Edit tour

Windows Analysis Report
Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx

Overview

General Information

Sample name:	Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx
Analysis ID:	1522671
MD5:	8a46f520bc41b8cc95a6b23c858037f3
SHA1:	bb7a330637d77c0d1f37e901e38a06af4ef08d1c
SHA256:	c5f56fa320f363b23fb9275ffa1a9aa8f9941adc13b72f7bd4a4ff91d87368c1
Tags:	xlsxuser-cocaman
Infos:

Detection

Score:	25
Range:	0 - 100
Whitelisted:	false
Confidence:	40%

Signatures

HTML page contains suspicious base64 encoded javascript

Connects to many different domains

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTML page contains hidden javascript code

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Excel Network Connections

Sigma detected: Suspicious Office Outbound Connections

Classification

Process Tree

System is w10x64

EXCEL.EXE (PID: 7512 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 7256 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

splwow64.exe (PID: 5316 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

chrome.exe (PID: 732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1948,i,36543809609165043,4265203075758315399,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4824 --field-trial-handle=1948,i,36543809609165043,4265203075758315399,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.multitran.ru/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 9920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2412,i,10596119694725537203,12646345865528063777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4992 --field-trial-handle=2412,i,10596119694725537203,12646345865528063777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.multitran.ru/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Sigma Signatures

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 13.107.246.60, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 7512, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49753

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.4, DestinationIsIpv6: false, DestinationPort: 49753, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 7512, Protocol: tcp, SourceIp: 13.107.246.60, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML page contains suspicious base64 encoded javascript

Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9

HTTP Parser: Base64 decoded: <script>

Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9

HTTP Parser: Base64 decoded: <script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script><ins class="adsbygoogle" style="display:inline-block;width:728px;height:90px" data-ad-client="ca-pub-3245380208650914" data-ad-slot="1384673200"><...

Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon
Source: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9	HTTP Parser: No favicon

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: excel.exe	Memory has grown: Private usage: 2MB later: 78MB
Source: chrome.exe	Memory has grown: Private usage: 12MB later: 90MB

Source: unknown

Network traffic detected: DNS query count 241

Source: global traffic

TCP traffic: 192.168.2.4:50820 -> 91.228.72.78:8443

Source: global traffic	TCP traffic: 192.168.2.4:49944 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50001 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50125 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50135 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50940 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 241

Source: Joe Sandbox View	IP Address: 37.252.171.149 37.252.171.149
Source: Joe Sandbox View	IP Address: 91.228.74.200 91.228.74.200
Source: Joe Sandbox View	IP Address: 185.89.210.153 185.89.210.153

