNzhUA1aVRK5VqMrBKjOXB9vIavfVMb5utQuBPHp7uUhw5f5eKh%2FkbhSezp74EYcySLszrVJ%2Fj1e35xKREqreyDbMhAMW1QehbqD3q4WHanPT49blqD%2BiCtm4%2BBoQNrK%2BYtpmnpKSWUJqNF1Lni5eb2Q%2B3YV7nNkQtK1dfc&gtnp=0&gtpp=0&tp1=658efe83-b969-4d8f-a3b8-227fc2a18060&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=WbDrrPAiM7rnYuSye2wBP0JYcQoqb9p9etRrIDsZJ5s%3D&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&gtnp=0&gtpp=0&kt=210&&kbc=4261&ki=127309641&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230%23645%23217Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725; __c
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU%2FI%2B5a%2BdxyaD%2FUHIAY%2B0wrXGYZHoFs4LldJ659vlwddZ9KVNZRoBgT5RBWhLxnKDM5hCPzJhEU36RmOUuK0qLn%2FVo8REvupHcQsD30gEPaShvymU61k97iofGb14YG5JhWt2oiZ9ErAaP%2BvtoRrCugFWJQmJY%2BnXZzPrUIJWZqYMoZHFgfdiVtepN4rcPJD5K0dBdTkClC5Y3CTeHJM5Wp2LEnJMwYDCyp5Dmi%2F3AuhvMWF%2FBv6LgNnJPuWZvdlVNSf93gC4g4zPb5RzcyPeQQohY1aOyXsMQ%2FU2jj4R8AZDnsiO0UpDq3BPycjqsMQT7dk%2FPi1XjI65mWISIX87QZZAtp7TicuOnqDLKOTclsCjCR55K26jr3QwdUR9c6vqStfzo2TlRKYnKFfdpt4BzXz2pk5s17p%2Bx25f5yhHy9v1Rse6HlgEtQYNIX%2Fsw9bg9HBn7cQzMFtc6s3XlHLBQRd2YPgtwpzyhm4z2fVyRfTW8sdg1t9TKPbv96caGyniah1JtcijLG0ZR6XoS0laRPdSrbWzyDbw%2Bs0Bxzje9bQnMzcSJGj6aD%2BXj4tHzfwysd8bKISwiBYNBlCdOEYHKyoJHhpcICgrFSwum%2BtmRFvBAlf3y4ImF0EMI1AbiQqZBL9KrgvBmxBy6xrm3heiRIoUwMtmCbIRaPV4fWrAxf8Ut2PLnlRXF7dgMlYqmYaXxWfn%2BBL5%2FAMNOE7UYkCSsUohlg8sbkzT1xTQ3fOxNFLzkTqNA8PyLohmff2WYBMmhFvN70aBGEs79yl5cTJi1OD2IoOMUARC5vbe9x%2BILHl0cSCpJnzeZqPQ22ajDM%2FO4sC2n29JjXEgx%2FK8A0BNBkU%2BIkIVW%2FTCXvYWWcFY48%2BKpcKnr6VA5JBBu0W8p8Gc26RyxpnuSmmP8bKJDVP0kqy41uZ2xB6Dzi9Hk3FQd17mCxh52wQl8MCLuglqh7dGgVB4TdPUrkAjuDdvFPS4fNarD7bcLJlz1B9UZt5RMNzhUA1aVRK5VqMrBKjOXB9vIavfVMb5utQuBPHp7uUhw5f5eKh%2FkbhSezp74EYcySLszrVJ%2Fj1e35xKREqreyDbMhAMW1QehbqD3q4WHanPT49blqD%2BiCtm4%2BBoQNrK%2BYtpmnpKSWUJqNF1Lni5eb2Q%2B3YV7nNkQtK1dfc&gtnp=0&gtpp=0&tp1=658efe83-b969-4d8f-a3b8-227fc2a18060&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=WbDrrPAiM7rnYuSye2wBP0JYcQoqb9p9etRrIDsZJ5s%3D&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&gtnp=0&gtpp=0&kt=210&&kbc=4261&ki=127309641&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230%23645%23217Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Origin: http://ww01.camsoline.comAccept: /Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Origin: http://ww01.camsoline.comAccept: /Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Origin: http://ww01.camsoline.comAccept: /Referer: http://ww01.camsoline.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trf?q=Mutual+Fund+Statements&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9NGVjdjdsMWp0bnRldSZ1dD0xNzQyNDY4NTc0NTI5JnVvPTgyNjY5OTE4MjAxNDI0Jmx0PTImcz0yJmVzPU1WZWVrMnU3ZWFpb0VWN1ZWMkZWSGpRam1EQkRWSG0xV1JMSDFabDc4WUNQcHVfbVJfSENVV2FiUy5nd1hLNzllQ0FjcUdqekh5dGdjdy0t%2FRV%3D2%2FRE%3D1745060574%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8Z0xqyFQWWD8wvkV_pKc9xzVUCUwD03gwyY1vECbRsDCKDouj8T-oZnVsUa06PP0LdkkYkee1dIjotDq6SySIzKXTJDLffUTCfWQ2dFNWWV_MtVEpjUoifon6irH4fdSYNUiZlbbYaBJzTTn8f_OY_67dtwPIERyfL-sXBXQ6GluFPluX%2526u%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%2526rlid%253d47041b22e1201636e3727cf914fe725e%2FRK%3D2%2FRS%3DpeKwmQHJMij2Xe9FqnW048yqJ8U-&o=zRzysTqoVt%2BkH9%2Fg3A%2FWk7Zdw0hcRENGO8leFwv5xiil2J8PJP2V%2FBon0VQQEIbKvSrXpXZIjJBorzejp3lnvQOBGT%2Bsg7jB4eR2IRlW9xSG6WFQ%2BOkuk5kbbmTHXE7OH7oXcbSu7PljcCsgTQTY7eXxwz0JN0MhNSBC49SipPwvFa6VseKGCL%2FMTUjtJhz%2Buvg4Fi7j8fi0VHvwkUG%2BjAASRDgDj95P6tbh3byAJ%2FQr4x%2BXttyKkPKKCZ87TKSqcmRk6b5qGrLF84gTVw%2BNQs0e6XFS5cMQXFALmBwf4kVcfSu9wnWKVSnHZzJUEe%2BJV3Ag86n79FYngFiFPLLFD3Jh4%2BAnIQfEBdDIgOoJZIXDJYE5uGF76R%2FCUPj4oUKil6akp6YeA1mGxtcQ3rGHTZlZO3BxbBsvOS2QDnSz7dXLxbjfLgRCBNglhsuRTc3iHEI3OE6cSY3LICWbOfLWXZVMjbFic1gKSxJMVHzE%2B63SEVI%2FdYWcq%2FdxWNdO6ixySN7AQzlRkImxwHVFwYFFZAzH%2FP%2Fnu2BVTv9Jd7kvweSjcVm3peA4AjIm7p1qmVgrKdghu3sD0X5%2BC%2BVrCtKMH2Ym0s4Uy3E6T2eVAEqdEhICdjTOkE48aIkzOz%2F6rV9b0SrxOCpfGcciSF%2Bj%2B8fpMQ%3D%3D&c=210449001417002776731313&n=Zys2kjGBEq6BIhhRl0qQgpabi%2BCCUwKNW4zmX91on8WhP5cCYXRXIr4GC7hkMksZ%2FYxl3ZRvi529L0pOiE0Yb9AKZOmbfd181lKwp4ZzurnoCYkjYennRYqV0cSvkUpYjWgJFy5gH7Ty0KswFLHmtmeGw9anLLKFBKG1MZbQvCdwS9kfAPnoQnwISE4N%2BnD0Wl2ZJUXqreSCvkmkKsZxtdIKCbC2ggCs1Gs%2FIy%2BbV424KhhRYsBP%2FyLVyOM9mcmosyeANltsSTCsFcZgEnSz42rPw6sfgYDMVFYRF6chzHj%2BpY7UzMCZSDROLFuIM%2Fa0yGKmjnlo10eRG%2FaK7dKPZhsrsoeoZXZsVcMc%2F9hU1dUCMjMsnDoTMIqiumsx8KXkHdP9CeOQHD%2FDdpzpqPrCHFKVN1C76t5etV%2FjjmFv%2FtgPxySHnJUjQEp3j2ot4pZnmTorhWjUJmjALaQiIJTv8zNh73abl1Vph4pu9Yytc6j9xsYBttlHF4AfqNLUMQlY6PdPaxtQXejpfzp3LRRtBh4y%2FtsPsD9eQYqylZvZcM1MtmWW75D65HwGzEseAe3cowspUr32lp5Q3lMSMKhUQ0AK%2FgavsrU%2FNbasG9h0qtVmtf4uek6kHuBWFLurbr1SnYuxpejYyHD69M9PQ%2BFLQlObVBjk%2FYr8%2Fr8U3skUogQEXrCVvRXW8XElIwskUhub%2BRHm5D62XZHqgaP6axkcpR7q1hecaZ%2FSpSjQmIb7os8u7UR25xxJKyOaCjVBaZcSAcEJM2tW6gf7bPMXQNgN%2FS1R7PDmRLlZjpE7mXEZPZ3jtkEM28%2FkMYFQamZwfvFRJtqEhRuyZqBRuI1g2qHxYdH2tuR76UpL1QzCj2aU3z7vBRriM5YYWybLcx51ES4AGlSM%2FN7EbWWJVfGFNik9MFcBR771pF3wNufWShYTvBmuBUXr06pUwbI1MOiNcHI5xcjTEmDrexJp4GC3gKxTcB0ER5tQjoAwtbK%2BqC7WOnsQ1eXKoOYdMPk77j41up2gCKYB

Source: chromecache_225.6.dr	String found in binary or memory: <a href="http://ww01.camsoline.com/trf?q=Mutual+Fund+Statements&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9NGVjdjdsMWp0bnRldSZ1dD0xNzQyNDY4NTc0NTI5JnVvPTc4ODIxNDQ5MjUzNjM4Jmx0PTImcz0yJmVzPV9rblBpUGwzem9OdGtLTUVlLm5zMnN6ZTBxS0RRbWlqbVpVUDVObXJib3NvcWQ5cDRqREUzWnEzS0FpNGVYY1JEUjFDSTVZUEttZ0hLZy0t%2FRV%3D2%2FRE%3D1745060574%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de80dSlvqo1OD2_kjRDH6P3XDVUCUwwYRGN4BCbN5wm44wlzyigwU5U6ssi4Kw14EczYWuZ5sm4bU7HLIzxakgMPiO_L14TNNqBbwoSBsoqJCWufx10y_OCt635viGsYaakdc8T-PuG2gkbbn4Lx5eHcQHeKYja0zKa-Ut1dSKHvWybdvHQ%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cucmFtc2V5c29sdXRpb25zLmNvbSUyZnJldGlyZW1lbnQlMmZzbWFydHZlc3RvciUzZm1zY2xraWQlM2RiMDFkZTdlZjI3MTcxZjc4MGNkNjgwMzRkMmM5NTExYSUyNnV0bV9zb3VyY2UlM2RiaW5nJTI2dXRtX21lZGl1bSUzZGNwYyUyNnV0bV9jYW1wYWlnbiUzZFNtYXJ0VmVzdG9yJTI1MjAtJTI1MjBOb24lMjUyMEJyYW5kZWQlMjZ1dG1fdGVybSUzZG11dHVhbCUyNTIwZnVuZHMlMjUyMGhlbHAlMjZ1dG1fY29udGVudCUzZE11dHVhbCUyNTIwRnVuZHM%2526rlid%253db01de7ef27171f780cd68034d2c9511a%2FRK%3D2%2FRS%3DCblCfZkxFTZ6V_DrVOlS8sgHRrg-&o=zRzysTqoVt%2BkH9%2Fg3A%2FWk7Zdw0hcRENGO8leFwv5xiil2J8PJP2V%2FBon0VQQEIbKvSrXpXZIjJBorzejp3lnvQOBGT%2Bsg7jB4eR2IRlW9xSG6WFQ%2BOkuk5kbbmTHXE7OH7oXcbSu7PljcCsgTQTY7eXxwz0JN0MhNSBC49SipPwvFa6VseKGCL%2FMTUjtJhz%2Buvg4Fi7j8fi0VHvwkUG%2BjAASRDgDj95P6tbh3byAJ%2FQr4x%2BXttyKkPKKCZ87TKSqcmRk6b5qGrLF84gTVw%2BNQs0e6XFS5cMQXFALmBwf4kVcfSu9wnWKVSnHZzJUEe%2BJV3Ag86n79FYngFiFPLLFD3Jh4%2BAnIQfEBdDIgOoJZIXDJYE5uGF76R%2FCUPj4oUKil6akp6YeA1mGxtcQ3rGHTZlZO3BxbBsvOS2QDnSz7dXLxbjfLgRCBNglhsuRTc3iHEI3OE6cSY3LICWbOfLWXZVMjbFic1gKSxJMVHzE%2B63SEVI%2FdYWcq%2FdxWNdO6ixySN7AQzlRkImxwHVFwYFFZAzH%2FP%2Fnu2BVTv9Jd7kvweSjcVm3peA4AjIm7p1qmVgrPVGHjf5psaTNXm9CW6XHt5YAZhcvJ2ov2aaeF8YQPMtj01%2Fmrrtq0HpIV%2Bo%2FU8QDkEhKBxI1dkqS2bA7lY00Vg%3D%3D&c=210449001417002776732482&n=Zys2kjGBEq6BIhhRl0qQgpabi%2BCCUwKNW4zmX91on8WhP5cCYXRXIr4GC7hkMksZ%2FYxl3ZRvi529L0pOiE0Yb9AKZOmbfd181lKwp4ZzurnoCYkjYennRYqV0cSvkUpYjWgJFy5gH7Ty0KswFLHmtmeGw9anLLKFBKG1MZbQvCdwS9kfAPnoQnwISE4N%2BnD0Wl2ZJUXqreSCvkmkKsZxtdIKCbC2ggCs1Gs%2FIy%2BbV424KhhRYsBP%2FyLVyOM9mcmosyeANltsSTCsFcZgEnSz42rPw6sfgYDMVFYRF6chzHj%2BpY7UzMCZSDROLFuIM%2Fa0rlx8e0AzOkdQOarTtmYhAFJAHA9mu9p9DNyehcxmhix3ZtUu1y64AendAjUKFWMPbY183EO4SvMns26%2FXjvh2lQ3GEejtxZhDMtrnZaHsdvUfCRXPrsnxhNU4DFa9IuLG7pq8VpVpn1CmfJ%2BjPFy3HgsXjum8ywh9zLToWFi8oSNp6msAJ0cti2U1u%2FSvs2QaM3b9VkP9u5B5bUcId%2Flv11WOKDkXI3sSY%2F0JC66NMa3Lxk5PbIjtxYCWMn8pJtPEpYNaYolOBbcuMWhdwpFjV8uAd2I6jWnSU0Bxz7CQWDbc6NyUG8nZ%2FT9cFW8sFUIFrxnEo3udSNMkwLts14JmkSKMJucrYTBd2Tai1t%2FHxHK7ttqf44ZN8yHAWZUvw%2Bz0Z95I%2FutL39N%2FUQwrj8JCbN5UkzAbEfxVUzYL5I9aXyZC99pvvQKZXHQxw0AgjUN44%2Bk1Zw1jTKMRIy5cFTrqMZXLR%2FpUkANuYUKfS3AKbFKu66MmWIFhfHyU0wvStmZp%2Bli4TFxCHfThfWT%2B6AWlSpBXVbPZj290x2OvTHEHAQUGECJNaytg2znkNliZqxM%2BYk%2F14i6enwMasQ6gfym0FK3qRJ7TwhWe75VP%2BQ57q5L4ecir94TyrN0ZsCWfu8sKRpC%2BLAxVaAPtEjII4P%2Fotn99%2F%2BceHgOLpu%2BOgjoGGmEo%2BWebR4cRmdw4%2B5pHjftDTfAmHi%2Bp8XbJ3gHGPNut0Qd4uyi71z9vjD%2BneYWbo8tqp1MchUit1WTcIUQimBhfNqUbh7TJ9uZVONrGsH12d83O
Source: chromecache_225.6.dr	String found in binary or memory: <a href="http://ww01.camsoline.com/trf?q=Mutual+Fund+Statements&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9NGVjdjdsMWp0bnRldSZ1dD0xNzQyNDY4NTc0NTI5JnVvPTgyNjY5OTE4MjAxNDI0Jmx0PTImcz0yJmVzPU1WZWVrMnU3ZWFpb0VWN1ZWMkZWSGpRam1EQkRWSG0xV1JMSDFabDc4WUNQcHVfbVJfSENVV2FiUy5nd1hLNzllQ0FjcUdqekh5dGdjdy0t%2FRV%3D2%2FRE%3D1745060574%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8Z0xqyFQWWD8wvkV_pKc9xzVUCUwD03gwyY1vECbRsDCKDouj8T-oZnVsUa06PP0LdkkYkee1dIjotDq6SySIzKXTJDLffUTCfWQ2dFNWWV_MtVEpjUoifon6irH4fdSYNUiZlbbYaBJzTTn8f_OY_67dtwPIERyfL-sXBXQ6GluFPluX%2526u%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%2526rlid%253d47041b22e1201636e3727cf914fe725e%2FRK%3D2%2FRS%3DpeKwmQHJMij2Xe9FqnW048yqJ8U-&o=zRzysTqoVt%2BkH9%2Fg3A%2FWk7Zdw0hcRENGO8leFwv5xiil2J8PJP2V%2FBon0VQQEIbKvSrXpXZIjJBorzejp3lnvQOBGT%2Bsg7jB4eR2IRlW9xSG6WFQ%2BOkuk5kbbmTHXE7OH7oXcbSu7PljcCsgTQTY7eXxwz0JN0MhNSBC49SipPwvFa6VseKGCL%2FMTUjtJhz%2Buvg4Fi7j8fi0VHvwkUG%2BjAASRDgDj95P6tbh3byAJ%2FQr4x%2BXttyKkPKKCZ87TKSqcmRk6b5qGrLF84gTVw%2BNQs0e6XFS5cMQXFALmBwf4kVcfSu9wnWKVSnHZzJUEe%2BJV3Ag86n79FYngFiFPLLFD3Jh4%2BAnIQfEBdDIgOoJZIXDJYE5uGF76R%2FCUPj4oUKil6akp6YeA1mGxtcQ3rGHTZlZO3BxbBsvOS2QDnSz7dXLxbjfLgRCBNglhsuRTc3iHEI3OE6cSY3LICWbOfLWXZVMjbFic1gKSxJMVHzE%2B63SEVI%2FdYWcq%2FdxWNdO6ixySN7AQzlRkImxwHVFwYFFZAzH%2FP%2Fnu2BVTv9Jd7kvweSjcVm3peA4AjIm7p1qmVgrKdghu3sD0X5%2BC%2BVrCtKMH2Ym0s4Uy3E6T2eVAEqdEhICdjTOkE48aIkzOz%2F6rV9b0SrxOCpfGcciSF%2Bj%2B8fpMQ%3D%3D&c=210449001417002776731313&n=Zys2kjGBEq6BIhhRl0qQgpabi%2BCCUwKNW4zmX91on8WhP5cCYXRXIr4GC7hkMksZ%2FYxl3ZRvi529L0pOiE0Yb9AKZOmbfd181lKwp4ZzurnoCYkjYennRYqV0cSvkUpYjWgJFy5gH7Ty0KswFLHmtmeGw9anLLKFBKG1MZbQvCdwS9kfAPnoQnwISE4N%2BnD0Wl2ZJUXqreSCvkmkKsZxtdIKCbC2ggCs1Gs%2FIy%2BbV424KhhRYsBP%2FyLVyOM9mcmosyeANltsSTCsFcZgEnSz42rPw6sfgYDMVFYRF6chzHj%2BpY7UzMCZSDROLFuIM%2Fa0yGKmjnlo10eRG%2FaK7dKPZhsrsoeoZXZsVcMc%2F9hU1dUCMjMsnDoTMIqiumsx8KXkHdP9CeOQHD%2FDdpzpqPrCHFKVN1C76t5etV%2FjjmFv%2FtgPxySHnJUjQEp3j2ot4pZnmTorhWjUJmjALaQiIJTv8zNh73abl1Vph4pu9Yytc6j9xsYBttlHF4AfqNLUMQlY6PdPaxtQXejpfzp3LRRtBh4y%2FtsPsD9eQYqylZvZcM1MtmWW75D65HwGzEseAe3cowspUr32lp5Q3lMSMKhUQ0AK%2FgavsrU%2FNbasG9h0qtVmtf4uek6kHuBWFLurbr1SnYuxpejYyHD69M9PQ%2BFLQlObVBjk%2FYr8%2Fr8U3skUogQEXrCVvRXW8XElIwskUhub%2BRHm5D62XZHqgaP6axkcpR7q1hecaZ%2FSpSjQmIb7os8u7UR25xxJKyOaCjVBaZcSAcEJM2tW6gf7bPMXQNgN%2FS1R7PDmRLlZjpE7mXEZPZ3jtkEM28%2FkMYFQamZwfvFRJtqEhRuyZqBRuI1g2qHxYdH2tuR76UpL1QzCj2aU3z7vBRriM5YYWybLcx51ES4AGlSM%2FN7EbWWJVfGFNik9MFcBR771pF3wNufWShYTvBmuBUXr06pUwbI1MOiNcHI5xcjTEmDrexJp4GC3g
Source: chromecache_268.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},Sk:function(){e=sb()},Md:function(){d()}}};var bc=wa(["data-gtm-yt-inspected-"]),LG=["www.youtube.com","www.youtube-nocookie.com"],MG,NG=!1; equals www.youtube.com (Youtube)
Source: chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=wD(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Cb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},zD=function(){var a=[],b=function(c){return gb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_268.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Wh:f,Uh:g,Vh:k,Di:m,Ei:n,qf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var t=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){t&&t();d()};E(function(){for(var v=A.getElementsByTagName("script"),u=v.length,w=0;w<u;w++){var x=v[w].getAttribute("src");if(WG(x,"iframe_api")\|\|WG(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!NG&&UG(y[C],q.qf))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_221.6.dr, chromecache_274.6.dr	String found in binary or memory: return f}JG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),LG=["www.youtube.com","www.youtube-nocookie.com"],MG,NG=!1; equals www.youtube.com (Youtube)
Source: chromecache_274.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: var YF=function(a,b,c,d,e){var f=UC("fsl",c?"nv.mwt":"mwt",0),g;g=c?UC("fsl","nv.ids",[]):UC("fsl","ids",[]);if(!g.length)return!0;var k=ZC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!HB(k,JB(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: camsapi.camsoline.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: ww01.camsoline.com
Source: global traffic	DNS traffic detected: DNS query: delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: cdn.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: i1.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: a.delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: i2.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: r.search.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: faqsstreet.com
Source: global traffic	DNS traffic detected: DNS query: d.delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: cdn.faqsstreet.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: www.fmsbonds.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: fmsbonds-wpoffload.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: cdn.callrail.com
Source: global traffic	DNS traffic detected: DNS query: js.callrail.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.pa.gcp.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.pa.aws.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: a.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms

Source: unknown

HTTP traffic detected: POST /spx/logPerfData HTTP/1.1Host: faqsstreet.comConnection: keep-aliveContent-Length: 1608sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Accept: */*Origin: https://faqsstreet.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium=p&g_ti=kwd-82670909773925:loc-190&g_de=c&g_ci=522024662&g_ai=1322714951442889&utm_content=1&ekw=mW8zTH7Yok5ey5XOwB6OMQ%3D%3D&rac=Need+Info+On+Mutual+Funds+Guide?+Visit+Here!&msclkid=47041b22e1201636e3727cf914fe725eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: myc[s_id]=4iZ2M5hpkWUJneXtjJmJcw%3D%3D; myc[utm_campaign]=K6855i5; myc[g_ci]=522024662; myc[g_ai]=1322714951442889; myc[g_de]=d; _uetsid=e8b35990057a11f0ba646b4258fda329; _uetvid=e8b38a60057a11f0a743d32ad756e35e; _uetmsclkid=_uet47041b22e1201636e3727cf914fe725e; __gsas=ID=ccd1c10817fb98fc:T=1742468590:RT=1742468590:S=ALNI_MYZ0O9RqW0kX036jz8wuyCuKFKswQ; __cmpcccx85356=aCQOl5tKAA-MBJprVjK0siaJYiBrEBoFako0sgaAYqsBUUKgHqqj9ATwCh0Qpi8UB50INpS8IpvPEpObEFKwBDACGoCZSSaZmA; _ga_ZLYGZESQ0D=GS1.1.1742468590.1.0.1742468590.0.0.0; _gid=GA1.2.1146700590.1742468591; _gat_gtag_UA_223682172_1=1; _ga=GA1.1.1691318616.1742468591; _ga_TDGZVYSNYZ=GS1.1.1742468591.1.0.1742468589.0.0.0