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vfYU4w9MM+3Pbn4&MD=zhyCpzKr HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vfYU4w9MM+3Pbn4&MD=zhyCpzKr HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule170012v12s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule63067v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule170022v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule490016v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324001v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324006v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324002v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324005v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324004v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324003v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 HTTP/1.1Host: www.multitran.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 HTTP/1.1Host: www.multitran.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css?v=394 HTTP/1.1Host: www.multitran.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script.js?v=34 HTTP/1.1Host: www.multitran.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gif/logoe.gif HTTP/1.1Host: www.multitran.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /intl/en_us/badges/static/images/badges/en_badge_web_generic.png HTTP/1.1Host: play.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gif/logoe.gif HTTP/1.1Host: www.multitran.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /intl/en_us/badges/static/images/badges/en_badge_web_generic.png HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script.js?v=34 HTTP/1.1Host: www.multitran.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gif/Appstore/ios_eng.svg HTTP/1.1Host: www.multitran.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gif/bg.gif HTTP/1.1Host: www.multitran.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /44090/adRecover.js HTTP/1.1Host: delivery.adrecover.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /42845/adpushup.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.multitran.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-2.2.2.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gif/Appstore/ios_eng.svg HTTP/1.1Host: www.multitran.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gif/bg.gif HTTP/1.1Host: www.multitran.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /44090/adRecover.js HTTP/1.1Host: delivery.adrecover.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-2.2.2.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /42845/adpushup.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /block.jpg?ts=1727702211930 HTTP/1.1Host: delivery.adrecover.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/pb.42845.1722547367473.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback/testmode?data=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%3D%3D&c_b=6179.100000000006 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/user/sync HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbuseridscripts/quantcast.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /42845/apInstreamBundle.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6229.100000000006 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /urlutmmapping/42845/UrlMapping/ca477594da315e4b53f6ea52b8abd56c50a329fa.json HTTP/1.1Host: keymap.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240925/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-1428290592401732&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1727702213&plaf=1%3A2%2C2%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C8%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1727702211461&bpp=5&bdt=2725&idt=2090&shv=r20240925&mjsv=m202409250101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5953568511378&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087428%2C31087437%2C44795921%2C31087523%2C95339679&oid=2&pvsid=1458590452093353&tmod=1650493302&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2136 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-3245380208650914&output=html&h=90&slotname=1384673200&adk=1626116373&adf=4281662534&pi=t.ma~as.1384673200&w=728&abgtt=6&lmt=1727702213&format=728x90&url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1727702212707&bpp=2&bdt=3971&idt=903&shv=r20240925&mjsv=m202409250101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=5953568511378&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=255&ady=2&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087428%2C31087437%2C44795921%2C31087523%2C95339679&oid=2&pvsid=1458590452093353&tmod=1650493302&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7Cd%7CoeE%7Cn&abl=XS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=915 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-3245380208650914&output=html&h=600&slotname=2373948248&adk=1250989643&adf=1556737774&pi=t.ma~as.2373948248&w=160&abgtt=6&lmt=1727702213&format=160x600&url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1727702212711&bpp=3&bdt=3975&idt=944&shv=r20240925&mjsv=m202409250101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C728x90&nras=1&correlator=5953568511378&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=100&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087428%2C31087437%2C44795921%2C31087523%2C95339679&oid=2&pvsid=1458590452093353&tmod=1650493302&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CfE%7C&abl=CF&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=948 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6313.8000000000175 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback/testmode?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMTI2MjIsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZUlkIjo0Mjg0NSwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwidXJsIjoiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlP3Q9NTQyODg3N18xXzImczE9JUVEJUUwJUYzJUY3JUVEJUVFLSVFOCVGMSVGMSVFQiVFNSVFNCVFRSVFMiVFMCVGMiVFNSVFQiVGQyVGMSVFQSVFOCVFOSIsIm1vZGUiOjUsImVycm9yQ29kZSI6MSwicmVmZXJyZXIiOiIiLCJwbGF0Zm9ybSI6IkRFU0tUT1AiLCJpc0dlbmllZSI6ZmFsc2UsInNlY3Rpb25zIjpudWxsLCJjb3VudHJ5IjoiVVMifQ%3D%3D&c_b=6337.399999999994 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6345 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quant.js HTTP/1.1Host: secure.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.multitran.com&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /configs/2e7e1587-d92f-46dd-8721-80b53eccb87e HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/user/sync HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /block.jpg?ts=1727702211930 HTTP/1.1Host: delivery.adrecover.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /urlutmmapping/42845/UrlMapping/ca477594da315e4b53f6ea52b8abd56c50a329fa.json HTTP/1.1Host: keymap.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbuseridscripts/quantcast.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6229.100000000006 HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback/testmode?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMTI1NzgsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZUlkIjo0Mjg0NSwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwidXJsIjoiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlP3Q9NTQyODg3N18xXzImczE9JUVEJUUwJUYzJUY3JUVEJUVFLSVFOCVGMSVGMSVFQiVFNSVFNCVFRSVFMiVFMCVGMiVFNSVFQiVGQyVGMSVFQSVFOCVFOSIsIm1vZGUiOjQsImVycm9yQ29kZSI6MCwicmVmZXJyZXIiOiIiLCJwbGF0Zm9ybSI6IkRFU0tUT1AiLCJpc0dlbmllZSI6ZmFsc2UsInNlY3Rpb25zIjpudWxsLCJjb3VudHJ5IjoiVVMifQ%3D%3D&c_b=6179.100000000006 HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/pb.42845.1722547367473.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /42845/apInstreamBundle.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6313.8000000000175 HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6345 HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback/testmode?data=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%3D%3D&c_b=6337.399999999994 HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hadron.js?url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ref=&_it=amazon&partner_id=777 HTTP/1.1Host: cdn.hadronid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules-p-54Nt-1NAaEEe0.js HTTP/1.1Host: rules.quantcount.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-1428290592401732?href=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.multitran.com&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /configs/2e7e1587-d92f-46dd-8721-80b53eccb87e HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16576/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quant.js HTTP/1.1Host: secure.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/videoUtils-22e089ff-1721378485014.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/103512698?ers=3 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202409240101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /hadron.js?url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ref=&_it=amazon&partner_id=777 HTTP/1.1Host: cdn.hadronid.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUwCuxFQSj1QkSnwRGA9Te0Ipr33f9TmT7sKEDr8iYNRg8fMx22-JPtMTqi0BTs5_V2Kd9XbQQnYYzMqzvxubl7A6f6RgaxBxetmqehYYo59LeT0vGrSd3Q5gu94Fgcoy1pukTfMQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI3NzAyMjE2LDgwNjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlIixudWxsLFtbOCwiR0VoX0h2V3lkNlEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16576/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-1428290592401732?href=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules-p-54Nt-1NAaEEe0.js HTTP/1.1Host: rules.quantcount.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel;r=643403303;rf=0;a=p-54Nt-1NAaEEe0;url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9;ns=0;ce=1;qjs=1;qv=fd657345-20240925114642;ref=;d=multitran.com;dst=1;et=1727702216830;tzo=240;ogl=title.Dictionary;ses=c8fd7b8a-05c5-4947-9572-57e12d1bdadf;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-219187005-1727702215188;pbc=;cm=undefined;gdpr=0;us_privacy=1---;gpp_sid=-1;mdl= HTTP/1.1Host: pixel.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /c/[object%20Module] HTTP/1.1Host: www.multitran.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: h=1024; w=1280; w1=1280; h1=907; _ga_8BNQ9L4TKJ=GS1.1.1727702211.1.0.1727702211.0.0.0; _ga=GA1.1.655009769.1727702211; __AP_SESSION__=e4a23296-7541-469f-b752-06081ba1c4d2
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls.m3u8 HTTP/1.1Host: video.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/103512698?ers=3 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUwCuxFQSj1QkSnwRGA9Te0Ipr33f9TmT7sKEDr8iYNRg8fMx22-JPtMTqi0BTs5_V2Kd9XbQQnYYzMqzvxubl7A6f6RgaxBxetmqehYYo59LeT0vGrSd3Q5gu94Fgcoy1pukTfMQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI3NzAyMjE2LDgwNjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlIixudWxsLFtbOCwiR0VoX0h2V3lkNlEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/videoUtils-22e089ff-1721378485014.js HTTP/1.1Host: cdn.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel;r=643403303;rf=0;a=p-54Nt-1NAaEEe0;url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9;ns=0;ce=1;qjs=1;qv=fd657345-20240925114642;ref=;d=multitran.com;dst=1;et=1727702216830;tzo=240;ogl=title.Dictionary;ses=c8fd7b8a-05c5-4947-9572-57e12d1bdadf;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-219187005-1727702215188;pbc=;cm=undefined;gdpr=0;us_privacy=1---;gpp_sid=-1;mdl= HTTP/1.1Host: pixel.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=66faa4ca-b24a8-e86ee-8a585
Source: global traffic	HTTP traffic detected: GET /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=31a817ca3356fa6382689ba223379509
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls/360p/main.m3u8 HTTP/1.1Host: video.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls.m3u8 HTTP/1.1Host: video.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXFqCEi660SmhLNDaznrmn_K_vf3ONLw-fZWG54w-GaF18Z8jQFmo6T4kVsQFLz9WT8MBQNhBbwdhU87czheYwaeyGr5z9gR03SEhZ4I42iFg_m5Nctp5ISCm9gs4u1hNFuwdODyqLfkPPzw1O5lcMP0sCcg-al3X-3Pb0VnwUc-AIsfNovOoVDT7E7/_/websie-ads3./cgi/ad_/ad/empty./site_ads.-panel-ad. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls/360p/main.m3u8 HTTP/1.1Host: video.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls/eng/main.m3u8 HTTP/1.1Host: video.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls/360p/main_00001.ts HTTP/1.1Host: video.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/prebid/currency-file@1/latest.json?date=20240930 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbjs/1/AP/42845_multitran.com/1/www.multitran.com/ROS?rnd=0.43013598678955556&e=video_728x90_0%3A728x90%3B1&ur=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pbv=8.27.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ccpa=1---&e_quantcastId=P0-219187005-1727702215188&e_pubcid=ac47d973-e264-4b59-b4d0-8404bfddc2d2&vctx=2&vv=3 HTTP/1.1Host: pbjs.e-planning.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/711/pbjs HTTP/1.1Host: api.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbjs/1/AP/42845_multitran.com/1/www.multitran.com/ROS?rnd=0.43013598678955556&e=728x90_0%3A728x90%2C690x90%2C675x90%2C670x90%2C650x90%2C630x90%2C600x90%2C580x90%2C570x90%2C468x60%2C320x50%2C300x50%2C300x75&ur=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pbv=8.27.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ccpa=1---&e_quantcastId=P0-219187005-1727702215188&e_pubcid=ac47d973-e264-4b59-b4d0-8404bfddc2d2 HTTP/1.1Host: pbjs.e-planning.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22235886e1c3c9eb9%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%2C%2224ef5b5a31fd70f%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%7D&ref=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&s=0b9c28c3-3a0a-4b6b-b1de-da65705d3d5d&pv=f820334a-8eee-4857-a4f3-e2c72b0c4b10&vp=desktop&lib_name=prebid&lib_v=8.45.0&us=5&iqid=null&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22multitran.com%22%2C%22keywords%22%3A%22Multitran%2Cdictionary%2Ctranslation%22%2C%22publisher%22%3A%7B%22domain%22%3A%22multitran.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpushup.com%22%2C%22sid%22%3A%2250b20a9bbdab7514c096e12d3b6f06d8%22%2C%22hp%22%3A1%7D%5D%7D&kw=Multitran%2Cdictionary%2Ctranslation&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pid=9p4eLEHty4Grr&cb=0&ws=1280x907&v=24.827.1552&t=3000&slots=%5B%7B%22sd%22%3A%22ADP_42845_728x90_00000001-04c6b3c7-e8b3-4e81-98c1-4f968e326420%22%2C%22s%22%3A%5B%22728x90%22%2C%22690x90%22%2C%22675x90%22%2C%22670x90%22%2C%22650x90%22%2C%22630x90%22%2C%22600x90%22%2C%22580x90%22%2C%22570x90%22%2C%22468x60%22%2C%22320x50%22%2C%22300x50%22%2C%22300x75%22%5D%2C%22sn%22%3A%22%2F103512698%2FADP_42845_728X90_af7ac722-2488-47de-81af-fd4897f62d72%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21adpushup.com%2C50b20a9bbdab7514c096e12d3b6f06d8%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=b0b0c663-9fc5-4ff1-8415-8776ba358d7f&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22060ixdbj2g5le89i7dai9dafeb9hg6ie6dhuokgwsqy0m46u2keu6keomg6sq0um0%22%2C%22lotame%22%3A%22bf75845a6b4a967090c4c282cbd416d539380bdcbdb014206ae6fc29a484d1c5%22%2C%22pubcommon%22%3A%22ac47d973-e264-4b59-b4d0-8404bfddc2d2%22%7D%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls/eng/main_00001.aac HTTP/1.1Host: video.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXFqCEi660SmhLNDaznrmn_K_vf3ONLw-fZWG54w-GaF18Z8jQFmo6T4kVsQFLz9WT8MBQNhBbwdhU87czheYwaeyGr5z9gR03SEhZ4I42iFg_m5Nctp5ISCm9gs4u1hNFuwdODyqLfkPPzw1O5lcMP0sCcg-al3X-3Pb0VnwUc-AIsfNovOoVDT7E7/_/websie-ads3./cgi/ad_/ad/empty./site_ads.-panel-ad. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls/eng/main.m3u8 HTTP/1.1Host: video.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pid=9p4eLEHty4Grr&cb=1&ws=1280x907&v=24.827.1552&t=3000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A85%2C%22id%22%3A%22Adpushup_Instream%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22640x480%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21adpushup.com%2C50b20a9bbdab7514c096e12d3b6f06d8%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=b0b0c663-9fc5-4ff1-8415-8776ba358d7f&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22060ixdbj2g5le89i7dai9dafeb9hg6ie6dhuokgwsqy0m46u2keu6keomg6sq0um0%22%2C%22lotame%22%3A%22bf75845a6b4a967090c4c282cbd416d539380bdcbdb014206ae6fc29a484d1c5%22%2C%22pubcommon%22%3A%22ac47d973-e264-4b59-b4d0-8404bfddc2d2%22%7D%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=702064 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/prebid/currency-file@1/latest.json?date=20240930 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls/360p/main_00001.ts HTTP/1.1Host: video.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22235886e1c3c9eb9%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%2C%2224ef5b5a31fd70f%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%7D&ref=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&s=0b9c28c3-3a0a-4b6b-b1de-da65705d3d5d&pv=f820334a-8eee-4857-a4f3-e2c72b0c4b10&vp=desktop&lib_name=prebid&lib_v=8.45.0&us=5&iqid=null&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22multitran.com%22%2C%22keywords%22%3A%22Multitran%2Cdictionary%2Ctranslation%22%2C%22publisher%22%3A%7B%22domain%22%3A%22multitran.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpushup.com%22%2C%22sid%22%3A%2250b20a9bbdab7514c096e12d3b6f06d8%22%2C%22hp%22%3A1%7D%5D%7D&kw=Multitran%2Cdictionary%2Ctranslation&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=816eb57d-a170-4d89-9a52-e61f6d07f53b; _usd_multitran.com=f820334a-8eee-4857-a4f3-e2c72b0c4b10; __uih=1; HAPLB8G=s85176\|Zvqk0
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=6178153711103958302; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990217831684&o=1; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=861631 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=20343d91-5e26-465f-aa19-7e2190cce0d8
Source: global traffic	HTTP traffic detected: GET /prebid-request HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_8.27.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHSa3Np753SGSkvL_c
Source: global traffic	HTTP traffic detected: GET /pbjs/1/AP/42845_multitran.com/1/www.multitran.com/ROS?rnd=0.43013598678955556&e=video_728x90_0%3A728x90%3B1&ur=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pbv=8.27.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ccpa=1---&e_quantcastId=P0-219187005-1727702215188&e_pubcid=ac47d973-e264-4b59-b4d0-8404bfddc2d2&vctx=2&vv=3 HTTP/1.1Host: pbjs.e-planning.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=702064 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/711/pbjs HTTP/1.1Host: api.id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbjs/1/AP/42845_multitran.com/1/www.multitran.com/ROS?rnd=0.43013598678955556&e=728x90_0%3A728x90%2C690x90%2C675x90%2C670x90%2C650x90%2C630x90%2C600x90%2C580x90%2C570x90%2C468x60%2C320x50%2C300x50%2C300x75&ur=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pbv=8.27.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ccpa=1---&e_quantcastId=P0-219187005-1727702215188&e_pubcid=ac47d973-e264-4b59-b4d0-8404bfddc2d2 HTTP/1.1Host: pbjs.e-planning.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_8.45.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Outbrain HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pid=9p4eLEHty4Grr&cb=0&ws=1280x907&v=24.827.1552&t=3000&slots=%5B%7B%22sd%22%3A%22ADP_42845_728x90_00000001-04c6b3c7-e8b3-4e81-98c1-4f968e326420%22%2C%22s%22%3A%5B%22728x90%22%2C%22690x90%22%2C%22675x90%22%2C%22670x90%22%2C%22650x90%22%2C%22630x90%22%2C%22600x90%22%2C%22580x90%22%2C%22570x90%22%2C%22468x60%22%2C%22320x50%22%2C%22300x50%22%2C%22300x75%22%5D%2C%22sn%22%3A%22%2F103512698%2FADP_42845_728X90_af7ac722-2488-47de-81af-fd4897f62d72%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21adpushup.com%2C50b20a9bbdab7514c096e12d3b6f06d8%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=b0b0c663-9fc5-4ff1-8415-8776ba358d7f&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22060ixdbj2g5le89i7dai9dafeb9hg6ie6dhuokgwsqy0m46u2keu6keomg6sq0um0%22%2C%22lotame%22%3A%22bf75845a6b4a967090c4c282cbd416d539380bdcbdb014206ae6fc29a484d1c5%22%2C%22pubcommon%22%3A%22ac47d973-e264-4b59-b4d0-8404bfddc2d2%22%7D%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.45.0&referrer=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&tmax=3000 HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=1590848361649052531873
Source: global traffic	HTTP traffic detected: GET /butler?type=adServed&arid=4be37246-7d0e-4468-8e7e-fd9822a442f3&supplyId=WYu2BXv1&platformType=web&inventoryType=display HTTP/1.1Host: b.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=20343d91-5e26-465f-aa19-7e2190cce0d8
Source: global traffic	HTTP traffic detected: GET /adreq?cb=8997 HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /v1/openrtb HTTP/1.1Host: ex.ingage.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=702064 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=e8TX874Mp4Q; VISITOR_INFO1_LIVE=F3dUgsHKV8o; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUA%3D%3D
Source: global traffic	HTTP traffic detected: GET /instream/content/reading/resoomer/hls/eng/main_00001.aac HTTP/1.1Host: video.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=20343d91-5e26-465f-aa19-7e2190cce0d8
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pid=9p4eLEHty4Grr&cb=1&ws=1280x907&v=24.827.1552&t=3000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A85%2C%22id%22%3A%22Adpushup_Instream%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22640x480%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21adpushup.com%2C50b20a9bbdab7514c096e12d3b6f06d8%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=b0b0c663-9fc5-4ff1-8415-8776ba358d7f&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22060ixdbj2g5le89i7dai9dafeb9hg6ie6dhuokgwsqy0m46u2keu6keomg6sq0um0%22%2C%22lotame%22%3A%22bf75845a6b4a967090c4c282cbd416d539380bdcbdb014206ae6fc29a484d1c5%22%2C%22pubcommon%22%3A%22ac47d973-e264-4b59-b4d0-8404bfddc2d2%22%7D%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Outbrain&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg\|t
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMjAxODYsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZUlkIjo0Mjg0NSwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwidXJsIjoiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlP3Q9NTQyODg3N18xXzImczE9JUVEJUUwJUYzJUY3JUVEJUVFLSVFOCVGMSVGMSVFQiVFNSVFNCVFRSVFMiVFMCVGMiVFNSVFQiVGQyVGMSVFQSVFOCVFOSIsIm1vZGUiOjEsImVycm9yQ29kZSI6MSwicmVmZXJyZXIiOiIiLCJwbGF0Zm9ybSI6IkRFU0tUT1AiLCJpc0dlbmllZSI6ZmFsc2UsInNlY3Rpb25zIjpbeyJzZWN0aW9uSWQiOiJhZjdhYzcyMi0yNDg4LTQ3ZGUtODFhZi1mZDQ4OTdmNjJkNzIiLCJzZWN0aW9uTmFtZSI6IkNtcF9BUF9UX0RfNzI4WDkwX2FmN2FjIiwic3RhdHVzIjoxLCJuZXR3b3JrIjoiYWRwVGFncyIsIm5ldHdvcmtBZFVuaXRJZCI6IkFEUF80Mjg0NV83MjhYOTBfYWY3YWM3MjItMjQ4OC00N2RlLTgxYWYtZmQ0ODk3ZjYyZDcyIiwic2VydmljZXMiOlsyLDNdLCJhZFVuaXRUeXBlIjo2LCJhZFNlcnZlckNvZGUiOiIxMDM1MTI2OTgifV0sImNvdW50cnkiOiJVUyJ9&c_b=13786.5 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adreq?cb=10188 HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /v1/openrtb HTTP/1.1Host: ex.ingage.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q
Source: global traffic	HTTP traffic detected: GET /butler?type=adServed&arid=4be37246-7d0e-4468-8e7e-fd9822a442f3&supplyId=WYu2BXv1&platformType=web&inventoryType=display HTTP/1.1Host: b.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=20343d91-5e26-465f-aa19-7e2190cce0d8
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=G_2w7bimYuM; VISITOR_INFO1_LIVE=IzsdMiESEPc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgRQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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&c_b=13786.5 HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=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%3D HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/halo_match?id=AU1D-0100-001727702220-VFVIGU3O-SOQK&halo_id=060ixdbj2g5le89i7dai9dafeb9hg6ie6dhuokgwsqy0m46u2keu6keomg6sq0um0 HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1
Source: global traffic	HTTP traffic detected: GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001727702220-VFVIGU3O-SOQK&adnxs_id=$UID&gdpr=0 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /s/v3/pr?exlist=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Outbrain&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/v1/ip_match?id=AU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMjAyMTEsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwic2l0ZUlkIjo0Mjg0NSwicGxhdGZvcm0iOiJERVNLVE9QIiwiY291bnRyeSI6IlVTIiwibW9kZSI6MSwiZXJyb3JDb2RlIjoxLCJwYWdlR3JvdXAiOm51bGwsInBhZ2VWYXJpYXRpb25JZCI6bnVsbCwicGFnZVZhcmlhdGlvbk5hbWUiOm51bGwsInBhZ2VWYXJpYXRpb25UeXBlIjpudWxsLCJpc0dlbmllZSI6ZmFsc2UsInVybCI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vYy9tLmV4ZT90PTU0Mjg4NzdfMV8yJnMxPSVFRCVFMCVGMyVGNyVFRCVFRS0lRTglRjElRjElRUIlRTUlRTQlRUUlRTIlRTAlRjIlRTUlRUIlRkMlRjElRUElRTglRTkiLCJyZWZlcnJlciI6IiIsInNlY3Rpb25zIjpbeyJzZWN0aW9uSWQiOiIwMDdkMWYyMi0xYmMyLTRhNjktOWQ0ZC1hYWZmYTJjZTUzNzMiLCJzZWN0aW9uTmFtZSI6IkFQX0lOU1RSRUFNXzQyODQ1XzAwN2QxIiwic3RhdHVzIjoxLCJuZXR3b3JrIjoiYWRwVGFncyIsInNlcnZpY2VzIjpbMiwzXSwiYWRVbml0VHlwZSI6NiwibmV0d29ya0FkVW5pdElkIjoiYXBfNDI4NDVfaW5zdHJlYW1fZGVza3RvcF8wMDdkMV9wNCIsImFkU2VydmVyQ29kZSI6IjEwMzUxMjY5OCJ9XX0%3D HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMjAyMTEsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwic2l0ZUlkIjo0Mjg0NSwicGxhdGZvcm0iOiJERVNLVE9QIiwiY291bnRyeSI6IlVTIiwibW9kZSI6MSwiZXJyb3JDb2RlIjoxLCJwYWdlR3JvdXAiOm51bGwsInBhZ2VWYXJpYXRpb25JZCI6bnVsbCwicGFnZVZhcmlhdGlvbk5hbWUiOm51bGwsInBhZ2VWYXJpYXRpb25UeXBlIjpudWxsLCJpc0dlbmllZSI6ZmFsc2UsInVybCI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vYy9tLmV4ZT90PTU0Mjg4NzdfMV8yJnMxPSVFRCVFMCVGMyVGNyVFRCVFRS0lRTglRjElRjElRUIlRTUlRTQlRUUlRTIlRTAlRjIlRTUlRUIlRkMlRjElRUElRTglRTkiLCJyZWZlcnJlciI6IiIsInNlY3Rpb25zIjpbeyJzZWN0aW9uSWQiOiIwMDdkMWYyMi0xYmMyLTRhNjktOWQ0ZC1hYWZmYTJjZTUzNzMiLCJzZWN0aW9uTmFtZSI6IkFQX0lOU1RSRUFNXzQyODQ1XzAwN2QxIiwic3RhdHVzIjoxLCJuZXR3b3JrIjoiYWRwVGFncyIsInNlcnZpY2VzIjpbMiwzXSwiYWRVbml0VHlwZSI6NiwibmV0d29ya0FkVW5pdElkIjoiYXBfNDI4NDVfR0lfaW5zdHJlYW1fZGVza3RvcF9ub01jbTEiLCJhZFNlcnZlckNvZGUiOiI0MjQ1MzY1MjgifV19 HTTP/1.1Host: e3.adpushup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001727702220-VFVIGU3O-SOQK&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001727702220-VFVIGU3O-SOQK%26adnxs_id%3D%24UID%26gdpr%3D0 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?us_privacy=1--- HTTP/1.1Host: csync.smilewanted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/?cb=1727702221394&us_privacy=1--- HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdc/v1/syncPage/unruly?userId=e416d9de-73a3-41d6-875b-fcc8585a3224&to=https%3A%2F%2Fsync.1rx.io%2Fusersync2%2Frmpssp%3Fsub%3Dinsticator HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q
Source: global traffic	HTTP traffic detected: GET /wdc/v1/syncPage/sharethrough?userId=e416d9de-73a3-41d6-875b-fcc8585a3224&to=https%3A%2F%2Fmatch.sharethrough.com%2Funiversal%2Fv1%3Fsupply_id%3Djc3Tkmr6 HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /wdc/v1/syncPage/rubicon?userId=e416d9de-73a3-41d6-875b-fcc8585a3224&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fcs.ingage.tech%2Fwdc%2Fv1%2Fsync%2Fsovrn%2Fe416d9de-73a3-41d6-875b-fcc8585a3224%3Fuid%3D%24UID&gdpr=0 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE
Source: global traffic	HTTP traffic detected: GET /sync.html?usp_consent=1--- HTTP/1.1Host: public.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=true
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001727702220-VFVIGU3O-SOQK&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAEYBSgCMgsIpPjamp3XsD0QBTgB
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3185&partner_device_id=AU1D-0100-001727702220-VFVIGU3O-SOQK&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001727702220-VFVIGU3O-SOQK%26tapad_id%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=192259&cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.multitran.com%2F&domain=www.multitran.com&cw=1&lsw=1&us_privacy=1--- HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync?cs=31&type=tam&redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E&gdpr=0 HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/cs/amazon?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: trace-eu.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.multitran.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=aps&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/match?id=AU1D-0100-001727702220-VFVIGU3O-SOQK&adnxs_id=5619797562597244228&gdpr=0 HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /cookie-sync/amzn?redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=2&gdpr=0 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1
Source: global traffic	HTTP traffic detected: GET /wdc/v1/sync/sovrn/e416d9de-73a3-41d6-875b-fcc8585a3224?uid=JaxdABZHFVdQXjOVSqS7W4vE HTTP/1.1Host: cs.ingage.techConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q; instUid=e416d9de-73a3-41d6-875b-fcc8585a3224; cookieRegion=wdc
Source: global traffic	HTTP traffic detected: GET /api/v1/pbm_match?pbm=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&id=AU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=insticator HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3185&partner_device_id=AU1D-0100-001727702220-VFVIGU3O-SOQK&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001727702220-VFVIGU3O-SOQK%26tapad_id%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1727702227231; TapAd_DID=882c07dc-2932-46e0-9294-e34fa891ea18
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?uid=ee28081dc141859df3e9c39bf89f63cf&name=AMAZON&url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dadyoulike.com%26id%3D%7BuserId%7D&gdpr=0 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0&s=192259&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zvqk09HM51MAAHZlAG58agAA; CMPS=1392; CMPRO=1392
Source: global traffic	HTTP traffic detected: GET /api/v1/t_match?tdid=73e2eec1-23cf-4a56-8a81-97103112d253&id=AU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=60043717&p=95054&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4
Source: global traffic	HTTP traffic detected: GET /ups/58252/sync?redir=true&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=NEVbWT9jW1_bWZ3Y0ax7
Source: global traffic	HTTP traffic detected: GET /getuid?redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=1590848361649052531873
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=smart.com&id=2809080294951148902&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=media.net&id=3707038276390509000V10 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ps?m=xch&rt=html&id=0010b00002Mq2FYAAZ&ru=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D304%26uid%3D33XUSERID33X HTTP/1.1Host: pixel.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE
Source: global traffic	HTTP traffic detected: GET /api/v1/g_hosted?id=AU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid=%24UID&ex=appnexus.com&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /match/?int_id=180&uid=AU1D-0100-001727702220-VFVIGU3O-SOQK&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/amzn?redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID&gdpr=0&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /usermatch?s=195491&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zvqk09HM51MAAHZlAG58agAA; CMPS=1392; CMPRO=1392
Source: global traffic	HTTP traffic detected: GET /api/v1/rub_match?id=AU1D-0100-001727702220-VFVIGU3O-SOQK&rub=M1P1AMBZ-4-DAO6&gdpr=0 HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=adyoulike.com&id=1d03ccff9c38e4121c022aa614cb5430 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1---&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=882c07dc-2932-46e0-9294-e34fa891ea18%252Chttps%25253A%25252F%25252Fids.ad.gt%25252Fapi%25252Fv1%25252Ftapad_match%25253Fid%25253DAU1D-0100-001727702220-VFVIGU3O-SOQK%252526tapad_id%25253D882c07dc-2932-46e0-9294-e34fa891ea18%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAEYBSABKAIyCwik-NqandewPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /usersync/index/?puid=Zvqk09HM51MAAHZlAG58agAA%261392&cb=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fexternal_user_id%3D_ZUID_&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=NEVbWT9jW1_bWZ3Y0ax7
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=9&gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D317%26uid%3D%24UID HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=index&google_cm&google_hm=Zvqk09HM51MAAHZlAG58agAABXAAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAEYBSABKAIyCwik-NqandewPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1---&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=insticator&zcc=1&cb=1727702227832 HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003%22%2C%22zdxidn%22%3A%222069.50%22%7D
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=baidu.com&id=22210ca769e912b321c2bu00m1p1aql6 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=duration&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D321%26uid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003%22%2C%22zdxidn%22%3A%222069.50%22%7D
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=3lift.com&id=1590848361649052531873 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /js/decode_consent/decode_consent.js HTTP/1.1Host: static.smilewanted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://csync.smilewanted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/sync.html HTTP/1.1Host: cdn.dxkulture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=Zvqk09HM51MAAHZlAG58agAABXAAAAIB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usa?loc=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D332%26uid%3D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=816eb57d-a170-4d89-9a52-e61f6d07f53b; _usd_multitran.com=f820334a-8eee-4857-a4f3-e2c72b0c4b10; __uih=1; HAPLB8G=s85176\|Zvqk0
Source: global traffic	HTTP traffic detected: GET /usync/13926?gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D309%26uid%3D HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D352%26uid%3D%7BpartnerId%7D HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=Zvqk09HM51MAAHZlAG58agAA%261392&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=23728&dpuuid=Zvqk09HM51MAAHZlAG58agAA%261392?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=0&gdpr_consent=&us_privacy=1---&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirectuser?r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D346%26uid%3DBUYERUID HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1---&&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE
Source: global traffic	HTTP traffic detected: GET /e1edfb9aa2a9066a203a7fce17c3a388.gif?puid=%5BUID%5D&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dacuity.com%26id%3D%5BUID%5D&gdpr=0 HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=66faa4ca-b24a8-e86ee-8a585
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D312%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /s/ecm3?id=5619797562597244228&ex=appnexus.com&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /wdc/v1/sync/pubmatic/e416d9de-73a3-41d6-875b-fcc8585a3224?uid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4 HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q; instUid=e416d9de-73a3-41d6-875b-fcc8585a3224; cookieRegion=wdc
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=temRaF80NUt3TUZJdlFiT1J3eU5rbElueU4yWEo4azhZcEEwemViV3lzWUJzYmJRSEswOExwZVdUTWI5eU5NbXF6OW1DbSUyRiUyRjQwMkNmMWQlMkZ6eFNGVVNCRHk2WEY0Vzd1NlVrR2F1Ukx6aFI3MnNuWSUzRA
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixelGet?ex=50&gdpr={gdpr}&gdpr_consent={gdpr_consent}&dest=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCookie={dmp_id}&gdpr={gdpr}&gdpr_consent={gdpr_consent} HTTP/1.1Host: dsp-ap.eskimi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ssp=9&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp-cookie.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1Host: ipac.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0 HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=66faa4ca-b24a8-e86ee-8a585
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=NDc0NjM3MkYtOEVDRC00QURGLTlGNDEtQjNFRkI5MzNCOUE0&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fopenx%3Fopenx_id%3D%7BOPENX_ID%7D%26id%3DAU1D-0100-001727702220-VFVIGU3O-SOQK%26auid%3DAU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0010b00002Mq2FYAAZ&ru=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D304%26uid%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=R0Y3L47NSt-fQbPvuTO5pA%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=smaato.com&id=94cf3037b3 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxW9R-r_Jcq8TB7yOWMzNOhjoXYpXp6B3FaD-dUk6OW3tDg1p14QJBf24TKZayqRAF97XWGv-ihDUOJx1nwAfey0RnNwIqSgPfZGPINDx8eop7n0UtQ3looOaZLINEvE8VfwAlr8ZQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI3NzAyMjIwLDcyMTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vYy9tLmV4ZSIsbnVsbCxbWzgsIkdFaF9Idld5ZDZRIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dsp_match/275?ssp=76&gdpr=0&gdpr_consent=&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MzUmdGw9MTI5NjAw&piggybackCookie={DSP_USER_ID} HTTP/1.1Host: dsp.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1dd8272e-4cf2-424e-a94e-51098c77708e; c=1727702229; tuuid_lu=1727702229
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=31a817ca3356fa6382689ba223379509
Source: global traffic	HTTP traffic detected: GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID HTTP/1.1Host: d5p.de17a.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=cnv.com&id=AQAG3tddeRRrqQIbBPeIAQEBAQEBAQCTQhLh_gEBAJNCEuH-&expiration=1727788629&is_secure=true&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cr?key=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ssp=5&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp-cookie.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UserID1=7420424570841266542
Source: global traffic	HTTP traffic detected: GET /ups/58252/sync?redir=true&gdpr=0&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNSk-mYCEEmNTxaIOrIKzq_lqRk5j0gFEgEBAQH2-2YEZ9xA0iMA_eMAAA&S=AQAAAvcZ7lkFJFgNP_pir1fup9w
Source: global traffic	HTTP traffic detected: GET /api/v1/g_match?id=AU1D-0100-001727702220-VFVIGU3O-SOQK&google_gid=CAESENjTOHJRI7PjXv-F5uzQiVE&google_cver=1&google_ula=450542624,0 HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=73e2eec1-23cf-4a56-8a81-97103112d253&ttd_puid=882c07dc-2932-46e0-9294-e34fa891ea18%2Chttps%253A%252F%252Fids.ad.gt%252Fapi%252Fv1%252Ftapad_match%253Fid%253DAU1D-0100-001727702220-VFVIGU3O-SOQK%2526tapad_id%253D882c07dc-2932-46e0-9294-e34fa891ea18%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1727702227231; TapAd_DID=882c07dc-2932-46e0-9294-e34fa891ea18; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTcyNzcwMjIyMC1WRlZJR1UzTy1TT1FL HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /ecm3?id=AAEaAU7N9UoAABY83teMng&ex=beeswax.com HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=17&external_user_id=NEVbWT9jW1_bWZ3Y0ax7&puid=Zvqk09HM51MAAHZlAG58agAA&1392 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zvqk09HM51MAAHZlAG58agAA; CMPS=1392; CMPRO=1392
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCDVyeq3BjABOgT87-jmQgTThqXk.fPA6eib%2FtZJ48wOuVSulWHlSqEzpyEdSp%2BMx%2BYnO7G4; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCDVyeq3BjABOgT87-jmQgTThqXk.fPA6eib%2FtZJ48wOuVSulWHlSqEzpyEdSp%2BMx%2BYnO7G4
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=acuity.com&id=c433dd95-68a2-4e39-8560-7775fc5f52a6 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fopenx%3Fopenx_id%3D%7BOPENX_ID%7D%26id%3DAU1D-0100-001727702220-VFVIGU3O-SOQK%26auid%3DAU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2d19b21a-7134-4078-87f8-a9bd103b0ad5\|1727702229
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=outbrain.com&id=NEVbWT9jW1_bWZ3Y0ax7&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=5619797562597244228&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback/aphb/auctionData?data=eyJzaXRlSWQiOjQyODQ1LCJ1cmwiOiJodHRwczovL3d3dy5tdWx0aXRyYW4uY29tL2MvbS5leGU%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%3D&c_b=15407.399999999994 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5108559735204312750 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEAITCDnVd9_csn7_hcWFKus&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zvqk09HM51MAAHZlAG58agAA; CMPS=1392; CMPRO=1392
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zvqk09HM51MAAHZlAG58agAA; CMPS=1392; CMPRO=1392
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=73e2eec1-23cf-4a56-8a81-97103112d253&expiration=1730294229&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zvqk09HM51MAAHZlAG58agAA; CMPS=1392; CMPRO=1392
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=81&&external_user_id=VGnx5gNr9OZPPaWzA2e64lpp8uJPZ_ayWmpHsoPJ HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zvqk09HM51MAAHZlAG58agAA; CMPS=1392; CMPRO=1392
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=45&id=RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003&rndcb=7553145078 HTTP/1.1Host: ad.turn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gc.js HTTP/1.1Host: groundcontrol.rendering.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=20343d91-5e26-465f-aa19-7e2190cce0d8
Source: global traffic	HTTP traffic detected: GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=Zvqk09HM51MAAHZlAG58agAA%261392&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=81a54198130b431f8975895403c849fc HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=81a54198-130b-431f-8975-895403c849fc
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=156&external_user_id=2a3fe62b-bbec-4abf-89ec-7a2a4d04e5ba HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zvqk09HM51MAAHZlAG58agAA; CMPS=1392; CMPRO=1392
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=temRaF80NUt3TUZJdlFiT1J3eU5rbElueU4yWEo4azhZcEEwemViV3lzWUJzYmJRSEswOExwZVdUTWI5eU5NbXF6OW1DbSUyRiUyRjQwMkNmMWQlMkZ6eFNGVVNCRHk2WEY0Vzd1NlVrR2F1Ukx6aFI3MnNuWSUzRA
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0010b00002Mq2FYAAZ&ru=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D304%26uid%3D33XUSERID33X&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=RbE/RWb6pNV3+Hu4afrKJg==
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=RO9hsv43VjtJegiqx3XZlggueyE&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=jc3Tkmr6 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=20343d91-5e26-465f-aa19-7e2190cce0d8
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/indexexchange?gdpr=&userId=Zvqk09HM51MAAHZlAG58agAA%261392&gpp=&gpp_sid=&us_privacy=&gdpr_consent= HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us?gdpr=0&consent_string=&loc=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D115667%26uid%3D%5BUID%5D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=816eb57d-a170-4d89-9a52-e61f6d07f53b; _usd_multitran.com=f820334a-8eee-4857-a4f3-e2c72b0c4b10; __uih=1; HAPLB8G=s85176\|Zvqk2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7420424570841266542&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU3a0f5dd1c0aa4a30be4cf59960b85655 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=23728&dpuuid=Zvqk09HM51MAAHZlAG58agAA%261392 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=41048041071576521704592859888184675424
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAESFQoGY2FzYWxlEgsI_O6siIfXsD0QBRgFIAIoAjILCKT42pqd17A9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=vmg.com&id=eS03UTBZazdwRTJ1S3NYUkd4YnExZ3JTTTB5cUZCMXk1R35B&&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAEaAU7N9UoAABY83teMng; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11603%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BUSER_CONSENT%5D%26uid%3D$%7BBSW_UUID%7D HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1dd8272e-4cf2-424e-a94e-51098c77708e; c=1727702229; tuuid_lu=1727702229
Source: global traffic	HTTP traffic detected: GET /?pubid=11362&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11571%26id%3D%7Bdevice_id%7D HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=15&redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fcm_dsp_id%3D3%26external_user_id%3D%5BMM_UUID%5D&us_privacy=&gdpr=&gdpr_consent= HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3707038276390509000V10
Source: global traffic	HTTP traffic detected: GET /CookieIndex HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ztgl358.gif?gdpr=0&gdpr_consent=&us_privacy=&coppa=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D38%26buyeruid%3D%7B%24PARTNER_UID%7D%26r%3DCid1YS0yMjRkYmJhZS04MWU4LTM4N2YtODczZC05OTI5YjFjYmU5NjQqU2h0dHBzOi8vYWRzLnNlcnZlbm9iaWQuY29tL3N5bmM_cGlkPTM0NiZ1aWQ9dWEtMjI0ZGJiYWUtODFlOC0zODdmLTg3M2QtOTkyOWIxY2JlOTY0MgImGzgB HTTP/1.1Host: eexsync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=e_8f91b3c0-4256-4af1-9422-b299c036a719&gdpr=0&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=NEVbWT9jW1_bWZ3Y0ax7
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2d19b21a-7134-4078-87f8-a9bd103b0ad5\|1727702229
Source: global traffic	HTTP traffic detected: GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=66faa4ca-b24a8-e86ee-8a585; sp=CgkIhf8CEgMQxQ0=
Source: global traffic	HTTP traffic detected: GET /sync?pid=317&uid=2809080294951148902&gdpr=0&gdpr_consent= HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent= HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=WDajMYxlowxX; VP=part_WDajMYxlowxX; INGRESSCOOKIE=19d3f1d9c3b8f987
Source: global traffic	HTTP traffic detected: GET /api/v1/ppnt_match?uid=WDajMYxlowxX&ev=1&pid=562316&id=AU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=e_8f91b3c0-4256-4af1-9422-b299c036a719&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1dd8272e-4cf2-424e-a94e-51098c77708e; c=1727702229; tuuid_lu=1727702230
Source: global traffic	HTTP traffic detected: GET /usersync/turn/4041895913436929776?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003%22%2C%22zdxidn%22%3A%222069.26%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D321%26uid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11607%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE; _ljtrtb_273657=273657
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=45&id=RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003&rndcb=8991284262 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jwumXNuB/v1/?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dsharethrough.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=20343d91-5e26-465f-aa19-7e2190cce0d8
Source: global traffic	HTTP traffic detected: GET /sync?pid=332&uid=816eb57d-a170-4d89-9a52-e61f6d07f53b HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /sync?pid=310&uid=JaxdABZHFVdQXjOVSqS7W4vE HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /sync?pid=312&uid=5619797562597244228 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=160&partneruserid=1&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1
Source: global traffic	HTTP traffic detected: GET /cr?key=pubmatic&gdpr=0&gdpr_consent=&bounce=1&random=1162487713 HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AFFICHE_W=1MWl5K4CL0XU14
Source: global traffic	HTTP traffic detected: GET /sync?pid=324&uid=5109685635035586889 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/dsp_match/275?ssp=76&gdpr=0&gdpr_consent=&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MzUmdGw9MTI5NjAw&piggybackCookie=%7BDSP_USER_ID%7D HTTP/1.1Host: dsp.360yield.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d78be13d-93d2-4ec7-926d-c8110f1cfb1d; tuuid_lu=1727702230
Source: global traffic	HTTP traffic detected: GET /u?&gdpr=0&us_privacy=1---&cb=https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F7%2F9729%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D0%26gpp_sid%3D%26us_privacy%3D1---%26A%3Dd645fa9b-421a-454b-a837-735a1676a4cc%26bidder%3Damx_com%26cbx%3DaHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzI3JnVpZD0%253D%26uid%3D HTTP/1.1Host: id.a-mx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562615&ev=1&us_privacy=[US_PRIVACY]&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11592%26uid%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&us_privacy=1--- HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=ZV84ZjkxYjNjMC00MjU2LTRhZjEtOTQyMi1iMjk5YzAzNmE3MTk=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /AdPushupFeedbackWebService/feedback/aphb?data=eyJzaXRlSWQiOjQyODQ1LCJ1cmwiOiJodHRwczovL3d3dy5tdWx0aXRyYW4uY29tL2MvbS5leGU%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%3D%3D&c_b=15430.800000000017 HTTP/1.1Host: e3.adpushup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?uid=40a3c28f9ffc73ee86df2bac2d2bb390&name=risecode&url=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11609%26id%3D%5BBUYER_ID%5D%0A HTTP/1.1Host: visitor-risecode.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=1d03ccff9c38e4121c022aa614cb5430
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNSk-mYCEEmNTxaIOrIKzq_lqRk5j0gFEgEBAQH2-2YEZ9xA0iMA_eMAAA&S=AQAAAvcZ7lkFJFgNP_pir1fup9w
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=32075542&p=162412&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEG_0F18VEsgTOdPGXd54Kf4&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; chkChromeAb67Sec=1; pi=95054:3; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728864000%3A8_234_271_71_220_264_81_22_249_161_54_251_203_166_13_201_55_233_270_46_214_266_21_56_3%7C1728259200%3A223_2_15%7C1728518400%3A63%7C1728950400%3A35
Source: global traffic	HTTP traffic detected: GET /api/v1/tapad_match?id=AU1D-0100-001727702220-VFVIGU3O-SOQK&tapad_id=882c07dc-2932-46e0-9294-e34fa891ea18 HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/openx?openx_id=d7f59426-513f-4073-8ed5-75056363f62c&id=AU1D-0100-001727702220-VFVIGU3O-SOQK&auid=AU1D-0100-001727702220-VFVIGU3O-SOQK HTTP/1.1Host: ids.ad.gtConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: au_3p_check=1; au_id=AU1D-0100-001727702220-VFVIGU3O-SOQK
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNSk-mYCEEmNTxaIOrIKzq_lqRk5j0gFEgEBAQH2-2YEZ9xA0iMA_eMAAA&S=AQAAAvcZ7lkFJFgNP_pir1fup9w
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=index.com&id=Zvqk09HM51MAAHZlAG58agAABXAAAAIB HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAESFQoGY2FzYWxlEgsI_O6siIfXsD0QBRgFIAIoAjILCKT42pqd17A9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /sync/casale/Zvqk09HM51MAAHZlAG58agAABXAAAAIB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNSk-mYCEEmNTxaIOrIKzq_lqRk5j0gFEgEBAQH2-2YEZ9xA0iMA_eMAAA&S=AQAAAvcZ7lkFJFgNP_pir1fup9w
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFFYUFVN045VW9BQUJZODN0ZU1uZw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&us_privacy=1--- HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?us_privacy=1--- HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAESFQoGY2FzYWxlEgsI_O6siIfXsD0QBRgFIAIoAjILCKT42pqd17A9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=73e2eec1-23cf-4a56-8a81-97103112d253 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /s/ecm3?id=JaxdABZHFVdQXjOVSqS7W4vE&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent= HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=WDajMYxlowxX; VP=part_WDajMYxlowxX; INGRESSCOOKIE=19d3f1d9c3b8f987
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=119&user_id=5109685635035586889&expires=30&ssp=pubmatic HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1dd8272e-4cf2-424e-a94e-51098c77708e; c=1727702229; tuuid_lu=1727702230
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1Host: data.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAESFQoGY2FzYWxlEgsI_O6siIfXsD0QBRgFIAIoAjILCKT42pqd17A9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /sync?pid=333&uid=Zvqk09HM51MAAHZlAG58agAABXAAAAIB HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /syncs/audio.html?gdpr={{.GDPR}}&gdpr_consent={{.GDPRConsent}}&us_privacy={{.USPrivacy}}&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=typeaholdings HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003%22%2C%22zdxidn%22%3A%222069.26%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D321%26uid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=smartrtb_dbm&google_cm&google_sc&google_hm=MjgwOTA4MDI5NDk1MTE0ODkwMg==&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /cs?aid=11607&uid=JaxdABZHFVdQXjOVSqS7W4vE HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&us_privacy=1--- HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /usersync?b=adf&i=6723054822523908865&gdpr=0&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /sync?ssp=fmx&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1dd8272e-4cf2-424e-a94e-51098c77708e; c=1727702229; tuuid_lu=1727702230
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.144.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/n-37n2HoBIrFYrbmMNfhYQ?csrc=&us_privacy=1--- HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNSk-mYCEEmNTxaIOrIKzq_lqRk5j0gFEgEBAQH2-2YEZ9xA0iMA_eMAAA&S=AQAAAvcZ7lkFJFgNP_pir1fup9w
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/4746372F-8ECD-4ADF-9F41-B3EFB933B9A4?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNSk-mYCEEmNTxaIOrIKzq_lqRk5j0gFEgEBAQH2-2YEZ9xA0iMA_eMAAA&S=AQAAAvcZ7lkFJFgNP_pir1fup9w
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=WDajMYxlowxX; VP=part_WDajMYxlowxX; INGRESSCOOKIE=19d3f1d9c3b8f987; pb_rtb_ev=3-1txk\|7GB.0.1; pb_rtb_ev_part=3-1txk\|7GB.0.1
Source: global traffic	HTTP traffic detected: GET /sync?pid=310&uid=JaxdABZHFVdQXjOVSqS7W4vE HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /sync?ssp=ultraspo HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=C8772E415E32B703
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=pbs&ovsid=setstatuscode&bidder=medianet&gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D353%26uid%3D%3Cvsid%3E HTTP/1.1Host: hbx.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3707038276390509000V10; data-ris={{APID}}~~25
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ssp=5&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp-cookie.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UserID1=7420424570841266542
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=160:1
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=49&partneruserid=7420424570841266542&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=160:1
Source: global traffic	HTTP traffic detected: GET /pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11584%26uid%3D$UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=92&partneruserid=WDajMYxlowxX&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=160:1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=NjI0NTc2ZGNkZmFmMGUyZDU4NzczOTEwNGJjNWJkZjdlMTBjOTEwYQ&us_privacy=1--- HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=80&gdpr=0&partneruserid=1HUNTIN3CEzPIVkZg3tGSNp1DkjPewoY2nYt0ZEb HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=160:1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=1dd8272e-4cf2-424e-a94e-51098c77708e&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; PugT=1727702229; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; chkChromeAb67Sec=2; pi=162412:3; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TTFQMUFNQlotNC1EQU82&us_privacy=1--- HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /6cacd944e259c6972e693f86683785e4d19a3d89.png?d=100x100 HTTP/1.1Host: creative-assets.quantcount.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3fcb9d591f2d824c4040085d762ebc35328a0035.jpeg?c=123x0x750x750&c=0x0x999x750&c=1x114x999x521&d=1000x750 HTTP/1.1Host: creative-assets.quantcount.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAEaAU7N9UoAABY83teMng; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=RO9hsv43VjtJegiqx3XZlggueyE HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /csync/RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003?redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D321%26uid%3DRX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=M1P1AMBZ-4-DAO6&ex=d-rubiconproject.com&status=ok&us_privacy=1--- HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /v1/syncPage/rubicon?uid=M1P1AMBZ-4-DAO6&us_privacy=1--- HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q; instUid=e416d9de-73a3-41d6-875b-fcc8585a3224; cookieRegion=wdc
Source: global traffic	HTTP traffic detected: GET /merge?pid=27&3pid=73e2eec1-23cf-4a56-8a81-97103112d253&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE; _ljtrtb_273657=273657; ljtrtbexp=eJyrVjKxVLIyNDeysDQ0tDA20FGyMEblG5mB%2BebmJqYmYL45RN7YwNwAxDc0NETWUAsAqs4Qeg%3D%3D
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=rise&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11574%26id%3D%24UID HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SCM=94cf3037b3; SCMaps=94cf3037b3
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=73e2eec1-23cf-4a56-8a81-97103112d253&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; PugT=1727702229; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; chkChromeAb67Sec=2; pi=162412:3; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /merge?pid=49&3pid=WDajMYxlowxX&ev=1&pid=558511&gdpr_consent=&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE; _ljtrtb_273657=273657; ljtrtbexp=eJyrVjKxVLIyNDeysDQ0tDA20FGyMEblG5mB%2BebmJqYmYL45RN7YwNwAxDc0NETWUAsAqs4Qeg%3D%3D
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=jhR2fPOhQsGWT-6M7hZpBw HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=CAESEHUh5zFQ1tK7r0HbvsoCUd4&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=160:1
Source: global traffic	HTTP traffic detected: GET /sync?pid=323&uid=M1P1AMBZ-4-DAO6&us_privacy=1--- HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_317=2809080294951148902; pid_332=816eb57d-a170-4d89-9a52-e61f6d07f53b; pid_310=JaxdABZHFVdQXjOVSqS7W4vE; pid_312=5619797562597244228; pid_324=5109685635035586889; pid_333=Zvqk09HM51MAAHZlAG58agAABXAAAAIB
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdc/v1/sync/rubicon/e416d9de-73a3-41d6-875b-fcc8585a3224?uid=M1P1AMBZ-4-DAO6 HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IJ70DLSlfl_fJ12C_ER3Y6jUo_Q8oO8B_K2cjlgqkrs-1727702222-1.0.1.1-wrj4wkCS7aHO8VowUZclEdy7_ZQHTft.WS.FFATnJRyQgks53NeA17S681uZHtYuWUtCxVx7x3LpCzRSxU__2Q; instUid=e416d9de-73a3-41d6-875b-fcc8585a3224; cookieRegion=wdc
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=80:1HUNTIN3CEzPIVkZg3tGSNp1DkjPewoY2nYt0ZEb\|160:1
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3893819429706477368
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=rubiconprojectHMT&id=6YMUmgdySzy4zDIAbmkAzw HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&us_privacy=1--- HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAEaAU7N9UoAABY83teMng; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drop_cookie_sw.php HTTP/1.1Host: csync.smilewanted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://csync.smilewanted.com/?us_privacy=1---Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?pid=321&uid=RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003 HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_317=2809080294951148902; pid_332=816eb57d-a170-4d89-9a52-e61f6d07f53b; pid_310=JaxdABZHFVdQXjOVSqS7W4vE; pid_312=5619797562597244228; pid_324=5109685635035586889; pid_333=Zvqk09HM51MAAHZlAG58agAABXAAAAIB
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=64&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D68%26partneruserid%3D%7BuserId%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=407c0857-bd76-45cc-9ede-8da92b52d9da#1727702232009
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=49&partneruserid=7420424570841266542&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=80:1HUNTIN3CEzPIVkZg3tGSNp1DkjPewoY2nYt0ZEb\|160:1
Source: global traffic	HTTP traffic detected: GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsby.bidtheatre.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAESFQoGY2FzYWxlEgsI_O6siIfXsD0QBRgFIAMoAjILCKT42pqd17A9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=78801403&p=95054&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; chkChromeAb67Sec=2; pi=162412:3; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AAEaAU7N9UoAABY83teMng&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1Host: bh.contextweb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: INGRESSCOOKIE=17f76f81c07a57e7; V=WDajMYxlowxX; VP=part_WDajMYxlowxX; pb_rtb_ev=3-1txk\|7GB.0.1\|7bq.0.1\|7dW.0.1; pb_rtb_ev_part=3-1txk\|7GB.0.1\|7bq.0.1\|7dW.0.1
Source: global traffic	HTTP traffic detected: GET /sync?nid=15&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCDVyeq3BjABOgT87-jmQgTThqXk.fPA6eib%2FtZJ48wOuVSulWHlSqEzpyEdSp%2BMx%2BYnO7G4; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCDVyeq3BjABOgT87-jmQgTThqXk.fPA6eib%2FtZJ48wOuVSulWHlSqEzpyEdSp%2BMx%2BYnO7G4
Source: global traffic	HTTP traffic detected: GET /match?bidder=38&buyeruid=0a5401b917f95d17d60713bc276bc31a931edb833344dc4725529bd0a94a03ff&r=Cid1YS0yMjRkYmJhZS04MWU4LTM4N2YtODczZC05OTI5YjFjYmU5NjQqU2h0dHBzOi8vYWRzLnNlcnZlbm9iaWQuY29tL3N5bmM_cGlkPTM0NiZ1aWQ9dWEtMjI0ZGJiYWUtODFlOC0zODdmLTg3M2QtOTkyOWIxY2JlOTY0MgImGzgB HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zeta-ssp-user-id=ua-224dbbae-81e8-387f-873d-9929b1cbe964
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=smart-adserver&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAESFQoGY2FzYWxlEgsI_O6siIfXsD0QBRgFIAMoAjILCKT42pqd17A9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /cs?aid=115667&uid=816eb57d-a170-4d89-9a52-e61f6d07f53b HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /cs?aid=11603&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&uid=1dd8272e-4cf2-424e-a94e-51098c77708e HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /cs?aid=11609&id=1d03ccff9c38e4121c022aa614cb5430 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3535&partner_device_id=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704&partner_url=https%3A%2F%2Fsync.inmobi.com%2Fsetuid%3FbidderID%3D877%26dspUserId%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1727702227231; TapAd_DID=882c07dc-2932-46e0-9294-e34fa891ea18; TapAd_3WAY_SYNCS=1!6589
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid] HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://csync.smilewanted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=76:CAESEHUh5zFQ1tK7r0HbvsoCUd4\|160:1
Source: global traffic	HTTP traffic detected: GET /user-sync?zone=221544&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D159%26partneruserid%3D%7BUID%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.adkernel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /713074.gif? HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?aid=11592&uid=ngqmcoQ9Y0xl&ev=1&us_privacy=[US_PRIVACY]&pid=562615&gdpr_consent=&gdpr=0 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /cs?aid=11584&uid=VRLAmLL__uLnv71Ru2Bz&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /cs?aid=11574&id=94cf3037b3 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=81a54198-130b-431f-8975-895403c849fc&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=Zvqk09HM51MAAHZlAG58agAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=inmobi.com&id=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_WR7GBJMEIEowGdVCQdgdg; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cchain/7/9729?gpp=&gdpr_consent=&gdpr=0&gpp_sid=&us_privacy=1---&A=d645fa9b-421a-454b-a837-735a1676a4cc&bidder=amx_com&cbx=aHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzI3JnVpZD0%3D&uid=d645fa9b-421a-454b-a837-735a1676a4cc HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _sv3_14=1; amuid2=d645fa9b-421a-454b-a837-735a1676a4cc; pamuid2=d645fa9b-421a-454b-a837-735a1676a4cc; psd_amuid2=d645fa9b-421a-454b-a837-735a1676a4cc; sd_amuid2=d645fa9b-421a-454b-a837-735a1676a4cc
Source: global traffic	HTTP traffic detected: GET /sync?pid=353&uid=3707038276390509000V10 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_317=2809080294951148902; pid_332=816eb57d-a170-4d89-9a52-e61f6d07f53b; pid_310=JaxdABZHFVdQXjOVSqS7W4vE; pid_312=5619797562597244228; pid_324=5109685635035586889; pid_333=Zvqk09HM51MAAHZlAG58agAABXAAAAIB; pid_323=M1P1AMBZ-4-DAO6
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=1292420517 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAESFQoGY2FzYWxlEgsI_O6siIfXsD0QBRgFIAMoAjILCKT42pqd17A9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /pixel?google_hm=NcqI50TgmXHDNOPLYq0d&gdpr_consent=&gdpr=0&google_nid=inmobi_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=inmobi_new_eb&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /cookie-sync/sas?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAEaAU7N9UoAABY83teMng; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=Zvqk2MCo5swAAMv6.ZwAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TTFQMUFNQlotNC1EQU82&google_push= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=407c0857-bd76-45cc-9ede-8da92b52d9da#1727702232009
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3355&partner_device_id=M1P1AMBZ-4-DAO6&us_privacy=1--- HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1727702227231; TapAd_DID=882c07dc-2932-46e0-9294-e34fa891ea18; TapAd_3WAY_SYNCS=1!6589
Source: global traffic	HTTP traffic detected: GET /usersync/turn/3893819429706477368?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003%22%2C%22zdxidn%22%3A%222069.63%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=M1P1AMBZ-4-DAO6&us_privacy=1--- HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE; _ljtrtb_273657=273657; ljtrtbexp=eJyrVjKxVLIyNDeysDQ0tDA20FGyMEblG5mB%2BebmJqYmYL45RN7YwNwAxDc0NETWUAsAqs4Qeg%3D%3D; ljtrtb=eJyrVjIyNzYzNVeygjFqASoHBDc%3D; _ljtrtb_27=73e2eec1-23cf-4a56-8a81-97103112d253; _ljtrtb_49=WDajMYxlowxX
Source: global traffic	HTTP traffic detected: GET /live/liveCS.php?source=external&advId=100&advUuid=M1P1AMBZ-4-DAO6&us_privacy=1--- HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-mSSrkvtE2uVsu7qOf57AqW_Y0VIRCGI-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; chkChromeAb67Sec=2; pi=162412:3; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Hsq2QM0U0tYOjwQooiF7_1727702232263; ts=1727702232
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=14729559&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; chkChromeAb67Sec=2; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253
Source: global traffic	HTTP traffic detected: GET /setuid/magnite?uid=M1P1AMBZ-4-DAO6&us_privacy=1--- HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _sv3_14=1; amuid2=d645fa9b-421a-454b-a837-735a1676a4cc; pamuid2=d645fa9b-421a-454b-a837-735a1676a4cc; psd_amuid2=d645fa9b-421a-454b-a837-735a1676a4cc; sd_amuid2=d645fa9b-421a-454b-a837-735a1676a4cc
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=5619797562597244228 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=7e7ff503-941f-44b1-bd8e-03e722c1cd0b HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=76:CAESEHUh5zFQ1tK7r0HbvsoCUd4\|160:1
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=09882933-f0a6-47d9-ba55-71b8bc4c386e HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-wRqeKMNE2petxuXWJE8NsRvdTQG7DxNsSjv7~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=NEVbWT9jW1_bWZ3Y0ax7&gdpr=0&us_privacy=1--- HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=inmobi&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704 HTTP/1.1Host: s2s.yieldlove-ad-serving.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?aid=11601&id=18965165366087c6e29a993aa24490b5&gdpr_consent=&gdpr=0 HTTP/1.1Host: cs.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /sync?ssp=bidswitch&bidswitch_ssp_id=gumgum2&bsw_user_id=${BSW_USER_UD}&bsw_param=1dd8272e-4cf2-424e-a94e-51098c77708e&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy=1--- HTTP/1.1Host: u.ipw.metadsp.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=3c9be87d-dc3f-4c11-b6ac-f7dcf65ea8a2 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Hsq2QM0U0tYOjwQooiF7_1727702232263; ts=1727702232
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=68&partneruserid=407c0857-bd76-45cc-9ede-8da92b52d9da-66faa4d8-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=76:CAESEHUh5zFQ1tK7r0HbvsoCUd4\|160:1
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=58ceaaf5-c766-4c17-869a-d76e43401714&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11563%26id%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2d19b21a-7134-4078-87f8-a9bd103b0ad5\|1727702229
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?gdpr=0&gdpr_consent=&id=7ead435e-a2cd-4cbf-8876-adb66822613f&ph=c6b01e12-aa62-4ae6-9e10-71346e597c31&r=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DF2Stothm3wg5g6opTuaPadz9%26source_user_id%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2d19b21a-7134-4078-87f8-a9bd103b0ad5\|1727702229
Source: global traffic	HTTP traffic detected: GET /set_partner_userid_get/smart/2809080294951148902 HTTP/1.1Host: csync.smilewanted.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://csync.smilewanted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw8zZnqT7YEfNHIAlK4e4wPfrmCwk%2FdyH6fP3lf4nkZHqE4unxg%2B00uS2Y8AmOILLEDwXTlCrENRdWhjYxmJ2OPMhi0ft4PJMvFCug5PZLZweeUJVUe0Adkj8dD1e3vSuwuw%3D%3D
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=75&issi=1&partneruserid=73e2eec1-23cf-4a56-8a81-97103112d253&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; pid=2809080294951148902; sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; csync=76:CAESEHUh5zFQ1tK7r0HbvsoCUd4\|160:1
Source: global traffic	HTTP traffic detected: GET /user-sync?zone=176971&t=image&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D27%26buyeruid%3D%7BUID%7D%26r%3DCid1YS0yMjRkYmJhZS04MWU4LTM4N2YtODczZC05OTI5YjFjYmU5NjQqU2h0dHBzOi8vYWRzLnNlcnZlbm9iaWQuY29tL3N5bmM_cGlkPTM0NiZ1aWQ9dWEtMjI0ZGJiYWUtODFlOC0zODdmLTg3M2QtOTkyOWIxY2JlOTY0MgImGzgC HTTP/1.1Host: sync.adkernel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11596%26id%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=0&gdpr_consent= HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3893819429706477368
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AAEaAU7N9UoAABY83teMng&pid=558502&do=add&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAEaAU7N9UoAABY83teMng; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=rise HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Hsq2QM0U0tYOjwQooiF7_1727702232263; ts=1727702232
Source: global traffic	HTTP traffic detected: GET /?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=0&gdpr_consent= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=aerserv&user_id=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704&gdpr=0&gdpr_pd=&gdpr_consent=&us_privacy=&expires=30 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1dd8272e-4cf2-424e-a94e-51098c77708e; c=1727702229; tuuid_lu=1727702230
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=sharethrough&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.multitran.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Hsq2QM0U0tYOjwQooiF7_1727702232263; ts=1727702232
Source: global traffic	HTTP traffic detected: GET /ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11580%26puid%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212814190373823%3As1%3D1727702228299%3Ats%3D1727702228299
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=WDajMYxlowxX&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /xuid?pid= HTTP/1.1Host: ads.dxkulture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.dxkulture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=95054&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253; chkChromeAb67Sec=3; pi=95054:4
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253; chkChromeAb67Sec=3; pi=95054:4
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=g6nxmp9&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=73e2eec1-23cf-4a56-8a81-97103112d253; TDCPM=CAESFQoGY2FzYWxlEgsI_O6siIfXsD0QBRgBIAEoAjILCJ6K4t-d17A9EAU4AVoLYWRjb25kdWN0b3JgAg..
Source: global traffic	HTTP traffic detected: GET /cs?aid=11590&id=M1P1AMBZ-4-DAO6&us_privacy=1--- HTTP/1.1Host: cs.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=HnMbnDMrkp_s
Source: global traffic	HTTP traffic detected: GET /getuid?https://csync.smilewanted.com/set_partner_userid_get/appnexus/$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://csync.smilewanted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /user-sync/redirect?gdprapplies=0&gdpr=&redir=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fcriteo%2F%24%7BCRITEO_USER_ID%7D&profile=342 HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://csync.smilewanted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=temRaF80NUt3TUZJdlFiT1J3eU5rbElueU4yWEo4azhZcEEwemViV3lzWUJzYmJRSEswOExwZVdUTWI5eU5NbXF6OW1DbSUyRiUyRjQwMkNmMWQlMkZ6eFNGVVNCRHk2WEY0Vzd1NlVrR2F1Ukx6aFI3MnNuWSUzRA
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=_k9s3tLH7OU-4e1P5oM46XDNNl3nzAseL1yhphHVNFY&pi=gumgum HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=3893819429706477368&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253; chkChromeAb67Sec=3; pi=95054:4
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=41726295&p=162412&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=M1P1AMBZ-4-DAO6&us_privacy=1--- HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=zzOTSECkwq4WvEOLSrp_qWda2BFTayDbSOJjNklTQMEycIprnn17prorMLQUgbObYNdtkTa15PdNkKLNz_8Covv__eV_nbM4aF1nsRaQtqw.; uuid2=5619797562597244228
Source: global traffic	HTTP traffic detected: GET /set_partner_userid_get/rubicon/M1P1AMBZ-4-DAO6?gdpr=0 HTTP/1.1Host: csync.smilewanted.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://csync.smilewanted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw8zZnqT7YEfNHIAlK4e4wPfrmCwk%2FdyH6fP3lf4nkZHqE4unxg%2B00uS2Y8AmOILLEDwXTlCrENRdWhjYxmJ2OPMhi0ft4PJMvFCug5PZLZweeUJVUe0Adkj8dD1e3vSuwuw%3D%3D
Source: global traffic	HTTP traffic detected: GET /usersync/inmobi/?puid=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704&cb=https%3A%2F%2Fsync.inmobi.com%2Fsetuid%3FbidderID%3D210%26dspUserId%3D__ZUID__&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.inmobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=NEVbWT9jW1_bWZ3Y0ax7
Source: global traffic	HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=72433824BA8E42048B0BAA80CEB983E4
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:8c27ce6c-18fe-41e0-a676-b8835e191cd8&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253; chkChromeAb67Sec=3; pi=95054:4
Source: global traffic	HTTP traffic detected: GET /sync?pid=316&uid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_317=2809080294951148902; pid_332=816eb57d-a170-4d89-9a52-e61f6d07f53b; pid_310=JaxdABZHFVdQXjOVSqS7W4vE; pid_312=5619797562597244228; pid_324=5109685635035586889; pid_333=Zvqk09HM51MAAHZlAG58agAABXAAAAIB; pid_323=M1P1AMBZ-4-DAO6; pid_321=RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003; pid_353=3707038276390509000V10
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=407c0857-bd76-45cc-9ede-8da92b52d9da-66faa4d8-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253; chkChromeAb67Sec=3; pi=95054:4
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=6723054822523908865 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253; chkChromeAb67Sec=3; SPugT=1727702232
Source: global traffic	HTTP traffic detected: GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003%22%2C%22zdxidn%22%3A%222069.63%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /sync?pid=309&uid=e_8f91b3c0-4256-4af1-9422-b299c036a719 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_317=2809080294951148902; pid_332=816eb57d-a170-4d89-9a52-e61f6d07f53b; pid_310=JaxdABZHFVdQXjOVSqS7W4vE; pid_312=5619797562597244228; pid_324=5109685635035586889; pid_333=Zvqk09HM51MAAHZlAG58agAABXAAAAIB; pid_323=M1P1AMBZ-4-DAO6; pid_321=RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003; pid_353=3707038276390509000V10
Source: global traffic	HTTP traffic detected: GET /sync?pid=327&uid=d645fa9b-421a-454b-a837-735a1676a4cc&us_privacy=1---&gdpr=0 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_317=2809080294951148902; pid_332=816eb57d-a170-4d89-9a52-e61f6d07f53b; pid_310=JaxdABZHFVdQXjOVSqS7W4vE; pid_312=5619797562597244228; pid_324=5109685635035586889; pid_333=Zvqk09HM51MAAHZlAG58agAABXAAAAIB; pid_323=M1P1AMBZ-4-DAO6; pid_321=RX-7943c2e3-5f8f-422f-8eb3-f04376b3d3ea-003; pid_353=3707038276390509000V10
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AQAJW2bsrceWBgIvAbN8AQEBAQEBAQCTQhLy8wEBAJNCEvLz&expiration=1727788634&nuid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4; KRTBCOOKIE_57=22776-5619797562597244228&KRTB&23339-5619797562597244228; KRTBCOOKIE_18=22947-5108559735204312750&KRTB&23628-5108559735204312750; KRTBCOOKIE_153=19420-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&22979-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ&KRTB&23462-HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ; KRTBCOOKIE_860=16335-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23334-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23417-RO9hsv43VjtJegiqx3XZlggueyE&KRTB&23426-RO9hsv43VjtJegiqx3XZlggueyE; KRTBCOOKIE_1101=23040-7420424570841266542&KRTB&23369-7420424570841266542; KRTBCOOKIE_1323=23480-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23485-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23524-OPU3a0f5dd1c0aa4a30be4cf59960b85655&KRTB&23575-OPU3a0f5dd1c0aa4a30be4cf59960b85655; KRTBCOOKIE_80=22987-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&16514-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23025-CAESEG_0F18VEsgTOdPGXd54Kf4&KRTB&23386-CAESEG_0F18VEsgTOdPGXd54Kf4; DPSync4=1728864000%3A219_197_245_241_227_226; SyncRTB4=1728950400%3A35%7C1732838400%3A69%7C1728864000%3A203_270_46_176_22_249_161_3_238_8_81_54_21_251_166_233_201_55_254_165_13_56_234_220_266_99_214_88_243_271_71_264%7C1728518400%3A63%7C1728259200%3A2_223_15; KRTBCOOKIE_466=16530-1dd8272e-4cf2-424e-a94e-51098c77708e; PugT=1727702232; KRTBCOOKIE_377=6810-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22918-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&22926-73e2eec1-23cf-4a56-8a81-97103112d253&KRTB&23031-73e2eec1-23cf-4a56-8a81-97103112d253; chkChromeAb67Sec=3; SPugT=1727702232
Source: global traffic	HTTP traffic detected: GET /usersync?b=sad&i=2809080294951148902 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_8f91b3c0-4256-4af1-9422-b299c036a719