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeDate: Thu, 20 Mar 2025 11:03:43 GMTX-Runtime: 0.000673Vary: Accept-EncodingVary: OriginX-Request-Id: 557323c3-68ee-4b2e-aff1-3773e359dc75X-Cache: Error from cloudfrontVia: 1.1 6365f8c2e6435e0ce1ea9fe112f73a92.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK50-P10X-Amz-Cf-Id: -qndM1cLheFhPo-J2l0hMAeHn7QSsDMP0SURtJuDcbXpQHhm1Tmvag==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeDate: Thu, 20 Mar 2025 11:03:43 GMTX-Runtime: 0.000768Vary: Accept-EncodingVary: OriginX-Request-Id: 95cf7147-339d-4896-8d56-3d0c4ef742b8X-Cache: Error from cloudfrontVia: 1.1 18ea14e618c57b64a442b054083b4ed6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK50-P10X-Amz-Cf-Id: g2h8nlB5S5AUBKax2pkrY_u3p-DTYTYMYYkknrrQwqvg35-prM8mzw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 11:02:37 GMTServer: ApacheReferrer-Policy: no-referrer-when-downgradeAccept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")Content-Length: 196Keep-Alive: timeout=5, max=126Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 11:02:37 GMTServer: ApacheReferrer-Policy: no-referrer-when-downgradeAccept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")Content-Length: 196Keep-Alive: timeout=5, max=128Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 20 Mar 2025 11:02:38 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 11:02:40 GMTServer: ApacheReferrer-Policy: no-referrer-when-downgradeAccept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")Content-Length: 10Keep-Alive: timeout=5, max=128Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon

Source: chromecache_261.6.dr	String found in binary or memory: http://google.com
Source: chromecache_261.6.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_237.6.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_225.6.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_261.6.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_261.6.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_250.6.dr	String found in binary or memory: http://wordpress.org/extend/plugins/wp-pagenavi/
Source: chromecache_301.6.dr	String found in binary or memory: http://ww01.camsoline.com/
Source: chromecache_237.6.dr	String found in binary or memory: http://ww01.camsoline.com/Mutual_Fund_Analysis.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJ
Source: chromecache_237.6.dr	String found in binary or memory: http://ww01.camsoline.com/Mutual_Fund_Comparison.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2
Source: chromecache_237.6.dr	String found in binary or memory: http://ww01.camsoline.com/Mutual_Fund_Investments.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%
Source: chromecache_237.6.dr	String found in binary or memory: http://ww01.camsoline.com/Mutual_Fund_Rates.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi1
Source: chromecache_237.6.dr	String found in binary or memory: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2
Source: chromecache_237.6.dr, chromecache_225.6.dr	String found in binary or memory: http://ww01.camsoline.com/display.cfm
Source: chromecache_225.6.dr	String found in binary or memory: http://ww01.camsoline.com/trf?q=Mutual
Source: chromecache_194.6.dr	String found in binary or memory: https://WinslowRubin.com
Source: chromecache_285.6.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_199.6.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_279.6.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_221.6.dr, chromecache_268.6.dr, chromecache_274.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_261.6.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_261.6.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_237.6.dr, chromecache_225.6.dr	String found in binary or memory: https://cdn.consentmanager.net
Source: chromecache_303.6.dr	String found in binary or memory: https://cdn.faqsstreet.com/assets/Ly9jZ.jpg?eurl=Ly9jZG4uZmFxc3N0cmVldC5jb20vY29udGVudC5nZXRzbWFydGl
Source: chromecache_303.6.dr	String found in binary or memory: https://cdn.faqsstreet.com/img/siteLogo.png
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error
Source: chromecache_261.6.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_237.6.dr, chromecache_225.6.dr	String found in binary or memory: https://delivery.consentmanager.net
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_201.6.dr, chromecache_297.6.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_261.6.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_297.6.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_201.6.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_297.6.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_201.6.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_201.6.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_201.6.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_261.6.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_261.6.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_210.6.dr	String found in binary or memory: https://faqsstreet.com/
Source: chromecache_267.6.dr, chromecache_289.6.dr	String found in binary or memory: https://faqsstreet.com/articles/4-things-to-know-about-tax-free-municipal-bonds
Source: chromecache_267.6.dr, chromecache_289.6.dr	String found in binary or memory: https://faqsstreet.com/articles/a-comprehensive-guide-to-fixed-income-investments
Source: chromecache_267.6.dr, chromecache_289.6.dr	String found in binary or memory: https://faqsstreet.com/articles/guide-to-fixed-income-investments
Source: chromecache_267.6.dr, chromecache_289.6.dr	String found in binary or memory: https://faqsstreet.com/articles/invest-in-municipal-bonds-with-these-five-popular-funds
Source: chromecache_267.6.dr, chromecache_289.6.dr	String found in binary or memory: https://faqsstreet.com/articles/types-of-bond-funds-and-what-to-consider-before-investing-in-them
Source: chromecache_289.6.dr	String found in binary or memory: https://faqsstreet.com/spx/e3kd?dt=rbv7BV6Fn2jK62WO4AQco25Rnr%2Bsxlm1VMB8cRy49vUsTjyx5vZ8lmNcVCIpt6N
Source: chromecache_303.6.dr	String found in binary or memory: https://faqsstreet.com/topic/20/
Source: chromecache_303.6.dr	String found in binary or memory: https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a
Source: chromecache_210.6.dr	String found in binary or memory: https://faqsstreet.com/topic/20/?ekw=2&rlh=7e46341b693c5abac1fd1ae228c49282&plh=7b42863eb113ccfa5c5a
Source: chromecache_303.6.dr	String found in binary or memory: https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium
Source: chromecache_220.6.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_220.6.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_261.6.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_284.6.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_261.6.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_261.6.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_238.6.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_275.6.dr	String found in binary or memory: https://google.com
Source: chromecache_275.6.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_261.6.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_285.6.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/managed/dict/$
Source: chromecache_199.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_201.6.dr, chromecache_297.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_296.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_285.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_297.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_201.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_221.6.dr, chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_268.6.dr, chromecache_274.6.dr, chromecache_275.6.dr, chromecache_284.6.dr, chromecache_199.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_210.6.dr, chromecache_303.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-8279817424936971
Source: chromecache_285.6.dr, chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_285.6.dr, chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_261.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_228.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_297.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_201.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_284.6.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_293.6.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_296.6.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_261.6.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_261.6.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_261.6.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_268.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_268.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_279.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_293.6.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_284.6.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_279.6.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_221.6.dr, chromecache_296.6.dr, chromecache_268.6.dr, chromecache_274.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_296.6.dr	String found in binary or memory: https://td.doubleclick.net/td/bjs
Source: chromecache_296.6.dr	String found in binary or memory: https://td.doubleclick.net/td/bts
Source: chromecache_296.6.dr	String found in binary or memory: https://td.doubleclick.net/td/buyer.wasm
Source: chromecache_296.6.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=4s2017591375.1742468620
Source: chromecache_296.6.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=166504935306
Source: chromecache_296.6.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=1811694443
Source: chromecache_201.6.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_201.6.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_261.6.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_216.6.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_194.6.dr	String found in binary or memory: https://www.elegantthemes.com
Source: chromecache_221.6.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_279.6.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_279.6.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_279.6.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_199.6.dr	String found in binary or memory: https://www.google.com
Source: chromecache_279.6.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_285.6.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_210.6.dr, chromecache_303.6.dr	String found in binary or memory: https://www.google.com/adsense/search/ads.js
Source: chromecache_261.6.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_284.6.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_253.6.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1072554850/?random
Source: chromecache_309.6.dr, chromecache_293.6.dr, chromecache_229.6.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_201.6.dr, chromecache_261.6.dr, chromecache_297.6.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_261.6.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_284.6.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk
Source: chromecache_298.6.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjvwaqywZiMAxUSS0cBHQgEGswYABAHGgJxdQ
Source: chromecache_298.6.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjvwaqywZiMAxUSS0cBHQgEGswYABAJGgJxdQ
Source: chromecache_298.6.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjvwaqywZiMAxUSS0cBHQgEGswYABAKGgJxdQ
Source: chromecache_298.6.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjvwaqywZiMAxUSS0cBHQgEGswYABALGgJxdQ
Source: chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_284.6.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_199.6.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_221.6.dr, chromecache_268.6.dr, chromecache_274.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_279.6.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_210.6.dr, chromecache_303.6.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-TDGZVYSNYZ
Source: chromecache_210.6.dr, chromecache_303.6.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-223682172-1
Source: chromecache_221.6.dr, chromecache_268.6.dr, chromecache_274.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_309.6.dr, chromecache_293.6.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__.
Source: chromecache_261.6.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_261.6.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_306.6.dr, chromecache_229.6.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js
Source: chromecache_268.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_287.6.dr, chromecache_302.6.dr	String found in binary or memory: https://www.shutterstock.com/create/home
Source: chromecache_268.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.142:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.249.137.2:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.78:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.78:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.78:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.218.84.137:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.111.153:443 -> 192.168.2.5:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.64.90:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.249.137.3:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.76:443 -> 192.168.2.5:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.191.50.153:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.110:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.110:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.110:443 -> 192.168.2.5:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.32.98:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.230.98.78:443 -> 192.168.2.5:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.5:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.193:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.193:443 -> 192.168.2.5:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.5:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.111.153:443 -> 192.168.2.5:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.64.90:443 -> 192.168.2.5:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.64.90:443 -> 192.168.2.5:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.129:443 -> 192.168.2.5:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.5:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.218.84.137:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.67.42.25:443 -> 192.168.2.5:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.132:443 -> 192.168.2.5:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.110:443 -> 192.168.2.5:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.60.22.48:443 -> 192.168.2.5:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.231.132.73:443 -> 192.168.2.5:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.88.91:443 -> 192.168.2.5:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.228:443 -> 192.168.2.5:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.15:443 -> 192.168.2.5:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.88:443 -> 192.168.2.5:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.253.115.155:443 -> 192.168.2.5:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.226:443 -> 192.168.2.5:49947 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.226:443 -> 192.168.2.5:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.5:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.88:443 -> 192.168.2.5:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.88:443 -> 192.168.2.5:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.68:443 -> 192.168.2.5:49956 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.55.92:443 -> 192.168.2.5:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.30.30:443 -> 192.168.2.5:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.124:443 -> 192.168.2.5:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.60.22.48:443 -> 192.168.2.5:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.8.71.184:443 -> 192.168.2.5:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.228:443 -> 192.168.2.5:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.110.205.119:443 -> 192.168.2.5:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.110.205.119:443 -> 192.168.2.5:49984 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir7164_349716419

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir7164_349716419

Jump to behavior

Source: classification engine

Classification label: mal52.win@33/254@124/42

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,11257995028092385795,14724108990761671776,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,11257995028092385795,14724108990761671776,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4012 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://camsapi.camsoline.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,11257995028092385795,14724108990761671776,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,11257995028092385795,14724108990761671776,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4012 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://camsapi.camsoline.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.fmsbonds.com/wp-content/plugins/divi-toolbox/assets/js/toolbox-scripts.js?ver=1.7.4	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/et-cache/226936/et-divi-dynamic-226936-late.css	0%	Avira URL Cloud	safe
http://camsapi.camsoline.com/_tr	0%	Avira URL Cloud	safe
https://cdn.faqsstreet.com/assets/Ly9jZ.jpg?eurl=Ly9jZG4uZmFxc3N0cmVldC5jb20vY29udGVudC5nZXRzbWFydGl	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/favicon.ico	0%	Avira URL Cloud	safe
https://faqsstreet.com/spx/e3kd?dt=rbv7BV6Fn2jK62WO4AQco25Rnr%2Bsxlm1VMB8cRy49vUsTjyx5vZ8lmNcVCIpt6N	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/plugins/wpcf7-redirect/js/wpcf7-redirect-script.js	0%	Avira URL Cloud	safe
https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium	0%	Avira URL Cloud	safe
https://WinslowRubin.com	0%	Avira URL Cloud	safe
https://faqsstreet.com/topic/20/	0%	Avira URL Cloud	safe
http://camsapi.camsoline.com/bzISbVNPg.js	0%	Avira URL Cloud	safe
http://ww01.camsoline.com/	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/plugins/masks-form-fields/includes/js/scripts.js?ver=1.11.1	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/plugins/author-box-for-divi/css/author.css?ver=6.7.2	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6	0%	Avira URL Cloud	safe
https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a	0%	Avira URL Cloud	safe
https://faqsstreet.com/articles/a-comprehensive-guide-to-fixed-income-investments	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/plugins/easy-foundation-shortcodes-edited/styles/foundation-icons.css?ver=6.7.2	0%	Avira URL Cloud	safe
http://ww01.camsoline.com/display.cfm	0%	Avira URL Cloud	safe
https://fmsbonds-wpoffload.s3.amazonaws.com/PROD/wp-content/uploads/2022/12/06150759/Get-Muni-Bonds-That-Make-Sense-to-You.jpg	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/et-cache/226936/et-core-unified-deferred-226936.min.css?ver=1741027577	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/plugins/popup-plugin-phone-collector/popup-plugin-phone-collector.css?ver=6.7.2	0%	Avira URL Cloud	safe
https://faqsstreet.com/i3kd/?c_dt={%22NA%22:0}&dt=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	0%	Avira URL Cloud	safe
https://cdn.faqsstreet.com/assets/js/jquery.central.js	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20.3	0%	Avira URL Cloud	safe
http://ww01.camsoline.com/Mutual_Fund_Analysis.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJ	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/themes/fms-site-theme/scripts/script.js?ver=6.7.2	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2	0%	Avira URL Cloud	safe
https://www.fmsbonds.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.4	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
rrodaxm.sitelockcdn.net	45.60.22.48	true	false	unknown
cdn.callrail.com	13.33.252.15	true	false	high
i1.cdn-image.com	208.91.196.253	true	false	high
ds-global3.l7.search.ystg1.b.yahoo.com	66.218.84.137	true	false	high
1376624012.rsc.cdn77.org	87.249.137.2	true	false	high
stats.g.doubleclick.net	172.253.115.155	true	false	high
publickeyservice.pa-3.aws.privacysandboxservices.com	18.238.55.92	true	false	high
a.delivery.consentmanager.net	87.230.98.78	true	false	high
i2.cdn-image.com	208.91.196.253	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
publickeyservice-a.pa-3.gcp.privacysandboxservices.com	34.54.30.30	true	false	high
www.google.com	142.251.35.164	true	false	high
d.delivery.consentmanager.net	87.230.98.76	true	false	high
delivery.consentmanager.net	87.230.98.78	true	false	high
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
vmss-clarity-ingest-eus-d.eastus.cloudapp.azure.com	51.8.71.184	true	false	high
ww01.camsoline.com	199.191.50.153	true	true	unknown
cdn.faqsstreet.com	34.36.64.90	true	false	unknown
ep1.adtrafficquality.google	142.251.40.130	true	false	high
syndicatedsearch.goog	142.251.40.142	true	false	high
c-msn-pme.trafficmanager.net	20.110.205.119	true	false	high
faqsstreet.com	34.49.111.153	true	false	unknown
ep2.adtrafficquality.google	142.250.81.225	true	false	high
ax-0001.ax-msedge.net	150.171.28.10	true	false	high
s3-w.us-east-1.amazonaws.com	54.231.132.73	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
analytics-alv.google.com	216.239.38.181	true	false	high
googleads.g.doubleclick.net	142.251.32.98	true	false	high
td.doubleclick.net	142.251.40.226	true	false	high
camsapi.camsoline.com	199.59.243.228	true	false	high
js.callrail.com	13.33.252.88	true	false	high
googlehosted.l.googleusercontent.com	142.251.40.193	true	false	high
r.search.yahoo.com	unknown	unknown	false	high
c.clarity.ms	unknown	unknown	false	high
a.clarity.ms	unknown	unknown	false	high
cdn.consentmanager.net	unknown	unknown	false	high
afs.googleusercontent.com	unknown	unknown	false	high
www.fmsbonds.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	high
publickeyservice.pa.gcp.privacysandboxservices.com	unknown	unknown	false	high
fmsbonds-wpoffload.s3.amazonaws.com	unknown	unknown	false	unknown
publickeyservice.pa.aws.privacysandboxservices.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/recaptcha/api2/reload?k=6Lf36wcaAAAAAB5Y9xfsKAx5BvnicaULbB5whTot	false		high
http://camsapi.camsoline.com/_tr	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.camsoline.com%2FMutual_Fund_Statements.cfm&o=1742468575379&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=40&dv=14&	false		high
https://www.fmsbonds.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89	false		high
https://www.fmsbonds.com/wp-content/et-cache/226936/et-divi-dynamic-226936-late.css	false	Avira URL Cloud: safe	unknown
https://www.fmsbonds.com/wp-content/plugins/divi-toolbox/assets/js/toolbox-scripts.js?ver=1.7.4	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/afs/snowman.png	false		high
https://js.callrail.com/group/0/8e0cd69bf634ac8ee2d6/12/icap.js?t=1742468621017&ga=GA1.1.1955778790.1742468621&GoogleAnalytics4__ga=GA1.1.1955778790.1742468621&GoogleAnalytics4__ga_YV48LN7LJN=GS1.1.1742468620.1.0.1742468620.60.0.0&uuid=234dd56a-aef6-4c15-ad73-578e950f238d&ids%5B%5D=741688758	false		high
https://googleads.g.doubleclick.net/pagead/html/r20250318/r20190131/zrt_lookup_fy2021.html	false		high
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	false		high
https://syndicatedsearch.goog/adsense/search/ads.js?pac=0	false		high
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false		high
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff	false		high
https://www.google.com/recaptcha/api2/clr?k=6Lf36wcaAAAAAB5Y9xfsKAx5BvnicaULbB5whTot	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css?ver=6.7.2	false		high
https://www.fmsbonds.com/wp-content/plugins/wpcf7-redirect/js/wpcf7-redirect-script.js	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=85356&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F&o=1742468604913&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=133&dv=15&	false		high
https://d.delivery.consentmanager.net/delivery/cmp.php?&cdid=e942abc661a9f&h=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fekw%3D1%26rlh%3D7b42863eb113ccfa5c5a8f5fb181b843%26plh%3D7b42863eb113ccfa5c5a8f5fb181b843%26sm_tsh%3DXLpqKMn9JKsCfP9WDkWWBhV%2FffEUfhWyC55n8ieCOiM%253D%26smssid%3D1%26smest%3DEubu0w2PmuEXr9idBKWn5g%253D%253D%26g_ci%3D522024662%26g_ai%3D1322714951442889%26g_de%3Dc%26smah%3DK6855i5%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%3F%2BVisit%2BHere!%26msclkid%3D47041b22e1201636e3727cf914fe725e%26s%3DHighest%2BPaying%2BMunicipal%2BBonds%26rsToken%3DChMInPOWq8GYjAMVrRRZBR3GEjl0EnUBlLqpjxbIf-C_5VsValEnTXw_2viKxl0toYyTecRX5aizrrpP62PcYlOjywm_CcFrVoKaFKGt1G5svjIRE2docxvcetmliAfeABPLG0fouLLxRM1o6OUJQH6QORuDXT5GFatVrWTiQH_hnbF_UyyM_tq2B8AgAw%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Fww01.camsoline.com%252F%26nm%3D5%26nx%3D223%26ny%3D27%26is%3D728x512%26clkt%3D2&&__cmpfcc=1&l=en&o=1742468603968	false		high
http://camsapi.camsoline.com/bzISbVNPg.js	false	Avira URL Cloud: safe	unknown
https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfNDA.js	false		high
https://googleads.g.doubleclick.net/pagead/ads?gpp_sid=-1&client=ca-pub-8279817424936971&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1742468590&plaf=1%3A2%2C2%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C8%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Ffaqsstreet.com%2Ftopic%2F20%2F%3Fsmah%3DK6855i5%26utm_term%3DMutual%2520Fund%2520Statements%26utm_medium%3Dp%26g_ti%3Dkwd-82670909773925%3Aloc-190%26g_de%3Dc%26g_ci%3D522024662%26g_ai%3D1322714951442889%26utm_content%3D1%26ekw%3DmW8zTH7Yok5ey5XOwB6OMQ%253D%253D%26rac%3DNeed%2BInfo%2BOn%2BMutual%2BFunds%2BGuide%3F%2BVisit%2BHere!%26msclkid%3D47041b22e1201636e3727cf914fe725e&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiapm=0.15&aiapmi=0.33938&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742468589271&bpp=4&bdt=1895&idt=913&shv=r20250318&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=564430942195&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=897&scr_x=0&scr_y=0&eid=95354562&oid=2&pvsid=4385106675293143&tmod=1627517775&uas=0&nvt=1&fsapi=1&ref=http%3A%2F%2Fww01.camsoline.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=964	false		high
https://www.fmsbonds.com/wp-content/plugins/author-box-for-divi/css/author.css?ver=6.7.2	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	false		high
https://www.fmsbonds.com/wp-content/plugins/masks-form-fields/includes/js/scripts.js?ver=1.11.1	false	Avira URL Cloud: safe	unknown
https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=0B2430462E074D27B035AE20C3EBD657&MUID=1F0CBE5469EB676B0B93ABE1683F66DD	false		high
https://www.fmsbonds.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6	false	Avira URL Cloud: safe	unknown
https://www.fmsbonds.com/wp-content/plugins/easy-foundation-shortcodes-edited/styles/foundation-icons.css?ver=6.7.2	false	Avira URL Cloud: safe	unknown
https://fmsbonds-wpoffload.s3.amazonaws.com/PROD/wp-content/uploads/2022/12/06150759/Get-Muni-Bonds-That-Make-Sense-to-You.jpg	false	Avira URL Cloud: safe	unknown
https://www.fmsbonds.com/wp-content/et-cache/226936/et-core-unified-deferred-226936.min.css?ver=1741027577	false	Avira URL Cloud: safe	unknown
https://www.fmsbonds.com/wp-content/plugins/popup-plugin-phone-collector/popup-plugin-phone-collector.css?ver=6.7.2	false	Avira URL Cloud: safe	unknown
https://www.clarity.ms/s/0.8.1/clarity.js	false		high
https://faqsstreet.com/i3kd/?c_dt={%22NA%22:0}&dt=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	false	Avira URL Cloud: safe	unknown
https://www.fmsbonds.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20.3	false	Avira URL Cloud: safe	unknown
https://cdn.faqsstreet.com/assets/js/jquery.central.js	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png	false		high
https://publickeyservice.pa.gcp.privacysandboxservices.com/.well-known/protected-auction/v1/public-keys	false		high
http://camsapi.camsoline.com/	false		unknown
https://www.fmsbonds.com/wp-content/themes/fms-site-theme/scripts/script.js?ver=6.7.2	false	Avira URL Cloud: safe	unknown
https://www.fmsbonds.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.4	false	Avira URL Cloud: safe	unknown
https://c.clarity.ms/c.gif	false		high
https://cdn.callrail.com/companies/741688758/8e0cd69bf634ac8ee2d6/12/swap.js	false		high
https://www.fmsbonds.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_268.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	false		high
https://syndicatedsearch.goog	chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_284.6.dr	false		high
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_237.6.dr	false		high
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_225.6.dr	false		high
https://ep2.adtrafficquality.google	chromecache_201.6.dr	false		high
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error	chromecache_309.6.dr, chromecache_293.6.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_279.6.dr	false		high
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_225.6.dr	false		high
https://fontawesome.com	chromecache_220.6.dr	false		high
https://fundingchoicesmessages.google.com/i/$	chromecache_261.6.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_309.6.dr, chromecache_293.6.dr	false		high
https://WinslowRubin.com	chromecache_194.6.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_279.6.dr	false		high
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_261.6.dr	false		high
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_237.6.dr	false		high
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	chromecache_237.6.dr	false		high
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_225.6.dr	false		high
https://github.com/microsoft/clarity	chromecache_238.6.dr	false		high
https://support.google.com/recaptcha	chromecache_293.6.dr	false		high
https://faqsstreet.com/topic/20/?smah=K6855i5&utm_term=Mutual%20Fund%20Statements&utm_medium	chromecache_303.6.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_217.6.dr, chromecache_265.6.dr, chromecache_314.6.dr, chromecache_284.6.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_297.6.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_201.6.dr	false		high
https://faqsstreet.com/spx/e3kd?dt=rbv7BV6Fn2jK62WO4AQco25Rnr%2Bsxlm1VMB8cRy49vUsTjyx5vZ8lmNcVCIpt6N	chromecache_289.6.dr	false	Avira URL Cloud: safe	unknown
https://faqsstreet.com/topic/20/	chromecache_303.6.dr	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_261.6.dr	false		high
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_225.6.dr	false		high
https://cdn.faqsstreet.com/assets/Ly9jZ.jpg?eurl=Ly9jZG4uZmFxc3N0cmVldC5jb20vY29udGVudC5nZXRzbWFydGl	chromecache_303.6.dr	false	Avira URL Cloud: safe	unknown
http://mathiasbynens.be/	chromecache_261.6.dr	false		high
https://www.google.com/adsense/search/async-ads.js	chromecache_261.6.dr	false		high
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_237.6.dr	false		high
http://ww01.camsoline.com/	chromecache_301.6.dr	true	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_225.6.dr	false		high
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_225.6.dr	false		high
https://www.google.com/pagead/1p-user-list/1072554850/?random	chromecache_253.6.dr	false		high
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_237.6.dr	false		high
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_225.6.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_268.6.dr, chromecache_275.6.dr, chromecache_199.6.dr	false		high
https://td.doubleclick.net/td/update?ig_name=4s2017591375.1742468620	chromecache_296.6.dr	false		high
http://googleads.g.doubleclick.net	chromecache_261.6.dr	false		high
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_237.6.dr	false		high
https://ep2.adtrafficquality.google/sodar/$	chromecache_261.6.dr	false		high
https://faqsstreet.com/topic/20/?ekw=1&rlh=7b42863eb113ccfa5c5a8f5fb181b843&plh=7b42863eb113ccfa5c5a	chromecache_303.6.dr	false	Avira URL Cloud: safe	unknown
https://cdn.consentmanager.net	chromecache_237.6.dr, chromecache_225.6.dr	false		high
https://faqsstreet.com/articles/a-comprehensive-guide-to-fixed-income-investments	chromecache_267.6.dr, chromecache_289.6.dr	false	Avira URL Cloud: safe	unknown
https://www.clarity.ms/tag/uet/	chromecache_216.6.dr	false		high
http://ww01.camsoline.com/display.cfm	chromecache_237.6.dr, chromecache_225.6.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	chromecache_225.6.dr	false		high
http://google.com	chromecache_261.6.dr	false		high
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_225.6.dr	false		high
https://cloud.google.com/contact	chromecache_309.6.dr, chromecache_293.6.dr	false		high
https://fontawesome.com/license/free	chromecache_220.6.dr	false		high
https://td.doubleclick.net/td/bjs	chromecache_296.6.dr	false		high
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_237.6.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_309.6.dr, chromecache_293.6.dr, chromecache_229.6.dr	false		high
http://ww01.camsoline.com/Mutual_Fund_Analysis.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJ	chromecache_237.6.dr	false	Avira URL Cloud: safe	unknown
https://cse.google.com/cse.js	chromecache_261.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.40	s-part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.80.110	unknown	United States	15169	GOOGLEUS	false
52.216.88.91	unknown	United States	16509	AMAZON-02US	false
142.251.40.129	unknown	United States	15169	GOOGLEUS	false
199.191.50.153	ww01.camsoline.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	true
142.250.81.238	unknown	United States	15169	GOOGLEUS	false
87.230.98.76	d.delivery.consentmanager.net	Germany	61157	PLUSSERVER-ASN1DE	false
142.251.40.132	unknown	United States	15169	GOOGLEUS	false
87.230.98.78	a.delivery.consentmanager.net	Germany	61157	PLUSSERVER-ASN1DE	false
142.251.40.130	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
51.8.71.184	vmss-clarity-ingest-eus-d.eastus.cloudapp.azure.com	Germany	200517	MS-DEUTSCHLANDDE	false
20.110.205.119	c-msn-pme.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.49.111.153	faqsstreet.com	United States	2686	ATGS-MMD-ASUS	false
34.36.64.90	cdn.faqsstreet.com	United States	2686	ATGS-MMD-ASUS	false
199.59.243.228	camsapi.camsoline.com	United States	395082	BODIS-NJUS	false
142.251.40.142	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
172.253.115.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.72.110	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
66.218.84.137	ds-global3.l7.search.ystg1.b.yahoo.com	United States	26101	YAHOO-3US	false
54.231.132.73	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.251.40.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
23.67.42.25	unknown	United States	20940	AKAMAI-ASN1EU	false
142.251.40.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.251.32.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.33.252.15	cdn.callrail.com	United States	16509	AMAZON-02US	false
142.251.40.196	unknown	United States	15169	GOOGLEUS	false
18.238.55.92	publickeyservice.pa-3.aws.privacysandboxservices.com	United States	16509	AMAZON-02US	false
13.33.252.124	unknown	United States	16509	AMAZON-02US	false
34.54.30.30	publickeyservice-a.pa-3.gcp.privacysandboxservices.com	United States	2686	ATGS-MMD-ASUS	false
142.250.65.193	unknown	United States	15169	GOOGLEUS	false
208.91.196.253	i1.cdn-image.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
87.249.137.2	1376624012.rsc.cdn77.org	Czech Republic	34040	CZTTNET-ASCZ	false
87.249.137.3	unknown	Czech Republic	34040	CZTTNET-ASCZ	false
142.250.64.68	unknown	United States	15169	GOOGLEUS	false
142.251.40.164	unknown	United States	15169	GOOGLEUS	false
142.250.65.228	unknown	United States	15169	GOOGLEUS	false
13.33.252.88	js.callrail.com	United States	16509	AMAZON-02US	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false
45.60.22.48	rrodaxm.sitelockcdn.net	United States	19551	INCAPSULAUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644174
Start date and time:	2025-03-20 12:01:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://camsapi.camsoline.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@33/254@124/42