Source: chromecache_519.9.dr	String found in binary or memory: TD.prototype.l=function(a){switch(a.type){case "playing":VD(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&UD(this)>0&&(this.B=!0,VD(this))}};var VD=function(a){!a.g.enabled&&a.B&&(a.D=UD(a)1E3,a.C=Date.now(),a.A=!1,a.g.start())};TD.prototype.G=function(){var a=Date.now(),b=a-this.C,c=UD(this)1E3;c-this.D<b.5?this.A\|\|(this.A=!0,this.dispatchEvent("playbackStalled")):this.A=!1;this.D=c;this.C=a};var WD="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),XD=/\bocr\b/;function YD(a){if(wb(Qi(a))\|\|rc&&a.length>2048)return!1;try{if((new T(a)).D().match(XD))return!0}catch(b){}return WD.find(function(b){return a.match(b)!=null})!=null};function ZD(a,b){return wb(b)?!1:(new RegExp(a)).test(b)}function $D(a){var b={};a.split(",").forEach(function(c){var d=c.split("=");d.length==2&&(c=xb(d[0]),d=xb(d[1]),c.length>0&&(b[c]=d))});return b} equals www.youtube.com (Youtube)
Source: chromecache_513.9.dr, chromecache_569.9.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&vb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?ob(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_513.9.dr, chromecache_569.9.dr	String found in binary or memory: function vb(){var a=new tb,b=["https://www.youtube.com"];b=b===void 0?sb:b;pa(function(c){switch(c.g){case 1:return C(c,ub(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_318.9.dr, chromecache_520.9.dr, chromecache_401.9.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_490.9.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.multitran.ru
Source: global traffic	DNS traffic detected: DNS query: www.multitran.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.adpushup.com
Source: global traffic	DNS traffic detected: DNS query: delivery.adrecover.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: http-intake.logs.us5.datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: e3.adpushup.com
Source: global traffic	DNS traffic detected: DNS query: keymap.adpushup.com
Source: global traffic	DNS traffic detected: DNS query: secure.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: config.aps.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: rules.quantcount.com
Source: global traffic	DNS traffic detected: DNS query: secure.cdn.fastclick.net
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: cdn.hadronid.net
Source: global traffic	DNS traffic detected: DNS query: id.hadron.ad.gt
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: pixel.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: http-intake.logs.datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: video.adpushup.com
Source: global traffic	DNS traffic detected: DNS query: proc.ad.cpe.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: a.ad.gt
Source: global traffic	DNS traffic detected: DNS query: btlr.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: htlb.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ads.servenobid.com
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: prg.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: ex.ingage.tech
Source: global traffic	DNS traffic detected: DNS query: prebid.smilewanted.com
Source: global traffic	DNS traffic detected: DNS query: prebid-server.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: aax.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: api.id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: pbjs.e-planning.net
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: hbopenbid.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: tlx.3lift.com
Source: global traffic	DNS traffic detected: DNS query: apex.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: b.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: p.ad.gt
Source: global traffic	DNS traffic detected: DNS query: ids.ad.gt
Source: global traffic	DNS traffic detected: DNS query: seg.ad.gt
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cs.ingage.tech
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: js-sec.indexww.com
Source: global traffic	DNS traffic detected: DNS query: csync.smilewanted.com
Source: global traffic	DNS traffic detected: DNS query: public.servenobid.com
Source: global traffic	DNS traffic detected: DNS query: cs.media.net
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: s.ad.smaato.net
Source: global traffic	DNS traffic detected: DNS query: trace-eu.mediago.io
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: lb.eu-1-id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: match.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cs.admanmedia.com
Source: global traffic	DNS traffic detected: DNS query: ssbsync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: amazon-tam-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: sync.inmobi.com
Source: global traffic	DNS traffic detected: DNS query: visitor.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: g2.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: pixel.33across.com
Source: global traffic	DNS traffic detected: DNS query: static.smilewanted.com
Source: global traffic	DNS traffic detected: DNS query: cs-server-s2s.yellowblue.io
Source: global traffic	DNS traffic detected: DNS query: cdn.dxkulture.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: prebid.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: ssp.disqus.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0strict-transport-security: max-age=16000000; includeSubDomains; preload;connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 13:17:03 GMTContent-Type: application/json; charset=utf-8Content-Length: 82Connection: closevary: Originaccess-control-allow-credentials: trueset-cookie: LW_SERVER=lw23; path=/CF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8cb47db32bd48c1b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0strict-transport-security: max-age=16000000; includeSubDomains; preload;connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 13:17:04 GMTContent-Type: application/json; charset=utf-8Content-Length: 82Connection: closevary: Originaccess-control-allow-credentials: trueset-cookie: LW_SERVER=lw20; path=/CF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8cb47db71e0a0c76-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 30 Sep 2024 13:17:16 GMTContent-Type: text/plainContent-Length: 9Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 30 Sep 2024 13:17:46 GMTContent-Type: text/plainContent-Length: 9Connection: close