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, BackgroundTransferHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.31.69.3, 142.250.80.35, 142.250.65.206, 142.250.80.46, 142.251.167.84, 142.251.41.14, 142.250.65.238, 142.251.40.194, 142.251.40.238, 142.250.64.110, 199.232.210.172, 142.251.41.2, 142.251.41.8, 142.250.80.74, 142.250.65.170, 142.251.40.106, 142.251.41.10, 142.250.81.234, 142.250.65.234, 142.250.176.202, 142.251.40.234, 142.250.80.42, 172.217.165.138, 142.250.65.202, 142.251.40.202, 142.250.80.106, 142.251.32.106, 142.251.35.170, 142.251.40.138, 142.250.176.194, 142.251.32.110, 142.250.81.226, 142.250.72.99, 34.104.35.123, 142.250.81.225, 142.250.65.163, 142.251.40.97, 142.250.80.78, 142.251.35.162, 142.251.40.98, 23.219.161.71, 23.193.201.36, 142.250.80.67, 142.250.80.40, 142.251.32.104, 142.251.40.162, 142.250.81.227, 142.251.40.170, 142.250.64.74, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.251.40.163, 20.109.210.53, 23.96.180.189, 150.171.27.10, 23.67.42.16, 23.33.40.132, 150.171.28.10
Excluded domains from analysis (whitelisted): www.googleadservices.com, slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, g.bing.com, a767.dspw65.akamai.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, arc.msn.com, clients2.google.com, redirector.gvt1.com, www.googletagmanager.com, bat.bing.com, update.googleapis.com, www.gstatic.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, www.google-analytics.com, www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, edgedl.me.gvt1.com, c.bing.com, tpc.googlesyndication.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://camsapi.camsoline.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1000x667, components 3
Category:	downloaded
Size (bytes):	754791
Entropy (8bit):	7.971263229249093
Encrypted:	false
SSDEEP:	12288:q9KdUbErxCnGApkEEWGG9/YcPdG1ujTyHSJ+BWpwiGzgvXYIKsN++rwcnvvF37u:qQKrhESgsJeyuHSXYhQnnFC
MD5:	45A27C162E7B8A8E3B43CB16DD840E16
SHA1:	22967623B4CCFF634F8D0B627E55579A4FA9DF87
SHA-256:	7D383F0E30B58DF734055EA95AA061EDB54768B079F51B55C79B59E993B2897E
SHA-512:	044465C6B4E9257C1B2776125106E87B802E5E10019E8BC9FA779A6D376416E97C4342282ADD86A5729F9597DB2E60366B4EEC37055F0AB83363A41D509865C4
Malicious:	false
Reputation:	low
URL:	https://cdn.faqsstreet.com/assets/Ly9jZ.jpg?eurl=Ly9jZG4uZmFxc3N0cmVldC5jb20vY29udGVudC5nZXRzbWFydGluc2lnaHRzLmNvbS93cC1jb250ZW50L3VwbG9hZHMvMjAyMi8wOS9BR3VpZGVUb0ludmVzdGluZ0luTXV0dWFsRnVuZHMuanBn
Preview:	......JFIF.....,.,.....C....................................................................C........................................................................................................................K...........................!.."..1#2A.Q..3Ba$q..RC....%4.&br..5...'(8Ds.....................................N....................!.1...AQ.a."q.....2.....B..#R...b$3r.C.4S..c.%5D.s.&.E..............?..C\|.Wkm}..r...s.%<.GUo...V.U.W.]...+ .\f0P.?...........=./V.......-[:..\..Mt.".u...L..t..B.RME#Bi.-X.m_.d.I.R.9.T.B.RV.Q..R.P.. .)....l{..e_..9..J..R.(.......,...$..t... g.u....2U..P....5i........5..j+.M(.~Zs....6R..uZ.r+./Z..&.A_....R4.%J.F...G........P..nE.....h.....K.K.!.Y.w}Af?._..4..=Z...3..."...J._0.u.J.......Q2..r.O9Z....\.eLi.JY..N..B...K.R...[..t...?..?...CrIe..P.q.j.YY.U--R..V.I!QO.E`UR.Q.m..\|f....\|,......Eu.t.o7F./.sU..ytT..EM+..+YdR.0.y..;..5.3C...)F.u2Y(@%%..P..g;a....7.\i....\|.Kp....9.......\&.x....{.!R..g4.[.dH..]..3.o.E\|_.=v.....M..O

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 12:02:25.537801981 CET	53	49153	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:25.539892912 CET	53	57910	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:26.365972042 CET	53	53549	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:26.517179012 CET	53	59938	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:29.622709990 CET	55397	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:29.622776031 CET	58486	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:29.719738960 CET	53	58486	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:29.720055103 CET	53	55397	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:31.327536106 CET	49174	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:31.327676058 CET	55871	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:31.337081909 CET	64609	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:31.337304115 CET	54988	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:32.343534946 CET	49292	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:32.343871117 CET	55790	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:32.359472990 CET	52980	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:32.359510899 CET	58737	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:33.417171001 CET	53	49174	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:33.423902035 CET	53	64609	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:33.426107883 CET	53	54988	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:33.451535940 CET	53	55871	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:34.331178904 CET	55917	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:34.331341028 CET	52072	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:34.431039095 CET	53	55917	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:34.432046890 CET	53	52072	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:34.434994936 CET	53	55790	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:34.440438986 CET	53	49292	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:34.451828003 CET	53	52980	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:34.479219913 CET	53	58737	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:34.662844896 CET	60876	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:34.663156986 CET	64334	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:34.761014938 CET	53	60876	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:35.337357998 CET	55457	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:35.337718010 CET	52259	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:35.425477028 CET	55300	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:35.425883055 CET	57414	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:35.434848070 CET	53	55457	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:35.435410023 CET	53	52259	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:35.523411036 CET	53	55300	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:35.533184052 CET	53	57414	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:36.805850029 CET	53	64334	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:36.921066046 CET	62795	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:36.921443939 CET	53579	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:36.924418926 CET	52169	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:36.924618006 CET	54321	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:37.028383970 CET	53	62795	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:37.032840014 CET	53	54321	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:39.018045902 CET	53	52169	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:39.047254086 CET	53	53579	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:41.728909016 CET	52278	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:41.729018927 CET	65161	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:41.729307890 CET	57880	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:41.729410887 CET	65078	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:41.794126034 CET	59730	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:41.797297955 CET	62527	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:41.827585936 CET	53	65161	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:41.827601910 CET	53	57880	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:41.827614069 CET	53	52278	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:41.829124928 CET	53	65078	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:41.915797949 CET	53	62527	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:42.015414000 CET	53175	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:42.015527964 CET	63727	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:42.066507101 CET	53	59730	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:42.115226984 CET	53	63727	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:42.116195917 CET	53	53175	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:43.030067921 CET	49292	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:43.030306101 CET	58782	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:43.129276037 CET	53	49292	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:43.150162935 CET	53	58782	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:43.589799881 CET	53	58664	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:44.940777063 CET	51869	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:44.940896034 CET	57058	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:45.039092064 CET	53	57058	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:45.043989897 CET	53	51869	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:53.895546913 CET	55354	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:53.895711899 CET	56736	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:54.001744032 CET	53	55354	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:54.002769947 CET	53	56736	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:55.565094948 CET	52167	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:55.565471888 CET	60496	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:55.663701057 CET	53	52167	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:55.772675991 CET	53	60496	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:57.356570005 CET	54189	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:57.357134104 CET	63149	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:02:57.497724056 CET	53	54189	1.1.1.1	192.168.2.5
Mar 20, 2025 12:02:57.565386057 CET	53	63149	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:05.663484097 CET	53	49243	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:06.813061953 CET	52142	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:06.813266993 CET	50304	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:06.909692049 CET	53	52142	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:06.911721945 CET	53	50304	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:07.867893934 CET	58268	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:07.868186951 CET	50069	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:07.970510960 CET	53	58268	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:07.971127033 CET	53	50069	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:08.489789963 CET	53768	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:08.489919901 CET	55341	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:08.490695953 CET	55572	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:08.490963936 CET	51419	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:08.549527884 CET	49622	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:08.549642086 CET	65430	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:08.587094069 CET	53	55341	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:08.588329077 CET	53	51419	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:08.590224028 CET	53	55572	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:08.630609035 CET	53	53768	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:08.649209023 CET	53	49622	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:08.653593063 CET	53	65430	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:09.442976952 CET	62916	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:09.443119049 CET	55334	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:09.540158033 CET	53	55334	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:09.540174961 CET	53	62916	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:09.541541100 CET	53	58063	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:09.728441954 CET	53	54441	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:10.257308006 CET	59166	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:10.257441044 CET	59725	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:10.300873995 CET	59747	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:10.301151991 CET	59832	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:10.322648048 CET	49833	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:10.322864056 CET	58070	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:10.354033947 CET	53	59166	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:10.355565071 CET	53	59725	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:10.398849964 CET	53	59832	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:10.399056911 CET	53	59747	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:10.419562101 CET	53	49833	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:10.419578075 CET	53	58070	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:10.929044962 CET	59789	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:10.929249048 CET	50312	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:10.991852045 CET	53	58709	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:11.026599884 CET	53	59789	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:11.070897102 CET	53	50312	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:11.532187939 CET	52905	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:11.532360077 CET	56233	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:11.633946896 CET	53	56233	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:11.633969069 CET	53	52905	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:12.509332895 CET	63210	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:12.509501934 CET	61943	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:12.607279062 CET	53	63210	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:12.607300997 CET	53	61943	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:12.661840916 CET	49413	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:12.662426949 CET	56564	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:12.759965897 CET	53	49413	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:12.761296034 CET	53	56564	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:13.134500980 CET	49931	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:13.134987116 CET	60352	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:13.239778042 CET	53	60352	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:13.240087986 CET	53	49931	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:13.599422932 CET	53	61292	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:13.976232052 CET	58500	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:13.978856087 CET	63688	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:13.981632948 CET	60321	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:13.984203100 CET	54482	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.073661089 CET	53	58500	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.076476097 CET	53	63688	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.081465960 CET	53	60321	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.085684061 CET	53	54482	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.632438898 CET	52635	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.632550955 CET	62351	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.632931948 CET	65408	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.633057117 CET	60876	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.649161100 CET	53076	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.649271965 CET	51557	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.649950027 CET	50814	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.650084019 CET	55767	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:14.735548019 CET	53	52635	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.736569881 CET	53	60876	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.738220930 CET	53	65408	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.738668919 CET	53	62351	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.750121117 CET	53	51557	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.750174046 CET	53	53076	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.751185894 CET	53	50814	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:14.761297941 CET	53	55767	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:22.548692942 CET	138	138	192.168.2.5	192.168.2.255
Mar 20, 2025 12:03:24.517731905 CET	50025	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:24.517879009 CET	57117	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:24.618668079 CET	53	50025	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:24.628868103 CET	53	57117	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:25.149115086 CET	53	54192	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:26.991815090 CET	53	51713	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:28.043956041 CET	53	64572	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:28.128525019 CET	64029	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:28.128635883 CET	53003	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:28.229477882 CET	53	53003	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:28.230108976 CET	53	64029	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:28.269011021 CET	53	50493	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:31.598078966 CET	53	65137	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:37.109563112 CET	53248	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:37.109756947 CET	59112	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:37.211381912 CET	53	59112	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:37.219295979 CET	53	53248	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:38.539403915 CET	59052	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:38.539530039 CET	54782	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:38.641323090 CET	53	59052	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:38.642442942 CET	53	54782	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:38.721837044 CET	51088	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:38.721956015 CET	57271	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:38.869409084 CET	53	51088	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:38.879256964 CET	53	57271	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:39.371143103 CET	58722	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:39.371144056 CET	49249	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:39.498367071 CET	62318	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:39.498733997 CET	61298	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:39.503263950 CET	53	58722	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:39.575577974 CET	53	49249	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:39.598023891 CET	53	61298	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:39.600373030 CET	53	62318	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:39.601677895 CET	53	62897	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:40.696830034 CET	61736	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:40.696952105 CET	54057	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:40.795233965 CET	53	54057	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:40.798734903 CET	53	61736	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:40.845974922 CET	53	51397	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.240412951 CET	53	64324	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.455904007 CET	50996	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.455904961 CET	56540	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.558192968 CET	53	56540	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.562160969 CET	53	50996	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.571393013 CET	53	49685	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.716249943 CET	51464	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.716249943 CET	59695	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.718055010 CET	63860	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.718487978 CET	52985	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.788033009 CET	65295	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.788862944 CET	61643	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.788862944 CET	65256	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.789133072 CET	64548	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.816509962 CET	53	59695	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.816555023 CET	53	51464	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.816771030 CET	53	63860	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.818207026 CET	53	52985	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.886826038 CET	53	65295	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.888166904 CET	53	61643	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.888196945 CET	53	64548	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.888915062 CET	53	65256	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:41.946681023 CET	64541	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:41.947441101 CET	51432	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:42.044886112 CET	53	64541	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:42.045989037 CET	53	51432	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:42.489569902 CET	55401	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:42.489694118 CET	64599	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:42.587789059 CET	53	64599	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:42.587989092 CET	53	55401	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:42.629036903 CET	58500	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:42.629131079 CET	63282	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:42.629585981 CET	55320	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:42.629779100 CET	64510	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:42.727371931 CET	53	64510	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:42.728712082 CET	53	58500	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:42.729125977 CET	53	55320	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:42.773170948 CET	53	63282	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:43.160118103 CET	62415	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:43.160440922 CET	61882	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:43.170017958 CET	53	55796	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:43.225568056 CET	52035	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:43.225569010 CET	50422	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:43.263612986 CET	53	61882	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:43.263634920 CET	53	62415	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:43.325871944 CET	53	52035	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:43.368848085 CET	53	50422	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:43.555500031 CET	53890	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:43.555500984 CET	55849	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:43.655416965 CET	53	53890	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:43.661273003 CET	53	55849	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:44.646317959 CET	53	52494	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:45.804856062 CET	51854	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:45.805331945 CET	65314	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:45.903242111 CET	53	51854	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:45.904077053 CET	53	65314	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:47.354439974 CET	50972	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:47.354566097 CET	60494	53	192.168.2.5	1.1.1.1
Mar 20, 2025 12:03:47.454859972 CET	53	50972	1.1.1.1	192.168.2.5
Mar 20, 2025 12:03:47.455655098 CET	53	60494	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 20, 2025 12:02:34.435147047 CET	192.168.2.5	1.1.1.1	c223	(Port unreachable)	Destination Unreachable
Mar 20, 2025 12:02:36.805912018 CET	192.168.2.5	1.1.1.1	c223	(Port unreachable)	Destination Unreachable
Mar 20, 2025 12:02:39.047399998 CET	192.168.2.5	1.1.1.1	c220	(Port unreachable)	Destination Unreachable
Mar 20, 2025 12:02:55.772896051 CET	192.168.2.5	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Mar 20, 2025 12:02:57.565578938 CET	192.168.2.5	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Mar 20, 2025 12:03:11.070982933 CET	192.168.2.5	1.1.1.1	c23c	(Port unreachable)	Destination Unreachable
Mar 20, 2025 12:03:39.582084894 CET	192.168.2.5	1.1.1.1	c27a	(Port unreachable)	Destination Unreachable
Mar 20, 2025 12:03:42.773365974 CET	192.168.2.5	1.1.1.1	c289	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:34.207070112 CET	436	OUT	GET / HTTP/1.1 Host: camsapi.camsoline.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:34.307723045 CET	1257	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:33 GMT content-type: text/html; charset=utf-8 content-length: 1062 x-request-id: 658efe83-b969-4d8f-a3b8-227fc2a18060 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_nLi9hXTfhowdy04hfhcyQD8MDDr4b3jkVSEl84gBJG7+9DaQdND7TQmreP7ZqNMB7pjPKPChGya+wo2qWsf78Q== set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:34 GMT; path=/ Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 6e 4c 69 39 68 58 54 66 68 6f 77 64 79 30 34 68 66 68 63 79 51 44 38 4d 44 44 72 34 62 33 6a 6b 56 53 45 6c 38 34 67 42 4a 47 37 2b 39 44 61 51 64 4e 44 37 54 51 6d 72 65 50 37 5a 71 4e 4d 42 37 70 6a 50 4b 50 43 68 47 79 61 2b 77 6f 32 71 57 73 66 37 38 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_nLi9hXTfhowdy04hfhcyQD8MDDr4b3jkVSEl84gBJG7+9DaQdND7TQmreP7ZqNMB7pjPKPChGya+wo2qWsf78Q==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect" href="https
Mar 20, 2025 12:02:34.307737112 CET	475	IN	Data Raw: 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a 20 30 22 Data Ascii: ://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjU4ZWZlODMtYjk2OS00ZDhmLWEzYjgtMjI3ZmMyYTE4MDYwIiwicGFnZV90aW1lIjoxNzQyNDY4NTU0LCJwYWdlX3VybCI6Imh0dHA6Ly9jYW1zYXBpLm
Mar 20, 2025 12:02:34.311556101 CET	475	IN	Data Raw: 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a 20 30 22 Data Ascii: ://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjU4ZWZlODMtYjk2OS00ZDhmLWEzYjgtMjI3ZmMyYTE4MDYwIiwicGFnZV90aW1lIjoxNzQyNDY4NTU0LCJwYWdlX3VybCI6Imh0dHA6Ly9jYW1zYXBpLm
Mar 20, 2025 12:02:34.331883907 CET	388	OUT	GET /bzISbVNPg.js HTTP/1.1 Host: camsapi.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://camsapi.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060
Mar 20, 2025 12:02:34.430222034 CET	1257	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:33 GMT content-type: application/javascript; charset=utf-8 content-length: 35693 x-request-id: 87e164ed-50e2-4a9c-8039-a717a11132b7 set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:34 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e [TRUNCATED] Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}hasAdblocker(){if(void 0===window.google)return!0
Mar 20, 2025 12:02:34.430237055 CET	1257	IN	Data Raw: 3b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 74 79 6c 65 22 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 2e 73 6f 6d 65 28 28 65 3d 3e 21 21 65 2e 69 6e 6e 65 Data Ascii: ;const e=document.querySelectorAll("style");return Array.from(e).some((e=>!!e.innerHTML.includes("adblockkey")))}handleAdblocked(){this.removeAdblockKey(),this.state=Blocking.BLOCKED}removeAdblockKey(){var e;null===(e=document.documentElement.
Mar 20, 2025 12:02:34.430247068 CET	1257	IN	Data Raw: 70 74 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 74 3f 7b 22 58 2d 48 4f 53 54 22 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: pt:"application/json","Content-Type":"application/json"},t?{"X-HOST":window.location.host}:{});return fetch(s,{method:"POST",headers:o,credentials:a}).then((e=>e.text())).then(decode$1)};var ZeroClickReasons;!function(e){e.CAF_TIMEDOUT="caf_ti
Mar 20, 2025 12:02:34.430258989 CET	1257	IN	Data Raw: 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 42 32 42 32 42 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 5c 6e 7d 5c 6e 5c 6e 62 6f 64 79 20 7b 5c 6e 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 39 30 25 3b 5c 6e 20 20 Data Ascii: background-color: #2B2B2B;\n height: 100%;\n}\n\nbody {\n min-height: 90%;\n font-family: Arial, sans-serif;\n letter-spacing: 1.2px;\n color: #ccc;\n text-align: center;\n}\n\n/* App Target - This starts hidden until we apply a class
Mar 20, 2025 12:02:34.430269003 CET	1257	IN	Data Raw: 70 78 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 5c 6e 2f 2a 20 45 6c 6c 69 70 73 69 73 20 4c 6f 61 64 65 72 20 2a 2f 5c 6e 5c 6e 2e Data Ascii: px 1px 0 rgba(0, 0, 0, 0.5);\n background: none;\n}\n\n/* Ellipsis Loader */\n\n.pk-loader {\n display: inline-block;\n position: relative;\n width: 80px;\n height: 80px;\n}\n\n.pk-loader div {\n position: absolute;\n top: 33px;\n widt
Mar 20, 2025 12:02:34.430279016 CET	1257	IN	Data Raw: 66 72 61 6d 65 73 20 70 6b 2d 61 6e 69 6d 2d 31 20 7b 5c 6e 20 20 30 25 20 7b 5c 6e 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 3b 5c 6e 20 20 7d 5c 6e 20 20 31 30 30 25 20 7b 5c 6e 20 20 20 20 20 20 74 72 61 6e 73 Data Ascii: frames pk-anim-1 {\n 0% {\n transform: scale(0);\n }\n 100% {\n transform: scale(1);\n }\n}\n\n@keyframes pk-anim-2 {\n 0% {\n transform: translate(0, 0);\n }\n 100% {\n transform: translate(24px, 0);\n }\n}\n';cons
Mar 20, 2025 12:02:34.430310965 CET	806	IN	Data Raw: 48 54 4d 4c 3d 65 29 7d 74 26 26 74 68 69 73 2e 69 6e 6a 65 63 74 4d 65 74 61 44 65 73 63 72 69 70 74 69 6f 6e 28 74 29 7d 69 6e 6a 65 63 74 4d 65 73 73 61 67 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 Data Ascii: HTML=e)}t&&this.injectMetaDescription(t)}injectMessage(e){const t=document.querySelector(MESSAGE_TARGET);t?t.innerHTML=e:this.domNode&&(this.domNode.innerHTML=e)}salesBanner(e){if(!e)return;const{href:t,position:n,message:i,theme:s,status:a}=e
Mar 20, 2025 12:02:34.430321932 CET	1257	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6b 2d 6c 6f 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 3e 3c 2f Data Ascii: <div class="pk-loader">\n <div></div>\n <div></div>\n <div></div>\n <div></div>\n </div>\n <div class="pk-loader-text hidden-xs">\n Page loading in ${t} seconds, please wait...\n </div>\n `)
Mar 20, 2025 12:02:34.430332899 CET	1257	IN	Data Raw: 63 72 69 70 74 22 29 3b 74 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 74 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 69 6e 6a 65 63 74 4a 53 28 6a 73 29 Data Ascii: cript");t.type="text/javascript",t.src=e,document.body.appendChild(t)}injectJS(js){js&&0!==js.length&&eval(js)}injectHTML(e){this.domNode?(e&&(this.domNode.innerHTML=e),this.domIsReady=!0):(this.domIsReady=!1,console.error("An error occurred w
Mar 20, 2025 12:02:34.443101883 CET	482	OUT	POST /_fd HTTP/1.1 Host: camsapi.camsoline.com Connection: keep-alive Content-Length: 0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json Content-Type: application/json Origin: http://camsapi.camsoline.com Referer: http://camsapi.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060
Mar 20, 2025 12:02:34.545613050 CET	1257	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:33 GMT content-type: application/json; charset=utf-8 content-length: 5337 x-request-id: 15cfba32-2e24-4dee-bcfa-8bbbe7cb1113 set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:34 GMT Data Raw: 55 78 46 64 56 4d 77 4e 46 4e 77 4e 30 77 7a 4f 44 45 79 62 56 65 79 4a 69 62 47 39 6a 61 33 4d 69 4f 6c 74 37 49 6d 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 36 49 6e 4a 7a 49 69 77 69 62 6e 56 74 59 6d 56 79 49 6a 6f 7a 4c 43 4a 30 65 58 42 6c 49 6a 6f 69 63 6d 56 73 59 58 52 6c 5a 48 4e 6c 59 58 4a 6a 61 43 49 73 49 6e 56 70 54 33 42 30 61 57 31 70 65 6d 55 69 4f 6d 5a 68 62 48 4e 6c 66 53 78 37 49 6d 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 36 49 6d 46 6b 4c 54 45 69 4c 43 4a 75 64 57 31 69 5a 58 49 69 4f 6a 4d 73 49 6e 52 35 63 47 55 69 4f 69 4a 68 5a 48 4d 69 4c 43 4a 31 61 55 39 77 64 47 6c 74 61 58 70 6c 49 6a 70 6d 59 57 78 7a 5a 58 31 64 4c 43 4a 6a 59 57 35 75 62 33 52 51 59 58 4a 72 49 6a 6f 69 5a 47 6c 7a 59 57 4a 73 5a 57 52 66 5a 32 49 69 4c 43 4a 6a 59 57 35 61 5a 58 4a 76 51 32 78 70 59 32 73 69 4f 6e 52 79 64 57 55 73 49 6d 52 6c 63 32 74 30 62 33 41 69 4f 6e 52 79 64 57 55 73 49 6d 52 76 62 57 46 70 62 6b 35 68 62 57 55 69 4f 69 4a 6a 59 57 31 7a 62 32 78 70 62 6d 55 75 59 32 39 74 49 [TRUNCATED] Data Ascii: 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
Mar 20, 2025 12:02:36.785238981 CET	577	OUT	POST /_zc HTTP/1.1 Host: camsapi.camsoline.com Connection: keep-alive Content-Length: 5837 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json Content-Type: application/json Origin: http://camsapi.camsoline.com Referer: http://camsapi.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ
Mar 20, 2025 12:02:36.903337955 CET	662	IN	HTTP/1.1 200 OK server: openresty date: Thu, 20 Mar 2025 11:02:36 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 179 cache-control: no-cache x-version: 2.145.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:36 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 1d cc 4d 0f 82 20 1c 80 f1 af 84 5a 6d 1d 3a 54 2a ca 14 97 19 f8 e7 26 d9 26 82 d6 a6 0d e5 d3 f7 72 7b 2e bf e7 b6 c4 2d cb 2d 8d a9 a5 c8 ba 22 8c 56 c9 1e 2b 59 05 8f 9d f4 37 aa 50 64 94 fe 7e 94 98 9d 44 42 31 70 33 b5 35 31 a9 b2 ea 3e 30 dd 7c 1b 82 8b 2a 86 ad 27 b1 9d d2 31 f6 44 cd 4c ed 1b 9d f6 4f 25 42 b0 79 a8 03 a8 60 06 77 b4 b9 42 88 72 d1 67 95 76 39 8e 66 f0 a9 a6 ce 18 18 ca ae a8 60 fd 7f f1 cf be de 2d 5f a6 ec 4c 54 c3 cb 4e 5e d3 9d 1c d9 24 13 74 f8 00 3d de c6 d6 b5 00 00 00 Data Ascii: M Zm:T&&r{.--"V+Y7Pd~DB1p351>0\|'1DLO%By`wBrgv9f`-_LTN^$t=
Mar 20, 2025 12:02:36.912337065 CET	577	OUT	POST /_tr HTTP/1.1 Host: camsapi.camsoline.com Connection: keep-alive Content-Length: 2109 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json Content-Type: application/json Origin: http://camsapi.camsoline.com Referer: http://camsapi.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ
Mar 20, 2025 12:02:37.010693073 CET	281	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:36 GMT content-type: application/json; charset=utf-8 content-length: 2 x-request-id: 941b3e2a-c548-45c6-a6d6-5b8bd43efe18 set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:36 GMT Data Raw: 6f 6b Data Ascii: ok

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:34.888932943 CET	339	OUT	GET /_fd HTTP/1.1 Host: camsapi.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060
Mar 20, 2025 12:02:34.994129896 CET	1200	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:34 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: 1f5659f5-ded0-4070-a7de-16253a2bce03 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_SSjgzrKzqSGGFxyddNnjRbNe77xskHpWWd8R7OMgfnLYVY5XtbZ0nBa+SDzC1FvBop8BFD90WSG69v6grd5Wwg== set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:34 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 53 53 6a 67 7a 72 4b 7a 71 53 47 47 46 78 79 64 64 4e 6e 6a 52 62 4e 65 37 37 78 73 6b 48 70 57 57 64 38 52 37 4f 4d 67 66 6e 4c 59 56 59 35 58 74 62 5a 30 6e 42 61 2b 53 44 7a 43 31 46 76 42 6f 70 38 42 46 44 39 30 57 53 47 36 39 76 36 67 72 64 35 57 77 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_SSjgzrKzqSGGFxyddNnjRbNe77xskHpWWd8R7OMgfnLYVY5XtbZ0nBa+SDzC1FvBop8BFD90WSG69v6grd5Wwg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Mar 20, 2025 12:02:34.994178057 CET	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjU4ZWZlODMtYjk2OS00ZDhmLWEzYjgtMjI3ZmMyYTE4MDYwIiwicGFnZV90aW1lIjoxN
Mar 20, 2025 12:02:35.002242088 CET	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjU4ZWZlODMtYjk2OS00ZDhmLWEzYjgtMjI3ZmMyYTE4MDYwIiwicGFnZV90aW1lIjoxN
Mar 20, 2025 12:02:36.910254955 CET	431	OUT	GET /_zc HTTP/1.1 Host: camsapi.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ
Mar 20, 2025 12:02:37.006719112 CET	1200	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:36 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: f1f34688-7965-4c6c-9eb6-5abdf77e1d13 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_IPAhahq/6V0NBtxBXUTVqM36ISqthx7QS8Aq3hA4n160BB6Ufn4ylrYBAjXyE86d0cRbzaC4ScvNhauFTnzFsw== set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:36 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 49 50 41 68 61 68 71 2f 36 56 30 4e 42 74 78 42 58 55 54 56 71 4d 33 36 49 53 71 74 68 78 37 51 53 38 41 71 33 68 41 34 6e 31 36 30 42 42 36 55 66 6e 34 79 6c 72 59 42 41 6a 58 79 45 38 36 64 30 63 52 62 7a 61 43 34 53 63 76 4e 68 61 75 46 54 6e 7a 46 73 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_IPAhahq/6V0NBtxBXUTVqM36ISqthx7QS8Aq3hA4n160BB6Ufn4ylrYBAjXyE86d0cRbzaC4ScvNhauFTnzFsw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Mar 20, 2025 12:02:37.006731987 CET	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjU4ZWZlODMtYjk2OS00ZDhmLWEzYjgtMjI3ZmMyYTE4MDYwIiwicGFnZV90aW1lIjoxN
Mar 20, 2025 12:02:37.013696909 CET	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjU4ZWZlODMtYjk2OS00ZDhmLWEzYjgtMjI3ZmMyYTE4MDYwIiwicGFnZV90aW1lIjoxN
Mar 20, 2025 12:02:37.014321089 CET	431	OUT	GET /_tr HTTP/1.1 Host: camsapi.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ
Mar 20, 2025 12:02:37.114531994 CET	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjU4ZWZlODMtYjk2OS00ZDhmLWEzYjgtMjI3ZmMyYTE4MDYwIiwicGFnZV90aW1lIjoxN
Mar 20, 2025 12:02:37.114551067 CET	1200	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:36 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: e07a1431-308f-4a7d-832d-4a30b0d4346b cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_B6Kp3cHvSEsAfLaMBtb+DUTbma6x0XTTlfxLQb5YZTXC7lCuLLMC0gakV/DM8C26yDGNIkNbvSdGOWns7jtwAg== set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:37 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 42 36 4b 70 33 63 48 76 53 45 73 41 66 4c 61 4d 42 74 62 2b 44 55 54 62 6d 61 36 78 30 58 54 54 6c 66 78 4c 51 62 35 59 5a 54 58 43 37 6c 43 75 4c 4c 4d 43 30 67 61 6b 56 2f 44 4d 38 43 32 36 79 44 47 4e 49 6b 4e 62 76 53 64 47 4f 57 6e 73 37 6a 74 77 41 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_B6Kp3cHvSEsAfLaMBtb+DUTbma6x0XTTlfxLQb5YZTXC7lCuLLMC0gakV/DM8C26yDGNIkNbvSdGOWns7jtwAg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Mar 20, 2025 12:02:37.117630959 CET	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjU4ZWZlODMtYjk2OS00ZDhmLWEzYjgtMjI3ZmMyYTE4MDYwIiwicGFnZV90aW1lIjoxN
Mar 20, 2025 12:02:37.204472065 CET	1200	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:36 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: e07a1431-308f-4a7d-832d-4a30b0d4346b cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_B6Kp3cHvSEsAfLaMBtb+DUTbma6x0XTTlfxLQb5YZTXC7lCuLLMC0gakV/DM8C26yDGNIkNbvSdGOWns7jtwAg== set-cookie: parking_session=658efe83-b969-4d8f-a3b8-227fc2a18060; expires=Thu, 20 Mar 2025 11:17:37 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 42 36 4b 70 33 63 48 76 53 45 73 41 66 4c 61 4d 42 74 62 2b 44 55 54 62 6d 61 36 78 30 58 54 54 6c 66 78 4c 51 62 35 59 5a 54 58 43 37 6c 43 75 4c 4c 4d 43 30 67 61 6b 56 2f 44 4d 38 43 32 36 79 44 47 4e 49 6b 4e 62 76 53 64 47 4f 57 6e 73 37 6a 74 77 41 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_B6Kp3cHvSEsAfLaMBtb+DUTbma6x0XTTlfxLQb5YZTXC7lCuLLMC0gakV/DM8C26yDGNIkNbvSdGOWns7jtwAg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:39.939104080 CET	649	OUT	GET /?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I HTTP/1.1 Host: ww01.camsoline.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://camsapi.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ
Mar 20, 2025 12:02:41.656039953 CET	1220	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 11:02:35 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Set-Cookie: vsid=903vr490014156221946725; expires=Tue, 19-Mar-2030 11:02:36 GMT; Max-Age=157680000; path=/; domain=ww01.camsoline.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_ifS3PTDuPlaqfhzqddrKJeqz+zwHsS0diuyJ0cdQxycopsslhwNvYqrReFy0WcZc07K2Qlrq6wH5frhb8Qvl2Q== Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 61 35 34 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: a542<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel
Mar 20, 2025 12:02:41.656059027 CET	1220	IN	Data Raw: 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e Data Ascii: ="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|w
Mar 20, 2025 12:02:41.656140089 CET	1220	IN	Data Raw: 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 5b 62 5d 2e 6c 29 7d 7d 7d 72 65 74 75 72 6e 20 61 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 69 66 28 74 79 70 65 6f 66 Data Ascii: dow.cmp_customlanguages[b].l)}}}return a};window.cmp_getlang=function(j){if(typeof(j)!="boolean"){j=true}if(j&&typeof(cmp_getlang.usedlang)=="string"&&cmp_getlang.usedlang!==""){return cmp_getlang.usedlang}var g=window.cmp_getsupportedLangs();
Mar 20, 2025 12:02:41.656289101 CET	1220	IN	Data Raw: 20 62 3d 22 5f 65 6e 22 3b 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 68 29 7b 6f 3d 68 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 Data Ascii: b="_en";if("cmp_getlang" in h){o=h.cmp_getlang().toLowerCase();if("cmp_customlanguages" in h){for(var q=0;q<h.cmp_customlanguages.length;q++){if(h.cmp_customlanguages[q].l.toUpperCase()==o.toUpperCase()){o="en";break}}}b="_"+o}function x(i,e)
Mar 20, 2025 12:02:41.656510115 CET	1220	IN	Data Raw: 65 79 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 3a 22 22 29 2b 28 6e 21 3d 22 22 3f 22 26 63 6d 70 61 74 74 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 3a 22 22 29 2b 28 22 63 6d 70 5f 70 Data Ascii: ey="+encodeURIComponent(r):"")+(n!=""?"&cmpatt="+encodeURIComponent(n):"")+("cmp_params" in h?"&"+h.cmp_params:"")+(u.cookie.length>0?"&__cmpfcc=1":"")+"&l="+o.toLowerCase()+"&o="+(new Date()).getTime();j.type="text/javascript";j.async=true;if
Mar 20, 2025 12:02:41.656523943 CET	1220	IN	Data Raw: 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 7d 29 28 29 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 Data Ascii: ngth==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}})();window.cmp_addFrame=function(b){if(!window.frames[b]){if(document.body){var a=document.createElement("iframe");a.style.cssText="display:none";if("cmp_cdn" in window&&"cmp_ultrabloc
Mar 20, 2025 12:02:41.656698942 CET	1220	IN	Data Raw: 65 7b 69 66 28 61 5b 30 5d 3d 3d 3d 22 67 65 74 55 53 50 44 61 74 61 22 29 7b 61 5b 32 5d 28 7b 76 65 72 73 69 6f 6e 3a 31 2c 75 73 70 53 74 72 69 6e 67 3a 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 28 22 22 29 7d 2c 74 72 75 65 29 7d 65 6c 73 65 7b Data Ascii: e{if(a[0]==="getUSPData"){a[2]({version:1,uspString:window.cmp_rc("")},true)}else{if(a[0]==="getTCData"){__cmp.a.push([].slice.apply(a))}else{if(a[0]==="addEventListener"\|\|a[0]==="removeEventListener"){__cmp.a.push([].slice.apply(a))}else{if(a
Mar 20, 2025 12:02:41.656728029 CET	1220	IN	Data Raw: 74 47 50 50 44 61 74 61 22 29 7b 72 65 74 75 72 6e 7b 73 65 63 74 69 6f 6e 49 64 3a 33 2c 67 70 70 56 65 72 73 69 6f 6e 3a 31 2c 73 65 63 74 69 6f 6e 4c 69 73 74 3a 5b 5d 2c 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 3a 5b 30 5d 2c 67 Data Ascii: tGPPData"){return{sectionId:3,gppVersion:1,sectionList:[],applicableSections:[0],gppString:"",pingData:window.cmp_gpp_ping()}}else{if(g==="hasSection"\|\|g==="getSection"\|\|g==="getField"){return null}else{__gpp.q.push([].slice.apply(a))}}}}}};wi
Mar 20, 2025 12:02:41.656740904 CET	1220	IN	Data Raw: 72 65 74 75 72 6e 56 61 6c 75 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 Data Ascii: returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")},"parameter" in b?b.parameter:null,"version" in b?b.version:1)}};window.cmp_setStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeo
Mar 20, 2025 12:02:41.656884909 CET	1220	IN	Data Raw: 65 75 73 70 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 21 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 69 73 61 62 6c 65 75 73 70 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 53 74 75 62 28 22 5f 5f 75 73 70 61 70 69 22 29 7d 69 66 28 21 28 22 63 6d 70 Data Ascii: eusp" in window)\|\|!window.cmp_disableusp){window.cmp_setStub("__uspapi")}if(!("cmp_disablegpp" in window)\|\|!window.cmp_disablegpp){window.cmp_setGppStub("__gpp")};</script><script type="text/javascript">var abp;</script><script type="text/java
Mar 20, 2025 12:02:41.791032076 CET	1220	IN	Data Raw: 22 74 65 78 74 2f 63 73 73 22 3e 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 22 3b 73 72 63 3a 20 75 72 6c 28 22 68 74 74 70 3a 2f 2f 69 31 2e 63 64 6e Data Ascii: "text/css">@font-face {font-family: "montserrat-regular";src: url("http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot");src: url("http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eo
Mar 20, 2025 12:02:44.917048931 CET	699	OUT	GET /favicon.ico HTTP/1.1 Host: ww01.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725; __cmpcccx68884=aCQOl5o-AA-MBdpiY1k0GNWplGiMoIxRpqTGFZQWAaEIwVoYDOiClejCAGGGO-nmkUwzrzNYhdE_SBG9EJfNwkRuJKO8Kinm
Mar 20, 2025 12:02:45.059355974 CET	667	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 11:02:40 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Content-Length: 10 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon
Mar 20, 2025 12:02:53.898329020 CET	3340	OUT	GET /Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU%2FI%2B5a%2BdxyaD%2FUHIAY%2B0wr [TRUNCATED] Host: ww01.camsoline.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725; __cmpcccx68884=aCQOl5o-AA-MBdpiY1k0GNWplGiMoIxRpqTGFZQWAaEIwVoYDOiClejCAGGGO-nmkUwzrzNYhdE_SBG9EJfNwkRuJKO8Kinm
Mar 20, 2025 12:02:55.422333002 CET	1220	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 11:02:49 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_naTUafnZYZURoTIsND5K9U3hAeccT4ltWa0l/lTSovpIpO6iGnMmSIegITLfQAV3tQ/T+kH6+hRDHZpBxXNuPg== Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 36 39 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 Data Ascii: 969b<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:41.733234882 CET	524	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ww01.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725
Mar 20, 2025 12:02:41.868213892 CET	854	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 11:02:37 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Content-Length: 196 Keep-Alive: timeout=5, max=126 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Mar 20, 2025 12:02:55.550929070 CET	3112	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ww01.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU% [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725; __cmpcccx68884=aCQOl5o-AA-MBdpiY1k0GNWplGiMoIxRpqTGFZQWAaEIwVoYDOiClejCAGGGO-nmkUwzrzNYhdE_SBG9EJfNwkRuJKO8Kinm
Mar 20, 2025 12:02:55.693818092 CET	1085	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 11:02:51 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Mar 20, 2025 12:03:06.000864029 CET	6456	OUT	GET /trf?q=Mutual+Fund+Statements&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9NGVjdjdsMWp0bnRldSZ1dD0xNzQyNDY4NTc0NTI5JnVvPTgyNjY5OTE4MjAxNDI0Jmx0PTImcz0yJmVzPU1WZWVrMnU3ZWFpb0VWN1ZWMkZWSGpRam1EQkRWSG0xV1JMSDFabDc4WUNQcHVfbVJfSENVV2FiUy5nd1hLNzllQ0FjcUdqekh5dGdjdy0t%2FRV%3D2%2FRE%3D1745060574%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8Z0xqyFQWWD8wvkV_pKc9xzVUCUwD03gwyY1vECbRsDCKDouj8T-oZnVsUa06PP0LdkkYkee1dIjotDq6SySIzKXTJDLffUTCfWQ2dFNWWV_MtVEpjUoifon6irH4fdSYNUiZlbbYaBJzTTn8f_OY_67dtwPIERyfL-sXBXQ6GluFPluX%2526u%253daHR0cHMlM2ElMmYlMmZmYXFzc3RyZWV0LmNvbSUyZnRvcGljJTJmMjAlMmYlM2ZzbWFoJTNkSzY4NTVpNSUyNnV0bV90ZXJtJTNkTXV0dWFsJTI1MjBGdW5kJTI1MjBTdGF0ZW1lbnRzJTI2dXRtX21lZGl1bSUzZHAlMjZnX3RpJTNka3dkLTgyNjcwOTA5NzczOTI1JTNhbG9jLTE5MCUyNmdfZGUlM2RjJTI2Z19jaSUzZDUyMjAyNDY2MiUyNmdfYWklM2QxMzIyNzE0OTUxNDQyODg5JTI2dXRtX2NvbnRlbnQlM2QxJTI2ZWt3JTNkbVc4elRIN1lvazVleTVYT3dCNk9NUSUyNTNEJTI1M0QlMjZyYWMlM2ROZWVkJTJiSW5mbyUyYk9uJTJiTXV0dWFsJTJiRnVuZHMlMmJHdWlkZSUzZiUyYlZpc2l0JTJiSGVyZSElMjZ [TRUNCATED] Host: ww01.camsoline.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU% [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725; __cmpcccx68884=aCQOl5q5AA-MBdpiY1k0GNWplGiMoIxRpqTGFZQWAaEIwVoYDOiClejCAGGGO-nmkUwzrzNYhdE_SBG9EJfNwkRuJKO8Kinm
Mar 20, 2025 12:03:06.809909105 CET	1220	IN	HTTP/1.1 302 Found Date: Thu, 20 Mar 2025 11:03:01 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Location: https://r.search.yahoo.com/rdclk/dWU9NGVjdjdsMWp0bnRldSZ1dD0xNzQyNDY4NTc0NTI5JnVvPTgyNjY5OTE4MjAxNDI0Jmx0PTImcz0yJmVzPU1WZWVrMnU3ZWFpb0VWN1ZWMkZWSGpRam1EQkRWSG0xV1JMSDFabDc4WUNQcHVfbVJfSENVV2FiUy5nd1hLNzllQ0FjcUdqekh5dGdjdy0t/RV=2/RE=1745060574/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8Z0xqyFQWWD8wvkV_pKc9xzVUCUwD03gwyY1vECbRsDCKDouj8T-oZnVsUa06PP0LdkkYkee1dIjotDq6SySIzKXTJDLffUTCfWQ2dFNWWV_MtVEpjUoifon6irH4fdSYNUiZlbbYaBJzTTn8f_OY_67dtwPIERyfL-sXBXQ6GluFPluX%26u%3daHR0cHMlM2ElMmYlMmZmYXFzc3RyZWV0LmNvbSUyZnRvcGljJTJmMjAlMmYlM2ZzbWFoJTNkSzY4NTVpNSUyNnV0bV90ZXJtJTNkTXV0dWFsJTI1MjBGdW5kJTI1MjBTdGF0ZW1lbnRzJTI2dXRtX21lZGl1bSUzZHAlMjZnX3RpJTNka3dkLTgyNjcwOTA5NzczO Data Raw: Data Ascii:
Mar 20, 2025 12:03:06.809937954 CET	519	IN	Data Raw: 49 31 4a 54 4e 68 62 47 39 6a 4c 54 45 35 4d 43 55 79 4e 6d 64 66 5a 47 55 6c 4d 32 52 6a 4a 54 49 32 5a 31 39 6a 61 53 55 7a 5a 44 55 79 4d 6a 41 79 4e 44 59 32 4d 69 55 79 4e 6d 64 66 59 57 6b 6c 4d 32 51 78 4d 7a 49 79 4e 7a 45 30 4f 54 55 78 Data Ascii: I1JTNhbG9jLTE5MCUyNmdfZGUlM2RjJTI2Z19jaSUzZDUyMjAyNDY2MiUyNmdfYWklM2QxMzIyNzE0OTUxNDQyODg5JTI2dXRtX2NvbnRlbnQlM2QxJTI2ZWt3JTNkbVc4elRIN1lvazVleTVYT3dCNk9NUSUyNTNEJTI1M0QlMjZyYWMlM2ROZWVkJTJiSW5mbyUyYk9uJTJiTXV0dWFsJTJiRnVuZHMlMmJHdWlkZSUzZiUyY
Mar 20, 2025 12:03:06.848913908 CET	519	IN	Data Raw: 49 31 4a 54 4e 68 62 47 39 6a 4c 54 45 35 4d 43 55 79 4e 6d 64 66 5a 47 55 6c 4d 32 52 6a 4a 54 49 32 5a 31 39 6a 61 53 55 7a 5a 44 55 79 4d 6a 41 79 4e 44 59 32 4d 69 55 79 4e 6d 64 66 59 57 6b 6c 4d 32 51 78 4d 7a 49 79 4e 7a 45 30 4f 54 55 78 Data Ascii: I1JTNhbG9jLTE5MCUyNmdfZGUlM2RjJTI2Z19jaSUzZDUyMjAyNDY2MiUyNmdfYWklM2QxMzIyNzE0OTUxNDQyODg5JTI2dXRtX2NvbnRlbnQlM2QxJTI2ZWt3JTNkbVc4elRIN1lvazVleTVYT3dCNk9NUSUyNTNEJTI1M0QlMjZyYWMlM2ROZWVkJTJiSW5mbyUyYk9uJTJiTXV0dWFsJTJiRnVuZHMlMmJHdWlkZSUzZiUyY