Source: 57C8EDB95DF3F0AD4EE2DC2B8CFD4157.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab
Source: chromecache_510.9.dr	String found in binary or memory: http://google.com
Source: chromecache_510.9.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_510.9.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_510.9.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_519.9.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_358.9.dr	String found in binary or memory: http://pixel.tapad.com/idsync/ex/receive?partner_id=3535&partner_device_id=ID5-1-5f5c88f9-d290-4
Source: chromecache_495.9.dr, chromecache_528.9.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_495.9.dr, chromecache_528.9.dr, chromecache_519.9.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_408.9.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_364.9.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=index.com&id=Zvqk09HM51MAAHZlAG58agAABXAAAAIB
Source: chromecache_358.9.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=inmobi.com&id=ID5-1-5f5c88f9-d290-459f-96b2-e590dac
Source: chromecache_436.9.dr, chromecache_527.9.dr, chromecache_363.9.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-M
Source: chromecache_548.9.dr	String found in binary or memory: https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3F
Source: chromecache_552.9.dr	String found in binary or memory: https://ads.dxkulture.com/usync/lr.gif?pid=
Source: chromecache_552.9.dr	String found in binary or memory: https://ads.dxkulture.com/usync?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D369%26uid%3D%24UI
Source: chromecache_552.9.dr	String found in binary or memory: https://ads.dxkulture.com/xuid?pid=
Source: chromecache_358.9.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159035&gdpr=0&gdpr_consent=&userId
Source: chromecache_565.9.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_565.9.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=309&uid=e_8f91b3c0-4256-4af1-9422-b299c036a719
Source: chromecache_384.9.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=352&uid=HnMbnDMrkp_s
Source: chromecache_384.9.dr	String found in binary or memory: https://ads.stickyadstv.com/user-matching?id=3663&gdpr=0&gdpr_consent=
Source: chromecache_384.9.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs
Source: chromecache_371.9.dr, chromecache_316.9.dr, chromecache_397.9.dr, chromecache_473.9.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_401.9.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_431.9.dr, chromecache_409.9.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_358.9.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.inmobi.com%2Fsetuid
Source: chromecache_384.9.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://api.id5-sync.com/analytics
Source: chromecache_313.9.dr, chromecache_559.9.dr	String found in binary or memory: https://api.id5-sync.com/analytics/event
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://api.rlcdn.com/api/identity/envelope?pid=
Source: chromecache_536.9.dr	String found in binary or memory: https://apps.apple.com/ru/app/%D0%BC%D1%83%D0%BB%D1%8C%D1%82%D0%B8%D1%82%D1%80%D0%B0%D0%BD/id1470678
Source: chromecache_565.9.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=e_8f91b3c0-4256-4af1-9422-b299c036a719&gdpr=0&gdpr_
Source: chromecache_364.9.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/index/?puid=Zvqk09HM51MAAHZlAG58agAA%261392&cb=https%3A%2F%2
Source: chromecache_358.9.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/inmobi/?puid=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704&cb=h
Source: chromecache_565.9.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_506.9.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2F
Source: chromecache_548.9.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VG
Source: chromecache_384.9.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562615&ev=1&us_privacy=
Source: chromecache_364.9.dr	String found in binary or memory: https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1
Source: chromecache_565.9.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=
Source: chromecache_408.9.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&gdpr=0&
Source: chromecache_318.9.dr, chromecache_520.9.dr, chromecache_401.9.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_510.9.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_510.9.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_448.9.dr, chromecache_395.9.dr	String found in binary or memory: https://cdn.hadronid.net/hadron.js
Source: chromecache_548.9.dr	String found in binary or memory: https://cdn.hadronid.net/hadron.js?partner_id=777&sync=1&url=
Source: chromecache_408.9.dr	String found in binary or memory: https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel
Source: chromecache_408.9.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_358.9.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_hm=NcqI50TgmXHDNOPLYq0d&gdpr_consent=&gdpr=0&g
Source: chromecache_548.9.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ul
Source: chromecache_565.9.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV84ZjkxYjNjMC00MjU2LTRhZjEtOTQyM
Source: chromecache_364.9.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=Zvqk09HM51MAAHZlAG58
Source: chromecache_358.9.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=inmobi_new_eb&google_cm
Source: chromecache_506.9.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_364.9.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0
Source: chromecache_384.9.dr	String found in binary or memory: https://contextual.media.net/cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2
Source: chromecache_408.9.dr	String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_565.9.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_358.9.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=inmobi&gdpr=0&gdpr_consent=
Source: chromecache_384.9.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=rise
Source: chromecache_358.9.dr	String found in binary or memory: https://cs.admanmedia.com/e03deca3316b700a1ce99c41e324fd03.gif?puid=ID5-1-5f5c88f9-d290-459f-96b2-e5
Source: chromecache_510.9.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_418.9.dr, chromecache_359.9.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_384.9.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11362&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-server-s2s.yello
Source: chromecache_358.9.dr	String found in binary or memory: https://csync.loopme.me/?pubid=9724&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.inm
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://csync.smilewanted.com
Source: chromecache_543.9.dr	String found in binary or memory: https://csync.smilewanted.com/drop_cookie_sw.php
Source: chromecache_548.9.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODI0MTY1OC90LzA/url/https%3A%2F%2Fids.ad.gt%2Fapi%2Fv
Source: chromecache_552.9.dr	String found in binary or memory: https://delivery-cdn-cf.adswizz.com/adswizz/js/SynchroClient2.js
Source: chromecache_513.9.dr, chromecache_569.9.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_364.9.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=23728&dpuuid=Zvqk09HM51MAAHZlAG58agAA%261392?gdpr_consent=&u
Source: chromecache_548.9.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=348447&dpuuid=
Source: chromecache_506.9.dr	String found in binary or memory: https://dsp-cookie.adfarm1.adition.com/?ssp=5&gdpr=0&gdpr_consent=
Source: chromecache_510.9.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_510.9.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_358.9.dr	String found in binary or memory: https://eus.rubiconproject.com/usync.html?p=inmobi&endpoint=us-east
Source: chromecache_519.9.dr	String found in binary or memory: https://f.creativecdn.com
Source: chromecache_519.9.dr	String found in binary or memory: https://fledge-buyer-testing-1.uc.r.appspot.com
Source: chromecache_519.9.dr	String found in binary or memory: https://fledge.as.criteo.com
Source: chromecache_519.9.dr	String found in binary or memory: https://fledge.eu.criteo.com
Source: chromecache_519.9.dr	String found in binary or memory: https://fledge.us.criteo.com
Source: chromecache_510.9.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_510.9.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz4dL_nz.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz8dL_nz.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzAdLw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc-CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc0CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc1CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc2CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc3CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc5CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc6CsQ.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc1CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_307.9.dr, chromecache_547.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_307.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_510.9.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_385.9.dr, chromecache_505.9.dr	String found in binary or memory: https://github.com/krux/prescribe/
Source: chromecache_385.9.dr, chromecache_505.9.dr	String found in binary or memory: https://github.com/lancedikson/bowser
Source: chromecache_562.9.dr, chromecache_472.9.dr	String found in binary or memory: https://github.com/prebid/Shared-id-v2/
Source: chromecache_550.9.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_550.9.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_519.9.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_510.9.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_408.9.dr	String found in binary or memory: https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://gum.criteo.com/sid/json?origin=prebid
Source: chromecache_529.9.dr	String found in binary or memory: https://habr.com/ru/post/132283/
Source: chromecache_364.9.dr	String found in binary or memory: https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=Zvqk09HM51MAAHZlAG58agAA%261392&gpdr
Source: chromecache_384.9.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11596%26id%3D$UID
Source: chromecache_358.9.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://sync.inmobi.com/setuid?bidderID=32&dspUserId=$UID
Source: chromecache_358.9.dr	String found in binary or memory: https://id.rlcdn.com/713074.gif?
Source: chromecache_548.9.dr	String found in binary or memory: https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3D
Source: chromecache_548.9.dr	String found in binary or memory: https://ids.ad.gt/api/v1/g_hosted?id=
Source: chromecache_548.9.dr	String found in binary or memory: https://ids.ad.gt/api/v1/halo_match?id=
Source: chromecache_548.9.dr	String found in binary or memory: https://ids.ad.gt/api/v1/ip_match?id=
Source: chromecache_548.9.dr	String found in binary or memory: https://image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match
Source: chromecache_358.9.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=157097&gdpr=0&gdpr_consent=&pu=https%3A%2
Source: chromecache_384.9.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-serve
Source: chromecache_552.9.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=164751&gdpr=0&gdpr_consent=&pu=http%3A%2F%2Fimage4.pu
Source: chromecache_519.9.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/car.js
Source: chromecache_385.9.dr, chromecache_505.9.dr	String found in binary or memory: https://krux.github.io/postscribe
Source: chromecache_364.9.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/casale
Source: chromecache_548.9.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=
Source: chromecache_358.9.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=g6nxmp9&ttd_tpi=1&gdpr=0&gdpr_consent
Source: chromecache_565.9.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://match.adsrvr.org/track/rid?ttd_pid=
Source: chromecache_565.9.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_358.9.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/inm
Source: chromecache_384.9.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=5926d422&gdpr=0&gdpr_consent=
Source: chromecache_408.9.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_367.9.dr	String found in binary or memory: https://mb.moatads.com
Source: chromecache_367.9.dr	String found in binary or memory: https://mb.moatads.com/o.js?
Source: chromecache_548.9.dr	String found in binary or memory: https://onetag-sys.com/match/?int_id=180&uid=
Source: chromecache_384.9.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=
Source: chromecache_548.9.dr	String found in binary or memory: https://p.ad.gt/api/v1/p/777
Source: chromecache_510.9.dr, chromecache_438.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_519.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/canary/omweb-v1.js
Source: chromecache_519.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/control/omweb-v1.js
Source: chromecache_519.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/experimental/omweb-v1.js
Source: chromecache_519.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Source: chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_519.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: chromecache_371.9.dr, chromecache_316.9.dr, chromecache_397.9.dr, chromecache_473.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_318.9.dr, chromecache_520.9.dr, chromecache_401.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_536.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-1428290592401732
Source: chromecache_371.9.dr, chromecache_316.9.dr, chromecache_397.9.dr, chromecache_473.9.dr, chromecache_510.9.dr, chromecache_519.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_371.9.dr, chromecache_316.9.dr, chromecache_397.9.dr, chromecache_473.9.dr, chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_519.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_510.9.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_408.9.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&gdpr=0&gdpr_co
Source: chromecache_512.9.dr	String found in binary or memory: https://pixel.quantserve.com/ias/v1?r=
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://pixel.quantserve.com/pixel
Source: chromecache_367.9.dr	String found in binary or memory: https://pixel.quantserve.com/pixel/p-7JZADCG8mFkvS.gif?inventoryType=display&
Source: chromecache_548.9.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3185&partner_device_id=
Source: chromecache_536.9.dr	String found in binary or memory: https://play.google.com/intl/en_us/badges/static/images/badges/en_badge_web_generic.png
Source: chromecache_536.9.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.multitran.android.datafrominternet&hl=en&pcampaign
Source: chromecache_565.9.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://prebid.smilewanted.com
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://prg.smartadserver.com
Source: chromecache_326.9.dr, chromecache_522.9.dr	String found in binary or memory: https://proc.ad.cpe.dotomi.com/cvx/client/sync/publink/refresh
Source: chromecache_519.9.dr	String found in binary or memory: https://pubads.g.doubleclick.net/adsid/integrator.json?aos=
Source: chromecache_367.9.dr	String found in binary or memory: https://px.moatads.com
Source: chromecache_367.9.dr	String found in binary or memory: https://px.moatads.com/pixel.gif?e=24&d=data%3Adata%3Adata%3Adata&i=
Source: chromecache_506.9.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=160&partneruserid=1&redirurl=https%3A%2F
Source: chromecache_358.9.dr	String found in binary or memory: https://s.ad.smaato.net/c/?adExInit=inmobi&gdpr=0&gdpr_consent=
Source: chromecache_384.9.dr	String found in binary or memory: https://s.ad.smaato.net/c/?adExInit=rise&gdpr=
Source: chromecache_364.9.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_519.9.dr	String found in binary or memory: https://s0.2mdn.net/instream/video/client.js
Source: chromecache_358.9.dr	String found in binary or memory: https://s2s.yieldlove-ad-serving.net/setuid?bidder=inmobi&gdpr=0&gdpr_consent=&gpp=&
Source: chromecache_565.9.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_384.9.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=rise_engage&endpoint=us-east
Source: chromecache_548.9.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=
Source: chromecache_565.9.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_360.9.dr, chromecache_471.9.dr	String found in binary or memory: https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js
Source: chromecache_448.9.dr, chromecache_395.9.dr	String found in binary or memory: https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher-stub.min.js
Source: chromecache_519.9.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/ima_ppub_config
Source: chromecache_510.9.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_565.9.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_384.9.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-server-s2s.yellowblue.io%
Source: chromecache_552.9.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?r=https%3A%2F%2Fads.dxkulture.com%2Fsetuid%3Fbidder%3Dzeta%26pid
Source: chromecache_548.9.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/ium?sourceid=15&uid=
Source: chromecache_337.9.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_512.9.dr	String found in binary or memory: https://stackoverflow.com/questions/4845762/onload-handler-for-script-tag-in-internet-explorer
Source: chromecache_543.9.dr	String found in binary or memory: https://static.smilewanted.com/js/decode_consent/decode_consent.js
Source: chromecache_318.9.dr, chromecache_520.9.dr, chromecache_401.9.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_409.9.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_548.9.dr	String found in binary or memory: https://sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3
Source: chromecache_358.9.dr	String found in binary or memory: https://sync.1rx.io/usersync2/inmobi&gdpr=0&gdpr_consent=
Source: chromecache_408.9.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_384.9.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=typeaholdings
Source: chromecache_358.9.dr	String found in binary or memory: https://sync.adkernel.com/user-sync?zone=147857&t=image&gdpr=0&gdpr_consent=&r=https
Source: chromecache_548.9.dr	String found in binary or memory: https://sync.colossusssp.com/ebfa23da174faa55634171c5e49d0152.gif?puid=
Source: chromecache_358.9.dr	String found in binary or memory: https://sync.e-volution.ai/a184e2218ea9f18e32c70fb304405e72.gif?puid=ID5-1-5f5c88f9-d290-459f-96b2-e
Source: chromecache_384.9.dr	String found in binary or memory: https://sync.go.sonobi.com/us?gdpr=0&consent_string=&loc=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2
Source: chromecache_548.9.dr	String found in binary or memory: https://sync.go.sonobi.com/us?https://ids.ad.gt/api/v1/son_match?id=
Source: chromecache_565.9.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_548.9.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3D
Source: chromecache_565.9.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=
Source: chromecache_358.9.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=138&gdpr=0&gdpr_consent=
Source: chromecache_552.9.dr	String found in binary or memory: https://synchrobox.adswizz.com/register2.php
Source: chromecache_431.9.dr, chromecache_409.9.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_448.9.dr, chromecache_395.9.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/
Source: chromecache_519.9.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_565.9.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_548.9.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=50242&puid=
Source: chromecache_510.9.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: sharedStrings.xml	String found in binary or memory: https://tqm.com.ua/likbez/laws/nalogi-v-polshe
Source: chromecache_358.9.dr	String found in binary or memory: https://tr.blismedia.com/v1/api/sync/inmobi?gdpr_consent=&gdpr=0
Source: chromecache_358.9.dr	String found in binary or memory: https://tracker-shr.ortb.net/sync?id=1&uid=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704
Source: chromecache_548.9.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi
Source: chromecache_408.9.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_565.9.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_384.9.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=58ceaaf5-c766-4c17-869a-d76e43401714&gdpr=0&gdpr_consent=&r=https
Source: chromecache_384.9.dr	String found in binary or memory: https://visitor-risecode.omnitagjs.com/visitor/bsync?uid=40a3c28f9ffc73ee86df2bac2d2bb390&name=risec
Source: chromecache_431.9.dr, chromecache_409.9.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_431.9.dr, chromecache_409.9.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_431.9.dr, chromecache_409.9.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_401.9.dr, chromecache_569.9.dr	String found in binary or memory: https://www.google.com
Source: chromecache_431.9.dr, chromecache_409.9.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_371.9.dr, chromecache_316.9.dr, chromecache_397.9.dr, chromecache_473.9.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_510.9.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_510.9.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_510.9.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_318.9.dr, chromecache_520.9.dr, chromecache_401.9.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_401.9.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_431.9.dr, chromecache_409.9.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_536.9.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-8BNQ9L4TKJ
Source: chromecache_536.9.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-PLRBTNK
Source: chromecache_510.9.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_510.9.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_318.9.dr, chromecache_520.9.dr, chromecache_401.9.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_529.9.dr	String found in binary or memory: https://www.multitran.com/gif/mt_help_icon.svg
Source: chromecache_434.9.dr, chromecache_561.9.dr	String found in binary or memory: https://www.quantcast.com/legal/license
Source: chromecache_569.9.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_384.9.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11603%26gd
Source: chromecache_358.9.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=aerserv&user_id=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704&
Source: chromecache_565.9.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_8f91b3c0-4256-4af1-9422-b299c036a719&gdpr=0&gdpr_
Source: chromecache_367.9.dr	String found in binary or memory: https://z.moatads.com/omidverificationclient/verification-client-v1.js
Source: chromecache_367.9.dr	String found in binary or memory: https://z.moatads.com/px2/client.js
Source: chromecache_367.9.dr	String found in binary or memory: https://z.moatads.com/swf/p6.v3.swf

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 51201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 51209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 51119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268

Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: classification engine

Classification label: sus25.phis.winXLSX@128/270@1185/100

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\Desktop\~$Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{3B20BB9B-8DBA-4175-98FB-21ED5655AEFB} - OProcSessId.dat

Jump to behavior

Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	OLE indicator, Workbook stream: true
Source: D9E40000.0.dr	OLE indicator, Workbook stream: true

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1948,i,36543809609165043,4265203075758315399,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.multitran.ru/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4824 --field-trial-handle=1948,i,36543809609165043,4265203075758315399,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2412,i,10596119694725537203,12646345865528063777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.multitran.ru/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4992 --field-trial-handle=2412,i,10596119694725537203,12646345865528063777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1948,i,36543809609165043,4265203075758315399,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4824 --field-trial-handle=1948,i,36543809609165043,4265203075758315399,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2412,i,10596119694725537203,12646345865528063777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4992 --field-trial-handle=2412,i,10596119694725537203,12646345865528063777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{88d96a0f-f192-11d4-a65f-0040963251e5}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet4.xml
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet5.xml
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet6.xml
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet7.xml
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet8.xml
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet9.xml
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet10.xml
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet3.xml.rels
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet6.xml.rels
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet8.xml.rels
Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	Initial sample: OLE zip file path = xl/calcChain.xml
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet4.xml
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet5.xml
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet6.xml
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet7.xml
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet8.xml
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet9.xml
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet10.xml
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet3.xml.rels
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet6.xml.rels
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet8.xml.rels
Source: D9E40000.0.dr	Initial sample: OLE zip file path = xl/calcChain.xml

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx

Initial sample: OLE indicators vbamacros = False

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 4510			Jump to behavior
Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 5474			Jump to behavior

Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	1 System Information Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx	0%	ReversingLabs

Source	Detection	Scanner	Link
securepubads.g.doubleclick.net	0%	Virustotal	Browse
um.simpli.fi	0%	Virustotal	Browse
global.px.quantserve.com	0%	Virustotal	Browse
ssum.casalemedia.com	0%	Virustotal	Browse
d-ams1.turn.com	0%	Virustotal	Browse
rtb.openx.net	0%	Virustotal	Browse
bttrack.com	0%	Virustotal	Browse
sync.intentiq.com	0%	Virustotal	Browse
r.casalemedia.com	0%	Virustotal	Browse
1.cpm.ak-is2.net	0%	Virustotal	Browse
mwzeom.zeotap.com	0%	Virustotal	Browse
bcp.crwdcntrl.net	0%	Virustotal	Browse
match.adsrvr.org	0%	Virustotal	Browse
dsp-cookie.adfarm1.adition.com	0%	Virustotal	Browse
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	0%	Virustotal	Browse
id.rlcdn.com	0%	Virustotal	Browse
creativecdn.com	0%	Virustotal	Browse
iad-2-apex.go.sonobi.com	0%	Virustotal	Browse
uip.semasio.net	0%	Virustotal	Browse
m.deepintent.com	0%	Virustotal	Browse
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	0%	Virustotal	Browse
d1giprow6b9psh.cloudfront.net	0%	Virustotal	Browse
pixel.onaudience.com	0%	Virustotal	Browse
firewall-external-2134955858.eu-west-1.elb.amazonaws.com	0%	Virustotal	Browse
pixel-sync.sitescout.com	0%	Virustotal	Browse
ssum-sec.casalemedia.com	0%	Virustotal	Browse
d1ykf07e75w7ss.cloudfront.net	0%	Virustotal	Browse
am1-direct-bgp.contextweb.com	0%	Virustotal	Browse
config.aps.amazon-adsystem.com	0%	Virustotal	Browse
hde.tynt.com	0%	Virustotal	Browse
nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com	0%	Virustotal	Browse
rtb.adgrx.com	0%	Virustotal	Browse
iad-2-sync.go.sonobi.com	0%	Virustotal	Browse
a018.casalemedia.com	0%	Virustotal	Browse
pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com	0%	Virustotal	Browse
pixel-eu.onaudience.com	0%	Virustotal	Browse
hbx.media.net	0%	Virustotal	Browse
prebid.smilewanted.com	0%	Virustotal	Browse
rtb.adentifi.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
securepubads.g.doubleclick.net	142.250.186.66	true	false	0%, Virustotal, Browse	unknown
um.simpli.fi	35.204.74.118	true	false	0%, Virustotal, Browse	unknown
global.px.quantserve.com	91.228.74.159	true	false	0%, Virustotal, Browse	unknown
ssum.casalemedia.com	104.18.36.155	true	false	0%, Virustotal, Browse	unknown
d-ams1.turn.com	46.228.164.13	true	false	0%, Virustotal, Browse	unknown
rtb.openx.net	35.227.252.103	true	false	0%, Virustotal, Browse	unknown
bttrack.com	192.132.33.68	true	false	0%, Virustotal, Browse	unknown
1.cpm.ak-is2.net	103.67.200.72	true	false	0%, Virustotal, Browse	unknown
mwzeom.zeotap.com	104.22.51.98	true	false	0%, Virustotal, Browse	unknown
r.casalemedia.com	172.64.151.101	true	false	0%, Virustotal, Browse	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.75.62.37	true	false	0%, Virustotal, Browse	unknown
sync.intentiq.com	3.160.150.30	true	false	0%, Virustotal, Browse	unknown
id.rlcdn.com	35.244.174.68	true	false	0%, Virustotal, Browse	unknown
bcp.crwdcntrl.net	52.19.187.77	true	false	0%, Virustotal, Browse	unknown
match.adsrvr.org	15.197.193.217	true	false	0%, Virustotal, Browse	unknown
dsp-cookie.adfarm1.adition.com	80.82.210.217	true	false	0%, Virustotal, Browse	unknown
creativecdn.com	185.184.8.90	true	false	0%, Virustotal, Browse	unknown
d1giprow6b9psh.cloudfront.net	13.32.27.88	true	false	0%, Virustotal, Browse	unknown
uip.semasio.net	77.243.51.122	true	false	0%, Virustotal, Browse	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	52.58.104.46	true	false	0%, Virustotal, Browse	unknown
m.deepintent.com	8.18.47.7	true	false	0%, Virustotal, Browse	unknown
iad-2-apex.go.sonobi.com	69.166.1.8	true	false	0%, Virustotal, Browse	unknown
nld-prebid.a-mx.net	163.5.194.33	true	false		unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	0%, Virustotal, Browse	unknown
pixel.onaudience.com	54.38.113.4	true	false	0%, Virustotal, Browse	unknown
firewall-external-2134955858.eu-west-1.elb.amazonaws.com	52.31.206.55	true	false	0%, Virustotal, Browse	unknown
d1ykf07e75w7ss.cloudfront.net	13.224.186.120	true	false	0%, Virustotal, Browse	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	0%, Virustotal, Browse	unknown
rtb.adgrx.com	52.215.155.11	true	false	0%, Virustotal, Browse	unknown
config.aps.amazon-adsystem.com	18.245.31.123	true	false	0%, Virustotal, Browse	unknown
iad-2-sync.go.sonobi.com	69.166.1.67	true	false	0%, Virustotal, Browse	unknown
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	0%, Virustotal, Browse	unknown
hbx.media.net	23.212.88.20	true	false	0%, Virustotal, Browse	unknown
nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com	13.53.196.230	true	false	0%, Virustotal, Browse	unknown
hde.tynt.com	67.202.105.31	true	false	0%, Virustotal, Browse	unknown
a018.casalemedia.com	75.119.185.41	true	false	0%, Virustotal, Browse	unknown
prebid.smilewanted.com	104.22.31.209	true	false	0%, Virustotal, Browse	unknown
pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com	35.156.32.92	true	false	0%, Virustotal, Browse	unknown
pixel-eu.onaudience.com	54.38.113.6	true	false	0%, Virustotal, Browse	unknown
spug-lhrc.pubmnet.com	185.64.190.81	true	false		unknown
rtb.adentifi.com	44.218.170.50	true	false	0%, Virustotal, Browse	unknown
pixel.tapad.com	34.111.113.62	true	false		unknown
rtb-csync-euw2.smartadserver.com	51.178.195.216	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		unknown
us-east-1.event.prod.bidr.io	54.157.156.92	true	false		unknown
imgsync-amsfpairbc.pubmnet.com	198.47.127.18	true	false		unknown
alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com	3.233.146.93	true	false		unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false		unknown
match.adsby.bidtheatre.com	188.166.17.21	true	false		unknown
b.sharethrough.com	18.66.122.23	true	false		unknown
sync.e-volution.ai	91.227.144.188	true	false		unknown
matching.truffle.bid	162.55.120.196	true	false		unknown
httplb-gce-nl-clickdistrict.clickdistrict.iponweb.net	35.214.241.248	true	false		unknown
jsdelivr.map.fastly.net	151.101.129.229	true	false		unknown
groundcontrol.rendering.sharethrough.com	13.32.27.87	true	false		unknown
jelly.mdhv.io	216.239.32.21	true	false		unknown
1x1.a-mo.net	3.123.214.38	true	false		unknown
ids.ad.gt	52.40.251.215	true	false		unknown
pug-vac.pubmnet.com	8.28.7.83	true	false		unknown
sync.1rx.io	46.228.174.117	true	false		unknown
idaas-ext.cph.liveintent.com	54.173.74.149	true	false		unknown
ds-pr-bh.ybp.gysm.yahoodns.net	54.77.193.201	true	false		unknown
api.id5-sync.com	141.95.98.64	true	false		unknown
spug-amsfpairbc.pubmnet.com	198.47.127.20	true	false		unknown
ads.mountain.com	34.209.34.172	true	false		unknown
nydc1.outbrain.org	70.42.32.159	true	false		unknown
us-u.openx.net	34.98.64.218	true	false		unknown
d27cxv6pgoe1ut.cloudfront.net	13.225.78.90	true	false		unknown
ads.servenobid.com	54.170.214.245	true	false		unknown
in-ftd-65.nl3.vip.prod.criteo.com	178.250.1.56	true	false		unknown
gs.mountain.com	35.81.162.201	true	false		unknown
alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com	3.233.155.50	true	false		unknown
d1jvc9b8z3vcjs.cloudfront.net	18.244.15.236	true	false		unknown
prod.appnexus.map.fastly.net	151.101.1.108	true	false		unknown
pixel-origin.mathtag.com	216.200.232.253	true	false		unknown
alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com	3.233.156.158	true	false		unknown
www.multitran.com	65.109.102.246	true	false		unknown
fp31cd.wpc.thetacdn.net	152.199.21.70	true	false		unknown
htlb.casalemedia.com	172.64.151.101	true	false		unknown
cs.iqzone.com	8.2.111.13	true	false		unknown
usersync.gumgum.com	34.247.205.196	true	false		unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.217.153.213	true	false		unknown
sync-service.net	204.62.13.67	true	false		unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	99.80.51.253	true	false		unknown
static.smilewanted.com	104.22.30.209	true	false		unknown
exchange.mediavine.com	3.124.241.215	true	false		unknown
play.google.com	142.250.185.142	true	false		unknown
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false		unknown
cm.ctnsnet.com	35.186.193.173	true	false		unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false		unknown
eexsync.com	80.77.87.108	true	false		unknown
cs.yellowblue.io	52.213.77.211	true	false		unknown
alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com	3.233.144.220	true	false		unknown
load-euw1.exelator.com	34.254.143.3	true	false		unknown
match-eu-central-1-ecs.sharethrough.com	18.197.30.174	true	false		unknown
static.nl3.vip.prod.criteo.net	178.250.1.3	true	false		unknown
id5-sync.com	162.19.138.117	true	false		unknown
cs.admanmedia.com	80.77.87.161	true	false		unknown
cdn.w55c.net	3.73.2.196	true	false		unknown
btlr-eu-central-1.sharethrough.com	18.159.212.21	true	false		unknown