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:41.859358072 CET	524	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ww01.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725
Mar 20, 2025 12:02:42.004582882 CET	854	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 11:02:37 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Content-Length: 196 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Mar 20, 2025 12:02:55.550381899 CET	3112	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ww01.camsoline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU% [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=2a82b5d3ecd6969a:T=1742468555:RT=1742468555:S=ALNI_MYis7htYnzwfdmtNs76b8JJJ3iaKQ; vsid=903vr490014156221946725; __cmpcccx68884=aCQOl5o-AA-MBdpiY1k0GNWplGiMoIxRpqTGFZQWAaEIwVoYDOiClejCAGGGO-nmkUwzrzNYhdE_SBG9EJfNwkRuJKO8Kinm
Mar 20, 2025 12:02:55.685990095 CET	1085	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 11:02:51 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Mar 20, 2025 12:03:40.699264050 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:42.203756094 CET	406	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:42.342698097 CET	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:37 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Fri, 30 Aug 2024 19:35:17 GMT Connection: keep-alive ETag: "66d21ef5-20f3" Expires: Thu, 03 Apr 2025 11:02:37 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:42.342822075 CET	1220	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Mar 20, 2025 12:02:42.342840910 CET	1220	IN	Data Raw: 44 61 74 65 2c 6f 3d 6e 2e 67 65 74 59 65 61 72 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b Data Ascii: Date,o=n.getYear();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+
Mar 20, 2025 12:02:42.342855930 CET	1220	IN	Data Raw: 61 3d 6e 65 77 20 62 72 64 61 74 61 29 2c 65 3d 22 6b 77 63 6c 6b 22 3d 3d 74 3f 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 Data Ascii: a=new brdata),e="kwclk"==t?escape(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.coo
Mar 20, 2025 12:02:42.342873096 CET	1220	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 55 52 4c 42 72 6f 77 73 65 72 44 61 74 61 28 29 2b 74 68 69 73 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 72 6d Data Ascii: n(){return this.getURLBrowserData()+this.getMousePositionData()}};function confirmToOptOut(){var t;optOut=confirm("You will not be able to see any ads or websearches."),optOut&&((t=new Date).setTime(t.getTime()+31536e6),t="; expires="+t.toGMTS
Mar 20, 2025 12:02:42.342889071 CET	1220	IN	Data Raw: 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 26 26 28 65 3d 74 68 69 73 Data Ascii: .clientWidth:this._Top.document.body&&this._Top.document.body.clientWidth&&(e=this._Top.document.body.clientWidth)}catch(t){e=0}return e},_wt:function(){return this._Top?null!=this._Top.window.screenTop?this._Top.window.screenTop:this._Top.win
Mar 20, 2025 12:02:42.342905045 CET	1220	IN	Data Raw: 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6d 73 69 65 22 29 3c 31 26 26 6f 70 65 6e 65 72 2e 77 69 6e 64 6f 77 2e 66 6f 63 75 73 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 64 72 7c Data Ascii: tor.userAgent.toLowerCase().indexOf("msie")<1&&opener.window.focus()}catch(t){}dr\|\|(window.location=t)},Main()},_npW.Params={dUrl:url},_npW.Init(_npW)),_npW}};function renderFACP(t){if("ex"==t)return!1;if(1!=showPop\|\|"undefined"==typeof __pp\|\|
Mar 20, 2025 12:02:42.476569891 CET	1115	IN	Data Raw: 49 45 28 29 26 26 28 65 3d 73 68 64 73 70 28 74 29 29 2c 65 7c 7c 22 6c 64 22 3d 3d 74 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 2e 75 26 26 5f 5f 70 70 2e 6b 70 2e 75 26 26 30 Data Ascii: IE()&&(e=shdsp(t)),e\|\|"ld"==t\|\|(void 0!==__pp.kp&&void 0!==__pp.kp.u&&__pp.kp.u&&0<__pp.kp.u.length&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p,"ex"==t)),shldp("ld
Mar 20, 2025 12:02:42.500036001 CET	395	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:42.641190052 CET	1220	IN	Data Raw: 6c d7 c4 aa b9 ad 77 5b 5f 7a 4e ec 59 58 13 33 a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c Data Ascii: lw[_zNYX3V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#
Mar 20, 2025 12:02:42.641213894 CET	1220	IN	Data Raw: 92 cb fb 68 f5 7a de 6d a2 9b c4 49 2e 16 43 5f c6 44 43 62 62 63 d1 e6 f3 d7 47 3c 3a 7b 6e 2e d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 Data Ascii: hzmI.C_DCbbcG<:{n.LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0)
Mar 20, 2025 12:02:42.641225100 CET	1220	IN	Data Raw: b0 f9 74 22 fc cf 4f f2 e5 3e f6 a3 a5 52 e9 0b 88 21 00 d8 c5 1a d1 12 36 a3 4e 04 62 00 ec 5e 8d e8 08 9b f2 ad 00 62 00 ec de 4f 95 35 d4 a6 d4 89 2b 20 00 60 f7 69 44 4f d8 9c 3a 11 53 cb 77 06 3e 52 6e ba 01 0f 1c c4 b5 31 a7 2c 0a 7e 92 05 Data Ascii: t"O>R!6Nb^bO5+ `iDO:Sw>Rn1,~oJ1hD.!#8}0'".4OD\:fl4"I,"!.I) $@sj*1cAHB#Ju"zbK7;@"r-%1>1fR%&gxDk5(\
Mar 20, 2025 12:02:42.786139965 CET	329	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:38 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 03 Apr 2025 11:02:38 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:42.632879019 CET	398	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:42.766932964 CET	326	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:38 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Thu, 03 Apr 2025 11:02:38 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:42.766952038 CET	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Mar 20, 2025 12:03:27.775199890 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:42.658169031 CET	393	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Origin: http://ww01.camsoline.com Accept: / Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:42.792124987 CET	278	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:38 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Mar 20, 2025 12:02:42.792175055 CET	1220	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Mar 20, 2025 12:02:42.792228937 CET	1220	IN	Data Raw: 1e 09 bc 39 68 52 c0 5b 91 88 ac 21 56 fc 58 6f e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 Data Ascii: 9hR[!VXoY~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V
Mar 20, 2025 12:02:42.792248011 CET	1220	IN	Data Raw: 0e 14 ee 04 67 97 7b 19 0f ef e3 21 82 87 39 ea 70 e8 ba 3d 39 63 f7 e4 25 bc 65 58 d1 bc 8c a0 f9 28 3c 43 28 18 e6 72 98 6b 2a 7c 92 95 32 ba 3a 96 cb 7b 78 ca e1 69 01 4f 51 5b 2f 67 f0 b2 84 17 07 bd 73 76 c7 cd 69 c7 97 e4 37 07 ab 15 56 95 Data Ascii: g{!9p=9c%eX(<C(rk\|2:{xiOQ[/gsvi7V,"Va[E`gYF5jm ;Qqa{>ynhciF0::I$UvI2&hwKs`!\|.v+Cx'Q1i#~Qun?'r3TNWeMc
Mar 20, 2025 12:02:42.792268038 CET	1220	IN	Data Raw: de 49 f9 21 28 26 65 90 b5 99 c1 5e 48 c2 ac 65 52 cc 5b 54 76 5a 79 48 ae f1 39 f8 3f 52 7b ad aa 00 00 00 00 01 00 00 00 0a 00 1c 00 1e 00 01 6c 61 74 6e 00 08 00 04 00 00 00 00 ff ff 00 00 00 00 00 00 78 9c 63 60 66 0a 66 da c3 c0 ca c0 c0 d4 Data Ascii: I!(&e^HeR[TvZyH9?R{latnxc`ff@9 E@7@5'~ 9&)@JExWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lf
Mar 20, 2025 12:02:42.792485952 CET	1220	IN	Data Raw: eb 9b 8e 9f c8 65 6b 2e 3e 0f 04 c4 04 05 c5 84 97 4f ea 98 34 09 c6 3a 7c 40 8c b1 b6 7f 90 d3 c8 5f 3f 5c 77 24 c7 85 23 6c 63 a2 59 0f 46 8a 41 ee 23 53 28 4d 66 a5 8b 4c 29 0b 53 24 98 b5 3a 17 b9 17 ae db 64 4c d4 c2 d7 96 bf ee dc a7 0a 5e Data Ascii: ek.>O4:\|@_?\w$#lcYFA#S(MfL)S$:dL^qz@1JUSfTcx&(,u\|kiT4ZBKq831&Dh@{IC$uP{3?+WT//?Azowgr/~8>M@l4Gyveoe{'~Pj
Mar 20, 2025 12:02:42.792505980 CET	1220	IN	Data Raw: 99 53 22 74 9e ea e1 be 51 01 01 9f 38 f0 28 ce b6 99 2f 22 27 b8 68 ce c0 f6 14 3d 44 a8 8b 07 6a aa 59 e9 06 b8 bd d4 c0 c8 45 59 77 91 36 3b 04 15 d1 d3 47 0f 74 87 13 4c e4 89 80 c8 13 c2 b7 4f 9f 5d 37 a3 38 32 62 a5 f9 d4 27 5f 41 c9 c7 b5 Data Ascii: S"tQ8(/"'h=DjYEYw6;GtLO]782b'_A3Z$j`6,qw5AW\|dA^cD/$);aB.Gl q_d0@&dd=nvwS~wl9/O(27`FHEoG,XWVq8q
Mar 20, 2025 12:02:42.792524099 CET	1220	IN	Data Raw: 22 ca b7 c1 08 2a ca 1e 95 5c 0f 0b 84 23 c4 2c ec 83 b6 16 f8 d3 e6 79 42 f2 fd 74 6c b1 6d 39 94 90 5b 8c 97 54 28 d1 2e 41 c9 ba 75 82 8d dc 6a b5 ce 6a e5 57 48 fc 0e c1 31 cc 2e 80 26 b0 1b e6 75 93 5b 56 4a 3e 17 81 f3 23 c5 f9 4a 74 4f b8 Data Ascii: "*\#,yBtlm9[T(.AujjWH1.&u[VJ>#JtOlj%[v2z<?(C<eW1;7YIm%a{Pnv6_`FgaQ6(39reNtT2F-gco^T{SW(nO
Mar 20, 2025 12:02:42.792541027 CET	1220	IN	Data Raw: 69 bd 09 e1 9c 38 8f a4 e2 3c d4 0d 6f a5 b9 cf 7b be 3a b5 ee 89 4b cf 5f 98 33 f3 b1 67 ce 13 ff dd bb 85 9f 84 af f6 ef 07 2f 18 81 73 86 a1 9d 29 14 d7 a2 b4 07 22 22 5d 6e f0 60 69 de 78 6d 84 3c f8 cd 63 1b 36 1c fb 59 31 ed 7a e6 c2 f0 48 Data Ascii: i8<o{:K_3g/s)""]n`ixm<c6Y1zH=#R&3D]xyb8C@nk3Sa:)fyLxxK+d2W-z?b1Dd{3D#OPfDDhc
Mar 20, 2025 12:02:42.792558908 CET	1220	IN	Data Raw: 46 86 f9 a6 24 c6 27 e4 a7 85 a6 c6 66 d5 17 af 46 38 06 18 09 0b d1 ff 2a 86 cc c5 d3 54 fc 44 f0 28 8d 35 4c db 53 a2 4f 4e f0 0d 89 ce f6 2b 20 75 53 0b 6a 47 e7 46 e7 94 98 2a a2 7d e3 fc 46 17 55 31 9a 12 f0 fc 34 11 cf 4f 3c 3b 3f 29 5f d8 Data Ascii: F$'fF8TD(5LSON+ uSjGF}FU14O<;?)_ONYR[>ZSJ(kUy))KkQP\|#j2+O?N^*;O'aK$XCx.jE;n6GQyBlZZ w-1(\|O
Mar 20, 2025 12:02:42.927179098 CET	1220	IN	Data Raw: 36 10 c3 84 60 08 47 b2 95 de 5a 0c 98 75 bc c2 c0 8f be de a3 8b 48 dc 51 50 32 e5 7a 4f 5c 62 ec ce 09 79 65 c2 9e aa a5 79 17 94 b9 4b 93 1e 75 71 83 c6 43 d7 46 b4 1e 8b 3b de 70 e8 da 98 59 87 e3 0f 6d da f8 c7 2c d8 34 5c 48 df f0 bb 6c 61 Data Ascii: 6`GZuHQP2zO\byeyKuqCF;pYm,4\HlaPfA&1UP+9$G;cVyEnsYp7*qRDQLKw}9["p#LX9EUzOUk%K!K-3J`cve-I

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:42.658902884 CET	399	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Origin: http://ww01.camsoline.com Accept: / Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:42.792762995 CET	360	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 20 Mar 2025 11:02:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Mar 20, 2025 12:02:42.801359892 CET	400	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff2 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Origin: http://ww01.camsoline.com Accept: / Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:42.935359955 CET	281	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:38 GMT Content-Type: application/octet-stream Content-Length: 12132 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-2f64" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Mar 20, 2025 12:02:42.935508966 CET	1220	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2f 64 00 10 00 00 00 00 71 40 00 00 2f 02 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 1b a7 46 1c 20 06 60 00 87 06 11 08 0a 81 8f 78 ea 2d 0b 84 10 00 01 36 02 24 Data Ascii: wOF2/dq@/B?FFTMF `x-6$ 4CL[\#@t.OD5[Hd!%-;db9Jhb1Cl7DLa[AA~\|xB0Q(bwNC{D2t#.&
Mar 20, 2025 12:02:42.935525894 CET	1220	IN	Data Raw: 5f f0 8d 35 f7 bf 46 e8 81 10 e4 01 f6 46 54 21 c6 b4 1a cc e8 be aa dc 08 1b ed fb e7 dd ff 63 b7 50 39 7c 38 60 0b 97 39 2e 91 4d f5 ea b6 5e 4d f1 4d 93 d0 95 fe 44 c0 e8 d7 14 75 f5 c5 76 92 0c 0e 28 0a 0c a5 76 eb ed 02 fb 20 89 05 38 a5 6b Data Ascii: _5FFT!cP9\|8`9.M^MMDuv(v 8k71}_b,2/?HkZQL!)[K>0&bMHx]03{/4kH6W:Jb20xiX.>2E[\m)*%o5(6,>K\|LyaL#.4q
Mar 20, 2025 12:02:42.935544014 CET	1220	IN	Data Raw: 78 bc 23 76 a4 17 8c c1 d1 b8 2d 2e b5 20 80 05 45 f7 2f 48 0c 16 99 91 24 d1 0b 03 22 82 dd 16 93 4c bc db 48 67 ac d8 0c 8f 42 bc 60 95 15 fe a0 77 21 b0 78 ad 58 0b 95 16 6c 42 34 aa 6d 8c cf 5a 3c 9e 8f ab 8d 9d 51 18 16 e3 4c 46 0a 97 00 15 Data Ascii: x#v-. E/H$"LHgB`w!xXlB4mZ<QLFiCcjRK=]GI<<@I&a&gNmx!L\|X 0fn\#X:{F9)muSi[6'O5?0!s FbY1!
Mar 20, 2025 12:02:42.935561895 CET	1220	IN	Data Raw: 2d 63 c2 2c 73 cc 6a b2 2c 46 a5 b5 08 11 e1 88 bc 86 a8 a4 6e ea c5 62 97 60 6e 73 0b 5c 95 56 de b9 cf a1 16 cd 93 63 e9 1c b6 5a f4 1a 70 e4 a0 92 cf ab 63 2c 54 3c 90 39 c5 16 e4 8a 94 28 63 0b 33 9a 4f d6 13 3a 05 93 2e c5 25 6e 81 5b 1e af Data Ascii: -c,sj,Fnb`ns\VcZpc,T<9(c3O:.%n[a7)a]%b<+bA[VNdc\|w9;- ,PL8[Tf,!zuH+E br[i'8jX^:/lDo6iknT_?V
Mar 20, 2025 12:02:42.935782909 CET	1220	IN	Data Raw: 22 70 ff 59 61 d9 cf f4 ff df ef 7f b4 f3 1f 0c 66 fa 12 9a b8 c2 53 87 a4 f6 c9 c3 67 03 7f d2 4b 9d 1c 01 32 a2 4f d2 eb 5c 12 db e9 ef 98 1d e4 1a 45 1f 1f a6 95 9f c6 61 22 ca 6d f5 04 03 8b 8c 7a dd dd 1e db c0 34 86 7e 28 e7 c9 cd e9 e6 ac Data Ascii: "pYafSgK2O\Ea"mz4~({;eMc]]CzZfdl".W\|RWZ@Rf\Ie'hw{QS WbAMv:+qM@n8S`]jwdc;x+j?
Mar 20, 2025 12:02:42.935874939 CET	1220	IN	Data Raw: d6 34 16 e6 cc 23 17 02 ee 37 f5 48 a6 32 dd ec e3 57 85 da ee 5a 11 12 0b a6 5b 9c 93 1e 0d e6 e8 6d ef ab 6c ec b1 2c e1 92 73 2f f4 59 83 0d 1c 57 17 c3 9b 46 27 a9 80 75 ee 4d de 1b 9c 94 06 a3 07 cd 41 5b 1b 96 94 d4 04 8e 95 11 31 44 40 42 Data Ascii: 4#7H2WZ[ml,s/YWF'uMA[1D@B\DBaOK*4( S[qD%.ZNOb8TJMc%-{]i)=9~)o4A.fufGZ8^eE=$\&fJ
Mar 20, 2025 12:02:42.935892105 CET	1220	IN	Data Raw: 37 39 ba d2 eb ba 2c 6d 1a 30 de ee 67 6b bf e9 66 92 db 41 d6 d9 91 37 c5 a8 b8 ef cd 57 2f 6d d5 ab 7f 73 ad 58 fd d2 f6 15 f8 b2 c2 d9 a9 e2 d0 d3 c2 df f8 ab 47 1e 3a d1 21 81 3f cb 06 55 b5 8b 1d b6 59 4f a2 59 b0 fa dd 05 df e6 f5 98 93 14 Data Ascii: 79,m0gkfA7W/msXG:!?UYOYk8l,>={YA+lv_jw&!pPye\|U-6a5,uc&v6\7fbtJ]uu llmxx)P1TsY
Mar 20, 2025 12:02:42.935909986 CET	1220	IN	Data Raw: d1 8a 53 aa 53 1d b2 8e e3 fb 68 85 5f fa bc 60 1e 3c 74 4f 4e c1 07 23 ed cb 52 39 e2 34 16 2e 23 d4 f5 84 4a 73 9c b0 2c ab be 11 b0 1a 31 2f d2 0b ca 5a 30 a4 52 01 b5 eb fd 2d fb cc a8 3f 70 28 b2 08 a5 2e 03 47 2b 0b 8d 2b ab e1 40 78 fa 66 Data Ascii: SSh_`<tON#R94.#Js,1/Z0R-?p(.G++@xfqPVWhPBaH9T-W"Tl>?"$u)+Ri?Mi@+ZG=L<E_^`A8^GDGrG54v "kLtux?R:aqV
Mar 20, 2025 12:02:42.936023951 CET	1220	IN	Data Raw: 1a 0f bb 24 ae 06 95 21 c5 26 fb ae 2e 7b 44 b3 a0 85 fd 5f b3 67 2f e5 db 6e 03 51 43 0d f7 0e d1 e8 2a ac c2 42 87 7f c9 5b 66 ac 00 8a 6c 10 89 b1 c4 38 99 37 f4 94 bb d4 88 89 2d b4 35 da f6 b0 e4 71 fa 2e b7 73 d5 98 d6 e9 f8 27 2e 5f f7 d3 Data Ascii: $!&.{D_g/nQC*B[fl87-5q.s'._O=+uR=\|rS__k T0Z+Acn3['X;S>`2oh9j7c[HXwyr($n!!~?F8iSG{:?mW>fv_
Mar 20, 2025 12:02:43.071521997 CET	1152	IN	Data Raw: 52 b7 15 9c b4 34 48 8f 94 71 39 88 ef 89 1d 75 8d 4b f3 81 dc 5c be 3e 69 87 0f 5e b6 12 19 13 59 24 6a fe e2 f2 04 6b aa 97 21 12 e1 d4 22 6f 9c 97 d5 01 d6 47 28 77 00 bb 6d 1e cf b1 da ad 51 f6 83 f5 86 65 42 19 4d cd 3e 92 76 8e 43 59 2a 60 Data Ascii: R4Hq9uK\>i^Y$jk!"oG(wmQeBM>vCY*`-_`V/f;[oih0ic #o\aqihd1rhC9BYz>qPJS=D\|IL-1::Tso"w{XEXl7!3R

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:43.447123051 CET	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:43.593693018 CET	326	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:39 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Thu, 03 Apr 2025 11:02:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:43.593739986 CET	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Mar 20, 2025 12:02:43.611545086 CET	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Mar 20, 2025 12:03:28.731441975 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:43.447213888 CET	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:43.583825111 CET	329	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:39 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 03 Apr 2025 11:02:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:43.584076881 CET	1220	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Mar 20, 2025 12:02:43.584114075 CET	1220	IN	Data Raw: 6c d7 c4 aa b9 ad 77 5b 5f 7a 4e ec 59 58 13 33 a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c Data Ascii: lw[_zNYX3V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#
Mar 20, 2025 12:02:43.584281921 CET	1220	IN	Data Raw: 92 cb fb 68 f5 7a de 6d a2 9b c4 49 2e 16 43 5f c6 44 43 62 62 63 d1 e6 f3 d7 47 3c 3a 7b 6e 2e d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 Data Ascii: hzmI.C_DCbbcG<:{n.LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0)
Mar 20, 2025 12:02:43.584336042 CET	1220	IN	Data Raw: b0 f9 74 22 fc cf 4f f2 e5 3e f6 a3 a5 52 e9 0b 88 21 00 d8 c5 1a d1 12 36 a3 4e 04 62 00 ec 5e 8d e8 08 9b f2 ad 00 62 00 ec de 4f 95 35 d4 a6 d4 89 2b 20 00 60 f7 69 44 4f d8 9c 3a 11 53 cb 77 06 3e 52 6e ba 01 0f 1c c4 b5 31 a7 2c 0a 7e 92 05 Data Ascii: t"O>R!6Nb^bO5+ `iDO:Sw>Rn1,~oJ1hD.!#8}0'".4OD\:fl4"I,"!.I) $@sj*1cAHB#Ju"zbK7;@"r-%1>1fR%&gxDk5(\
Mar 20, 2025 12:02:43.719388962 CET	1220	IN	Data Raw: b5 78 af 83 ca 1d 2c ba 3e 71 96 7e 07 da 61 68 88 9d d5 88 2e 85 49 bb e6 c6 96 59 94 6f 38 12 3f da d1 22 c6 73 3c a1 10 30 13 9f 6a c4 98 cd 40 f5 2d 24 99 8a 16 c2 60 be de 6c c3 c9 9d 33 3d e8 32 fe 3b 08 34 40 d8 19 8d 28 f5 90 61 eb 0e 46 Data Ascii: x,>q~ah.IYo8?"s<0j@-$`l3=2;4@(aF_wy$:V"3E"Jbn)$!B:hDq=PwN3_2CSF5fXmKCBF$r@aEuKLtipk@'vB#[(.9*Mb(P9
Mar 20, 2025 12:02:43.719419003 CET	1220	IN	Data Raw: eb ac 7d bb c8 1e 81 18 35 fd 92 bd 7a 99 cc 02 80 66 3f 47 74 dd e6 07 61 9a d1 9a a3 ce 25 85 09 3b c3 be de d0 8d 40 0c 9d c2 a8 53 2e 69 21 26 cf 36 fd 6e 84 85 bd 4b 22 ea 2e 76 b5 4b 11 6f 3e 62 8a 14 26 69 42 8a db 0d 1d 4f e7 39 96 07 61 Data Ascii: }5zf?Gta%;@S.i!&6nK".vKo>b&iBO9a{2fjO;qv^&Ha;nWYIjFz.<B HJXu09IF#t"b"72XX"]}Y0b:fbfwbkhK3h FOa/+:6THtEtr
Mar 20, 2025 12:02:43.719587088 CET	1220	IN	Data Raw: 15 70 87 ad e4 43 84 dd ca 71 4b 2c f8 93 0e df 41 1f 78 9e 9e 28 92 9f 62 6d a3 7e 39 c0 50 13 c4 3b 33 f6 29 6c b3 f7 7b 65 5b d8 9f 9f e9 a0 0a db 13 4d ed ff b3 1d b1 fa 7b f4 b5 59 34 14 30 cd cd f0 13 48 0e 1a 31 b3 50 f0 52 16 f1 a3 d2 42 Data Ascii: pCqK,Ax(bm~9P;3)l{e[M{Y40H1PRB9$pHl!S>\[_0lSRC.a!NM>#,%ko'0BY@x}&i:Uz/bD83lA RE'TbG;n?BX;-14%
Mar 20, 2025 12:02:43.719604969 CET	1220	IN	Data Raw: 87 8e 35 2c f2 55 89 44 6e b0 48 d4 f7 29 fd e9 94 1d 6a 3d 6e 81 96 4b fd 3b ba 0c d3 1d 25 36 5b d5 fa 4f 30 2a e2 8b 9e 90 d9 30 1f 27 a6 b7 77 79 1e c2 9e 43 d8 79 f0 d3 82 06 75 eb 66 d5 d4 b2 ad 15 27 f3 e8 d0 21 4c a5 ba 56 47 6c 68 19 06 Data Ascii: 5,UDnH)j=nK;%6[O0*0'wyCyuf'!LVGlhXtGkjDX9c'%tyhT66VzMFDM'p1_d:$F3Wn0QnX4 <?LK^GTz{4a[Z"DLA
Mar 20, 2025 12:02:43.719623089 CET	1220	IN	Data Raw: 8c 3c f6 42 f3 80 e4 d6 23 8d c5 b8 c4 d6 f8 ca 48 a6 23 4e 06 5d 43 ab 67 bc 31 61 6f 5b 94 2f d0 d2 67 87 ef 34 79 a5 0a 14 54 93 ac d3 8d 46 3f 42 d8 fe a8 25 c6 3c 23 2c 02 14 73 54 e4 c5 db 58 ac de 6a 4b 5b e5 b6 16 c2 86 d5 61 50 27 52 4f Data Ascii: <B#H#N]Cg1ao[/g4yTF?B%<#,sTXjK[aP'RO MtY=DK}j/QgSR8hUf->Kl1cVU,v4I2LiBuqga,{Jo='XAV4_UaLM]q1j-hd4
Mar 20, 2025 12:02:43.854973078 CET	1220	IN	Data Raw: fd 28 4b 6d f0 e5 25 3d 33 1e db 69 b3 04 a0 50 28 28 cd 50 79 6b e1 86 6c be f2 fe cb 36 84 19 43 e1 63 92 f8 19 61 b6 dc 12 43 cf 1e b2 76 d5 5e 49 74 65 10 ab 19 81 e3 2e 43 6d 57 1f 4e 3f e0 c4 c6 a9 74 7d 6b 83 03 9a 7b fc 55 f5 e8 d0 5a bd Data Ascii: (Km%=3iP((Pykl6CcaCv^Ite.CmWN?t}k{UZA^#\tL9i~fn;b*/ZTTC:qh<^23oEvb9vBlOKD1

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:43.644906044 CET	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Mar 20, 2025 12:03:28.653192043 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:55.814296007 CET	2881	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU% [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:55.950669050 CET	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:51 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Wed, 22 Sep 2021 05:16:05 GMT Connection: keep-alive ETag: "614abc15-20f3" Expires: Thu, 03 Apr 2025 11:02:51 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:55.950690031 CET	1220	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Mar 20, 2025 12:02:55.950772047 CET	1220	IN	Data Raw: 44 61 74 65 2c 6f 3d 6e 2e 67 65 74 59 65 61 72 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b Data Ascii: Date,o=n.getYear();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+
Mar 20, 2025 12:02:55.950916052 CET	1220	IN	Data Raw: 61 3d 6e 65 77 20 62 72 64 61 74 61 29 2c 65 3d 22 6b 77 63 6c 6b 22 3d 3d 74 3f 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 Data Ascii: a=new brdata),e="kwclk"==t?escape(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.coo
Mar 20, 2025 12:02:55.950933933 CET	1220	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 55 52 4c 42 72 6f 77 73 65 72 44 61 74 61 28 29 2b 74 68 69 73 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 72 6d Data Ascii: n(){return this.getURLBrowserData()+this.getMousePositionData()}};function confirmToOptOut(){var t;optOut=confirm("You will not be able to see any ads or websearches."),optOut&&((t=new Date).setTime(t.getTime()+31536e6),t="; expires="+t.toGMTS
Mar 20, 2025 12:02:55.951021910 CET	1220	IN	Data Raw: 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 26 26 28 65 3d 74 68 69 73 Data Ascii: .clientWidth:this._Top.document.body&&this._Top.document.body.clientWidth&&(e=this._Top.document.body.clientWidth)}catch(t){e=0}return e},_wt:function(){return this._Top?null!=this._Top.window.screenTop?this._Top.window.screenTop:this._Top.win
Mar 20, 2025 12:02:55.951325893 CET	1220	IN	Data Raw: 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6d 73 69 65 22 29 3c 31 26 26 6f 70 65 6e 65 72 2e 77 69 6e 64 6f 77 2e 66 6f 63 75 73 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 64 72 7c Data Ascii: tor.userAgent.toLowerCase().indexOf("msie")<1&&opener.window.focus()}catch(t){}dr\|\|(window.location=t)},Main()},_npW.Params={dUrl:url},_npW.Init(_npW)),_npW}};function renderFACP(t){if("ex"==t)return!1;if(1!=showPop\|\|"undefined"==typeof __pp\|\|
Mar 20, 2025 12:02:55.951344013 CET	1115	IN	Data Raw: 49 45 28 29 26 26 28 65 3d 73 68 64 73 70 28 74 29 29 2c 65 7c 7c 22 6c 64 22 3d 3d 74 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 2e 75 26 26 5f 5f 70 70 2e 6b 70 2e 75 26 26 30 Data Ascii: IE()&&(e=shdsp(t)),e\|\|"ld"==t\|\|(void 0!==__pp.kp&&void 0!==__pp.kp.u&&__pp.kp.u&&0<__pp.kp.u.length&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p,"ex"==t)),shldp("ld
Mar 20, 2025 12:02:55.968652964 CET	395	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:56.103990078 CET	329	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:51 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 03 Apr 2025 11:02:51 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:56.104410887 CET	1220	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Mar 20, 2025 12:02:56.104429007 CET	1220	IN	Data Raw: 6c d7 c4 aa b9 ad 77 5b 5f 7a 4e ec 59 58 13 33 a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c Data Ascii: lw[_zNYX3V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#
Mar 20, 2025 12:02:56.104446888 CET	1220	IN	Data Raw: 92 cb fb 68 f5 7a de 6d a2 9b c4 49 2e 16 43 5f c6 44 43 62 62 63 d1 e6 f3 d7 47 3c 3a 7b 6e 2e d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 Data Ascii: hzmI.C_DCbbcG<:{n.LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0)

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:56.097630024 CET	399	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:56.232007027 CET	326	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:51 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 03 Apr 2025 11:02:51 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:56.232033014 CET	346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!
Mar 20, 2025 12:03:41.232892990 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:56.127278090 CET	393	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Origin: http://ww01.camsoline.com Accept: / Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:56.263488054 CET	278	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:51 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Mar 20, 2025 12:02:56.263566971 CET	1220	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Mar 20, 2025 12:02:56.263583899 CET	1220	IN	Data Raw: 1e 09 bc 39 68 52 c0 5b 91 88 ac 21 56 fc 58 6f e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 Data Ascii: 9hR[!VXoY~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V
Mar 20, 2025 12:02:56.263645887 CET	1220	IN	Data Raw: 0e 14 ee 04 67 97 7b 19 0f ef e3 21 82 87 39 ea 70 e8 ba 3d 39 63 f7 e4 25 bc 65 58 d1 bc 8c a0 f9 28 3c 43 28 18 e6 72 98 6b 2a 7c 92 95 32 ba 3a 96 cb 7b 78 ca e1 69 01 4f 51 5b 2f 67 f0 b2 84 17 07 bd 73 76 c7 cd 69 c7 97 e4 37 07 ab 15 56 95 Data Ascii: g{!9p=9c%eX(<C(rk\|2:{xiOQ[/gsvi7V,"Va[E`gYF5jm ;Qqa{>ynhciF0::I$UvI2&hwKs`!\|.v+Cx'Q1i#~Qun?'r3TNWeMc
Mar 20, 2025 12:02:56.263663054 CET	1220	IN	Data Raw: de 49 f9 21 28 26 65 90 b5 99 c1 5e 48 c2 ac 65 52 cc 5b 54 76 5a 79 48 ae f1 39 f8 3f 52 7b ad aa 00 00 00 00 01 00 00 00 0a 00 1c 00 1e 00 01 6c 61 74 6e 00 08 00 04 00 00 00 00 ff ff 00 00 00 00 00 00 78 9c 63 60 66 0a 66 da c3 c0 ca c0 c0 d4 Data Ascii: I!(&e^HeR[TvZyH9?R{latnxc`ff@9 E@7@5'~ 9&)@JExWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lf
Mar 20, 2025 12:02:56.263681889 CET	1220	IN	Data Raw: eb 9b 8e 9f c8 65 6b 2e 3e 0f 04 c4 04 05 c5 84 97 4f ea 98 34 09 c6 3a 7c 40 8c b1 b6 7f 90 d3 c8 5f 3f 5c 77 24 c7 85 23 6c 63 a2 59 0f 46 8a 41 ee 23 53 28 4d 66 a5 8b 4c 29 0b 53 24 98 b5 3a 17 b9 17 ae db 64 4c d4 c2 d7 96 bf ee dc a7 0a 5e Data Ascii: ek.>O4:\|@_?\w$#lcYFA#S(MfL)S$:dL^qz@1JUSfTcx&(,u\|kiT4ZBKq831&Dh@{IC$uP{3?+WT//?Azowgr/~8>M@l4Gyveoe{'~Pj
Mar 20, 2025 12:02:56.263721943 CET	1220	IN	Data Raw: 99 53 22 74 9e ea e1 be 51 01 01 9f 38 f0 28 ce b6 99 2f 22 27 b8 68 ce c0 f6 14 3d 44 a8 8b 07 6a aa 59 e9 06 b8 bd d4 c0 c8 45 59 77 91 36 3b 04 15 d1 d3 47 0f 74 87 13 4c e4 89 80 c8 13 c2 b7 4f 9f 5d 37 a3 38 32 62 a5 f9 d4 27 5f 41 c9 c7 b5 Data Ascii: S"tQ8(/"'h=DjYEYw6;GtLO]782b'_A3Z$j`6,qw5AW\|dA^cD/$);aB.Gl q_d0@&dd=nvwS~wl9/O(27`FHEoG,XWVq8q
Mar 20, 2025 12:02:56.263740063 CET	1220	IN	Data Raw: 22 ca b7 c1 08 2a ca 1e 95 5c 0f 0b 84 23 c4 2c ec 83 b6 16 f8 d3 e6 79 42 f2 fd 74 6c b1 6d 39 94 90 5b 8c 97 54 28 d1 2e 41 c9 ba 75 82 8d dc 6a b5 ce 6a e5 57 48 fc 0e c1 31 cc 2e 80 26 b0 1b e6 75 93 5b 56 4a 3e 17 81 f3 23 c5 f9 4a 74 4f b8 Data Ascii: "*\#,yBtlm9[T(.AujjWH1.&u[VJ>#JtOlj%[v2z<?(C<eW1;7YIm%a{Pnv6_`FgaQ6(39reNtT2F-gco^T{SW(nO
Mar 20, 2025 12:02:56.263757944 CET	1220	IN	Data Raw: 69 bd 09 e1 9c 38 8f a4 e2 3c d4 0d 6f a5 b9 cf 7b be 3a b5 ee 89 4b cf 5f 98 33 f3 b1 67 ce 13 ff dd bb 85 9f 84 af f6 ef 07 2f 18 81 73 86 a1 9d 29 14 d7 a2 b4 07 22 22 5d 6e f0 60 69 de 78 6d 84 3c f8 cd 63 1b 36 1c fb 59 31 ed 7a e6 c2 f0 48 Data Ascii: i8<o{:K_3g/s)""]n`ixm<c6Y1zH=#R&3D]xyb8C@nk3Sa:)fyLxxK+d2W-z?b1Dd{3D#OPfDDhc
Mar 20, 2025 12:02:56.263844013 CET	1220	IN	Data Raw: 46 86 f9 a6 24 c6 27 e4 a7 85 a6 c6 66 d5 17 af 46 38 06 18 09 0b d1 ff 2a 86 cc c5 d3 54 fc 44 f0 28 8d 35 4c db 53 a2 4f 4e f0 0d 89 ce f6 2b 20 75 53 0b 6a 47 e7 46 e7 94 98 2a a2 7d e3 fc 46 17 55 31 9a 12 f0 fc 34 11 cf 4f 3c 3b 3f 29 5f d8 Data Ascii: F$'fF8TD(5LSON+ uSjGF}FU14O<;?)_ONYR[>ZSJ(kUy))KkQP\|#j2+O?N^*;O'aK$XCx.jE;n6GQyBlZZ w-1(\|O
Mar 20, 2025 12:02:56.399496078 CET	1220	IN	Data Raw: 36 10 c3 84 60 08 47 b2 95 de 5a 0c 98 75 bc c2 c0 8f be de a3 8b 48 dc 51 50 32 e5 7a 4f 5c 62 ec ce 09 79 65 c2 9e aa a5 79 17 94 b9 4b 93 1e 75 71 83 c6 43 d7 46 b4 1e 8b 3b de 70 e8 da 98 59 87 e3 0f 6d da f8 c7 2c d8 34 5c 48 df f0 bb 6c 61 Data Ascii: 6`GZuHQP2zO\byeyKuqCF;pYm,4\HlaPfA&1UP+9$G;cVyEnsYp7*qRDQLKw}9["p#LX9EUzOUk%K!K-3J`cve-I

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:56.128357887 CET	399	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Origin: http://ww01.camsoline.com Accept: / Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:56.265182972 CET	278	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:51 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Mar 20, 2025 12:02:56.265317917 CET	1220	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Mar 20, 2025 12:02:56.265343904 CET	1220	IN	Data Raw: 7d c5 ff d0 b2 78 87 2c d3 c3 9e b8 81 ad fa 14 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 Data Ascii: }x,'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"Ez
Mar 20, 2025 12:02:56.265362024 CET	1220	IN	Data Raw: 52 66 32 21 8d cc 4c 32 e9 75 5a 7a ef 05 92 10 d2 3b 10 92 10 c2 d0 06 04 04 29 d2 25 94 48 93 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 97 ef dc fb de 4c 26 13 58 bf 3f 65 26 33 b9 f7 dc 73 ce 3d ed 9e Data Ascii: Rf2!L2uZz;)%H]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA={sGHcw
Mar 20, 2025 12:02:56.265419960 CET	1220	IN	Data Raw: bc 80 84 bb cf ad de 5b 73 79 67 64 55 61 ad 22 58 b8 95 3b af 3c 7f 5e 29 e2 1d 8b f4 fa 21 bd 6e 22 ef 50 0a b4 ca 58 f8 4e b8 bc 0e d4 37 e1 5f 6f 77 0f 3d 45 2a 5a 38 66 0b 93 11 a7 5c f2 36 4a 04 c3 ca 0b f1 91 d3 1d 63 36 41 67 f0 62 84 ca Data Ascii: [sygdUa"X;<^)!n"PXN7_ow=E*Z8f\6Jc6Agb+l,sJOt5Y;KK;K=fd-iXaIVC}ii}@9fNDyhe'rA%.D1%S:`(6-!s(Mupn18w<5JK=1@lJ.%
Mar 20, 2025 12:02:56.265436888 CET	1220	IN	Data Raw: b1 ba 5b 63 d0 15 7b e7 d6 5a b2 ac d9 0c 43 19 30 94 0e 2e 7d 3e 3c 26 3c b8 b9 a9 88 fc 8e a1 2a da 6d 8a e3 31 c6 47 2a 6d 0a b9 4a 1b 86 1e 9e 2a b1 8c a1 a9 d4 93 fe 7d 27 f6 1e 7d c0 0a 2e 83 5b 5f 2b 2a 69 dd bb 07 2e 3f 19 23 5c bb 46 4e Data Ascii: [c{ZC0.}><&<m1GmJ}'}.[_+i.?#\FNEp\|5_AdD@$Li(99o<gQrnunCZ#gZN,ZXP:uJ!"Lg9wZH>4cf2;B(YX,m^Xf62O^
Mar 20, 2025 12:02:56.265453100 CET	1220	IN	Data Raw: 97 82 1a 61 2f f2 97 ea 45 0b ce 17 cf 1b d2 29 c9 45 14 49 c5 d0 ee d6 d6 dd ad 10 7c 7d 70 f0 fa 60 53 fb c1 f6 f6 83 67 0e 5f 3d 7c f8 aa 4d 37 33 50 37 03 1c 75 93 a1 f0 2b ba 29 fc 93 5c 6c 1e d1 4d aa 17 19 a8 5f 12 1c 51 bf a8 09 f3 94 d9 Data Ascii: a/E)EI\|}p`Sg_=\|M73P7u+)\lM_Q_XKu9CU&ja\|>1LAdYfxob^b,-711s`IZ<TTAojEY\|2,<+;141RW[!4#0o8WQWO1]
Mar 20, 2025 12:02:56.265496016 CET	1220	IN	Data Raw: f0 0d 7e 3c 79 8b cd c5 9d e3 3c c4 04 83 97 07 4b c3 04 9b 65 a3 03 38 7e fc 05 e1 c3 0f 2f 40 f4 a3 27 84 1f 4f fe 01 c6 6b f2 9e 5a b2 fc 99 e4 78 c3 ec d2 d2 f9 b1 70 43 b8 78 f1 02 44 5e 14 bc 41 f6 e2 29 e1 e7 17 5f 2b 9c ff 4c 5f 5a 6a 74 Data Ascii: ~<y<Ke8~/@'OkZxpCxD^A)_+L_Zjt{dac\GHYyfN6$$qS\ew$.c4D:=->Pr:r,AK~S5<,<9QBr~~(rfWuKMHL{
Mar 20, 2025 12:02:56.265513897 CET	1220	IN	Data Raw: 28 47 19 b5 58 18 5b b4 e8 da eb 51 30 62 e8 d4 5b 8e 3b 55 30 96 c8 a6 8e 2b b0 9b be 4c cf 3f 42 a4 bd a0 21 e6 71 eb 50 8e 79 6a e3 68 96 cc d5 a1 2a 01 bf 43 c1 05 4f 87 d2 c4 0f 6d 09 7f b6 57 27 38 87 f9 cc 0f 3a 56 34 42 51 7c 1d ab 1a 10 Data Ascii: (GX[Q0b[;U0+L?B!qPyjh*COmW'8:V4BQ\|E=D>%`:((~%j^MoQjQpLvk?r [dV++t0:>PmZ{CJ1DzyZ+cDqZ2RlhKFO#ViC#J
Mar 20, 2025 12:02:56.265531063 CET	1220	IN	Data Raw: b1 3a ab df 1d 2b ad 66 aa c3 77 aa b6 a2 0e 3b 55 5c bf 11 f5 57 84 fd 09 83 1d 78 47 d8 92 23 b9 13 f8 1e 51 6f 9d 56 80 f9 4c 69 5d a4 35 ce 4b f1 8b 6e 24 63 63 53 08 ef db af fa 10 d5 03 3d 53 87 90 1d 77 e0 d9 2a 07 9d 10 d6 3a 33 8f 0c a3 Data Ascii: :+fw;U\WxG#QoVLi]5Kn$ccS=Sw:3b{0bh;Dn;=8n3r+-qR \|"+ Z(9yWs$)-W-+_-5$tfjuoUjJSZ
Mar 20, 2025 12:02:56.403279066 CET	1220	IN	Data Raw: 92 22 83 d7 1c 5a 28 4d 89 5d e8 9c bb f5 a6 f5 8b df 61 be 7a 89 78 6c 90 72 df c7 90 b7 b4 cf d3 f7 0e 9d d8 94 47 63 bb b1 c7 53 4e 8d ee c8 86 97 91 4f 08 73 58 66 ef ed be 13 4c 1e 05 71 2c cc 39 d9 0b 2a 9c 60 0e 1d 7f e3 0d d6 6f 2b 63 bd Data Ascii: "Z(M]azxlrGcSNOsXfLq,9*`o+cn<PQ=-'~joz7ltf80=F!8Qo#}^a"HVC_^8hgl7,%9o]xdMiwt9uL2\3c'-}WZOWt