Contacted URLs

Name	Malicious	Reputation
https://usersync.gumgum.com/usersync?b=sad&i=2809080294951148902	false	unknown
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Outbrain&dcc=t	false	unknown
https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001727702220-VFVIGU3O-SOQK%26impr_uid%3D%7BPUB_USER_ID%7D	false	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	false	unknown
https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID	false	unknown
https://sync.adkernel.com/user-sync?zone=176971&dsp=649145&t=image&uid=5619797562597244228	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_cm=&google_sc&google_hm=MTg5NjUxNjUzNjYwODdjNmUyOWE5OTNhYTI0NDkwYjU=&gdpr=&gdpr_consent=	false	unknown
https://dsp.360yield.com/ul_cb/dsp_match/275?ssp=76&gdpr=0&gdpr_consent=&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MzUmdGw9MTI5NjAw&piggybackCookie=%7BDSP_USER_ID%7D	false	unknown
https://onetag-sys.com/usync/?cb=1727702259278&us_privacy=1---	false	unknown
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=3lift.com&id=1590848361649052531873	false	unknown
https://usersync.gumgum.com/usersync?b=dit&i=di_a241d21fd32943f39025f	false	unknown
https://fundingchoicesmessages.google.com/i/ca-pub-1428290592401732?href=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe&ers=2	false	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:72433824BA8E42048B0BAA80CEB983E4&gdpr=0&gdpr_consent=	false	unknown
https://ssc-cms.33across.com/ps/?xi=1&xu=M1P1AMBZ-4-DAO6&us_privacy=1---	false	unknown
https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID	false	unknown
https://ib.adnxs.com/getuid?%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D176971%26dsp%3D508546%26t%3Dimage%26uid%3D%24UID	false	unknown
https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent=	false	unknown
https://ssc-cms.33across.com/ps/?us_privacy=&ts=1727702265840.3&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID	false	unknown
https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pid=LA2PNEcoAcn0p&cb=8&ws=1280x907&v=24.827.1552&t=3000&slots=%5B%7B%22sd%22%3A%22ADP_42845_728x90_00000001-8ca111dc-6e85-4c4a-9cce-cda543360ead%22%2C%22s%22%3A%5B%22728x90%22%2C%22690x90%22%2C%22675x90%22%2C%22670x90%22%2C%22650x90%22%2C%22630x90%22%2C%22600x90%22%2C%22580x90%22%2C%22570x90%22%2C%22468x60%22%2C%22320x50%22%2C%22300x50%22%2C%22300x75%22%5D%2C%22sn%22%3A%22%2F103512698%2FADP_42845_728X90_af7ac722-2488-47de-81af-fd4897f62d72%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21adpushup.com%2C50b20a9bbdab7514c096e12d3b6f06d8%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=b0b0c663-9fc5-4ff1-8415-8776ba358d7f&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22060ixdbj2g5le89i7dai9dafeb9hg6ie6dhuokgwsqy0m46u2keu6keomg6sq0um0%22%2C%22id5%22%3A%220%22%2C%22lotame%22%3A%22bf75845a6b4a967090c4c282cbd416d539380bdcbdb014206ae6fc29a484d1c5%22%2C%22pubcommon%22%3A%22ac47d973-e264-4b59-b4d0-8404bfddc2d2%22%7D%7D	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=Zvqk09HM51MAAHZlAG58agAABXAAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=	false	unknown
https://sync.1rx.io/usersync/quantcast/DpkPRFmbCkQVzVsRWZdEQACZDEAVlwgQAJr1oVyn?	false	unknown
https://cs.yellowblue.io/cs?aid=11601&id=18965165366087c6e29a993aa24490b5&gdpr_consent=&gdpr=0	false	unknown
https://b1sync.zemanta.com/usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2	false	unknown
https://ads.servenobid.com/adreq?cb=937	false	unknown
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false	unknown
https://ce.lijit.com/merge?pid=80&3pid=M1P1AMBZ-4-DAO6	false	unknown
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=	false	unknown
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=5619797562597244228	false	unknown
https://ads.mountain.com/serve?guid=b47d2d02-7bf9-32e6-9936-6d8315ad9dde&shadsgsreqts=1727702329576&shadsgsreq=1&shsbt=irongate_1036605188&ms=16384&aid=32677&cid=160558&eid=148&cb=2665514974&ttd_impression_id=1727702327034022.478894140.57.steelhouse&sh_ref=&tdid=AAEaAU7N9UoAABY83teMng&click=https%3a%2f%2fus-east-1.event.prod.bidr.io%2flog%2fclk%2fie%3fai%3dChEIvLCt5AEQORimgezb4OqIAxIVCgpzdGVlbGhvdXNlEAIYkEIgpIgBGgJpZTj_jg1AtRNIAVICaWVgAHo6Cg4IAxABEAQQAxACEAYQBxIECAMQARIECAYQARIECAIQARIECAUQARIECAcQARIECAEQARIECAQQAQ%3d%3d%26audit_flag_wp%3d%24%7bAUCTION_PRICE%7d%26dest%3D&bid_ip=OC40Ni4xMjMuMzM=&publisher=www.multitran.com	false	unknown
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22324e65f0cf7b9d65%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%2C%223256e47988106899%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%7D&ref=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&s=1b729122-26fb-4a0a-ad90-92d618282dc7&pv=f3307e57-ba96-4e7a-b934-ceb4cf3d3d43&vp=desktop&lib_name=prebid&lib_v=8.45.0&us=5&iqid=null&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22multitran.com%22%2C%22keywords%22%3A%22Multitran%2Cdictionary%2Ctranslation%22%2C%22publisher%22%3A%7B%22domain%22%3A%22multitran.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9%22%7D%2C%22device%22%3A%7B%22w%22%3A1034%2C%22h%22%3A870%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpushup.com%22%2C%22sid%22%3A%2250b20a9bbdab7514c096e12d3b6f06d8%22%2C%22hp%22%3A1%7D%5D%7D&kw=Multitran%2Cdictionary%2Ctranslation&coppa=0	false	unknown
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	false	unknown
https://ads.servenobid.com/adreq?cb=7589	false	unknown
https://b1sync.zemanta.com/usersync/gumgum/?puid=e_8f91b3c0-4256-4af1-9422-b299c036a719&gdpr=0&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__	false	unknown
https://ssc-cms.33across.com/ps/?xi=10&us_privacy=&xu=1dd8272e-4cf2-424e-a94e-51098c77708e	false	unknown
https://ads.servenobid.com/adreq?cb=10916	false	unknown
https://pixel-sync.sitescout.com/dmp/pixelSync?nid=64&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D68%26partneruserid%3D%7BuserId%7D&gdpr=0&gdpr_consent=	false	unknown
https://events-ssc.33across.com/match?bidder_id=5&external_user_id=WDajMYxlowxX&ts=1727702268&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=	false	unknown
https://e3.adpushup.com/AdPushupFeedbackWebService/feedback/aphb/auctionData?data=eyJzaXRlSWQiOjQyODQ1LCJ1cmwiOiJodHRwczovL3d3dy5tdWx0aXRyYW4uY29tL2MvbS5leGU%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&c_b=111567.60000000003	false	unknown
https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&gdpr=0&gdpr_consent=	false	unknown
https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=HHY4mEt0PZgHImzNS3hznBJ2O5wHeD_MEnUhr0LJ	false	unknown
https://x.bidswitch.net/sync?dsp_id=70&user_id=6723054822523908865&ssp=fmx	false	unknown
https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D	false	unknown
https://t.adx.opera.com/pub/sync?pubid=pub11169426274368&coppa=&us_privacy=	false	unknown
https://onetag-sys.com/match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0	false	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001727702220-VFVIGU3O-SOQK&gdpr=0	false	unknown
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&redir=true&gdpr=0&gdpr_consent=	false	unknown
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.inmobi.com%2Fsetuid%3FbidderID%3D13%26dspUserId%3D%24UID	false	unknown
https://ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001727702220-VFVIGU3O-SOQK	false	unknown
https://ads.servenobid.com/sync?pid=369&uid=50800d3c-299b-44df-86be-8e367cae4959	false	unknown
https://cdn.adpushup.com/42845/adpushup.js	false	unknown
https://ids.ad.gt/api/v1/t_match?tdid=73e2eec1-23cf-4a56-8a81-97103112d253&id=AU1D-0100-001727702220-VFVIGU3O-SOQK	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false	unknown
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22953b66a7be29f8e%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%2C%229612500ee99ea55%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%7D&ref=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&s=d0bc806f-8272-46d5-852b-f872883617a1&pv=f3307e57-ba96-4e7a-b934-ceb4cf3d3d43&vp=desktop&lib_name=prebid&lib_v=8.45.0&us=5&iqid=null&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22multitran.com%22%2C%22keywords%22%3A%22Multitran%2Cdictionary%2Ctranslation%22%2C%22publisher%22%3A%7B%22domain%22%3A%22multitran.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpushup.com%22%2C%22sid%22%3A%2250b20a9bbdab7514c096e12d3b6f06d8%22%2C%22hp%22%3A1%7D%5D%7D&kw=Multitran%2Cdictionary%2Ctranslation&coppa=0	false	unknown
https://keymap.adpushup.com/urlutmmapping/42845/UrlMapping/ca477594da315e4b53f6ea52b8abd56c50a329fa.json	false	unknown
https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=n-Beeswax_n-sharethrough_n-onetag_cnv_n-nativo&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0	false	unknown
https://csync.smilewanted.com/set_partner_userid_get/pubmatic/4746372F-8ECD-4ADF-9F41-B3EFB933B9A4	false	unknown
https://ap.lijit.com/dsp/google/cookiematch/dv?gdpr=&gdpr_consent=&gpp_sid=	false	unknown
https://sync.1rx.io/usersync/tradedesk/73e2eec1-23cf-4a56-8a81-97103112d253	false	unknown
https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pid=LA2PNEcoAcn0p&cb=25&ws=1034x870&v=24.827.1552&t=3000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A85%2C%22id%22%3A%22Adpushup_Instream%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22640x480%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21adpushup.com%2C50b20a9bbdab7514c096e12d3b6f06d8%2C1%2C%2C%2C&gpp_sid=%5B-1%5D&sm=b0b0c663-9fc5-4ff1-8415-8776ba358d7f&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22060ixdbj2g5le89i7dai9dafeb9hg6ie6dhuokgwsqy0m46u2keu6keomg6sq0um0%22%2C%22id5%22%3A%220%22%2C%22lotame%22%3A%22bf75845a6b4a967090c4c282cbd416d539380bdcbdb014206ae6fc29a484d1c5%22%2C%22pubcommon%22%3A%22ac47d973-e264-4b59-b4d0-8404bfddc2d2%22%7D%7D	false	unknown
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%2246da7cf8809eaad%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%2C%224795f831bb61267%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%7D&ref=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&s=f5bd08e7-b131-49e1-82f0-60eb187503f5&pv=f3307e57-ba96-4e7a-b934-ceb4cf3d3d43&vp=desktop&lib_name=prebid&lib_v=8.45.0&us=5&iqid=null&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22multitran.com%22%2C%22keywords%22%3A%22Multitran%2Cdictionary%2Ctranslation%22%2C%22publisher%22%3A%7B%22domain%22%3A%22multitran.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpushup.com%22%2C%22sid%22%3A%2250b20a9bbdab7514c096e12d3b6f06d8%22%2C%22hp%22%3A1%7D%5D%7D&kw=Multitran%2Cdictionary%2Ctranslation&coppa=0	false	unknown
https://ads.servenobid.com/adreq?cb=4900	false	unknown
https://a.nel.cloudflare.com/report/v4?s=cvqiu%2Bsi0tZmOk%2FevM6rxH9MJ6aF%2BGrEGjFfhiU2DahRDA4ZnilVJ6rOZ%2BnG3oqZpVlgd2wG%2FpaGgHCtl9%2B7VbFh%2FEUqf%2BYTdYYhnhoA%2BXYJVOfCYvoFoofbUuH%2B8YF0aBiwkTwt	false	unknown
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202409240101/pubads_impl.js	false	unknown
https://cs.media.net/cksync?cs=31&type=tam&redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E&gdpr=0	false	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=882c07dc-2932-46e0-9294-e34fa891ea18%252Chttps%25253A%25252F%25252Fids.ad.gt%25252Fapi%25252Fv1%25252Ftapad_match%25253Fid%25253DAU1D-0100-001727702220-VFVIGU3O-SOQK%252526tapad_id%25253D882c07dc-2932-46e0-9294-e34fa891ea18%252C&gdpr=0&gdpr_consent=	false	unknown
https://sync.mathtag.com/sync/img?cs_wd_sy=1&dp=43&redir=https%3A%2F%2Fsync.go.sonobi.com%2Fus.gif%3Fnw%3Dif%26nuid%3D[MM_UUID]	false	unknown
https://pbjs.e-planning.net/pbjs/1/AP/42845_multitran.com/1/www.multitran.com/ROS?rnd=0.43013598678955556&e=728x90_0%3A728x90%2C690x90%2C675x90%2C670x90%2C650x90%2C630x90%2C600x90%2C580x90%2C570x90%2C468x60%2C320x50%2C300x50%2C300x75&ur=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pbv=8.27.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ccpa=1---&e_quantcastId=P0-219187005-1727702215188&e_pubcid=ac47d973-e264-4b59-b4d0-8404bfddc2d2	false	unknown
https://bh.contextweb.com/bh/rtset?pid=561516&ev=1&us_privacy=&rurl=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D5%26xu%3D%25%25VGUID%25%25	false	unknown
https://x.bidswitch.net/sync?dsp_id=70&user_id=6723054822523908865&ssp=aerserv	false	unknown
https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent=	false	unknown
https://ap.lijit.com/pixel?&gdpr=0&us_privacy=1---&redir=https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F3%2F25805%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D0%26gpp_sid%3D%26us_privacy%3D%26A%3Dd645fa9b-421a-454b-a837-735a1676a4cc%26bidder%3Dsovrn%26cbx%3DaHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzI3JnVpZD0%253D%26uid%3D%24UID	false	unknown
https://cs.ingage.tech/wdc/v1/syncPage/sharethrough?userId=e416d9de-73a3-41d6-875b-fcc8585a3224&to=https%3A%2F%2Fmatch.sharethrough.com%2Funiversal%2Fv1%3Fsupply_id%3Djc3Tkmr6	false	unknown
https://sync.go.sonobi.com/us.gif?nw=st&nuid=RO9hsv43VjtJegiqx3XZlggueyE	false	unknown
https://us.shb-sync.com/d3cf52c0-fa89-45fb-83fa-f14d2af39226.gif?puid=[UID]&redir=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadwmg%2F%5BUID%5D&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&ccpa=[CCPA]	false	unknown
https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	false	unknown
https://e3.adpushup.com/AdPushupFeedbackWebService/user/sync	false	unknown
https://ads.yieldmo.com/pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11584%26uid%3D$UID	false	unknown
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22263a4d8201c33695%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%2C%22264e18629fe93403%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%7D&ref=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&s=bb8830e3-a107-48fd-ac20-b8dca6ccbfae&pv=f3307e57-ba96-4e7a-b934-ceb4cf3d3d43&vp=desktop&lib_name=prebid&lib_v=8.45.0&us=5&iqid=null&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22multitran.com%22%2C%22keywords%22%3A%22Multitran%2Cdictionary%2Ctranslation%22%2C%22publisher%22%3A%7B%22domain%22%3A%22multitran.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9%22%7D%2C%22device%22%3A%7B%22w%22%3A1034%2C%22h%22%3A870%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpushup.com%22%2C%22sid%22%3A%2250b20a9bbdab7514c096e12d3b6f06d8%22%2C%22hp%22%3A1%7D%5D%7D&kw=Multitran%2Cdictionary%2Ctranslation&coppa=0	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3F	chromecache_548.9.dr	false		unknown
https://f.creativecdn.com	chromecache_519.9.dr	false		unknown
https://ids.ad.gt/api/v1/g_hosted?id=	chromecache_548.9.dr	false		unknown
https://ads.stickyadstv.com/user-matching?id=3663&gdpr=0&gdpr_consent=	chromecache_384.9.dr	false		unknown
https://c1.adform.net/serving/cookie/match?party=14&cid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&gdpr=0&	chromecache_408.9.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_431.9.dr, chromecache_409.9.dr	false	URL Reputation: safe	unknown
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODI0MTY1OC90LzA/url/https%3A%2F%2Fids.ad.gt%2Fapi%2Fv	chromecache_548.9.dr	false		unknown
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs	chromecache_384.9.dr	false		unknown
https://bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VG	chromecache_548.9.dr	false		unknown
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	chromecache_519.9.dr	false		unknown
http://mathiasbynens.be/	chromecache_510.9.dr	false	URL Reputation: safe	unknown
https://token.rubiconproject.com/token?pid=50242&puid=	chromecache_548.9.dr	false		unknown
https://onetag-sys.com/match/?int_id=180&uid=	chromecache_548.9.dr	false		unknown
https://github.com/krux/prescribe/	chromecache_385.9.dr, chromecache_505.9.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_510.9.dr	false		unknown
https://cdn.hadronid.net/hadron.js	chromecache_448.9.dr, chromecache_395.9.dr	false		unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_513.9.dr, chromecache_569.9.dr	false	URL Reputation: safe	unknown
https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel	chromecache_408.9.dr	false		unknown
https://cse.google.com/cse.js	chromecache_510.9.dr	false		unknown
https://cdn.ampproject.org/rtv/$	chromecache_510.9.dr	false		unknown
https://p.ad.gt/api/v1/p/777	chromecache_548.9.dr	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV84ZjkxYjNjMC00MjU2LTRhZjEtOTQyM	chromecache_565.9.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
37.252.171.149	unknown	European Union	29990	ASN-APPNEXUS	false
91.228.74.200	unknown	United Kingdom	27281	QUANTCASTUS	false
13.35.57.188	unknown	United States	16509	AMAZON-02US	false
185.89.210.153	unknown	Germany	29990	ASN-APPNEXUS	false
99.80.51.253	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.211.255.159	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
54.78.188.125	unknown	United States	16509	AMAZON-02US	false
52.210.91.197	unknown	United States	16509	AMAZON-02US	false
5.135.209.97	unknown	France	16276	OVHFR	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
34.254.143.3	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
18.66.122.92	unknown	United States	3	MIT-GATEWAYSUS	false
104.18.42.227	unknown	United States	13335	CLOUDFLARENETUS	false
104.22.53.173	cdn.hadronid.net	United States	13335	CLOUDFLARENETUS	false
52.50.91.153	tag.device9.com	United States	16509	AMAZON-02US	false
34.249.58.119	sync.springserve.com	United States	16509	AMAZON-02US	false
52.54.151.52	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
34.243.210.180	unknown	United States	16509	AMAZON-02US	false
3.121.102.242	unknown	United States	16509	AMAZON-02US	false
89.149.192.244	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
185.255.84.152	visitor-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
185.255.84.153	unknown	France	200271	IGUANE-FR	false
216.58.206.34	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
18.157.230.4	unknown	United States	16509	AMAZON-02US	false
54.194.52.65	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.89.210.180	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
162.19.138.120	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
185.89.210.46	unknown	Germany	29990	ASN-APPNEXUS	false
3.233.155.50	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
54.175.124.176	unknown	United States	14618	AMAZON-AESUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
178.250.1.7	ssp-sync.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
3.211.168.14	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
178.250.1.3	static.nl3.vip.prod.criteo.net	France	44788	ASN-CRITEO-EUROPEFR	false
91.227.144.188	sync.e-volution.ai	Kazakhstan	56786	RAGISS-NETRU	false
54.155.119.8	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.84.3.18	unknown	United States	14618	AMAZON-AESUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
51.75.86.98	unknown	France	16276	OVHFR	false
162.19.138.117	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
162.19.138.118	lb.eu-1-id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
52.58.104.46	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
91.228.74.244	unknown	United Kingdom	27281	QUANTCASTUS	false
104.18.37.193	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
103.67.200.72	1.cpm.ak-is2.net	United States	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
52.95.115.255	unknown	United States	16509	AMAZON-02US	false
8.18.47.7	m.deepintent.com	United States	32662	GMCRUS	false
18.66.102.121	unknown	United States	3	MIT-GATEWAYSUS	false
3.233.146.48	unknown	United States	14618	AMAZON-AESUS	false
162.19.138.83	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
54.74.215.235	unknown	United States	16509	AMAZON-02US	false
35.214.241.248	httplb-gce-nl-clickdistrict.clickdistrict.iponweb.net	United States	19527	GOOGLE-2US	false
3.124.64.248	eu-tlx.3lift.com	United States	16509	AMAZON-02US	false
69.166.1.9	unknown	United States	27630	AS-XFERNETUS	false
69.166.1.8	iad-2-apex.go.sonobi.com	United States	27630	AS-XFERNETUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
34.248.56.28	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
104.18.38.76	js-sec.indexww.com	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	ssum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
54.38.113.4	pixel.onaudience.com	France	16276	OVHFR	false
104.18.41.106	ex.ingage.tech	United States	13335	CLOUDFLARENETUS	false
3.123.214.38	1x1.a-mo.net	United States	16509	AMAZON-02US	false
34.149.66.130	http-intake.logs.us5.datadoghq.com	United States	2686	ATGS-MMD-ASUS	false
212.102.56.178	1792641740.rsc.cdn77.org	Italy	60068	CDN77GB	false
178.250.1.56	in-ftd-65.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
104.22.52.173	unknown	United States	13335	CLOUDFLARENETUS	false
18.245.31.106	public.servenobid.com	United States	16509	AMAZON-02US	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
52.214.158.174	unknown	United States	16509	AMAZON-02US	false
34.91.62.186	unknown	United States	15169	GOOGLEUS	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
44.242.111.32	unknown	United States	16509	AMAZON-02US	false
67.202.105.23	unknown	United States	32748	STEADFASTUS	false
3.71.149.231	unknown	United States	16509	AMAZON-02US	false
172.64.151.101	r.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
54.38.113.6	pixel-eu.onaudience.com	France	16276	OVHFR	false
67.202.105.33	unknown	United States	32748	STEADFASTUS	false
67.202.105.31	hde.tynt.com	United States	32748	STEADFASTUS	false
52.31.206.55	firewall-external-2134955858.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.240.155.116	sync.colossusssp.com	United States	7979	SERVERS-COMUS	false
35.208.249.213	trace.mediago.io	United States	19527	GOOGLE-2US	false
142.250.186.98	unknown	United States	15169	GOOGLEUS	false
35.186.193.173	cm.ctnsnet.com	United States	15169	GOOGLEUS	false
67.220.226.233	unknown	United States	18450	WEBNXUS	false
67.220.226.232	aax-eu.amazon-adsystem.com	United States	18450	WEBNXUS	false
185.89.210.90	unknown	Germany	29990	ASN-APPNEXUS	false
8.2.110.134	cs.krushmedia.com	United States	46636	NATCOWEBUS	false
34.250.159.220	unknown	United States	16509	AMAZON-02US	false
65.109.102.246	www.multitran.com	United States	11022	ALABANZA-BALTUS	false
18.245.31.123	config.aps.amazon-adsystem.com	United States	16509	AMAZON-02US	false
18.66.122.23	b.sharethrough.com	United States	3	MIT-GATEWAYSUS	false
18.195.125.95	unknown	United States	16509	AMAZON-02US	false
34.107.140.113	s2s.t13.io	United States	15169	GOOGLEUS	false
18.193.1.33	sonata-notifications.taptapnetworks.com	United States	16509	AMAZON-02US	false
54.77.143.176	unknown	United States	16509	AMAZON-02US	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522671
Start date and time:	2024-09-30 15:14:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx
Detection:	SUS
Classification:	sus25.phis.winXLSX@128/270@1185/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: https://www.multitran.ru/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Browse link: https://www.multitran.ru/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Scroll down Close Viewer Browse: https://www.multitran.com/m.exe?a=1&all=32 Override analysis time to -35743.6037 for current running targets taking high CPU consumption Override analysis time to -71487.2074 for current running targets taking high CPU consumption Override analysis time to -142974.4148 for current running targets taking high CPU consumption Override analysis time to -285948.8296 for current running targets taking high CPU consumption Override analysis time to -571897.6592 for current running targets taking high CPU consumption Override analysis time to -1143795.3184 for current running targets taking high CPU consumption Override analysis time to -2287590.6368 for current running targets taking high CPU consumption Override analysis time to -4575181.2736 for current running targets taking high CPU consumption Override analysis time to -9150362.5472 for current running targets taking high CPU consumption Override analysis time to -18300725.0944 for current running targets taking high CPU consumption Override analysis time to -36601450.1888 for current running targets taking high CPU consumption Override analysis time to -73202900.3776 for current running targets taking high CPU consumption Override analysis time to -146405800.7552 for current running targets taking high CPU consumption Override analysis time to -292811601.5104 for current running targets taking high CPU consumption Override analysis time to -585623203.0208 for current running targets taking high CPU consumption Override analysis time to -1171246406.0416 for current running targets taking high CPU consumption Override analysis time to -2342492812.0832 for current running targets taking high CPU consumption Override analysis time to -4684985624.1664 for current running targets taking high CPU consumption Override analysis time to -9369971248.3328 for current running targets taking high CPU consumption Override analysis time to -18739942496.6656 for current running targets taking high CPU consumption Override analysis time to -37479884993.3312 for current running targets taking high CPU consumption Override analysis time to -74959769986.6624 for current running targets taking high CPU consumption Override analysis time to -149919539973.325 for current running targets taking high CPU consumption Override analysis time to -299839079946.65 for current running targets taking high CPU consumption Override analysis time to -599678159893.299 for current running targets taking high CPU consumption Override analysis time to -1199356319786.6 for current running targets taking high CPU consumption Override analysis time to -2398712639573.2 for current running targets taking high CPU consumption Override analysis time to -4797425279146.39 for current running targets taking high CPU consumption Override analysis time to -9594850558292.79 for current running targets taking high CPU consumption Override analysis time to -19189701116585.6 for current running targets taking high CPU consumption Override analysis time to -38379402233171.2 for current running targets taking high CPU consumption Override analysis time to -76758804466342.3 for current running targets taking high CPU consumption Override analysis time to -153517608932685 for current running targets taking high CPU consumption Override analysis time to -307035217865369 for current running targets taking high CPU consumption Override analysis time to -614070435730739 for current running targets taking high CPU consumption Override analysis time to -1.22814087146148e+15 for current running targets taking high CPU consumption Override analysis time to -2.45628174292295e+15 for current running targets taking high CPU consumption Override analysis time to -4.91256348584591e+15 for current running targets taking high CPU consumption Override analysis time to -9.82512697169182e+15 for current running targets taking high CPU consumption

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, ShellExperienceHost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 184.28.90.27, 52.109.76.243, 52.113.194.132, 199.232.210.172, 192.229.221.95, 104.208.16.91, 142.250.184.195, 142.250.185.206, 173.194.76.84, 34.104.35.123, 142.250.186.66, 172.217.16.200, 142.250.185.74, 142.250.184.234, 172.217.18.10, 142.250.185.138, 142.250.185.234, 142.250.185.106, 142.250.186.170, 142.250.181.234, 142.250.186.42, 142.250.185.202, 142.250.184.202, 216.58.206.74, 216.58.212.170, 142.250.185.170, 172.217.16.202, 216.58.206.42, 172.217.16.130, 142.250.185.232, 23.215.23.172, 172.67.23.234, 104.22.4.69, 104.22.5.69, 63.215.202.178, 63.215.202.146, 89.207.16.210, 64.158.223.146, 69.173.144.137, 69.173.156.139, 142.250.186.106, 88.221.169.246, 184.28.88.244, 69.173.144.165, 69.173.144.139, 69.173.144.138, 104.102.34.86, 89.207.16.201, 20.33.59.55, 193.0.160.130, 151.101.2.49, 151.101.194.49, 151.101.66.49, 151.101.130.49, 37.157.4.29, 37.157.5.133, 37.157.4.28, 37.157.5.84, 37.157.5.132, 37.157.5.87, 154.54.250.80, 154.57.158.116, 69.173.
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, onedscolprdwus11.westus.cloudapp.azure.com, clientservices.googleapis.com, seg.ad.gt.cdn.cloudflare.net, fs-wildcard.microsoft.com.edgekey.net, track-eu.adformnet.akadns.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, rtb-csync-geo.usersync-prod-sas.akadns.net, ukw-azsc-config.officeapps.live.com, pixel-us-east.rubiconproject.net.akadns.net, a-emea.rfihub.com.akadns.net, pagead2.googlesyndication.com, edgedl.me.gvt1.com, eus.rubiconproject.com.edgekey.net, e6603.g.akamaiedge.net, g11v.fwgtm.akadns.net, osiprod-neu-buff-azsc-000.northeurope.cloudapp.azure.com, ecs.office.trafficmanager.net, clients.l.google.com, convex-rr.global.dual.dotomi.weighted.com.akadns.net, europe.configsvc1.live.com.akadns.net, h2.shared.global.fastly.net, wildcard.moatads.com.edgekey.net, track.adformnet.akadns.net, tagged-by.rubiconproject.net.akadns.net, neu-azsc-000.roaming.officeapps.live.com, onedscolprdneu14.northeurope.cloudapp.a
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
09:16:36	API Interceptor	21725982x Sleep call for process: splwow64.exe modified

LLM Input / Output

Input	Output
URL: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Model: jbxai

URL: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Model: jbxai

URL: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Model: jbxai

URL: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Model: jbxai

URL: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Model: jbxai

URL: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Model: jbxai

URL: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Model: jbxai

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
37.252.171.149	https://ole798.com/	Get hash	malicious	Unknown	Browse
	http://gembuulogin.gitbook.io/	Get hash	malicious	Unknown	Browse
	http://loginmitamasks.gitbook.io/	Get hash	malicious	Unknown	Browse
	https://coinbassprolhgiu.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse
	https://exudus-walet.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse
	https://matamsuk-logii.gitbook.io/	Get hash	malicious	Unknown	Browse
	https://att-service-106132.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://mail-100080.weeblysite.com/	Get hash	malicious	Unknown	Browse
	https://metiamasklogin.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse
	https://shaw-103479.weeblysite.com/	Get hash	malicious	Unknown	Browse
91.228.74.200	https://att-100184.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://att-service-106132.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://shaw-101329.weeblysite.com/	Get hash	malicious	Unknown	Browse
	https://juno-message-center-101610.weeblysite.com/	Get hash	malicious	Unknown	Browse
	https://webmail-102270.weeblysite.com/	Get hash	malicious	Unknown	Browse
	https://juno-108647.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://mail-100080.weeblysite.com/	Get hash	malicious	Unknown	Browse
	https://netzero-108097.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://att-service-101284.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://bt-102116.weeblysite.com/	Get hash	malicious	Unknown	Browse
13.35.57.188	http://mekut.fastollubricant.com/4rZETa14454zHTn1305reeedkuert14478PEZGJATJZCYVSDF192698UKLW17132b17	Get hash	malicious	Unknown	Browse
	AGREEMENT AND APPROVAL REPORT DIAMOND TRAILER 2024-502244_6.5.248.pdf	Get hash	malicious	Unknown	Browse
	https://shorturl.at/c9o0a	Get hash	malicious	Unknown	Browse
185.89.210.153	https://ole798.com/	Get hash	malicious	Unknown	Browse
	https://krakennylog.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse
	https://krakeanlogis.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse
	http://metauscvxlkogimens.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse
	https://koinbesepro-logon.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse
	https://gumenizlogin.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse
	https://metamasunklogin.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse
	https://eastlink-100406.weeblysite.com/	Get hash	malicious	Unknown	Browse
	https://btinternet-109378.weeblysite.com/	Get hash	malicious	Unknown	Browse
	https://kralkenloges.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ssum.casalemedia.com	https://en.softonic.com	Get hash	malicious	Unknown	Browse	104.18.36.155
	http://activa1dina.w3spaces.com/	Get hash	malicious	Unknown	Browse	104.18.36.155
	https://solanadefimainnet.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	172.64.151.101
	http://currently5678.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.36.155
	https://content.app-us1.com/kd4oo8/2024/09/26/7d3453ba-0845-4df1-80a7-42d15e30f736.pdf	Get hash	malicious	HTMLPhisher	Browse	172.64.151.101
	https://is.gd/fxcRir	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://cancelar-plan-pr0teccion1.w3spaces.com/	Get hash	malicious	Unknown	Browse	172.64.151.101
	http://rewardsforyoutoclaim.pages.dev/	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://aac4b0887827b3598989c48a201d0420.crimachado.com.br/wehrgiwfbfeifef/djbfhokefbwuwrjow/djhfeokhrwihfekljd/bnpheWVkaUBzdGMuY29tLnNh	Get hash	malicious	HTMLPhisher	Browse	104.18.36.155
	https://sucursal-virtual03.w3spaces.com/	Get hash	malicious	Unknown	Browse	172.64.151.101
securepubads.g.doubleclick.net	https://en.softonic.com	Get hash	malicious	Unknown	Browse	172.217.18.2
	https://attofficialvalidation.weebly.com/	Get hash	malicious	Unknown	Browse	142.250.185.130
	https://currently8220.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	142.250.186.162
	http://www.goo.su/c1Rnox/	Get hash	malicious	Unknown	Browse	142.250.184.194
	http://s9-11-t-next-express-4vnjov3z4-no-country-c11-20-t-javareact.vercel.app/	Get hash	malicious	Unknown	Browse	142.250.181.226
	https://learn-en-trezr.github.io/us/	Get hash	malicious	HTMLPhisher	Browse	172.217.18.2
	http://yusdydsfjuuxx.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	142.250.186.66
	http://loginscrecghjk.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	142.250.186.130
	http://currentlyatt57update.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	142.250.185.130
	http://activa1dina.w3spaces.com/	Get hash	malicious	Unknown	Browse	142.250.186.66
global.px.quantserve.com	https://en.softonic.com	Get hash	malicious	Unknown	Browse	91.228.74.244
	http://home-109919.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	http://btinternet-103485.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://btinternet-102307.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://netzero-webmail-106421.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.244
	https://att-100184.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://att-service-106132.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.200
	https://shaw-101329.weeblysite.com/	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://btinternet-107377.weeblysite.com/	Get hash	malicious	Unknown	Browse	91.228.74.166
	https://juno-message-center-101610.weeblysite.com/	Get hash	malicious	Unknown	Browse	91.228.74.244
d-ams1.turn.com	https://en.softonic.com	Get hash	malicious	Unknown	Browse	46.228.164.13
	https://ole798.com/	Get hash	malicious	Unknown	Browse	46.228.164.13
	https://www.iphone.trustefy.org/	Get hash	malicious	Unknown	Browse	46.228.164.13
	http://en-alldappfix.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	46.228.164.13
	http://activa1dina.w3spaces.com/	Get hash	malicious	Unknown	Browse	46.228.164.13
	https://solanadefimainnet.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	46.228.164.13
	http://nodechain-launchpadlpx.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	46.228.164.13
	http://beautiful-croquembouche-9e3d8d.netlify.app/	Get hash	malicious	HTMLPhisher	Browse	46.228.164.13
	http://currently5678.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	46.228.164.13
	https://content.app-us1.com/kd4oo8/2024/09/26/7d3453ba-0845-4df1-80a7-42d15e30f736.pdf	Get hash	malicious	HTMLPhisher	Browse	46.228.164.13

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	https://tracking.groovesell.com:443/t/1c336171327d66d10a047ef8cbabb880	Get hash	malicious	Unknown	Browse	52.222.232.30
	http://email.app.loyalty.appstle.com/c/eJwczE2uLBEUAODVMHty6vgfGLxJ7YNCldsaadKJ3d_kbuCLDpJVWtPkDo1aHlqApo_j-QrGx0NGE5VRkkMwCbUEaa334GlxCCjAogErldDsyjIGyVXM-UCInAjwY7Dat69rMz_GXDWxq79pdc9aYxL-n-BJ8KylvUpjoXSC5_2T2iwlljsRPOnHhc--S1VIBHzvyVp-sdbpchGMyvkfJvbe8-mj5P2nfx3-BgAA__-UbkEq	Get hash	malicious	Unknown	Browse	108.156.60.3
	https://ck.storematch.jp/bc?d=11044D9580EY4W1C2FD019VB3VD27BCW862C0351F9E0EA8-cdlaq4&B=a4f71fd1c235a114f94297e8a0a36c6e&sc_i=shp_pc_promo_mdRMBP_disp_mcad&rd=//interglobalcargoexpress.com/yuuuii#aW5mb0B2b3NzbG9oLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	52.194.38.7
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	3.160.150.29
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	3.160.150.29
	https://www.netigate.se/a/s.aspx?s=1236726X450166796X50614	Get hash	malicious	Unknown	Browse	108.138.7.21
	https://linke.to/pkmlogistics	Get hash	malicious	Unknown	Browse	108.138.26.113
	cron.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	Tonincasa Updated Employee sheet .pdf	Get hash	malicious	HTMLPhisher	Browse	52.18.22.232
	JavaSDK.exe	Get hash	malicious	ZTrat	Browse	35.157.111.131
ASN-APPNEXUS	Tonincasa Updated Employee sheet .pdf	Get hash	malicious	HTMLPhisher	Browse	185.89.210.244
	https://ole798.com/	Get hash	malicious	Unknown	Browse	185.89.210.212
	https://www.iphone.trustefy.org/	Get hash	malicious	Unknown	Browse	185.89.210.212
	https://attofficialvalidation.weebly.com/	Get hash	malicious	Unknown	Browse	185.89.211.84
	http://geimuinislonggu.gitbook.io/	Get hash	malicious	Unknown	Browse	37.252.171.21
	https://coinnbaeeprologin.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse	185.89.210.122
	https://elderly-same-archeology.glitch.me/public/nfcu703553.HTML	Get hash	malicious	HTMLPhisher	Browse	185.89.210.244
	https://basepro-login.gitbook.io/login	Get hash	malicious	HTMLPhisher	Browse	185.89.210.90
	http://gembuulogin.gitbook.io/	Get hash	malicious	Unknown	Browse	37.252.172.123
	https://gemmni-lgi.godaddysites.com/	Get hash	malicious	HTMLPhisher	Browse	37.252.171.53
QUANTCASTUS	https://en.softonic.com	Get hash	malicious	Unknown	Browse	91.228.74.244
	http://home-109919.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.244
	http://btinternet-103485.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://btinternet-102307.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://netzero-webmail-106421.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://att-100184.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.244
	https://att-service-106132.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.244
	https://shaw-101329.weeblysite.com/	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://btinternet-107377.weeblysite.com/	Get hash	malicious	Unknown	Browse	91.228.74.244
	https://juno-message-center-101610.weeblysite.com/	Get hash	malicious	Unknown	Browse	91.228.74.244
ASN-APPNEXUS	Tonincasa Updated Employee sheet .pdf	Get hash	malicious	HTMLPhisher	Browse	185.89.210.244
	https://ole798.com/	Get hash	malicious	Unknown	Browse	185.89.210.212
	https://www.iphone.trustefy.org/	Get hash	malicious	Unknown	Browse	185.89.210.212
	https://attofficialvalidation.weebly.com/	Get hash	malicious	Unknown	Browse	185.89.211.84
	http://geimuinislonggu.gitbook.io/	Get hash	malicious	Unknown	Browse	37.252.171.21
	https://coinnbaeeprologin.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse	185.89.210.122
	https://elderly-same-archeology.glitch.me/public/nfcu703553.HTML	Get hash	malicious	HTMLPhisher	Browse	185.89.210.244
	https://basepro-login.gitbook.io/login	Get hash	malicious	HTMLPhisher	Browse	185.89.210.90
	http://gembuulogin.gitbook.io/	Get hash	malicious	Unknown	Browse	37.252.172.123
	https://gemmni-lgi.godaddysites.com/	Get hash	malicious	HTMLPhisher	Browse	37.252.171.53

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://timetraveltv.com/actions/cart_update.php?currency=GBP&return_url=https://blog.acelyaokcu.com/m/?c3Y9bzM2NV8xX29uZSZyYW5kPVdrcFNRMHM9JnVpZD1VU0VSMDkwOTIwMjRVMTIwOTA5MDE=N0123N%5BEMAIL	Get hash	malicious	Unknown	Browse	40.126.31.67 20.114.59.183
	SCAN_Client_No_XP9739270128398468932393.pdf	Get hash	malicious	HTMLPhisher	Browse	40.126.31.67 20.114.59.183
	https://cganet.com/	Get hash	malicious	Unknown	Browse	40.126.31.67 20.114.59.183
	https://ck.storematch.jp/bc?d=11044D9580EY4W1C2FD019VB3VD27BCW862C0351F9E0EA8-cdlaq4&B=a4f71fd1c235a114f94297e8a0a36c6e&sc_i=shp_pc_promo_mdRMBP_disp_mcad&rd=//interglobalcargoexpress.com/yuuuii#aW5mb0B2b3NzbG9oLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	40.126.31.67 20.114.59.183
	https://www.netigate.se/a/s.aspx?s=1236726X450166796X50614	Get hash	malicious	Unknown	Browse	40.126.31.67 20.114.59.183
	https://linke.to/pkmlogistics	Get hash	malicious	Unknown	Browse	40.126.31.67 20.114.59.183
	https://metrics.send.hotmart.com/v2/events/click/64ec6af4-7b81-4abf-9e97-fe7d70d45255?d=1nFwG70sgZqlXE	Get hash	malicious	Unknown	Browse	40.126.31.67 20.114.59.183
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/telop.zip	Get hash	malicious	Unknown	Browse	40.126.31.67 20.114.59.183
	Tonincasa Updated Employee sheet .pdf	Get hash	malicious	HTMLPhisher	Browse	40.126.31.67 20.114.59.183
	http://langtonskilkenny.com/rrUrhf	Get hash	malicious	Unknown	Browse	40.126.31.67 20.114.59.183
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.60
	PO554830092024.xls	Get hash	malicious	Unknown	Browse	13.107.246.60
	PI#0034250924.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.60
	Transmission Cost Database 2.0.xlsb	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/peltgon.zip	Get hash	malicious	LummaC	Browse	13.107.246.60

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	338
Entropy (8bit):	3.4657220944431417
Encrypted:	false
SSDEEP:	6:kKcMG48vllc8JFN+SkQlPlEGYRMY9z+s3Ql2DUevat:UMG4CllkkPlE99SCQl2DUevat
MD5:	5C5DAB923D9A5E255E08E01E22EB2828
SHA1:	72A4381A89E8045BAD667BFEC0A306E81F322346
SHA-256:	769FC41BD128DBCEFE0C733DACC88B7BE59D104E818949DB94C3A5537EDE4187
SHA-512:	AB0783769028349754386294DE12804B1B842F9FD8570AA1008CD115246064961DDF07A29F4D17DE47EC60B389EC936A82DB60B8B4AEE3F3938130F46DDA83AE
Malicious:	false
Preview:	p...... .........^;.:...(................................................M.@... .........p.........$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.d.i.s.a.l.l.o.w.e.d.c.e.r.t.s.t.l...c.a.b...".7.4.6.7.8.7.a.3.f.0.d.9.1.:.0."...