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:56.128400087 CET	397	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Origin: http://ww01.camsoline.com Accept: / Referer: http://ww01.camsoline.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:56.265671015 CET	278	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:51 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Mar 20, 2025 12:02:56.266087055 CET	1220	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 Data Ascii: wOFF$&FFTM9GDEFMh!GPOS*6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TF
Mar 20, 2025 12:02:56.266105890 CET	1220	IN	Data Raw: 07 0d f6 a4 16 b8 d6 2c 14 c8 5f 09 72 a8 e5 80 65 ea 0f 01 f9 ea db 80 22 75 14 b0 5c bd 0e 58 a2 c6 01 85 b8 d2 a0 96 02 c2 84 72 3e 53 82 f3 85 e0 72 45 80 72 b5 02 b0 05 e7 4a d4 06 d4 43 60 25 60 03 f8 5f 29 8e 57 01 aa 88 dd cd 6a 35 a0 18 Data Ascii: ,_re"u\Xr>SrErJC`%`_)Wj5\|LsG`9RpO5@mk&R=WO/?,Q/65K7#UCOjPU#725lPQ5@PB`8_qB*k6
Mar 20, 2025 12:02:56.266195059 CET	1220	IN	Data Raw: dd 48 b4 b2 6a f5 2d 40 1e b5 b2 22 6a 65 61 68 65 af 42 6b 7a 0d 50 44 7d ac 48 fd 47 40 11 b5 b2 52 6a 65 45 d4 ca 9c 80 56 56 42 ad cc 09 68 65 25 d4 ca 8a a8 95 95 50 2b 5b ae fe 1f a0 08 6d d8 c9 36 3c c0 36 ac a3 9e 5a 16 d0 53 d7 51 4f 75 Data Ascii: Hj-@"jeaheBkzPD}HG@RjeEVVBhe%P+[m6<6ZSQOuFid{MROB=u3bSG=K)C[V:vub"VE5k5bX!kZ#VN5kkjxyk
Mar 20, 2025 12:02:56.266211987 CET	1220	IN	Data Raw: cb ac c2 fe 55 5e df 4b 6b 46 0b ae 3f 02 0d b1 9a 51 2c f2 36 a9 bd 80 bc 77 4d c0 df f2 98 b5 7e 14 a9 a7 3d 3f 41 5e 0a 6c cc 8a bf 8d 1e c8 f1 93 16 96 5b bb 67 10 1e f5 a0 dd 82 a9 bf 0b 3b b1 ff be 85 0a 3c 5d 81 f2 1e b5 25 cd b7 ad 52 8f Data Ascii: U^KkF?Q,6wM~=?A^l[g;<]%R[H;ze_e<R,g:t+y"J^_/wBx~I:n;4(zK6,U{~:6B8;388l"q8=- OwlT!
Mar 20, 2025 12:02:56.266227961 CET	1220	IN	Data Raw: 6f c8 fa d4 fd d9 3f ec 45 9a a7 d9 94 b2 5b bf ee 09 1d 4e 07 2c 27 13 77 a7 cc bb d6 92 31 da 5e 7a 3d 2b 8b 50 4d 2f 6b ea db bf 9d 2c e3 36 22 3e 77 fe 0e cc 17 62 5b e3 9c 37 46 19 69 dc 3e 53 68 24 39 e0 a1 30 45 07 10 cf 62 40 3a 77 a3 cd Data Ascii: o?E[N,'w1^z=+PM/k,6">wb[7Fi>Sh$90Eb@:w{PIQ].%"#63Q4QVmV,4>{W/5alex"~6:v2oRg~2g2fr_2cd3#VO}&Zb
Mar 20, 2025 12:02:56.266244888 CET	1220	IN	Data Raw: a0 44 6d 02 e4 d3 f3 b8 44 dd 0f 28 a1 bc 14 52 5b 00 61 50 f8 56 dc bb 4d 35 a8 e5 ea 01 40 19 38 5b a3 2a 56 0f 02 56 60 9e 78 08 e7 77 00 4a d4 c3 80 28 7d a6 25 f4 0a ae a4 7c 57 4a 9f e5 2a c6 5a 97 d1 cb 56 41 3f 63 25 23 97 aa d4 6e 40 b5 Data Ascii: DmD(R[aPVM5@8[VV`xwJ(}%\|WJZVA?c%#n@5kojL}P(Q?0bw:Oq\|F9,WPS5RX~PZu@vXaz%y[?}}u?23h-U;2eo
Mar 20, 2025 12:02:56.266262054 CET	1220	IN	Data Raw: da 6e b5 bc 51 6c ee d2 63 23 c0 52 25 e8 6b 48 66 5a d0 50 0f 73 ab 3a 31 6a 22 d8 85 72 36 1a 6a 32 16 1b f6 ea 34 a9 e8 0e b4 ba 72 a1 2f c8 99 bd b4 8d 75 5a 1e 14 a6 9d c2 5f 91 a2 19 14 e7 af 80 73 87 76 93 11 cf 6e 9b 6f a5 d2 28 b3 b4 44 Data Ascii: nQlc#R%kHfZPs:1j"r6j24r/uZ_svno(D0dPA5o.aWbp#P;SJ)$kwziBkVBJ-:a\\|D},O_c"4{m8KvFJmg(Wrgm1GlbmNm
Mar 20, 2025 12:02:56.266792059 CET	1220	IN	Data Raw: 7d a0 2d 51 ef ed 77 5f 3a 76 b8 7a 9a bb 8e 36 63 41 88 81 01 75 da ae fa 16 4d f3 86 cc be 15 df 25 a9 a4 2e 60 ed f8 1c f1 6d 62 a1 4c 2e 1e ad 2a 1d cc 7b aa cb c5 63 97 5b f4 c1 3c 92 6f b3 b5 0c 8d db 88 d1 11 93 39 48 cb 11 d7 28 b5 9a dc Data Ascii: }-Qw_:vz6cAuM%.`mbL.*{c[<o9H(%Y9#Vt1?}`2jG\ F^5l5}Njo<.c%}!m>[r69i'cdbO7Eispb'n^=oC[:E&WCZ?J?-9(s<9
Mar 20, 2025 12:02:56.268032074 CET	1220	IN	Data Raw: d9 a5 14 74 2b 2b 72 1c 54 17 e7 f3 c9 ea 01 93 47 6f f5 3e 3b a3 f2 5f da bc e8 1a e6 dd 0d 59 cf 89 63 22 e7 ac 05 eb 8e b7 42 ac cc ee 1b 19 4f 17 27 e7 bf 65 a5 f6 09 9c 19 34 ff 00 61 4b ab 53 6f fb 19 a8 26 0b 5e d6 51 c9 11 9f 8b c9 24 ad Data Ascii: t++rTGo>;_Yc"BO'e4aKSo&^Q$q_ .NiY$+pu}gyiCaDa#n@ol\|yQFsv(o=\|p>M!jQEv^rO=yc2c>A:Yo
Mar 20, 2025 12:02:56.403251886 CET	1220	IN	Data Raw: 5b 02 64 cd ab 90 9b e4 3f ab 3e 84 44 74 09 7c 79 8c cf 77 51 3a e8 a3 64 30 c8 d8 f6 49 4f 37 1c 4a 6b e9 88 c9 ef 73 fb 10 e5 c9 4a 6c 27 e4 1f 1f 51 cb f3 78 76 c2 ce 17 b2 fa c1 65 b6 65 c4 ce 1a d7 32 b4 eb 34 1e 6e 33 5b 8c a4 fc b6 79 42 Data Ascii: [d?>Dt\|ywQ:d0IO7JksJl'Qxvee24n3[yB_Hd39R0i.AmU}-q^[g{Kkg*oBWewI[VmmU)5ZK9!v99qrcrQLL]U2WWc?MT\|o+V

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:57.675923109 CET	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:57.809930086 CET	326	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:53 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 03 Apr 2025 11:02:53 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:57.809973955 CET	346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!
Mar 20, 2025 12:03:42.815876007 CET	6	OUT	Data Raw: 00 Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://camsapi.camsoline.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Windows Analysis Report
http://camsapi.camsoline.com

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 12:02:57.675978899 CET	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 12:02:57.809953928 CET	329	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Mar 2025 11:02:53 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 03 Apr 2025 11:02:53 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Mar 20, 2025 12:02:57.810121059 CET	1220	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Mar 20, 2025 12:02:57.810384035 CET	1220	IN	Data Raw: 6c d7 c4 aa b9 ad 77 5b 5f 7a 4e ec 59 58 13 33 a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c Data Ascii: lw[_zNYX3V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#
Mar 20, 2025 12:02:57.810489893 CET	1220	IN	Data Raw: 92 cb fb 68 f5 7a de 6d a2 9b c4 49 2e 16 43 5f c6 44 43 62 62 63 d1 e6 f3 d7 47 3c 3a 7b 6e 2e d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 Data Ascii: hzmI.C_DCbbcG<:{n.LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0)
Mar 20, 2025 12:02:57.810564995 CET	1220	IN	Data Raw: b0 f9 74 22 fc cf 4f f2 e5 3e f6 a3 a5 52 e9 0b 88 21 00 d8 c5 1a d1 12 36 a3 4e 04 62 00 ec 5e 8d e8 08 9b f2 ad 00 62 00 ec de 4f 95 35 d4 a6 d4 89 2b 20 00 60 f7 69 44 4f d8 9c 3a 11 53 cb 77 06 3e 52 6e ba 01 0f 1c c4 b5 31 a7 2c 0a 7e 92 05 Data Ascii: t"O>R!6Nb^bO5+ `iDO:Sw>Rn1,~oJ1hD.!#8}0'".4OD\:fl4"I,"!.I) $@sj*1cAHB#Ju"zbK7;@"r-%1>1fR%&gxDk5(\
Mar 20, 2025 12:02:57.810744047 CET	1220	IN	Data Raw: b5 78 af 83 ca 1d 2c ba 3e 71 96 7e 07 da 61 68 88 9d d5 88 2e 85 49 bb e6 c6 96 59 94 6f 38 12 3f da d1 22 c6 73 3c a1 10 30 13 9f 6a c4 98 cd 40 f5 2d 24 99 8a 16 c2 60 be de 6c c3 c9 9d 33 3d e8 32 fe 3b 08 34 40 d8 19 8d 28 f5 90 61 eb 0e 46 Data Ascii: x,>q~ah.IYo8?"s<0j@-$`l3=2;4@(aF_wy$:V"3E"Jbn)$!B:hDq=PwN3_2CSF5fXmKCBF$r@aEuKLtipk@'vB#[(.9*Mb(P9
Mar 20, 2025 12:02:57.810760021 CET	1220	IN	Data Raw: eb ac 7d bb c8 1e 81 18 35 fd 92 bd 7a 99 cc 02 80 66 3f 47 74 dd e6 07 61 9a d1 9a a3 ce 25 85 09 3b c3 be de d0 8d 40 0c 9d c2 a8 53 2e 69 21 26 cf 36 fd 6e 84 85 bd 4b 22 ea 2e 76 b5 4b 11 6f 3e 62 8a 14 26 69 42 8a db 0d 1d 4f e7 39 96 07 61 Data Ascii: }5zf?Gta%;@S.i!&6nK".vKo>b&iBO9a{2fjO;qv^&Ha;nWYIjFz.<B HJXu09IF#t"b"72XX"]}Y0b:fbfwbkhK3h FOa/+:6THtEtr
Mar 20, 2025 12:02:57.810776949 CET	1220	IN	Data Raw: 15 70 87 ad e4 43 84 dd ca 71 4b 2c f8 93 0e df 41 1f 78 9e 9e 28 92 9f 62 6d a3 7e 39 c0 50 13 c4 3b 33 f6 29 6c b3 f7 7b 65 5b d8 9f 9f e9 a0 0a db 13 4d ed ff b3 1d b1 fa 7b f4 b5 59 34 14 30 cd cd f0 13 48 0e 1a 31 b3 50 f0 52 16 f1 a3 d2 42 Data Ascii: pCqK,Ax(bm~9P;3)l{e[M{Y40H1PRB9$pHl!S>\[_0lSRC.a!NM>#,%ko'0BY@x}&i:Uz/bD83lA RE'TbG;n?BX;-14%
Mar 20, 2025 12:02:57.810795069 CET	1220	IN	Data Raw: 87 8e 35 2c f2 55 89 44 6e b0 48 d4 f7 29 fd e9 94 1d 6a 3d 6e 81 96 4b fd 3b ba 0c d3 1d 25 36 5b d5 fa 4f 30 2a e2 8b 9e 90 d9 30 1f 27 a6 b7 77 79 1e c2 9e 43 d8 79 f0 d3 82 06 75 eb 66 d5 d4 b2 ad 15 27 f3 e8 d0 21 4c a5 ba 56 47 6c 68 19 06 Data Ascii: 5,UDnH)j=nK;%6[O0*0'wyCyuf'!LVGlhXtGkjDX9c'%tyhT66VzMFDM'p1_d:$F3Wn0QnX4 <?LK^GTz{4a[Z"DLA
Mar 20, 2025 12:02:57.810827017 CET	1220	IN	Data Raw: 8c 3c f6 42 f3 80 e4 d6 23 8d c5 b8 c4 d6 f8 ca 48 a6 23 4e 06 5d 43 ab 67 bc 31 61 6f 5b 94 2f d0 d2 67 87 ef 34 79 a5 0a 14 54 93 ac d3 8d 46 3f 42 d8 fe a8 25 c6 3c 23 2c 02 14 73 54 e4 c5 db 58 ac de 6a 4b 5b e5 b6 16 c2 86 d5 61 50 27 52 4f Data Ascii: <B#H#N]Cg1ao[/g4yTF?B%<#,sTXjK[aP'RO MtY=DK}j/QgSR8hUf->Kl1cVU,v4I2LiBuqga,{Jo='XAV4_UaLM]q1j-hd4
Mar 20, 2025 12:02:57.943804979 CET	1220	IN	Data Raw: fd 28 4b 6d f0 e5 25 3d 33 1e db 69 b3 04 a0 50 28 28 cd 50 79 6b e1 86 6c be f2 fe cb 36 84 19 43 e1 63 92 f8 19 61 b6 dc 12 43 cf 1e b2 76 d5 5e 49 74 65 10 ab 19 81 e3 2e 43 6d 57 1f 4e 3f e0 c4 c6 a9 74 7d 6b 83 03 9a 7b fc 55 f5 e8 d0 5a bd Data Ascii: (Km%=3iP((Pykl6CcaCv^Ite.CmWN?t}k{UZA^#\tL9i~fn;b*/ZTTC:qh<^23oEvb9vBlOKD1

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:34 UTC	671	OUT	GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIyeHOAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: http://camsapi.camsoline.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:35 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 144739 Date: Thu, 20 Mar 2025 11:02:34 GMT Expires: Thu, 20 Mar 2025 11:02:34 GMT Cache-Control: private, max-age=3600 ETag: "6822865534964183198" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-20 11:02:35 UTC	506	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 33 36 38 36 31 34 38 30 36 34 31 34 33 37 37 35 36 33 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 31 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"13686148064143775639",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301431,173
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 64 73 65 6e 73 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 Data Ascii: dsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZX
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 68 29 7b 74 68 69 73 2e 67 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 Data Ascii: ,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,h){this.g=f;ba(this,"description",{configurable:!0,writ
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 6d 61 3d 69 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 68 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 6d 61 29 6d 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e Data Ascii: (a+" is not extensible");return a}:null}var ma=ia;function na(a,b){a.prototype=ha(b.prototype);a.prototype.constructor=a;if(ma)ma(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 65 3d 64 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 65 28 68 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 7b 76 61 72 20 6b 3d 0a 68 5b 67 5d 3b 68 5b 67 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 43 28 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: )})}this.g.push(h)};var e=da.setTimeout;c.prototype.A=function(h){e(h,0)};c.prototype.D=function(){for(;this.g&&this.g.length;){var h=this.g;this.g=[];for(var g=0;g<h.length;++g){var k=h[g];h[g]=null;try{k()}catch(l){this.C(l)}}}this.g=null};c.prototype.
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 68 69 73 2e 47 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 64 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 67 3d 64 61 2e 45 76 65 6e 74 2c 6b 3d 64 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 74 79 70 65 6f 66 20 6b 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 67 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 3d 6e 65 77 20 67 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 68 3d 64 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 Data Ascii: his.G)return!1;var h=da.CustomEvent,g=da.Event,k=da.dispatchEvent;if(typeof k==="undefined")return!0;typeof h==="function"?h=new h("unhandledrejection",{cancelable:!0}):typeof g==="function"?h=new g("unhandledrejection",{cancelable:!0}):(h=da.document.cre
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 61 72 20 6c 3d 76 28 68 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 21 6d 2e 64 6f 6e 65 3b 6d 3d 6c 2e 6e 65 78 74 28 29 29 64 28 6d 2e 76 61 6c 75 65 29 2e 42 61 28 67 2c 6b 29 7d 29 7d 3b 62 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 28 68 29 2c 6b 3d 67 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6b 2e 64 6f 6e 65 3f 64 28 5b 5d 29 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 78 29 7b 71 5b 74 5d 3d 78 3b 72 2d 2d 3b 72 3d 3d 30 26 26 6c 28 71 29 7d 7d 76 61 72 20 71 3d 5b 5d 2c 72 3d 30 3b 64 6f 20 71 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 72 2b 2b 2c 64 28 6b 2e 76 61 6c 75 65 29 2e 42 61 28 6e 28 71 2e 6c 65 6e 67 Data Ascii: ar l=v(h),m=l.next();!m.done;m=l.next())d(m.value).Ba(g,k)})};b.all=function(h){var g=v(h),k=g.next();return k.done?d([]):new b(function(l,m){function n(t){return function(x){q[t]=x;r--;r==0&&l(q)}}var q=[],r=0;do q.push(void 0),r++,d(k.value).Ba(n(q.leng
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 72 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 6b 29 3b 6d 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6d 2e 68 61 73 28 6b 29 26 26 6d 2e 67 65 74 28 6c 29 3d 3d 34 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 68 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 67 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 Data Ascii: return!1;m.delete(k);m.set(l,4);return!m.has(k)&&m.get(l)==4}catch(n){return!1}}())return a;var h="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var g=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key"
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 76 28 5b 5b 67 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 67 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d Data Ascii: 0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.seal({x:4}),k=new a(v([[g,"s"]]));if(k.get(g)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var l=
2025-03-20 11:02:35 UTC	1223	IN	Data Raw: 72 6e 20 67 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 Data Ascii: rn g.key})};e.prototype.values=function(){return c(this,function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;va