C:\Users\user\Desktop\D9E40000

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	662066
Entropy (8bit):	7.895385441684569
Encrypted:	false
SSDEEP:	12288:6Mr4ss9hWOfqdnnnnnnnO7/UnnnnnnndnnnnnnnHIK8whhb2hm4zG/9dI:6W4ss9hna6A/9dI
MD5:	EBDC0CDACA87ED0421CDCFEA55342E09
SHA1:	40220C6912E250895AB639A2ABE9FFA8532E30C7
SHA-256:	3FD468D3A617BC4CFF16C0712CD0FAE064D8EACAA2F7C589DA0FF80563FBC271
SHA-512:	7BF5026837CAAF0801DD364865D802EC7F8C9925AF9541396C4A91AD3B8135C5301B63456022E7E4E8095996E45CBD0F82A40CC72B468D95B61118E9EC739F0F
Malicious:	false
Preview:	PK..........!.. .T............[Content_Types].xml ...(....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................QO.0...'.;D~....165.........Xul.w@.......**-/......9R.?=[u...L..FM.0.h]X4.....TU..,...Qk$u6..az.NH.T.jT..kM.........c..1/t.......D.......P........J^?......}.U. %.....`.2........v"]S...ZD.\|....\|....)..gFO..>uUKe...%.$.......S.o...Y..!./.w...>..M..z..GS.....g.-.e3.r........q4.....8....p.....@8N...m .....a........"...I..H...Et.s......^.........2..\|...m..M.sL$.'....Y...%....7i..q.....g..?zKb.....#1..OK...

C:\Users\user\Desktop\D9E40000:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\Desktop\Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	662066
Entropy (8bit):	7.895385441684569
Encrypted:	false
SSDEEP:	12288:6Mr4ss9hWOfqdnnnnnnnO7/UnnnnnnndnnnnnnnHIK8whhb2hm4zG/9dI:6W4ss9hna6A/9dI
MD5:	EBDC0CDACA87ED0421CDCFEA55342E09
SHA1:	40220C6912E250895AB639A2ABE9FFA8532E30C7
SHA-256:	3FD468D3A617BC4CFF16C0712CD0FAE064D8EACAA2F7C589DA0FF80563FBC271
SHA-512:	7BF5026837CAAF0801DD364865D802EC7F8C9925AF9541396C4A91AD3B8135C5301B63456022E7E4E8095996E45CBD0F82A40CC72B468D95B61118E9EC739F0F
Malicious:	false
Preview:	PK..........!.. .T............[Content_Types].xml ...(....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................QO.0...'.;D~....165.........Xul.w@.......**-/......9R.?=[u...L..FM.0.h]X4.....TU..,...Qk$u6..az.NH.T.jT..kM.........c..1/t.......D.......P........J^?......}.U. %.....`.2........v"]S...ZD.\|....\|....)..gFO..>uUKe...%.$.......S.o...Y..!./.w...>..M..z..GS.....g.-.e3.r........q4.....8....p.....@8N...m .....a........"...I..H...Et.s......^.........2..\|...m..M.sL$.'....Y...%....7i..q.....g..?zKb.....#1..OK...

C:\Users\user\Desktop\~$Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:KVC+cAmltV:KVC+cR
MD5:	9C7132B2A8CABF27097749F4D8447635
SHA1:	71D7F78718A7AFC3EAB22ED395321F6CBE2F9899
SHA-256:	7029AE5479F0CD98D892F570A22B2AE8302747DCFF3465B2DE64D974AE815A83
SHA-512:	333AC8A4987CC7DF5981AE81238A77D123996DB2C4C97053E8BD2048A64FDCF33E1245DEE6839358161F6B5EEA6BFD8D2358BC4A9188D786295C22F79E2D635E
Malicious:	false
Preview:	.user ..j.o.n.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Non-ISO extended-ASCII text, with very long lines (4592)
Category:	dropped
Size (bytes):	40317
Entropy (8bit):	5.001990067111955
Encrypted:	false
SSDEEP:	768:er9pCbRGRW9lv5Cs8TQ9fQB1kuqYfFoCLjp7PkRCO3ra//HxPTmyPgXf61TFGhGG:eGOW9lvYTQ94bnF99PXO3av5TmU1TFGP
MD5:	D27FE1BD744910C43AE7A66AAAED955C
SHA1:	97699CE77198A4CC58B24C65F8DD176957B29B9D
SHA-256:	53C62195D3857F10E9C8347BD85F0CFE8256E4652D7AA0E1A8E3E6933580649F
SHA-512:	0E14D1DDAC55185B3CA07427AFADF421FE6FA44A0F11E4B083F03B836E07926123B126A0E4D211851B4EB749C26A74669C96B030C35A1656720BE500866911AA
Malicious:	false
Preview:	function OOD(){this.OD=new Array();}OOD.prototype.O0Q=function(O0O){this.OD=O0O;};OOD.prototype.getMatches=function(str,O0O,QO){for(var i=0;i<this.OD.length;i++){O0O.push(this.OD[i]);}};function OO(OD,D,Q,QO){this.D=D;this.Q=Q;this.Q.onblur=this.Q0;this.QO=QO;this.OQ=-1;this.OOQ=new OOD();this.OOQ.O0Q(OD);};OO.prototype.assignEvents=function(){if(!O0D){this.D.onkeyup=this.keyUp;this.D.onkeydown=this.keyDown;this.D.OO=this;this.D.onblur=this.Q0;}};OO.prototype.unassignEvents=function(){this.D.onkeyup=null;this.D.onkeydown=null;this.D.OO=null;this.D.onblur=null;};OO.prototype.Q0=function(){try{complete.Q.style.visibility="hidden";}catch(e){}};OO.prototype.selectText=function(QD,O00){if(this.D.createTextRange){var QQ=this.D.createTextRange();QQ.moveStart("character",QD);QQ.moveEnd("character",O00-this.D.value.length);QQ.select();}else if(this.D.setSelectionRange){this.D.setSelectionRange(QD,O00);}this.D.focus();};OO.prototype.textComplete=function(sFirstMatch){if(this.D.createTextRange\|\|t

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	28178
Entropy (8bit):	5.4321866714906415
Encrypted:	false
SSDEEP:	768:yv9vAv9vIvDvHvzHFDfnmtpAtJBkkhDlZRkIdc+kOKVL4QiYvEf+vwvdvmv0vcv5:0E
MD5:	D253F46DD859DFE79FE365993AA2765B
SHA1:	53D211429ACD699E4B9C59BE93136410651346FE
SHA-256:	AFDD76F6919DC340E54A1045E6F4A8FC840A922C8EFD1D07CC5BCDF448373A66
SHA-512:	E3CFE209803E6F35AC18AB948940D398DFEB8354478A3F2F73C15DAF8FD5740B74046F907305EFC9F3B8AA1988F551F6389E5C15FBAAC8A1D97F04C64B906D9C
Malicious:	false
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://font

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.543952219284333
Encrypted:	false
SSDEEP:	12:FVChpMu8jy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcQ:qhpKuo0XxDuLHeOWXG4OZ7DAJuLHenXA
MD5:	706BD34581DD47CB205C9FF4A828E7CA
SHA1:	BE1B997643000EB8A79B77F93FCB3B267E70AF15
SHA-256:	9284D948E86D2E99F31483B5F4B3A4C3E65E0A6FBCA9A8D2DB8C6095F82AC3F5
SHA-512:	DCAFCDEC569747F0CD635661DD943173720B20C725B7E771CFD2BDCB8E989795A79C3B493955383AEE149DCDCF30444CD4AF68802AFE631B769EED0670E04AF6
Malicious:	false
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 39 x 43
Category:	dropped
Size (bytes):	2432
Entropy (8bit):	7.431091411062187
Encrypted:	false
SSDEEP:	48:CaRS1gtRn5cbZryF6SCn4ufBPXR1BWrULxymgCVrGRTAv:y1Y5c9rce4upp1BKULUmHVrv
MD5:	B57FA36366F0FD7C181823B22692AAED
SHA1:	9539AB6CF26C4DA5F4EDBB4FB6673ADE2CEFBA6F
SHA-256:	84EF44DE31F650C728008AAF8E391A55D127A089C9FB13F82BA1FAD93FF947C1
SHA-512:	CD27F7A7B03A340F2EC4AAF7FAC33E0AA0CFD15C28EEE5BBA47EEC041BDC531CE72BC5766B34F20C6D987FFD5CFEEEDAB98EB28BEC9DB9B1054BCCC3FDB9C720
Malicious:	false
Preview:	GIF89a'.+....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................,....'.+.........>i..1..K.i..D....#n....n..y.............lW.h.t.I.n].cs..3...U.z..F..~........{..%.ef..a3....8,..i".lM4~.n..L.jk..+g...W........<.XqkgLS]R.~qaF..0~P..+...:..S..FF..t$.qk*.UGV..M.....c`.By.T.P

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27104)
Category:	dropped
Size (bytes):	43638
Entropy (8bit):	5.361148094990428
Encrypted:	false
SSDEEP:	768:af8/g/Nl1s/stRfo0B2FwyNxdYKriRzCsvFvCuQ:afUoNlM0fYrDuCuQ
MD5:	C4F8F606E8D26E30B45D83965E4C0905
SHA1:	F791F5B936EAC352D7F483A12450E6B9DD064772
SHA-256:	27A7C1F2F2C7018314D78B422F71E0EDA4F6904F261E36D93956F65E308D82EA
SHA-512:	11F3BB13686F77E0D40829826CC45A1E456978FFFCB0677FA16F1E1AE9C2A1558A2048FF376D9B486B5263D8572367FF2031F9A07F3DCAB152A69FF15D98EAC2
Malicious:	false
Preview:	var comments = 'User-Sync: generated: 2024-09-25 20:33:51 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":0,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1",

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.561814811046517
Encrypted:	false
SSDEEP:	3:YM2zWXJvN3VuLAx6XJJRMLkJ5fMYn:YM2khkAyJJRMLA2Y
MD5:	7016DA56C324CA7D24D38F363FB98B3C
SHA1:	DF7BBC4D5D99C9EFECC2885523BC53176AD1354A
SHA-256:	BA8451F39B0887DFFF955335E5BF9007D350BF5C2D9F5EF697E07275ECBC331A
SHA-512:	89849DA0DE17EE15FE25B99B5D697C100149BDEF67436817AD1BA1BFB8B478D6079A929EBD8E899F75A425B97FC8DE5248800EFBABDC06562B0A9CD4B490CE84
Malicious:	false
Preview:	{"ingestUrl":"https://api.id5-sync.com/analytics/event","sampling":10}

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31483)
Category:	dropped
Size (bytes):	41101
Entropy (8bit):	5.487016788603861
Encrypted:	false
SSDEEP:	768:BJ0k2X1s0isUbIzsyar47nDkVT6gAGRqopvKteMrTIbONJQzjIGLus403BRMP+s/:BSlsXsU8zsyOVT6gWPwLuOK
MD5:	9CCBE796744FE78E1F7B5D86ADDD6EFE
SHA1:	A7DB9307AB1808570075352235E6F659CD182C7E
SHA-256:	C870F508B3B2A5EEB7C8BFCF0BF7CAFDA0322B7D2EADF5A0DAD363C9EAFA2ED6
SHA-512:	D0D719C70906325F01A7210CC4EDCEFB3F940D3BD6AF976CF7868CE05C739AA3AB4CD6BC9BF8412EA38A8B33176EF0AA7CA5865F29F88F8A886334EAEA0B0AE6
Malicious:	false
Preview:	(()=>{(()=>{var It={3156:function(T,L,_){(function(V,O){T.exports=L=O()})(this,function(){var V=V\|\|function(O,M){var P;if(typeof window!="undefined"&&window.crypto&&(P=window.crypto),typeof self!="undefined"&&self.crypto&&(P=self.crypto),typeof globalThis!="undefined"&&globalThis.crypto&&(P=globalThis.crypto),!P&&typeof window!="undefined"&&window.msCrypto&&(P=window.msCrypto),!P&&typeof _.g!="undefined"&&_.g.crypto&&(P=_.g.crypto),!P)try{P=_(477)}catch(o){}var D=function(){if(P){if(typeof P.getRandomValues=="function")try{return P.getRandomValues(new Uint32Array(1))[0]}catch(o){}if(typeof P.randomBytes=="function")try{return P.randomBytes(4).readInt32LE()}catch(o){}}throw new Error("Native crypto module could not be used to get secure random number.")},N=Object.create\|\|function(){function o(){}return function(p){var g;return o.prototype=p,g=new o,o.prototype=null,g}}(),Q={},Y=Q.lib={},J=Y.Base=function(){return{extend:function(o){var p=N(this);return o&&p.mixIn(o),(!p.hasOwnProperty("

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4013)
Category:	dropped
Size (bytes):	155391
Entropy (8bit):	5.602859632393978
Encrypted:	false
SSDEEP:	3072:PoxdQ7J+uqzVSMTu4jtJb+bVDiYKedaqB+mfT7lH6rKmC+PXCD0ZfRAAyaR4:PoxdQ8uqzVSMTu4jtJKBDiYKeEqB5fT9
MD5:	AB15E22B72CA0C486E72179F558C66EB
SHA1:	DDC387844D14B25DF3BA06828FCD66D29FF993B4
SHA-256:	05F2E2C9A8DF0693E60B8B220FD54689D1601C160F2615DF715DA69E37F240B2
SHA-512:	A91DAEE471BCCCF4880F76A6608B7BF74FDAB0D95D2D77B48425B4BF1FC3DF980FBAE8E62376670C7825891C3888B38A1B832E3FBBD946069400947F837BED77
Malicious:	false
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	270674
Entropy (8bit):	5.573388383636026
Encrypted:	false
SSDEEP:	6144:nRqpmFU7Plq04d7G3BsEemveDNDH0fxnQS:RTW7PQnhift
MD5:	39A86C6B75553545F7A6DE6A92EA331B
SHA1:	ABFBA8AD074486FBFA14EA6A983B3B9F05BB48F5
SHA-256:	AC048A5220F23198B065311F499F77EDBAE04D3E7562EF4DB3996A83A6E4A494
SHA-512:	D10E7F06CDA3D96D49EEB4D3E89F7A0C69317EC30A5F94C4E8E350906E737A55C7F22ADCC0C587D94B51D6CAD892934495D3A717F7C32FE6B947F2AB0AB5E2C6
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":11},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","multitran\\.com"],"tag_id":13},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":14},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":15},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","v

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	450
Entropy (8bit):	5.207888077657653
Encrypted:	false
SSDEEP:	12:oZu3b8RxDSirWc/oQKXmnDRWUkEUy2+rmrKRdlt:YuUSs9cX2RWUnUy24/
MD5:	91610E5FC73DB28B186931B3ED4DDD11
SHA1:	6CAA513628BACDD40F970A22A08CCAB4E5E8FFB9
SHA-256:	26914004D3A8D5DDDE2202B642D7936EB61C9F195B5CD3C87E44EF8AD4D57C16
SHA-512:	90FDBCA3B4B197A09FD83FA11DC81636DE5A4888F0BE18B62A93916316D870DBBC4C3CEEC09CF86F5D99B539683DCAC09C1BF4759842929E8FA88B401E484A54
Malicious:	false
Preview:	window._qevents = window._qevents \|\| [];.(function() {.var elem = document.createElement('script');.elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";.elem.async = true;.elem.type = "text/javascript";.var scpt = document.getElementsByTagName('script')[0];.scpt.parentNode.insertBefore(elem, scpt);.})();.window._qevents.push({.qacct:"p-54Nt-1NAaEEe0",.uid:"__INSERT_EMAIL_HERE__".});.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	dropped
Size (bytes):	2033
Entropy (8bit):	4.604649200608636
Encrypted:	false
SSDEEP:	12:PGfSd2wM5zWRekI50L04X0W9lDL5xLf/o5TmQy4Ws5ec9mg5iMGgvWvxtLRFuG9g:OfHjK8ttfFzuaC7Ws6NJ
MD5:	50ED6EEB08C43DB6DC32BC0AC5677AC3
SHA1:	0B816B75676DAE2D72D273435550237A9E63B48B
SHA-256:	9639E0D06615990D857BF9BC3E2D81195DD2FA86DEC0619421A707B08725548E
SHA-512:	3F200FAEEA5BCCFBD0DCC1597179188AA06F0D09715C4B7F2C2C0EC4917C05FB6647795535DE1CB2B5723A715474E4F5FFF54F911959B52E50862662B862D161
Malicious:	false
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-TARGETDURATION:5.#EXT-X-MEDIA-SEQUENCE:1.#EXT-X-PLAYLIST-TYPE:VOD.#EXTINF:4.053,.main_00001.aac.#EXTINF:3.989,.main_00002.aac.#EXTINF:4.011,.main_00003.aac.#EXTINF:3.989,.main_00004.aac.#EXTINF:4.011,.main_00005.aac.#EXTINF:3.989,.main_00006.aac.#EXTINF:4.011,.main_00007.aac.#EXTINF:3.989,.main_00008.aac.#EXTINF:4.011,.main_00009.aac.#EXTINF:3.989,.main_00010.aac.#EXTINF:4.011,.main_00011.aac.#EXTINF:3.989,.main_00012.aac.#EXTINF:4.011,.main_00013.aac.#EXTINF:3.989,.main_00014.aac.#EXTINF:4.011,.main_00015.aac.#EXTINF:3.989,.main_00016.aac.#EXTINF:4.011,.main_00017.aac.#EXTINF:3.989,.main_00018.aac.#EXTINF:4.011,.main_00019.aac.#EXTINF:3.989,.main_00020.aac.#EXTINF:4.011,.main_00021.aac.#EXTINF:3.989,.main_00022.aac.#EXTINF:4.011,.main_00023.aac.#EXTINF:3.989,.main_00024.aac.#EXTINF:4.011,.main_00025.aac.#EXTINF:3.989,.main_00026.aac.#EXTINF:4.011,.main_00027.aac.#EXTINF:3.989,.main_00028.aac.#EXTINF:4.011,.main_00029.aac.#EXTINF:3.989,.main_00030.aac.#E

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 252 x 90
Category:	dropped
Size (bytes):	3833
Entropy (8bit):	7.7724697956929445
Encrypted:	false
SSDEEP:	96:yKQedWJEGxrJQu6BjEI2l/BftikDgDOTq:7ZkxKtdM5l/DDTq
MD5:	9C5702323DA8F5210F51640D3ABD722B
SHA1:	9DFC5A073602830EC61224E77CC24F0C0C2EC4D2
SHA-256:	F85AF3C9B4562F23DCF1440406115B61D7E016D8E1D925F81DCC9A65B7791323
SHA-512:	8F4102B8F394052FE7CDBB6C04A36DDFB4BEF6FB3BB4CB6C5018674FB45E5983C8DD419CD0B2F500E7AC0FB2CE8C36DB97C6D3FB05BE24DD531AEA8D279FE615
Malicious:	false
Preview:	GIF89a..Z.............645SQRpno...........A..U..\|...m..l..k..r..r..u. .."..#..$.....0..0..0..6..5..9..=..@..@..@..@..F..E..H..L..M..]..`..`..f..m..p..w...............................u..v..v..t..s..q..p..o..y..s..w..z..y..r..z..\|..x..}..~..\|..{.....y.....\|....... ..!..&..0..@..@..O..Q..P..P..Z..`..`..j..p..t................................................................~..}..{..y..z..x..}.....\|..\|........~..\|.........................................................................!.."..&..)..0..1..0..4..9..?..@..@..F..J..M..N..V..[..^..`..g..p..p..u..y..\|.........................................'&&DCC~}}a``......................................................................................................................................!.......,......Z........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`...SC...... .E.=b..3C.Z..N.=.....f.Kx.....D.!.F.6.#G...C..*..(.Y"...N..Cp...WXH.bp...

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64713)
Category:	dropped
Size (bytes):	466327
Entropy (8bit):	5.393543879073552
Encrypted:	false
SSDEEP:	6144:3iterV4R8kND8jPhj2QtajcgC2vCJB9LrBw/H:Rh4iketArvClLO/H
MD5:	3D65C0799092F206D9EE24D1AD02A28C
SHA1:	4B2B63E78047FF485D2283C3B389FD0D93178EDD
SHA-256:	BA54422E28DB4A076D13B3F9775010227B30221455B601AB0BB4840BF7F34418
SHA-512:	2BAF9C05CF1DEABEF58E9224752C970056A3BD8E520DD216FFDE2AD7595CBAAFC0ABDB14D2E3DFFDD6C9F63214EB38C9BD6166A5DBCD8DF1AA1DAE82F3E5CBA6
Malicious:	false
Preview:	/* prebid.js v8.27.0.Updated: 2024-08-01.Modules: currency, schain, userId, id5IdSystem, id5AnalyticsAdapter, liveIntentIdSystem, unifiedIdSystem, criteoIdSystem, consentManagement, consentManagementUsp, sharedIdSystem, quantcastIdSystem, identityLinkIdSystem, deepintentDpesIdSystem, publinkIdSystem, amxBidAdapter, appnexusBidAdapter, criteoBidAdapter, eplanningBidAdapter, gridBidAdapter, insticatorBidAdapter, ixBidAdapter, medianetBidAdapter, nobidBidAdapter, onetagBidAdapter, rubiconBidAdapter, sharethroughBidAdapter, smartadserverBidAdapter, smilewantedBidAdapter, sovrnBidAdapter */.if(window._apPbJs&&window._apPbJs.libLoaded)try{window._apPbJs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing '_apPbJs' instance. Load aborted.")}catch(e){}else (function(){.!function(){var n,e={5706:function(n,e,t){t.d(e,{Pd:function(){return d},Th:function(){return s},_U:function(){return f}});var r=t(5730),i=t(4358),o=t(265),a=t(4614),u=(0,t(8640

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1055
Entropy (8bit):	4.741012838050204
Encrypted:	false
SSDEEP:	24:hMSvMtzbzwHUjffbJlL8lcW4p7Oy/ZFoWBPzDFg4Ll24ytty84j:tiXc2Hd13QyIaMtyPj
MD5:	5537C520F9BD47F56FDED31FB45B9786
SHA1:	0C326DA671B48BA91852B68C92F00A676F2FC0DA
SHA-256:	A893DBE616CAC81672A20B8948E0B5C520DC7B28ACA6F739930E9A159C3A017F
SHA-512:	9CC792E0AE49CAB0D3400DE6FEE807594D6FB857CFE41475CC71CF6B9B26E483084AF4277AAAE9659E7A2593A1BD631720FA5C1A7AED247F7044DFC189A67DC5
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>. <title>User-Sync</title>.</head>.<body>.<script type="text/javascript">. if (window.localStorage) {. const lcUserKey = 'instUid';. const url = new URL(window.location);. const to = url.searchParams.get('to');. if (to) {. const instUserId = url.searchParams.get('userId');. window.localStorage.setItem(lcUserKey, instUserId);. window.location.href = decodeURIComponent(to);. } else {. const uid = url.searchParams.get('uid');. const instUserId = window.localStorage.getItem(lcUserKey);. let requester = url.pathname.split('/');. let region = requester[0];. requester = requester[requester.length - 1];. if (instUserId && uid) {. window.location.href = '/' + region + '/v1/sync/' + requester + '/' + instUserId + '?uid=' + uid;.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	dropped
Size (bytes):	563
Entropy (8bit):	5.112757246539186
Encrypted:	false
SSDEEP:	12:2JqxH2pzDD5wm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2JLtwfm8uVCxwgxkHEZ1VZflok
MD5:	FD3E81DCCB7D11E102DFBE4C19791C80
SHA1:	EC66160D47F6E788817B853B612DEAE9F50C79BF
SHA-256:	E66D8D6A3D90A1AC81ED830DE9966386D2A21FFE77590586AA472E1FD024C15D
SHA-512:	722FE3016E53BB2CAF8FFB30FE818037430E761B844E02FBE4ADE2337DF309050E4B2EFE7637313888654262078F8EC0936323A98D17E0ED92EAD41A1046B957
Malicious:	false
Preview:	(function () {try {const accountId = "2e7e1587-d92f-46dd-8721-80b53eccb87e";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	dropped
Size (bytes):	779
Entropy (8bit):	5.489282572569137
Encrypted:	false
SSDEEP:	24:OfwQ9+woZdphxxjAVhZsmpnzn8XTwoZtPphg1j3VhZ6jpnzC9XX:OfwGtOPTAVBNzGMOPPgp3V0NzC1X
MD5:	598C89904B612360235CF5F468D0BA6B
SHA1:	F4C9FB6ACCF02B2DF5E7E42B4B525603ACB71557
SHA-256:	AEC0EC42A0BF0B10CC6FC536A27A863418365BBEF782CF16F1FFBD69252E9C09
SHA-512:	2EFA71C9469B277D0C6993A034A23746AF0B6152E396FFCCA6DD412595E31FB2C9773CB91C1191AD1FAE3D704292B6C41119FB7E700A51409F14E5D49C43BE16
Malicious:	false
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-INDEPENDENT-SEGMENTS.#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio",LANGUAGE="eng",NAME="English",AUTOSELECT=YES,DEFAULT=YES,URI="hls/eng/main.m3u8".#EXT-X-STREAM-INF:BANDWIDTH=715328,AVERAGE-BANDWIDTH=439290,CODECS="avc1.64001e,mp4a.40.2",RESOLUTION=640x360,FRAME-RATE=25.000,AUDIO="audio".hls/360p/main.m3u8.#EXT-X-I-FRAME-STREAM-INF:BANDWIDTH=117674,AVERAGE-BANDWIDTH=65530,CODECS="avc1.64001e",RESOLUTION=640x360,URI="hls/360p/main_I-Frame.m3u8".#EXT-X-STREAM-INF:BANDWIDTH=1308280,AVERAGE-BANDWIDTH=650178,CODECS="avc1.64001e,mp4a.40.2",RESOLUTION=848x480,FRAME-RATE=25.000,AUDIO="audio".hls/480p/main.m3u8.#EXT-X-I-FRAME-STREAM-INF:BANDWIDTH=173377,AVERAGE-BANDWIDTH=105000,CODECS="avc1.64001e",RESOLUTION=848x480,URI="hls/480p/main_I-Frame.m3u8".