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:35 UTC	1466	OUT	GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol111%2Cpid-bodis-gcontrol444%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=1&rpbu=http%3A%2F%2Fcamsapi.camsoline.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2209915415042338&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=4911742468554258&num=0&output=afd_ads&domain_name=camsapi.camsoline.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1742468554259&u_w=1280&u_h=1024&biw=1280&bih=897&psw=1280&psh=807&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=738008665&rurl=http%3A%2F%2Fcamsapi.camsoline.com%2F HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: http://camsapi.camsoline.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:35 UTC	844	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Thu, 20 Mar 2025 11:02:35 GMT Expires: Thu, 20 Mar 2025 11:02:35 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-KN1hsSdBwPw4pD9qfBB8dg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Downlink Accept-CH: RTT Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 11:02:35 UTC	379	IN	Data Raw: 34 33 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 20 3c 2f 64 69 76 3e 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4b Data Ascii: 43e<!doctype html><html lang="en"> <head> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> </div> <script nonce="K
2025-03-20 11:02:35 UTC	714	IN	Data Raw: 28 65 6c 29 20 7b 20 76 61 72 20 61 64 42 6c 6f 63 6b 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 42 6c 6f 63 6b 22 29 3b 20 61 64 42 6c 6f 63 6b 2e 69 6e 6e 65 72 48 54 4d 4c 20 2b 3d 20 65 6c 3b 7d 0a 76 61 72 20 49 53 5f 47 4f 4f 47 4c 45 5f 41 46 53 5f 49 46 52 41 4d 45 5f 20 3d 20 74 72 75 65 3b 0a 76 61 72 20 61 64 5f 6a 73 6f 6e 20 3d 20 7b 22 63 61 70 73 22 3a 5b 7b 22 6e 22 3a 22 71 75 65 72 79 49 64 22 2c 22 76 22 3a 22 79 5f 58 62 5a 5f 58 34 4e 2d 4f 44 5f 62 38 50 67 70 58 70 38 41 67 22 7d 2c 7b 22 6e 22 3a 22 70 6f 70 73 74 72 69 70 65 52 73 22 2c 22 76 22 3a 22 23 31 46 38 41 37 30 2c 23 42 45 44 42 33 39 2c 23 46 46 45 31 31 41 2c 23 46 44 37 34 30 30 2c 23 30 30 34 33 35 38 22 7d 2c 7b 22 6e Data Ascii: (el) { var adBlock = document.getElementById("adBlock"); adBlock.innerHTML += el;}var IS_GOOGLE_AFS_IFRAME_ = true;var ad_json = {"caps":[{"n":"queryId","v":"y_XbZ_X4N-OD_b8PgpXp8Ag"},{"n":"popstripeRs","v":"#1F8A70,#BEDB39,#FFE11A,#FD7400,#004358"},{"n
2025-03-20 11:02:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:36 UTC	596	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:36 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 144180 Date: Thu, 20 Mar 2025 11:02:36 GMT Expires: Thu, 20 Mar 2025 11:02:36 GMT Cache-Control: private, max-age=3600 ETag: "16701881469394553872" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-20 11:02:36 UTC	505	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 35 38 32 37 31 35 33 39 31 36 33 37 31 36 37 35 38 38 30 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"15827153916371675880",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 73 65 6e 73 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 Data Ascii: senseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXU
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 68 29 7b 74 68 69 73 2e 67 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 Data Ascii: a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,h){this.g=f;ba(this,"description",{configurable:!0,writa
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 6d 61 3d 69 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 68 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 6d 61 29 6d 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 Data Ascii: a+" is not extensible");return a}:null}var ma=ia;function na(a,b){a.prototype=ha(b.prototype);a.prototype.constructor=a;if(ma)ma(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.d
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 65 3d 64 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 65 28 68 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 7b 76 61 72 20 6b 3d 0a 68 5b 67 5d 3b 68 5b 67 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 43 28 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 43 Data Ascii: })}this.g.push(h)};var e=da.setTimeout;c.prototype.A=function(h){e(h,0)};c.prototype.D=function(){for(;this.g&&this.g.length;){var h=this.g;this.g=[];for(var g=0;g<h.length;++g){var k=h[g];h[g]=null;try{k()}catch(l){this.C(l)}}}this.g=null};c.prototype.C
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 69 73 2e 47 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 64 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 67 3d 64 61 2e 45 76 65 6e 74 2c 6b 3d 64 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 74 79 70 65 6f 66 20 6b 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 67 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 3d 6e 65 77 20 67 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 68 3d 64 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 Data Ascii: is.G)return!1;var h=da.CustomEvent,g=da.Event,k=da.dispatchEvent;if(typeof k==="undefined")return!0;typeof h==="function"?h=new h("unhandledrejection",{cancelable:!0}):typeof g==="function"?h=new g("unhandledrejection",{cancelable:!0}):(h=da.document.crea
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 72 20 6c 3d 76 28 68 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 21 6d 2e 64 6f 6e 65 3b 6d 3d 6c 2e 6e 65 78 74 28 29 29 64 28 6d 2e 76 61 6c 75 65 29 2e 42 61 28 67 2c 6b 29 7d 29 7d 3b 62 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 28 68 29 2c 6b 3d 67 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6b 2e 64 6f 6e 65 3f 64 28 5b 5d 29 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 78 29 7b 71 5b 74 5d 3d 78 3b 72 2d 2d 3b 72 3d 3d 30 26 26 6c 28 71 29 7d 7d 76 61 72 20 71 3d 5b 5d 2c 72 3d 30 3b 64 6f 20 71 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 72 2b 2b 2c 64 28 6b 2e 76 61 6c 75 65 29 2e 42 61 28 6e 28 71 2e 6c 65 6e 67 74 Data Ascii: r l=v(h),m=l.next();!m.done;m=l.next())d(m.value).Ba(g,k)})};b.all=function(h){var g=v(h),k=g.next();return k.done?d([]):new b(function(l,m){function n(t){return function(x){q[t]=x;r--;r==0&&l(q)}}var q=[],r=0;do q.push(void 0),r++,d(k.value).Ba(n(q.lengt
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 6b 29 3b 6d 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6d 2e 68 61 73 28 6b 29 26 26 6d 2e 67 65 74 28 6c 29 3d 3d 34 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 68 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 67 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 Data Ascii: eturn!1;m.delete(k);m.set(l,4);return!m.has(k)&&m.get(l)==4}catch(n){return!1}}())return a;var h="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var g=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key")
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 76 28 5b 5b 67 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 67 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b Data Ascii: ],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.seal({x:4}),k=new a(v([[g,"s"]]));if(k.get(g)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var l=k
2025-03-20 11:02:36 UTC	1223	IN	Data Raw: 6e 20 67 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 Data Ascii: n g.key})};e.prototype.values=function(){return c(this,function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:42 UTC	665	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:42 UTC	629	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 11:02:42 GMT Content-Type: application/javascript Content-Length: 461918 Connection: close Cross-Origin-Resource-Policy: cross-origin Last-Modified: Tue, 18 Mar 2025 23:17:18 GMT ETag: "70c5e-630a61b1f3b80" Cache-Control: max-age=86400 Expires: Thu, 20 Mar 2025 13:56:48 GMT Edge-Control: max-age=86400 Cross-Origin-Resource-Policy: cross-origin X-77-NZT: EwwBV/mJAQH3kiYBAAwBuUwKDAH3FAIAAAwBJRPCNAG3DAAAAA X-77-NZT-Ray: 2c35301a3f9036d7d2f5db6730fe1822 X-77-Cache: HIT X-77-Age: 75410 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: dublinIE Accept-Ranges: bytes
2025-03-20 11:02:42 UTC	15755	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 35 2d 33 2d 31 38 2e 32 33 2e 31 37 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 Data Ascii: window.cmpccsversionbuild="2025-3-18.23.17";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){r
2025-03-20 11:02:42 UTC	16384	IN	Data Raw: 65 72 4d 6f 64 65 22 2c 22 69 6e 74 22 2c 32 29 29 3b 61 2e 70 75 73 68 28 28 6e 65 77 20 63 6d 70 5f 67 70 70 6d 61 6e 69 66 65 73 74 28 31 38 2c 22 75 73 69 61 22 29 29 2e 61 64 64 46 69 65 6c 64 28 22 56 65 72 73 69 6f 6e 22 2c 22 69 6e 74 22 2c 36 2c 30 2c 30 2c 74 72 75 65 2c 31 29 2e 61 64 64 46 69 65 6c 64 28 22 50 72 6f 63 65 73 73 69 6e 67 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c Data Ascii: erMode","int",2));a.push((new cmp_gppmanifest(18,"usia")).addField("Version","int",6,0,0,true,1).addField("ProcessingNotice","int",2).addField("SaleOptOutNotice","int",2).addField("SaleOptOut","int",2).addField("TargetedAdvertisingOptOut","int",2).addFiel
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 69 6f 6e 3d 62 2e 72 65 61 64 49 6e 74 28 36 29 3b 74 68 69 73 2e 53 75 62 56 65 72 73 69 6f 6e 73 3d 5b 31 5d 3b 74 68 69 73 2e 43 72 65 61 74 65 64 3d 62 2e 72 65 61 64 44 61 74 65 28 29 3b 74 68 69 73 2e 4c 61 73 74 55 70 64 61 74 65 64 3d 62 2e 72 65 61 64 44 61 74 65 28 29 3b 74 68 69 73 2e 43 6d 70 49 64 3d 62 2e 72 65 61 64 49 6e 74 28 31 32 29 3b 74 68 69 73 2e 43 6d 70 56 65 72 73 69 6f 6e 3d 62 2e 72 65 61 64 49 6e 74 28 31 32 29 3b 74 68 69 73 2e 43 6f 6e 73 65 6e 74 53 63 72 65 65 6e 3d 62 2e 72 65 61 64 49 6e 74 28 36 29 3b 74 68 69 73 2e 43 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 3d 62 2e 72 65 61 64 4c 61 6e 67 28 29 3b 74 68 69 73 2e 56 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 3d 62 2e 72 65 61 64 49 6e 74 28 31 32 29 3b 74 68 69 Data Ascii: ion=b.readInt(6);this.SubVersions=[1];this.Created=b.readDate();this.LastUpdated=b.readDate();this.CmpId=b.readInt(12);this.CmpVersion=b.readInt(12);this.ConsentScreen=b.readInt(6);this.ConsentLanguage=b.readLang();this.VendorListVersion=b.readInt(12);thi
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 63 2c 61 2c 64 2c 62 29 7b 63 3d 63 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 69 66 28 61 3d 3d 22 5f 5f 66 75 6c 6c 6c 6f 61 64 22 29 7b 69 66 28 74 68 69 73 2e 66 75 6c 6c 6f 61 64 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 2d 31 29 7b 74 68 69 73 2e 66 75 6c 6c 6f 61 64 2e 70 75 73 68 28 63 29 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 6c 6f 61 64 65 64 4c 61 6e 67 73 3d 5b 63 5d 3b 72 65 74 75 72 6e 7d 69 66 28 21 28 63 20 69 6e 20 74 68 69 73 2e 6f 76 65 72 72 69 64 64 65 6e 29 29 7b 74 68 69 73 2e 6f 76 65 72 72 69 64 64 65 6e 5b 63 5d 3d 7b 7d 7d 69 66 28 63 20 69 6e 20 74 68 69 73 2e 6f 76 65 72 72 69 64 64 65 6e 29 7b 74 68 69 73 2e 6f 76 65 72 72 69 64 64 65 6e 5b 63 5d 5b 61 5d 3d 64 3b 69 66 28 21 28 22 76 65 72 73 69 6f 6e 22 20 69 Data Ascii: ction(c,a,d,b){c=c.toUpperCase();if(a=="__fullload"){if(this.fulload.indexOf(c)==-1){this.fulload.push(c)}window.cmp_loadedLangs=[c];return}if(!(c in this.overridden)){this.overridden[c]={}}if(c in this.overridden){this.overridden[c][a]=d;if(!("version" i
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 28 74 68 69 73 2e 69 73 54 43 46 43 6f 6e 73 65 6e 74 4f 6e 6c 79 50 75 72 70 6f 73 65 28 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 65 6c 73 65 7b 69 66 28 74 68 69 73 2e 74 79 70 65 3d 3d 34 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 7d 72 65 74 75 72 6e 20 74 72 75 65 7d 3b 74 68 69 73 2e 69 73 41 6c 77 61 79 73 4f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 41 6c 77 61 79 73 4f 6e 43 6f 6e 73 65 6e 74 28 29 7c 7c 74 68 69 73 2e 69 73 41 6c 77 61 79 73 4f 6e 4c 49 28 29 7d 3b 74 68 69 73 2e 69 73 41 6c 77 61 79 73 4f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 75 74 74 6f 6e 74 79 70 65 3d 3d 33 7c 7c 74 68 69 73 2e 74 6f 67 67 6c 65 4c 6f 67 69 63 3d 3d 39 38 7d 3b Data Ascii: (this.isTCFConsentOnlyPurpose()){return false}}else{if(this.type==4){return false}}}return true};this.isAlwaysOn=function(){return this.isAlwaysOnConsent()\|\|this.isAlwaysOnLI()};this.isAlwaysOff=function(){return this.buttontype==3\|\|this.toggleLogic==98};
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 72 61 67 65 5f 6e 61 6d 65 5f 64 65 66 61 75 6c 74 7d 69 66 28 22 63 6d 70 5f 73 74 6f 72 61 67 65 5f 6e 61 6d 65 5f 63 70 63 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 66 2e 63 70 63 3d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 6f 72 61 67 65 5f 6e 61 6d 65 5f 63 70 63 3b 66 2e 61 6c 74 63 70 63 3d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 6f 72 61 67 65 5f 6e 61 6d 65 5f 63 70 63 7d 69 66 28 22 63 6d 70 5f 73 74 6f 72 61 67 65 5f 6e 61 6d 65 5f 63 76 63 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 66 2e 63 76 63 3d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 6f 72 61 67 65 5f 6e 61 6d 65 5f 63 76 63 3b 66 2e 61 6c 74 63 76 63 3d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 6f 72 61 67 65 5f 6e 61 6d 65 5f 63 76 63 7d 69 66 28 22 63 6d 70 5f 73 74 6f 72 61 67 65 5f 6e 61 6d 65 5f Data Ascii: rage_name_default}if("cmp_storage_name_cpc" in window){f.cpc=window.cmp_storage_name_cpc;f.altcpc=window.cmp_storage_name_cpc}if("cmp_storage_name_cvc" in window){f.cvc=window.cmp_storage_name_cvc;f.altcvc=window.cmp_storage_name_cvc}if("cmp_storage_name_
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 72 69 6e 67 22 29 7b 66 3d 22 22 7d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 67 28 22 66 69 72 65 45 76 65 6e 74 20 22 2b 6a 2b 22 20 22 2b 66 29 3b 69 66 28 28 6a 3d 3d 22 74 63 66 76 32 22 26 26 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 76 65 72 73 69 6f 6e 3e 30 29 29 7b 74 68 69 73 2e 6c 61 73 74 54 43 46 32 45 76 65 6e 74 3d 66 7d 65 6c 73 65 7b 69 66 28 6a 3d 3d 22 67 70 70 22 26 26 28 66 2b 22 2e 22 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 38 29 3d 3d 22 74 63 66 63 61 76 31 2e 22 26 26 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 7b 74 68 69 73 2e 6c 61 73 74 54 43 46 32 45 76 65 6e 74 3d 66 2e 73 75 62 73 74 72 69 6e 67 28 38 2c 39 39 39 39 29 7d 65 6c 73 65 7b 69 66 28 6a 3d Data Ascii: ring"){f=""}window.cmpmngr.log("fireEvent "+j+" "+f);if((j=="tcfv2"&&window.cmpmngr.tcfversion>0)){this.lastTCF2Event=f}else{if(j=="gpp"&&(f+".").substring(0,8)=="tcfcav1."&&window.cmpmngr.tcfcaversion==1){this.lastTCF2Event=f.substring(8,9999)}else{if(j=
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 69 6e 67 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 65 63 6b 42 6c 6f 63 6b 69 6e 67 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 68 65 63 6b 53 68 6f 77 53 63 72 65 65 6e 22 3a 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 6e 64 6c 65 53 50 41 4e 61 76 69 67 61 74 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 68 6f 77 53 63 72 65 65 6e 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 68 6f 77 53 63 72 65 65 6e 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 68 6f 77 43 43 50 41 53 63 72 65 65 6e 22 3a 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 65 67 75 6c 61 74 69 6f 6e 3d 32 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 63 6e 66 2e 72 65 67 75 6c 61 74 69 6f 6e 3d 32 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 68 6f Data Ascii: ing":return this.checkBlocking(c,f);break;case"checkShowScreen":return window.cmpmngr.handleSPANavigate();break;case"showScreen":return this.showScreen(c,f);break;case"showCCPAScreen":window.cmp_regulation=2;window.cmpmngr.cnf.regulation=2;return this.sho
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 73 74 6f 6d 65 72 50 72 69 76 61 63 79 29 7b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 53 68 6f 70 69 66 79 2e 63 75 73 74 6f 6d 65 72 50 72 69 76 61 63 79 2e 63 75 72 72 65 6e 74 56 69 73 69 74 6f 72 43 6f 6e 73 65 6e 74 28 29 3b 76 61 72 20 6b 3d 22 61 6e 61 6c 79 74 69 63 73 22 20 69 6e 20 6f 26 26 6f 2e 61 6e 61 6c 79 74 69 63 73 3d 3d 22 79 65 73 22 3b 76 61 72 20 6d 3d 22 6d 61 72 6b 65 74 69 6e 67 22 20 69 6e 20 6f 26 26 6f 2e 6d 61 72 6b 65 74 69 6e 67 3d 3d 22 79 65 73 22 3b 76 61 72 20 6c 3d 22 70 72 65 66 65 72 65 6e 63 65 73 22 20 69 6e 20 6f 26 26 6f 2e 70 72 65 66 65 72 65 6e 63 65 73 3d 3d 22 79 65 73 22 3b 76 61 72 20 69 3d 22 73 61 6c 65 5f 6f 66 5f 64 61 74 61 22 20 69 6e 20 6f 26 26 6f 2e 73 61 6c 65 5f 6f 66 5f 64 61 74 61 3d 3d 22 79 65 Data Ascii: stomerPrivacy){var o=window.Shopify.customerPrivacy.currentVisitorConsent();var k="analytics" in o&&o.analytics=="yes";var m="marketing" in o&&o.marketing=="yes";var l="preferences" in o&&o.preferences=="yes";var i="sale_of_data" in o&&o.sale_of_data=="ye
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 74 61 2d 63 6d 70 2d 70 72 65 76 69 65 77 2d 69 64 22 29 3b 67 3d 67 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 67 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 6a 3d 64 6f 63 75 6d 65 6e 74 3b 69 66 28 22 63 6d 70 6d 6e 67 72 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 64 69 73 70 6c 61 79 2e 69 73 57 43 41 47 28 29 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6d 70 70 72 65 76 69 65 77 72 6f 6f 74 22 2b 67 5b 66 5d 29 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6d 70 70 72 65 76 69 65 77 72 6f 6f 74 22 2b 67 5b 66 5d 29 2e 73 68 61 64 6f 77 52 6f 6f 74 29 7b 6a 3d 64 6f 63 75 6d 65 6e 74 Data Ascii: ta-cmp-preview-id");g=g.split(",");for(var f=0;f<g.length;f++){var j=document;if("cmpmngr" in window&&window.cmpmngr.display.isWCAG()){if(document.getElementById("cmppreviewroot"+g[f])&&document.getElementById("cmppreviewroot"+g[f]).shadowRoot){j=document

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:42 UTC	841	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.camsoline.com%2F%3Fdn%3Dcamsoline.com%26pbsubid%3D658efe83-b969-4d8f-a3b8-227fc2a18060%26pid%3D9POT3387I&&__cmpfcc=1&l=en&o=1742468560607 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:42 UTC	453	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:42 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 last-modified: Thu, 20 Mar 2025 11:02:42 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2025-03-20 11:02:42 UTC	5489	IN	Data Raw: 31 35 36 34 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 6e 22 3a 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 6d 6e 64 Data Ascii: 1564window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","cdn":"cdn.consentmanager.net","mnd

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:43 UTC	734	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfNDA.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:43 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 11:02:43 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-XSS-Protection: 0 Expires: Thu, 20 Mar 2025 11:12:40 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Thu, 20 Mar 2025 10:42:40 GMT X-77-NZT: EwwBV/mJAQH3sAQAAAwBuUwKEwGzBAcAAAwBw7WvAgG3AwAAAA X-77-NZT-Ray: 2c35301af08b18e1d3f5db671040911f X-77-Cache: HIT X-77-Age: 1200 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: dublinIE
2025-03-20 11:02:43 UTC	15772	IN	Data Raw: 38 30 30 30 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e Data Ascii: 8000if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 39 39 2c 2d 38 2e 35 33 33 6c 2d 31 38 38 2e 31 36 38 39 39 2c 30 63 2d 34 2e 33 30 30 39 39 2c 2d 34 33 2e 30 35 39 20 2d 34 30 2e 37 33 2c 2d 37 36 2e 38 20 2d 38 34 2e 38 39 38 2c 2d 37 36 2e 38 63 2d 34 37 2e 30 35 33 2c 30 20 2d 38 35 2e 33 33 33 2c 33 38 2e 32 38 31 20 2d 38 35 2e 33 33 33 2c 38 35 2e 33 33 33 73 33 38 2e 32 38 2c 38 35 2e 33 33 33 20 38 35 2e 33 33 33 2c 38 35 2e 33 33 33 63 34 34 2e 31 36 39 2c 30 20 38 30 2e 35 39 36 39 39 2c 2d 33 33 2e 37 34 31 20 38 34 2e 38 39 38 2c 2d 37 36 2e 38 6c 31 38 38 2e 31 36 38 39 39 2c 30 63 34 2e 37 31 38 30 32 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 20 38 2e 35 33 32 39 39 2c 2d 38 2e 35 33 33 7a 6d 2d 32 38 31 2e 35 39 39 39 38 2c 36 38 2e 32 36 36 63 2d 33 37 2e 36 34 31 30 31 2c 30 Data Ascii: 99,-8.533l-188.16899,0c-4.30099,-43.059 -40.73,-76.8 -84.898,-76.8c-47.053,0 -85.333,38.281 -85.333,85.333s38.28,85.333 85.333,85.333c44.169,0 80.59699,-33.741 84.898,-76.8l188.16899,0c4.71802,0 8.53299,-3.823 8.53299,-8.533zm-281.59998,68.266c-37.64101,0
2025-03-20 11:02:43 UTC	16384	IN	Data Raw: 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 42 6f 6f 74 73 74 72 61 70 43 44 4e 22 2c 22 70 73 22 3a 22 31 30 2c 63 31 22 7d 2c 7b 22 69 64 22 3a 22 63 34 36 37 31 37 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 62 75 79 64 6f 6d 61 69 6e 73 22 2c 22 70 73 22 3a 22 63 32 2c 73 32 22 7d 2c 7b 22 69 64 22 3a 22 63 34 36 38 35 39 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 43 6c 69 63 6b 20 46 72 61 75 64 20 50 72 65 76 65 6e 74 69 6f 6e 22 2c 22 70 73 22 3a 22 73 31 22 7d 2c 7b 22 69 64 22 3a 22 73 36 35 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 43 6c 6f 75 64 66 6c 61 72 65 22 2c 22 6e 6f 6e 65 75 22 3a 31 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 36 Data Ascii: sid":68884,"n":"BootstrapCDN","ps":"10,c1"},{"id":"c46717","wsid":68884,"n":"buydomains","ps":"c2,s2"},{"id":"c46859","wsid":68884,"n":"Click Fraud Prevention","ps":"s1"},{"id":"s65","wsid":68884,"n":"Cloudflare","noneu":1,"l":"\/delivery\/icons\/icons_v6
2025-03-20 11:02:44 UTC	16384	IN	Data Raw: 65 72 65 73 74 73 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 77 68 65 74 68 65 72 20 79 6f 75 20 72 65 61 64 20 61 6e 20 61 72 74 69 63 6c 65 2c 20 77 61 74 63 68 20 61 20 76 69 64 65 6f 2c 20 6c 69 73 74 65 6e 20 74 6f 20 61 20 70 6f 64 63 61 73 74 20 6f 72 20 6c 6f 6f 6b 20 61 74 20 61 20 70 72 6f 64 75 63 74 20 64 65 73 63 72 69 70 74 69 6f 6e 2c 20 68 6f 77 20 6c 6f 6e 67 20 79 6f 75 20 73 70 65 6e 74 20 6f 6e 20 74 68 69 73 20 73 65 72 76 69 63 65 20 61 6e 64 20 74 68 65 20 77 65 62 20 70 61 67 65 73 20 79 6f 75 20 76 69 73 69 74 20 65 74 63 2e 20 54 68 69 73 20 69 73 20 76 65 72 79 20 68 65 6c 70 66 75 6c 20 74 6f 20 75 6e 64 65 72 73 74 61 6e 64 20 74 68 65 20 72 65 6c 65 76 61 6e 63 65 20 6f 66 20 28 6e 6f 6e 2d 61 64 76 65 72 74 69 73 69 6e Data Ascii: erests. For instance, whether you read an article, watch a video, listen to a podcast or look at a product description, how long you spent on this service and the web pages you visit etc. This is very helpful to understand the relevance of (non-advertisin
2025-03-20 11:02:44 UTC	15800	IN	Data Raw: 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6f 6b 69 65 74 79 70 65 5f 36 22 2c 22 73 74 72 54 65 78 74 22 3a 22 53 6f 63 69 61 6c 20 6d 65 64 69 61 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6f 6b 69 65 69 6e 66 6f 5f 68 6c 22 2c 22 73 74 72 54 65 78 74 22 3a 22 4d 61 6e 61 67 65 20 79 6f 75 72 20 63 6f 6f 6b 69 65 73 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6f 6b 69 65 69 6e 66 6f 5f 74 65 78 74 22 2c 22 73 74 72 54 65 78 74 22 3a 22 3c 70 3e 54 68 65 72 65 20 61 72 65 20 76 61 72 69 6f 75 73 20 77 61 79 73 20 74 6f 20 6d 61 6e 61 67 65 20 63 6f 6f 6b 69 65 20 72 65 6c 61 74 65 64 20 70 72 65 66 65 72 Data Ascii: ,{"strLang":"EN","strType":"cookietype_6","strText":"Social media"},{"strLang":"EN","strType":"cookieinfo_hl","strText":"Manage your cookies"},{"strLang":"EN","strType":"cookieinfo_text","strText":"<p>There are various ways to manage cookie related prefer

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:44 UTC	871	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.camsoline.com%2F&o=1742468563025&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=40&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://ww01.camsoline.com/?dn=camsoline.com&pbsubid=658efe83-b969-4d8f-a3b8-227fc2a18060&pid=9POT3387I Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:44 UTC	424	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:44 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 last-modified: Thu, 20 Mar 2025 11:02:44 GMT content-length: 43 content-type: image/gif connection: close
2025-03-20 11:02:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:45 UTC	557	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.camsoline.com%2F&o=1742468563025&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=40&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:45 UTC	424	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:45 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 last-modified: Thu, 20 Mar 2025 11:02:45 GMT content-length: 43 content-type: image/gif connection: close
2025-03-20 11:02:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-20 11:02:56 UTC	6003	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.camsoline.com%2FMutual_Fund_Statements.cfm%3Fdomain%3Dcamsoline.com%26fp%3DR8ceDLNrtNDHn15cpwkQU%252FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%252FG960dYtqe9I499WeZ%252BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%252FU2K2d5euP%252FNV5JeK02abPr%252Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%252B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%252FNyDJA%252B1Nf34gdb9%252Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%252F9v712i0WStGedLLlVLAFyJkpR4%26yep%3DUtm1MHC637QPcpRSvjJDXCflQWMmWU%252BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%252FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%252B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%252Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%252FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%252FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%252FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%252B4q48b%252FQT1v [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: http://ww01.camsoline.com/Mutual_Fund_Statements.cfm?domain=camsoline.com&fp=R8ceDLNrtNDHn15cpwkQU%2FJbi12Fh1eGyHoNlDyJEJLZHDanJp33C9TJAxWV5A%2FG960dYtqe9I499WeZ%2BfqGGZ9kqbE7GaNluG0u1R4MkR505S7%2FU2K2d5euP%2FNV5JeK02abPr%2Fu1ej4jwaFHm6jh9fIAguBCSUYgf99dyBbkyqOLhF2%2B2x5FJW8GvcKrryqoMmKZldIoAbRB3IDSIFJkg21wQTOXbio8J1DRtLFHSO0VUKRZa%2FNyDJA%2B1Nf34gdb9%2Fr6IW7aaQkAHBxEUlVx3FH78CqxfdZilPrw%2F9v712i0WStGedLLlVLAFyJkpR4&yep=Utm1MHC637QPcpRSvjJDXCflQWMmWU%2BzzghiZz4MKnIelrfvAC9HkSuExFQwsV8N21r2pACyFiEAMQ4C%2FumOm9jVshRXwJix4HP7N4u4AzmamJfY9RY8W4y%2B61Gioap5uLUJCjFHM4jhM91rblU5kf1pKcu0eVdrPDFvIdJ8MKwVkJJJaX7rPzAryNeLTqHX%2Bl5eABNC1x4I4qdEwvpj2hl62iearuj3X3vYUnTEeCPhdk7SidYi5DI6CQcw0v4lV6Z1CPWmYuGzpVj4wN%2FWXwuqv15nOyTvXHBaHnRNRo69piFELN3vAnOWf7pWjC%2FfqWqjqjs3t3KAO8utUAk5WIiPsvCtqJMC6Nl83BYRVSsMu7ZSe79MQwlGxdASZoMdz8ShZy%2FmYJgAAGY8gZNn9YVFLh8Z7pKWgF7hBXNakJjsxeh6zPrnJEjmTTWl9lRGxz3EuWvibprwAnSJ3Ea%2B4q48b%2FQT1v%2BNhmdyIrZfP6gFHm%2FN0Qab93KPKT6WOHqbZn%2FLo5yUozsGOeK9WggaiLr5sjeqNgFnKpMexTq%2F%2BjDigW7nKU% [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 11:02:56 UTC	453	IN	HTTP/1.1 200 OK date: Thu, 20 Mar 2025 11:02:56 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 last-modified: Thu, 20 Mar 2025 11:02:56 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2025-03-20 11:02:56 UTC	5484	IN	Data Raw: 31 35 36 34 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 6e 22 3a 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 6d 6e 64 Data Ascii: 1564window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","cdn":"cdn.consentmanager.net","mnd
2025-03-20 11:02:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0