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130
Entropy (8bit):	4.979759690692491
Encrypted:	false
SSDEEP:	3:OXMRp/A6MB2jk4lBVQA8K4HTrvLyTHJADWAhgwg:OXOHMB2jkUbN4T2pyBrg
MD5:	8D86D0F41BFAF2AE6FCD0D66CA8E0D8C
SHA1:	019411FCAEFF9728C0B3D2BCA6F80362EDF1F26B
SHA-256:	87BDA4DE885873C6C990E6106DE00CD670F7B69FDFC52231B1CBAA22A81F76A8
SHA-512:	E2EEF26C5D47E72FB420959EFB87C1E1CE96AEB3A682EF165E8C3DD054E18359A2970513859C884D8DA61BA919102A9BBCFDCD59B188811AA205A32A2AE7FC3B
Malicious:	false
Preview:	{. "addr": "8.46.123.33",. "base_id": "cr75DWaZf823c174c3749853ba0c807b",. "domain": "multitran.com",. "guid": "3NReH6hZwKZ".}

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	dropped
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	24
Entropy (8bit):	3.386842188131012
Encrypted:	false
SSDEEP:	3:AVhcRYD:AVhcRm
MD5:	09F71EFBED1212B64851B5A8032EC26F
SHA1:	EC10DB2BD5556DFC406F32AD9DF9944D11B14233
SHA-256:	89F2D4E6C7A6C41C13C2E7A75E526AA60B9D5274FE28B2D82801C6BEB6BEB879
SHA-512:	48B0B3A340EE2DC39A346E8CE4C67697F166362CEFC60247848858A011C23C0E14C8914B90BC431CC063EE96FAB113064EA2DBC36988B2CBFB5F54183AA67E1E
Malicious:	false
Preview:	upstream request timeout

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (41240), with no line terminators
Category:	dropped
Size (bytes):	41240
Entropy (8bit):	5.486208173780917
Encrypted:	false
SSDEEP:	768:bOnQkmXmVEGA5hTH6wzJzhUf2awTf58YqP3QXMYEei5FEclnEp/sU3v9Yc:KnKaEr593zJ1UOawyFeeEp/pv9Yc
MD5:	CAD91A5224C24FE72B8E7A93BC5647AD
SHA1:	2984961DAF5D47C65E420AEFCB2457A5D643F853
SHA-256:	952E970E1EC5E946A7A3F3C1799B0C9175DCEA84FA1D91F871D79849E4F11BD2
SHA-512:	222A140A13F8B437EEB3F83877548EB15F3425EBFFE356026CC9D2A9FF49FE98DE4A8049018CC2930F92D790BC224F9DEE15E5C1DE58079B44B9B74133E0E086
Malicious:	false
Preview:	(()=>{var e={955:e=>{e.exports={ver:1,feedbackUrl:"//feedback.adrecover.com/ARWebService/feedback",hbFeedbackUrl:"//feedback.adrecover.com/ArHbWebService/feedback",frameDomain:"//delivery.adrecover.com",rendererIframeUrl:"/recover.html",auctionIframeUrl:"/auction.html",adRequestOptimizerIframeUrl:"/adRequestOptimizer.html",xpathWaitTimeout:5e3,domain:"",previewSetupStr:"previewSetup",previewComplianceStr:"previewCompliance",adTextHeightAboveAd:14,heartBeatInterval:3e4,heartBeatStartDelay:2e3,AUCTION_IFRAME_ID:"ar-hb-auction-iframe",REQUEST_BLOCKING_RULE_FETCHER_IFRAME_ID:"ar-request-blocking-rule-engine",REFRESH_TYPES:{AT:"Active Tab",BG:"Background",AV:"Active View"},DEFAULT_REFRESH_INTERVAL:3e4,DEFAULT_REFRESH_TYPE:"BG",REFRESH_BATCHING_INTERVAL:100,DEFAULT_DATDOG_LOG_SAMPLING:2,DATADOG_LOGGING_VERSION:1,refreshEligibleCountries:["AU","AT","BE","BR","HR","DK","FR","DE","HK","KR","MX","NL","PE","PL","SG","SI","ES","SE","CH","AE","TR","GB","US","JP"],noAdLabelSiteList:[37741,37740,4272

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.723231428797621
Encrypted:	false
SSDEEP:	3:YQZoM/9WUghIcbfnHYn:YQP/9W55Yn
MD5:	4775C20C71B9F73D9F7B740311281966
SHA1:	72C33AE1B68600FE3C632F13C037DB61D8264623
SHA-256:	0919E613419116E8EEA640987578D0B50A31E7FDEF364D14C63D67EBA1355E76
SHA-512:	FA5198A0614CB6821AAC9854126417373EF6A5876F0939668BF159CB316C444EDB09DC93F833E88C8F3F5450729911F7C2D578C25F098CB993DB0FDE72CDBD6D
Malicious:	false
Preview:	{"url_key_mapping_0":"05b931d2-cfd8-11ea-9450-6807152005bb"}

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1113
Entropy (8bit):	7.733873722131295
Encrypted:	false
SSDEEP:	24:I/6i4EfPN9l4MAezXsdkNMkJyLgV4Zv2HaqWTFnv:I/6itVbAEckNpJyLc4ZoWBnv
MD5:	4691F7B4838677EB865D79562D5A88DA
SHA1:	53F3AAA6F379DE899C38D6652661B5C33B4B1776
SHA-256:	4451DC45557B532464C9AA016DD6759A91AEA3014FA121DD721B36B05AF73CBA
SHA-512:	92B74F52535A63F0C24DCB131183FDCE00D68EAD6F159B4D3D0C10B487BE071E98EBB473985235F1F121491853A9CFC5D3D120185F6EAA8EB06EE8E738DC0176
Malicious:	false
Preview:	.PNG........IHDR...d...d.....p.T....pHYs.................IDATx...O.WU....Fa..!hc....2..O.Q.a.1.C4.....R.. ](: ..1"..qQD.........Ff3..@.Y....7....@..9.{.{.....s.0.{.;?..B.!..B.!..B.....R...W....,....r.W...vN..8...L.O....[..0w.....`B.s.Y...Ux..&w...g.......,o....]..v..zGs...0.aB..O....`-.l..;....r5w.....lN....`........e...L...v..ni:.o...&.V..k.T...3"..M...t..M....4.0._w..4.......~U....7M..D)o..M...e.....N....}.}_I...P.[.......It....RW@......?A.^.+`Ly..,....}...#..*..)...n..(.A....lD..R'..J..o........t.Iy.~y......A.M{.v.#.iQ...b}.xGy`&....z.t._.r...n@.u......G._...T...q....D.wR..39..).E.o.{r.....7 .1.=.qX..)).. .-.M'....."..('.a..X...K..h.......2Zt.'......Eq?%..Z..\|4.+......v...T.....W...d.(...x..x..}U9F..,...+'y...}..OZ.y...>6.u}.[t.l......kQ....-Z..o.c.(.S.Zt..j..d..Uq.j.w...YB1..._..v..(.u.E.0l.......>.t..m...mG.O.7.'g`?......v.Ww...~.\|t.k.g..q..[t..#\|.pP.....1Mm/f..lgaa.7.-....)...H..).?..dU.?mJ..v..\.m[...Q.o:..u...[N.5.r.x2sq

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	dropped
Size (bytes):	331650
Entropy (8bit):	5.288642917517469
Encrypted:	false
SSDEEP:	6144:v2/y0TKtc5Stk4DLP+0qEw4NSPUtsT3YIBcNy:v2/v5Stk4DLP2EHNSctUBcU
MD5:	907CBDD883935369790D45CC9BD9E8B7
SHA1:	E0B3C8F58CD6B611DFFF737DB1AD5AD2D7AA7105
SHA-256:	6FDB7C12792EBD6E785128456249178E9B508C9677A300DF8FBC6E7520147BAA
SHA-512:	FDB108D439129DFFE0C93AD2AC0141DE75F92130FB71E9447682C5F94100B90745A4E83B1CAF40691D45E66517B096145591798492744232F99425B3B2A13610
Malicious:	false
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.827.1552 - 2024-08-27 15:52:44 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};function e(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function o(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(o.prototype=n.prototype,new o)}var n=function(){return n=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},n.apply(this,arguments)};function o(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var c=t.length-1

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5540), with no line terminators
Category:	dropped
Size (bytes):	5540
Entropy (8bit):	5.6184953411059775
Encrypted:	false
SSDEEP:	96:CPreTjNh2BqP4n2Bqhy2BqqisyAbFjS5mn3Jw7pDFfEjuafdCbIzR3lCuV1bWq:3JoBqjBq5BqqhQvDEKR0jZ/
MD5:	72C9CA1E3D4543D57F30D8CA5E0F0E89
SHA1:	74ADEE74C6603C8DA2AF11F2D535562484B0286B
SHA-256:	22ADE59FB309F910451A2CADFE70AB4F47D44A21300B2D821DCFED7FA3458FBB
SHA-512:	C7828D8B5915788F7C5DFB1FE16088309D75C33DBBC7A200A6B402BAB313A328EDA6CA7E149773C456A5B3F020E3BDDA2C3D39D37BC989B733C67667EFFE239C
Malicious:	false
Preview:	PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NDc0NjM3MkYtOEVDRC00QURGLTlGNDEtQjNFRkI5MzNCOUE0&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9O

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10804
Entropy (8bit):	4.481624126994836
Encrypted:	false
SSDEEP:	192:v6+WE7QxvAjShzwzb7M1/myAYUNNdZnvGuQTF4U:v6+Pkxv44q/EH10U
MD5:	2928664FE1FC6ACA88583A6F606D60BA
SHA1:	2F2FE1CBD0563B3CE3EA79FCDF1549ED244B3993
SHA-256:	A26FC5B38380272C92E9019A2EB8B45542A66814B3E2B203772DB8904B9FB99F
SHA-512:	7D6F8B7E54A4DA3CF81C767B4AA40C3B04BAFE35F2DD77B85944DE4442F0B1DD1A8EDA0175DEB4652CF055094ACDC0D4B6E38ABE51C52A3DFBF887481315B347
Malicious:	false
Preview:	<svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40">. <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title>. <g>. <g>. <g>. <path d="M110.13477,0H9.53468c-.3667,0-.729,0-1.09473.002-.30615.002-.60986.00781-.91895.0127A13.21476,13.21476,0,0,0,5.5171.19141a6.66509,6.66509,0,0,0-1.90088.627A6.43779,6.43779,0,0,0,1.99757,1.99707,6.25844,6.25844,0,0,0,.81935,3.61816a6.60119,6.60119,0,0,0-.625,1.90332,12.993,12.993,0,0,0-.1792,2.002C.00587,7.83008.00489,8.1377,0,8.44434V31.5586c.00489.3105.00587.6113.01515.9219a12.99232,12.99232,0,0,0,.1792,2.0019,6.58756,6.58756,0,0,0,.625,1.9043A6.20778,6.20778,0,0,0,1.99757,38.001a6.27445,6.27445,0,0,0,1.61865,1.1787,6.70082,6.70082,0,0,0,1.90088.6308,13.45514,13.45514,0,0,0,2.0039.1768c.30909.0068.6128.0107.91895.0107C8.80567,40,9.168,40,9.53468,40H110.13477c.3594,0,.7246,0,1.084-.002.3047,0,.6172-.0039.9219-.0107a13.279,13.279,0,0,0,2-.1768,6.80432,6.80432,0,0

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (326)
Category:	dropped
Size (bytes):	4271
Entropy (8bit):	5.436539097811593
Encrypted:	false
SSDEEP:	96:1AJsdjBaOBZ1mbB2KF1yS7CAMHlobo/xT5pSot4t2b//xC:1dBaOB3yrnMF9ljSM4mA
MD5:	36AEBAB4D7B8C69FFF0B88CF97B1733F
SHA1:	7230BDC856C08DB9BF96CB0D1EE67A354EB81D96
SHA-256:	485964CEB85034BACDCDC25F7A6951A036CC208AD4B710A92CD370E4C971B7E8
SHA-512:	6FFB1D939838A0B7C2D36A3D69591F9851640876D78A847D8169E4DAB8C1FEB2335D304DE4A4ACA73113A1065EB4F95566929206249CBAB93B883E04A3BDCC74
Malicious:	false
Preview:	<html>. <head>. <title>Pixels</title>. </head>. <body>. <img height="0" width="0" src="https://aax-eu.amazon-adsystem.com/s/ecm3?ex=inmobi.com&id=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704">. <img height="0" width="0" src="https://s2s.yieldlove-ad-serving.net/setuid?bidder=inmobi&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704">. <img height="0" width="0" src="https://cm.g.doubleclick.net/pixel?google_hm=NcqI50TgmXHDNOPLYq0d&gdpr_consent=&gdpr=0&google_nid=inmobi_dbm">. <img height="0" width="0" src="https://cm.g.doubleclick.net/pixel?google_nid=inmobi_new_eb&google_cm">. <img height="0" width="0" src="https://eus.rubiconproject.com/usync.html?p=inmobi&endpoint=us-east">. <img height="0" width="0" src="https://id.rlcdn.com/713074.gif?">. <img height="0" width="0" src="http://pixel.tapad.com/idsync/ex/receive?partner_id=3535&partner_device_id=ID5-1-5f5c88f9-d290-459f-96b2-e590dac9c704&p

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3048)
Category:	dropped
Size (bytes):	50630
Entropy (8bit):	5.567203834971407
Encrypted:	false
SSDEEP:	768:FLszR7bx8BAwksq59aeVr/o7RNRCr5wOHGGnixwcnbBm0XApzlE:FLst254M7R/CFniuA6a
MD5:	F709CAB17207EEFC8DFEB0B714BAB071
SHA1:	D05704E821CF6BE62891CE11273C95DA8B79F6BB
SHA-256:	D6834A8CF95E5FE5A5F2F73C5B34CFADE97D0636CAC1AC1006627AB6E79D364C
SHA-512:	4FAFB86D74E18BE835F89F8168A9B9AE54A8AD8E64D871C6E4E998C331F62D402628EF942A45C729CE939B16D1DD507E3E7EB7F576C133EF90F46EA989335B92
Malicious:	false
Preview:	(function(){var q,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .t("Symbol",function(a){if(a)return a;var b=function(e,g){this.la=e;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.la};a=Math.random()*1E9>>>0;var c="jscomp_symbol_"+a+"_",d=0,f=func

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	190
Entropy (8bit):	4.724649190606844
Encrypted:	false
SSDEEP:	3:YRMZXKOLz59ifHtKfnS3uWwMLjSnBMB3RYAs2HJHdLUfNVJpPdFH/JJVrmV:Y+T98NruW3LunAYlGdLUfNVJpPDfJJVU
MD5:	72EE6B03CD3D70450D566B2E66E8992F
SHA1:	9AF52020A954D60319878A881B741BAE8A3B93C5
SHA-256:	71F0C958E33905CB028DFD76FF7FCFFA9D57A260845594E84D116530E3F80A36
SHA-512:	D21327FED8735C7C1A636A1784A19A07F40E0F155C58483147745B2D2936D000C4F5CCD0B8E6E7B5298C362508102235343B0A7D9D927BF4A88F012D714636F8
Malicious:	false
Preview:	{"tid":681,"solution":[{"name":"publink","src":"https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js","configName":"publink_options","config":{"pubcid":{},"loadAts":false}}]}

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	dropped
Size (bytes):	331650
Entropy (8bit):	5.288642917517469
Encrypted:	false
SSDEEP:	6144:v2/y0TKtc5Stk4DLP+0qEw4NSPUtsT3YIBcNy:v2/v5Stk4DLP2EHNSctUBcU
MD5:	907CBDD883935369790D45CC9BD9E8B7
SHA1:	E0B3C8F58CD6B611DFFF737DB1AD5AD2D7AA7105
SHA-256:	6FDB7C12792EBD6E785128456249178E9B508C9677A300DF8FBC6E7520147BAA
SHA-512:	FDB108D439129DFFE0C93AD2AC0141DE75F92130FB71E9447682C5F94100B90745A4E83B1CAF40691D45E66517B096145591798492744232F99425B3B2A13610
Malicious:	false
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.827.1552 - 2024-08-27 15:52:44 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};function e(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function o(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(o.prototype=n.prototype,new o)}var n=function(){return n=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},n.apply(this,arguments)};function o(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var c=t.length-1

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	450
Entropy (8bit):	5.207888077657653
Encrypted:	false
SSDEEP:	12:oZu3b8RxDSirWc/oQKXmnDRWUkEUy2+rmrKRdlt:YuUSs9cX2RWUnUy24/
MD5:	91610E5FC73DB28B186931B3ED4DDD11
SHA1:	6CAA513628BACDD40F970A22A08CCAB4E5E8FFB9
SHA-256:	26914004D3A8D5DDDE2202B642D7936EB61C9F195B5CD3C87E44EF8AD4D57C16
SHA-512:	90FDBCA3B4B197A09FD83FA11DC81636DE5A4888F0BE18B62A93916316D870DBBC4C3CEEC09CF86F5D99B539683DCAC09C1BF4759842929E8FA88B401E484A54
Malicious:	false
Preview:	window._qevents = window._qevents \|\| [];.(function() {.var elem = document.createElement('script');.elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";.elem.async = true;.elem.type = "text/javascript";.var scpt = document.getElementsByTagName('script')[0];.scpt.parentNode.insertBefore(elem, scpt);.})();.window._qevents.push({.qacct:"p-54Nt-1NAaEEe0",.uid:"__INSERT_EMAIL_HERE__".});.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	272
Entropy (8bit):	4.932428905055227
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeCWxRZ8oklZqMz3s6VT3RxK9MGJG5oeX:8DIGoXbfCYKpEe3RZ8q03sWTrK95JTeX
MD5:	7F7ADB27D689E02A5F7645B15691B531
SHA1:	1897C0BDD0ECB93D5276BECC142821672FC845A9
SHA-256:	88A009C9C03ADC7AC66A534E4A00C8760F4C5861E15CF0FA4F8CE69B85316D14
SHA-512:	BA13838C6EBC194224513FB0CB548D71C6670A6BAF8488F6A9E144468D19E70DA2691443AE3D9975A8CD7F210DAC03D4BBEA5AFBDFB9EA7A7F7067EA249C526C
Malicious:	false
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1871), with no line terminators
Category:	dropped
Size (bytes):	1871
Entropy (8bit):	5.362631693607494
Encrypted:	false
SSDEEP:	24:kRnGLSYckSdSYxBfi3SqSYmKOPgEBSYSYrl20KSYwASYJDSYQ+SYaK4x0NSYt:kackSDxBfi31mRFBHrlShfraJx0Tt
MD5:	1E9E428DDA7E9D0B7EB78337845A7AD5
SHA1:	A1260B425CDA7C5E5BFA3AE10D9EFD04CC4C1028
SHA-256:	3E921B11ADB295F66C82922F40D0E20CF72C781A7CCD3711EBF3CAB2077D808D
SHA-512:	554552029441ECDB416DEDC24E15C5308B59A8D730E47B696EE18A5E5BF53814C1BD97818C33CD905D64EFB8A29AEF833F89300AF19926AB8CD88A2726172EF9
Malicious:	false
Preview:	<html><head><title></title></head><body><img src="https://match.adsrvr.org/track/cmf/casale" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=Zvqk09HM51MAAHZlAG58agAA%261392&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=Zvqk09HM51MAAHZlAG58agAABXAAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=Zvqk09HM51MAAHZlAG58agAABXAAAAIB&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://b1sync.zemanta.com/usersync/index/?puid=Zvqk09HM51MAAHZlAG58agAA%261392&cb=https%3A%2F

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49614), with no line terminators
Category:	dropped
Size (bytes):	49614
Entropy (8bit):	5.2703097075400835
Encrypted:	false
SSDEEP:	384:3P8RpA7Kh2sCPvthaGqxcv4Mpg7ZIxJzpbTxGkkk4JoaXUcnxfQpRX0uXbpuYF7f:spJrCzaGqK5g7ZIZb1DsXmtBKKyoOa
MD5:	00FF8001302D3748BA139466FC3910C1
SHA1:	8210E702FE525E6CDDC84758EC51E96A4D703186
SHA-256:	EB4DB95CF7C97CE22BD98D1B95DFD82204843CC8854CBE0B3B6B93BE4FA41A2F
SHA-512:	4005E40F94AB0CAB5968F759C0C3F2B25881439121ED9FDB8E4C7C9E652EE5F8652D64744D34AAA1F01AAE0663A9D4F78C394140F2B661C04AD9A4E01D8D551D
Malicious:	false
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.sw_consent=t():e.sw_consent=t()}(self,(function(){return(()=>{"use strict";var e={186:function(e,t){var n=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")};Object.defineProperty(t,"__esModule",{value:!0});var r=function(){function e(){}return e.prototype.clone=function(){var e=this,t=new this.constructor;return Object.keys(this).forEach((function(n){var r=e.deepClone(e[n]);void 0!==r&&(t[n]=r)})),t},e.prototype.deepClone=function(e){var t,r,o=typeof e;if("number"===o\|\|"string"===o\|\|"boolean"===o)return e;if(null!==e&&"object"===o){if("function"==typeof e.cl

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4262)
Category:	dropped
Size (bytes):	345718
Entropy (8bit):	5.5924710152260655
Encrypted:	false
SSDEEP:	6144:F4OSYLORUSL+4YsY64cSsY6jjxxvcLsu6es46Zj7xjsu6Zj7xSZBjIPXdf+JiLrK:FFxSL+4YsY64cSsY6jjxxvcLsu6es46p
MD5:	77F09BCC494C4D0839DA22D3B0CCCD17
SHA1:	F3ED01078922364E7CCCC02D0BBBC99DF36B6DC6
SHA-256:	71DB7C122A50C94750063E0EA43EE1E3E8A94FA053874830629E94E838CE433D
SHA-512:	2196E7BC4EC826730B45E13582381C8BB5C96007158503ED7363893FF8D3EBD9829847A6D205D9A8844499C665ADC327372C9396A1F63013D13F857036D2666C
Malicious:	false
Preview:	/Copyright (c) 2011, 2024, Oracle and/or its affiliates. All rights reserved./.try{(function(C,y){function Qb(c){if(a.b.x())return AB_SCAFFOLD.sampling.onReady(function(){qb(c)});qb(c)}function qb(c,h){a.n.a.sxaz("trackingReady",{callback:Qb});if(!a.b.x()\|\|!AB_SCAFFOLD.sampling.tagShouldNotTrack()){Ya=z.h;z.h++;z.i[Ya]=!1;"undefined"===typeof c&&(c=a.x.g&&a.x.g(T,"display"));var m=c&&a.v.b(null,c,{},null,!0);m&&m.qs&&m.qs.d&&"string"===typeof m.qs.d&&(a.j=m.qs.d.split(":")[0]);m=null;m=!1;rb&&(delete a.d._sprg,delete a.d._sdrc,ta=!1,a.d.fl=!0,a.d.fk=!0);if(m=a.b.x()?!AB_SCAFFOLD.sampling.isEnabled():.a.d.z().isInApp&&!a.d.cx())delete a.d._sprg,delete a.d._sdrc,ta=!1,a.d.fl=!0,a.d.fk=!0;a.b.x()&&(AB_SCAFFOLD.sampling.isActiveSampling()?a.h=1:(delete a.h,delete a.i));rb&&(delete a.h,delete a.i);m&&(delete a.h,delete a.i);a.h&&(ta=!0);a.q.v()?a.u.n()():a.u.i();a.d.av.c\|\|(a.d.av.c=!0,a.d.bc?z.dcsx.ynds(window,"pagehide","unload-"+a.d.av.a,"unloadFn"+a.d.av.a):a.d.bb&&(z.dcsx.ynds(window

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.422459369377636
Encrypted:	false
SSDEEP:	12:PGfPdycycd2YyIDeg9ignuVnU7545S/9P4uNcN9W8M18bNGNwJg9gGkUYWuU1RDW:OfzSgL/mV6v+uPDRxTBBAWnfijJX
MD5:	4DC01FC4A5D09712550850529A1E0C07
SHA1:	5FF41C09E34035F7723EC26A0638066BF9DF00D1
SHA-256:	95E39DBA0505355BB4966C7439A10E87288A76865645F12789533104E30D963B
SHA-512:	97C6E1E39CB08620C582000C6AA3B5EE03843211539312AE202D1B6F280297C622B143CA6C5F9B9C28CDADBF35028DFA4CDF4E27FD502FA4E130039F58FC0166
Malicious:	false
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-TARGETDURATION:4.#EXT-X-MEDIA-SEQUENCE:1.#EXT-X-PLAYLIST-TYPE:VOD.#EXTINF:4.000,.main_00001.ts.#EXTINF:4.000,.main_00002.ts.#EXTINF:4.000,.main_00003.ts.#EXTINF:4.000,.main_00004.ts.#EXTINF:4.000,.main_00005.ts.#EXTINF:4.000,.main_00006.ts.#EXTINF:4.000,.main_00007.ts.#EXTINF:4.000,.main_00008.ts.#EXTINF:4.000,.main_00009.ts.#EXTINF:4.000,.main_00010.ts.#EXTINF:4.000,.main_00011.ts.#EXTINF:4.000,.main_00012.ts.#EXTINF:4.000,.main_00013.ts.#EXTINF:4.000,.main_00014.ts.#EXTINF:4.000,.main_00015.ts.#EXTINF:4.000,.main_00016.ts.#EXTINF:4.000,.main_00017.ts.#EXTINF:4.000,.main_00018.ts.#EXTINF:4.000,.main_00019.ts.#EXTINF:4.000,.main_00020.ts.#EXTINF:4.000,.main_00021.ts.#EXTINF:4.000,.main_00022.ts.#EXTINF:4.000,.main_00023.ts.#EXTINF:4.000,.main_00024.ts.#EXTINF:4.000,.main_00025.ts.#EXTINF:4.000,.main_00026.ts.#EXTINF:4.000,.main_00027.ts.#EXTINF:4.000,.main_00028.ts.#EXTINF:4.000,.main_00029.ts.#EXTINF:4.000,.main_00030.ts.#EXTINF:4.000,.main_00031.ts.#EX

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4014)
Category:	dropped
Size (bytes):	154681
Entropy (8bit):	5.6025892076570525
Encrypted:	false
SSDEEP:	3072:P2WdhgJYuq4fyWy/LIFv8DNbVq2gNYMT3MWUAuF7lFJ8DfvnsggUPcnRSLo5aRd:P2WdhZuq4fyWy/LIF0R5qfNTzMWluF7S
MD5:	5DC81DDE2BA156491026AED5EDD59B0C
SHA1:	9C63E725571674B55177A654C978E7E3467B212F
SHA-256:	571ADF720745AD72ED7BFA7A745483B040307C0343D2E57634A0F78B58363995
SHA-512:	958B3D957E3C488871437831F134005407BA32330C850D1F7B39A93225E21FA446A7A3825E8D93408928DC8E8D2F674787DC7C008FE1EB2788FD8DD5ADEBD5F4
Malicious:	false
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45
Entropy (8bit):	4.552638373963221
Encrypted:	false
SSDEEP:	3:YJH/Ow2URHtKkHYqJHRvFVYn:YJ/Ow9vNHton
MD5:	38225DB2686638888603469E894B0C23
SHA1:	C2832A58B42ABD27E38182266165FD99EB2BDC39
SHA-256:	31A7F43795254C28296AB741DB25A71A7C43000C4AAF48C7887901367FC0E499
SHA-512:	67C2A709D8392F84B5F226D767BC3FA1662B3E5FAC3D18BC7BA22CEA49B98883413F4F887F3326A2F06D745E67AC76F3CFC4C0252D6F47F8240CFBBC06E709DE
Malicious:	false
Preview:	{"lb":"pFE9dI2OJt+KTH/JtXmlKg==","ttl":28800}

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45
Entropy (8bit):	4.774860596185444
Encrypted:	false
SSDEEP:	3:YJH/HYRBxSg10YYHXFVYn:YJ/HYnBoQn
MD5:	0F523381302A89820532BE7C2701D394
SHA1:	7F028E990EFB205CF3606F0E66D7D50DCDAD50EB
SHA-256:	9FE2D95AA1D987D3B501D5934808D3C83C8DC7FCAE5B528B747A18E6A661C760
SHA-512:	795516F51B435C8A213DD19FE51AFB6F9980A4047348A3DA0562E1AA7A2C61A586B75274DDEC1400CC8E93BC871EDE359C3A28BA28E238B50641D575E3C7F405
Malicious:	false
Preview:	{"lb":"i/xl4TNYZDn4dX653+zmPQ==","ttl":28800}

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56888), with no line terminators
Category:	dropped
Size (bytes):	56888
Entropy (8bit):	5.418495886740826
Encrypted:	false
SSDEEP:	768:tvB5S2oiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4G:kE
MD5:	1E77F38A1DF1490D4175E3C4878BD150
SHA1:	555B823C75571D723FA86F42C6A4710AE97AE9A2
SHA-256:	492DB2CA577F4D221E3E28239C19E7DB05F1701B298BF278FC4D1FCB92563586
SHA-512:	0808FDAB6BE9051A251C951990A7EBEA4777BF5A83A82884BF28DB733E5CDF6FC763F9DCA243F5848E91ABEBA7A5FF47533C478686DFC410ACBA9EFF7D7CFFE7
Malicious:	false
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Preview:	Not Found

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3313), with no line terminators
Category:	dropped
Size (bytes):	3313
Entropy (8bit):	5.407965823469281
Encrypted:	false
SSDEEP:	96:zMMi8X8ly8Yr8x8pcS8gyQ8086l8HI848tDn88M8rEE7:piG2ybreoNyQnDsI7gz8BcD7
MD5:	0EBEEEFB36391C35E3C09E0E90F757C9
SHA1:	9168EBD2D59370817DE4BD0CF958BD9C8A6DD5B8
SHA-256:	9A47E509E05B1B053F58B0C0380EA0F2E43DB3ABABBC43C5579999F9FA892AC1
SHA-512:	6144BC18E39DD0ED5EADF1743674AB37CB34E850884F6B7A33F447C9EC34902DC88ADDDDE5131A00DFD8A1BD6E9CE03B93876620FDCC20F97344378B62B4AD2E
Malicious:	false
Preview:	<html><head><title></title></head><body><iframe src="https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=rise_engage&endpoint=us-east" style="display:none;"></iframe><img src="https://contextual.media.net/cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E" style="display:none;"/><img src="https://csync.loopme.me/?pubid=11362&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11571%26id%3D%7Bdevice_id%7D" style="display:none;"/><img src="https://sync.go.sonobi.com/us?gdpr=0&consent_string=&loc=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D115667%26uid%3D%5BUID%5D" style="display:none;"/><img src="https://visitor-risecode.omnitagjs.com/visitor/bsync?uid=40a3c28f9ffc73ee86df2bac2d2bb390&name=risecode&url=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11609%26id%3D%5BBUYER_ID%5D%0A" style="display:none;"/><img src="https://x.bidswitch.ne

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	dropped
Size (bytes):	538794
Entropy (8bit):	5.487833385314626
Encrypted:	false
SSDEEP:	6144:FH/pzYnEqprWvmOJIjSrW9uLqzO7R3+BBKJ60nXbOYwaYzQXFR+f4h+jVg:V/+QslqRFRl+jVg
MD5:	94FDCDF869D34A6195B40FF5ACD2F9DB
SHA1:	90D729CF4E722195776792451B479A6FFF49E4F3
SHA-256:	E915AC20E2D52E6B6608C99D23BD3253C18F972D839EA5C485B356A55FCC7BDD
SHA-512:	6A02FA0ABB92AEBAD4251275FC53F08AF952FAB872AE0743E0F0CE731C63DFDC4A361A77F3D2C67F3B3DA79C6FB95FE702ACA1E4F5C9B29A3C421793214C8A9E
Malicious:	false
Preview:	var D0=Object.defineProperty,B0=Object.defineProperties;var q0=Object.getOwnPropertyDescriptors;var Ur=Object.getOwnPropertySymbols;var Yo=Object.prototype.hasOwnProperty,Xo=Object.prototype.propertyIsEnumerable;var Ko=(J,nt,tt)=>nt in J?D0(J,nt,{enumerable:!0,configurable:!0,writable:!0,value:tt}):J[nt]=tt,E=(J,nt)=>{for(var tt in nt\|\|(nt={}))Yo.call(nt,tt)&&Ko(J,tt,nt[tt]);if(Ur)for(var tt of Ur(nt))Xo.call(nt,tt)&&Ko(J,tt,nt[tt]);return J},U=(J,nt)=>B0(J,q0(nt));var Jo=(J,nt)=>{var tt={};for(var yt in J)Yo.call(J,yt)&&nt.indexOf(yt)<0&&(tt[yt]=J[yt]);if(J!=null&&Ur)for(var yt of Ur(J))nt.indexOf(yt)<0&&Xo.call(J,yt)&&(tt[yt]=J[yt]);return tt};var D=(J,nt,tt)=>new Promise((yt,Be)=>{var Lr=Ot=>{try{qe(tt.next(Ot))}catch(at){Be(at)}},_e=Ot=>{try{qe(tt.throw(Ot))}catch(at){Be(at)}},qe=Ot=>Ot.done?yt(Ot.value):Promise.resolve(Ot.value).then(Lr,_e);qe((tt=tt.apply(J,nt)).next())});(function(){"use strict";var J=document.createElement("style");J.textContent=`@charset "UTF-8";@import"https:

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Non-ISO extended-ASCII text, with very long lines (4592)
Category:	dropped
Size (bytes):	40317
Entropy (8bit):	5.001990067111955
Encrypted:	false
SSDEEP:	768:er9pCbRGRW9lv5Cs8TQ9fQB1kuqYfFoCLjp7PkRCO3ra//HxPTmyPgXf61TFGhGG:eGOW9lvYTQ94bnF99PXO3av5TmU1TFGP
MD5:	D27FE1BD744910C43AE7A66AAAED955C
SHA1:	97699CE77198A4CC58B24C65F8DD176957B29B9D
SHA-256:	53C62195D3857F10E9C8347BD85F0CFE8256E4652D7AA0E1A8E3E6933580649F
SHA-512:	0E14D1DDAC55185B3CA07427AFADF421FE6FA44A0F11E4B083F03B836E07926123B126A0E4D211851B4EB749C26A74669C96B030C35A1656720BE500866911AA
Malicious:	false
Preview:	function OOD(){this.OD=new Array();}OOD.prototype.O0Q=function(O0O){this.OD=O0O;};OOD.prototype.getMatches=function(str,O0O,QO){for(var i=0;i<this.OD.length;i++){O0O.push(this.OD[i]);}};function OO(OD,D,Q,QO){this.D=D;this.Q=Q;this.Q.onblur=this.Q0;this.QO=QO;this.OQ=-1;this.OOQ=new OOD();this.OOQ.O0Q(OD);};OO.prototype.assignEvents=function(){if(!O0D){this.D.onkeyup=this.keyUp;this.D.onkeydown=this.keyDown;this.D.OO=this;this.D.onblur=this.Q0;}};OO.prototype.unassignEvents=function(){this.D.onkeyup=null;this.D.onkeydown=null;this.D.OO=null;this.D.onblur=null;};OO.prototype.Q0=function(){try{complete.Q.style.visibility="hidden";}catch(e){}};OO.prototype.selectText=function(QD,O00){if(this.D.createTextRange){var QQ=this.D.createTextRange();QQ.moveStart("character",QD);QQ.moveEnd("character",O00-this.D.value.length);QQ.select();}else if(this.D.setSelectionRange){this.D.setSelectionRange(QD,O00);}this.D.focus();};OO.prototype.textComplete=function(sFirstMatch){if(this.D.createTextRange\|\|t

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3078
Entropy (8bit):	5.248403812695168
Encrypted:	false
SSDEEP:	96:b6RUgc0OmZkiNzEDaTpXpDidLqhPkTb7Dty1UP/uCj:b6mZ0Otwfid2hc3Ny1ej
MD5:	0510C77EC86184B8FF1468CE2BA2C948
SHA1:	118FB14DEEFA1D12A632190863D7CD1370BA5584
SHA-256:	6A4869317C124E5B256EDF05E6B0C5217F331BED0836ABDED96CC2F4B4718823
SHA-512:	6D667816DEB4561C4E5A2C75A6639B2A35A620DFF5CE0220AD6571D8ECF939CE0D75CD0720BA6F44C0C40A6DB35C6EC3C93CD7A5927561D73B72CB68F97439A7
Malicious:	false
Preview:	{"3pvendor":"if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag);\n};;var audigentPropertyId = '777';\nif (audigentPropertyId && audigentP

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4014)
Category:	dropped
Size (bytes):	154504
Entropy (8bit):	5.60082945305767
Encrypted:	false
SSDEEP:	3072:P2WdhgJYuq4fyWy/LIFv8DNbVq2gNYMT3MWUAuF7lFJ8DfvnsggUPcnRSLo5aRa:P2WdhZuq4fyWy/LIF0R5qfNTzMWluF7j
MD5:	79D8CDBBAB52E7D14C3989C447C016D6
SHA1:	1AF714B018252F58EFB33CBCFBE77D067D10B985
SHA-256:	9317489027D69C0FC90F78CF0B6E1F1CCA7C830A8AAA30FE43A9F67BCDC19993
SHA-512:	1C9C6CFE0C2BC2A94EE85BE370089F7372167A36FAC599E7202A5085C4C0EC6AF5BB742C7FA1354C889ECBB24A115D9D7AADA636875451B8D16495D0BF2ADAB1
Malicious:	false
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG transport stream data
Category:	dropped
Size (bytes):	257372
Entropy (8bit):	7.883309015881379
Encrypted:	false
SSDEEP:	6144:9EDJwrecg+7hxaBXkyYkVQnnrZK0eY+GLEB9DRkgOSOQUoeywQl:mW6F+7aOyYvnnrUPY+GobFZONC
MD5:	6245330A0F027F342755C6F5A48F8C22
SHA1:	CD01A1246594E6C61D19A1A1D50314DBDF5FBB39
SHA-256:	98FD28950C408C426C8278E73E1F1330B53BCE94A5EEA8EB9BF59A23C07EC786
SHA-512:	4F620A35CA9D27B7BF60039FB414ADCDF8E54BDE73CBAF0EC61676290BB61BF89B159CFA9E9568D1BF5CB27E87B3C362EAF0C61B80E76A53B37B6EAA9D8D68FC
Malicious:	false
Preview:	G@...............-Px........................................................................................................................................................................GA.....".............x.....(.d..?....xd..h..................................................................................................................................................GA.1.....~..........1.......~A..........'d...r.......x.}j............q0........p...Y`....(..,........s...t@........................H..lt\|>Ox....]<.~Elemental Video Engine(tm) www.elementaG...ltechnologies.com.....%...A_.:"I.%.A.2.....So..+l.."H@?.h....y.$....... .7.s.....v><..]5+...VsH.V.:..@Ak.......A.5...A...yv.E.....XK....m.a.X...Idv...t.J..U.A=.}b..td..XiK......G...gL.z]tj.......).%.n./].w...?D..Uwm....A.L.H..Ti.....t2NG....!....P^.jz....6a.O.!........X<.h.).h.8.i..IT$qC.b.^..Ky;{.X.9.....& -U....-...B.3..;....Ql.!K5....+.gI.IQ'.Sw...y..b..o..G...#,..1T......PAqO...u......."...Dl....o"B.w......U.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50357), with no line terminators
Category:	dropped
Size (bytes):	50358
Entropy (8bit):	5.2181356017561
Encrypted:	false
SSDEEP:	768:g7VNmagZTrKaskbeznZ5H8roxxbwxgwrsc:gSagUCGn7ck0xv
MD5:	EDC96E5BF861142792E04BE06B39697C
SHA1:	1715176511209C2917D148CC950BD550F3D33DCE
SHA-256:	938C64115CE60B98EE8151D7EB28208567753F3D4EBBE0AA0F56618C555A18FB
SHA-512:	9E2913865364B5662F48E54E53FA3E515B067E9136180215B3764AEF65FF9C059797983F091A8A982DEAAEECD265E7AA926C19103403CF317311B518D129B243
Malicious:	false
Preview:	!function(t){var n={};function e(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,function(n){return t[n]}.bind(null,o));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=127)}([function(t,n,e){(function(n){var e=function(t){return t&&t.Math==Math&&t};t.exports=e(

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	264704
Entropy (8bit):	5.57015843289642
Encrypted:	false
SSDEEP:	6144:7ZKpmFU7ylq04d7G3BsEemveHNSH0fxnQ4:tzW7yQnhiGb
MD5:	A59BD7493958BBAC6CA3F32BF03C7E81
SHA1:	03D1BF552B47DE7E481D2855C17E5B03B87B7C5A
SHA-256:	ECC2FB11CD46E17449CF56F08D00456B84D03613DF0F148059AB5E4B7A4DF4FA
SHA-512:	82087E7713C4EB3C0B4F14CE9DFD2B54E877E9D5E636AD5B0000C9A77529CE6416F4AE20E5A89DAEFD651C771159E8522E06B1B92F070CC8012C745E1C0145AD
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":17,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":9},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":11},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue"

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14527), with no line terminators
Category:	dropped
Size (bytes):	14528
Entropy (8bit):	5.1640009813418954
Encrypted:	false
SSDEEP:	384:95IqKTmlzypjOjS8X2YGWH0kxp68kGE2/L:9MTmVzP88kPgL
MD5:	78FE4BB890F5080AB806E3C04E34F63D
SHA1:	E6CD4566ADFA0D8AD8F8B48233A8154BF61D5103
SHA-256:	D3C286558922CA8C2C69167698CD61A8280CB03B81BB41D9BD633F80F18C274F
SHA-512:	EF1B77B4568AF6273F9486B0B89A79D0DDCD09D9CCDF495B983C0C4CE56092A4006B1712A1079684F51E125016FC9AD294E311A443D7F6E89968EDFD3DACB72F
Malicious:	false
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var o=n[e]={i:e,l:!1,exports:{}};return t[e].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)r.d(e,o,function(n){return t[n]}.bind(null,o));return e},r.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=128)}([function(t,n,r){(function(n){var r=function(t){return t&&t.Math==Math&&t};t.exports=r(

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1455), with no line terminators
Category:	dropped
Size (bytes):	1455
Entropy (8bit):	5.61631093494502
Encrypted:	false
SSDEEP:	24:CJqlMqLlMsz21MNPunfTsMo1MjNG/mAzKIXLs/USKCvQeHDkoMTamlg:CxqWWNmfTdoqjN2mAeSsTKyQeSTjq
MD5:	D0B248C0CEBD376B7EC1CBEA7C5329A3
SHA1:	82403D169EAA44BF2AA58B6908BCB07AFA78A079
SHA-256:	BB129AE84B94B7F4F4820E6A06A6E3CC21AF79EFF0F60E64418ED0D1921514A5
SHA-512:	4EDB597D385C8A2DB7653A15CE8C1F2AC95EADFE74963C41479296D8C034284D61C6F4691A087DA3C3372101F7841C8A2B0EA4BE91B9C94DE5C3BF5214EF0641
Malicious:	false
Preview:	PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=4746372F-8ECD-4ADF-9F41-B3EFB933B9A4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}');PubMatic.loadAsyncIframePixel('https://matching.truffle.bid/sync/pub?sid=161&suid=ht

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1594
Entropy (8bit):	4.551394996573544
Encrypted:	false
SSDEEP:	24:Yykp5kHK+h+RbVVUKATl3xqimV0Ob0RxcuOh+0/FRM1/ZrhIyHKfRq4D/dMcHSr1:Yy25kH7khfMl34i2LMTFIUKRDjI2w7I0
MD5:	C49EAB523A2431A8E45875ED0203F3D3
SHA1:	62FB93482B11E6E583EA815F8CA00340ECF378FB
SHA-256:	72269C9A18863291012684FE9A63F39442BA877A0A896C2D417A519FE5A78628
SHA-512:	DDEDA1121BF7443309EE42443766E6A5C514AEE199B631DB0DB7B97C302AA1B05A6148ED1014E4779E8C40BF5C7DEFEECF3C986E9FA21E3A0B1E9E42FC63A5BF
Malicious:	false
Preview:	{"dataAsOf":"2024-09-27T00:00:00.000Z","generatedAt":"2024-09-29T16:00:35.521Z","conversions":{"USD":{"USD":1,"JPY":143.0632729879907,"BGN":1.752823086574655,"CZK":22.54705144291092,"DKK":6.683097329270479,"GBP":0.7468901236780786,"HUF":355.7537193045349,"PLN":3.8302563183366196,"RON":4.4599390571787065,"SEK":10.103065065423912,"CHF":0.844237318515863,"ISK":135.06004660333394,"NOK":10.53728266714465,"TRY":34.17601720738484,"AUD":1.4500806596164189,"BRL":5.437175120989425,"CAD":1.3475533249686324,"CNY":7.011113102706579,"HKD":7.773525721455459,"IDR":15109.553683455819,"ILS":3.701021688474637,"INR":83.69241799605665,"KRW":1310.951783473741,"MXN":19.57107008424449,"MYR":4.1250224054490054,"NZD":1.5817350779709627,"PHP":56.09517834737409,"SGD":1.2820397920774333,"THB":32.38483599211328,"ZAR":17.126008245205238,"EUR":0.8962179602079227},"GBP":{"USD":1.3388850224387432,"JPY":191.54527346468598,"BGN":2.3468285775996542,"CZK":30.187909477069287,"DKK":8.947898917660611,"GBP":1,"HUF":476.3133264

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	24
Entropy (8bit):	3.386842188131012
Encrypted:	false
SSDEEP:	3:AVhcRYD:AVhcRm
MD5:	09F71EFBED1212B64851B5A8032EC26F
SHA1:	EC10DB2BD5556DFC406F32AD9DF9944D11B14233
SHA-256:	89F2D4E6C7A6C41C13C2E7A75E526AA60B9D5274FE28B2D82801C6BEB6BEB879
SHA-512:	48B0B3A340EE2DC39A346E8CE4C67697F166362CEFC60247848858A011C23C0E14C8914B90BC431CC063EE96FAB113064EA2DBC36988B2CBFB5F54183AA67E1E
Malicious:	false
Preview:	upstream request timeout

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3048)
Category:	dropped
Size (bytes):	50630
Entropy (8bit):	5.567203834971407
Encrypted:	false
SSDEEP:	768:FLszR7bx8BAwksq59aeVr/o7RNRCr5wOHGGnixwcnbBm0XApzlE:FLst254M7R/CFniuA6a
MD5:	F709CAB17207EEFC8DFEB0B714BAB071
SHA1:	D05704E821CF6BE62891CE11273C95DA8B79F6BB
SHA-256:	D6834A8CF95E5FE5A5F2F73C5B34CFADE97D0636CAC1AC1006627AB6E79D364C
SHA-512:	4FAFB86D74E18BE835F89F8168A9B9AE54A8AD8E64D871C6E4E998C331F62D402628EF942A45C729CE939B16D1DD507E3E7EB7F576C133EF90F46EA989335B92
Malicious:	false
Preview:	(function(){var q,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .t("Symbol",function(a){if(a)return a;var b=function(e,g){this.la=e;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.la};a=Math.random()*1E9>>>0;var c="jscomp_symbol_"+a+"_",d=0,f=func

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49614), with no line terminators
Category:	dropped
Size (bytes):	49614
Entropy (8bit):	5.2703097075400835
Encrypted:	false
SSDEEP:	384:3P8RpA7Kh2sCPvthaGqxcv4Mpg7ZIxJzpbTxGkkk4JoaXUcnxfQpRX0uXbpuYF7f:spJrCzaGqK5g7ZIZb1DsXmtBKKyoOa
MD5:	00FF8001302D3748BA139466FC3910C1
SHA1:	8210E702FE525E6CDDC84758EC51E96A4D703186
SHA-256:	EB4DB95CF7C97CE22BD98D1B95DFD82204843CC8854CBE0B3B6B93BE4FA41A2F
SHA-512:	4005E40F94AB0CAB5968F759C0C3F2B25881439121ED9FDB8E4C7C9E652EE5F8652D64744D34AAA1F01AAE0663A9D4F78C394140F2B661C04AD9A4E01D8D551D
Malicious:	false
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.sw_consent=t():e.sw_consent=t()}(self,(function(){return(()=>{"use strict";var e={186:function(e,t){var n=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")};Object.defineProperty(t,"__esModule",{value:!0});var r=function(){function e(){}return e.prototype.clone=function(){var e=this,t=new this.constructor;return Object.keys(this).forEach((function(n){var r=e.deepClone(e[n]);void 0!==r&&(t[n]=r)})),t},e.prototype.deepClone=function(e){var t,r,o=typeof e;if("number"===o\|\|"string"===o\|\|"boolean"===o)return e;if(null!==e&&"object"===o){if("function"==typeof e.cl

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43601), with no line terminators
Category:	dropped
Size (bytes):	43601
Entropy (8bit):	5.402364414514305
Encrypted:	false
SSDEEP:	768:1d/cUfKfSwsQtstmUCTk110eBgDp4/F7lOkwJTWD:1RcUfpQtw4AWDWtrwJKD
MD5:	AD78EAF46246CAC6849005EB8B50AE6F
SHA1:	18A2EE72E1116EFD8C903102C2453436DA01CE74
SHA-256:	5FD7FC4B8BE9C2EEB3EFB728F0483D444E4A8DB80F0597E4EF7950105638BB08
SHA-512:	9770BCD8EFD5EED0297C608F91C307810FD0056AAE54EF22A71536031D4070BD301F3F1FEBB783193EFE636D124DF2B38FD23970F1BA80C0AD37350047167A4A
Malicious:	false
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16576_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16576_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16576_a(a)}}var sync16576_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16576_c; if("function"==typeof Object.setPrototypeOf)sync16576_c=Object.setPrototypeOf;else{var sync16576_d;a:{var sync16576_ba={Ua:!0}

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1000x750, components 3
Category:	dropped
Size (bytes):	90706
Entropy (8bit):	7.978385110078155
Encrypted:	false
SSDEEP:	1536:71nDB0ousJGRX0H45VF545G1aPGXqW79k/Hfm/foRV1HShaNsFUyrkyr:ZnFBKDzSGlXqWyfUfoj1pWpr
MD5:	5792F579666103440674DE56EA36527D
SHA1:	923534E25F951EFFD15343391F9C1048960072E3
SHA-256:	0A7F2B5EB701DC4EED080F7ADAD0FDC944155096C8DAC95722B017A670A33177
SHA-512:	93574ED308038DDFFEA5391E49D959BC373F27E132031A005BB67569D6444E8F68AC0314C6565B783BA1B43499CFE91B1E1F6F8E1317A9C3F489DFDC29F31C65
Malicious:	false
Preview:	.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................U.........................!1.AQ."aq..2B...#R....3br.C....$%Ss....45c...&Dd...ET.'et................................0........................!1.AQ.2"a.q#3BR..$.4..............?...j..t....V2.S......T.hH.lz..6YX)..r..,.go.=.I7..{.P.&X8.]H\|=.m...>i.tB).c-f..>L..hG.u..OBpGz..Xs..!<hQ.... .S\|.....B..;..X2.m.Q..u.R;P.d..h.i`....I.eC[..D.~.....A.*@...m....J.4../B.<...C..f.(.n._\|.a.@.g".TD.q.E.\u(U..:.jF.NeC..G....#...n. ....E2.h...y...P.qt..dn"@..L..2.............FC...&...E........1.e....{..W...4p.;........+"N.uO.L...;.........U.fQ..f...1.;Ub.......[..S..8...r..q.6...+.q....G;..X....Qv.0~........w..&ar..)......c.67V...$..4.6V../...RE......{..5.:..4)#s[}.^...[]..@.JlN..../fS..6..d..U.c1.Z..a....s..$..T. .]H..XA...s0..)...vy..W..A.._.-dl.. -dJ.b...R".70e..l...xh.N.

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85656
Entropy (8bit):	5.366277182250809
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOi79xfWBZ+Bjda4w9W3qT9a986:v4J+OlfOM9xrCW6T9a98Hr2
MD5:	1D35678C5EDBB639AB7AA5CCE0856F57
SHA1:	3B0F35285A7088B1FD321773696F9D3B45D31942
SHA-256:	DFA729D82A3EFFADAB1000181CB99108F232721E3B0AF74CFAE4C12704B35A32
SHA-512:	40057CEBA29C0A8D984A08FC0FB056F999F715EE7054A4D6C332AD5B2F26916FAD78F7092FB2588A5BDD7EB04541C773E0E0C3E3C1A920F9E14E9F540C8DFBBB
Malicious:	false
Preview:	/! jQuery v2.2.2 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.2",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	868321
Entropy (8bit):	5.658447148927787
Encrypted:	false
SSDEEP:	24576:/G6vg0hzRaegfOue9cPc59BNcMG/nANRoRyNXx:/G6vg0hzR7gfOuHE59BNcMwnANRoRyNh
MD5:	3F8F1344A4882CFAFC5030EAE706770F
SHA1:	6C3DFFAA5A6AD3106ADC5C43338DC3291D29E06D
SHA-256:	373E2D63DF6B75ADCC1DDBA0DCFC511A2F1188D206F02C332FAB189A1EE84165
SHA-512:	D16D31EC8C8D58B1DAD5A6C46F7C5CC00DD7FBC49ED6798734D452DADCBA275271A8BEAC5E90065165E4BAC970C6B954F6E987D517B506CB16CD1383E2927DB2
Malicious:	false
Preview:	!function(n){var r={};function i(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.m=n,i.c=r,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)i.d(n,r,function(e){return t[e]}.bind(null,r));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,n){n(1),n(10)},function(e,t,n){function c(e){return(c="function"==typeof Sy

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32027)
Category:	dropped
Size (bytes):	107354
Entropy (8bit):	5.617432678680746
Encrypted:	false
SSDEEP:	1536:AHepZazzVMczK6CHjJfV31iBf0w8aOz/AY9RxqdOUaeWG5nv:VZanVM4o2MwJ+CdN5v
MD5:	19F9D1D5AFBA3301AE682CC0362CB45E
SHA1:	6F10027B195FEF2472AC9C84C6AD1DBB00648FC8
SHA-256:	AE1319A2E232846A1BAD6E349BE0C22241316BB121DDC2CAF167A6CAA669739B
SHA-512:	5D52D4A26773C5E8D7E756AB1D676B386EF84C704DC87B432DCEF4B394E6AF9AF009AD2C4FB49220B3766B02DE913557E59B8254C1700523C4C0D729F068F717
Malicious:	false
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1594
Entropy (8bit):	4.551394996573544
Encrypted:	false
SSDEEP:	24:Yykp5kHK+h+RbVVUKATl3xqimV0Ob0RxcuOh+0/FRM1/ZrhIyHKfRq4D/dMcHSr1:Yy25kH7khfMl34i2LMTFIUKRDjI2w7I0
MD5:	C49EAB523A2431A8E45875ED0203F3D3
SHA1:	62FB93482B11E6E583EA815F8CA00340ECF378FB
SHA-256:	72269C9A18863291012684FE9A63F39442BA877A0A896C2D417A519FE5A78628
SHA-512:	DDEDA1121BF7443309EE42443766E6A5C514AEE199B631DB0DB7B97C302AA1B05A6148ED1014E4779E8C40BF5C7DEFEECF3C986E9FA21E3A0B1E9E42FC63A5BF
Malicious:	false
Preview:	{"dataAsOf":"2024-09-27T00:00:00.000Z","generatedAt":"2024-09-29T16:00:35.521Z","conversions":{"USD":{"USD":1,"JPY":143.0632729879907,"BGN":1.752823086574655,"CZK":22.54705144291092,"DKK":6.683097329270479,"GBP":0.7468901236780786,"HUF":355.7537193045349,"PLN":3.8302563183366196,"RON":4.4599390571787065,"SEK":10.103065065423912,"CHF":0.844237318515863,"ISK":135.06004660333394,"NOK":10.53728266714465,"TRY":34.17601720738484,"AUD":1.4500806596164189,"BRL":5.437175120989425,"CAD":1.3475533249686324,"CNY":7.011113102706579,"HKD":7.773525721455459,"IDR":15109.553683455819,"ILS":3.701021688474637,"INR":83.69241799605665,"KRW":1310.951783473741,"MXN":19.57107008424449,"MYR":4.1250224054490054,"NZD":1.5817350779709627,"PHP":56.09517834737409,"SGD":1.2820397920774333,"THB":32.38483599211328,"ZAR":17.126008245205238,"EUR":0.8962179602079227},"GBP":{"USD":1.3388850224387432,"JPY":191.54527346468598,"BGN":2.3468285775996542,"CZK":30.187909477069287,"DKK":8.947898917660611,"GBP":1,"HUF":476.3133264

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23843), with escape sequences
Category:	dropped
Size (bytes):	23930
Entropy (8bit):	5.42714919475621
Encrypted:	false
SSDEEP:	384:EqR7eZk8qlPRy4+TWLc2dImKhHQRv9t6A2s7/vINwMViTnGTBKKsomM8LKrY:ENZkblPMud716VKwwIiOKDkDY
MD5:	1CFFDD5C82CD0AFF2F453D352EA5903A
SHA1:	1BA286119EEEC53D6C99E2ED640D75EBD467B244
SHA-256:	20133CC700841EC85F087FF9834A922B482B9135E98574A9AFEBADE4C754558C
SHA-512:	7A625952E55D00A0A8D6B8E075375D27A6AD81A01A615FE430C08FFC56CF62E2745EF09E102EAED4DB35C4A5EDFB439DB64986A11234C3DE70FA7C459214F599
Malicious:	false
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function a(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function i(){return Math.round(2147483647*Math.random())}var c=/qcdbgc=1$/.test(window.location.toString());function u(e,t){if("undefined"!=typeof console){var n="ERROR"===e?".[41m QuantJS .[0m":".[44m QuantJS .[0m";console.log.apply(console,[n].conca

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	272
Entropy (8bit):	4.932428905055227
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeCWxRZ8oklZqMz3s6VT3RxK9MGJG5oenM:8DIGoXbfCYKpEe3RZ8q03sWTrK95JTeM
MD5:	58A763CD057594F88B8F6A2A43BFE08C
SHA1:	8D8F4BA556CD8279673D846695E896181AA41772
SHA-256:	1F27302A3E8090A7019C146F7F9EA35E971E1A1A9DEC97DD56B539083CC0FED5
SHA-512:	F1A191DDD8A298DC68AB3453DE9B051183691C28F51F589C764ED1BD07E818702C4AD42EBDB760E45C27C5C4E631BA535D9F6E73C25ECEBEC82FB30E50FED240
Malicious:	false
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Outbrain","cb":"1"})

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2873)
Category:	dropped
Size (bytes):	9031
Entropy (8bit):	5.527216820529872
Encrypted:	false
SSDEEP:	192:B1/6bZSDg3eksiGBpuMo5gXKl7LOjbke3CT2itXedSlFI:B1/6bZSDqeYGBbnal7LCbkkCT2oXedS8
MD5:	0A69A7A3530DE318072DE6182E31A0C6
SHA1:	9BF1165A0064FB85DD8F29DDC6C45AD5B9574EE9
SHA-256:	BF1E2557855835794A8A1D9C1403AC53373CCEA3006325357E5CB384E93D7514
SHA-512:	9B24B0255A19285BF345BB199BAFF4DCCACBB55521FA0581E2AB196D5C28EC936749C6F9A21233261CBDE37033DA5C91D7F03A3A1FE4B25D8F325A7717760740
Malicious:	false
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v}var ba=n&&n[610401301];m=ba!=null?ba:!1;function ca(){var a=l.navigator;return a&&(a=a.userAgent)?a:""}var A;const da=l.navigator;A=da?da.userAgentData\|\|null:null;function B(a){return m?A?A.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function C(a){return ca().indexOf(a)!=-1};function E(){return m?!!A&&A.brands.length>0:!1}function F(){return E()?B("Chromium"):(C("Chrome")\|\|C("CriOS"))&&!(E()?0:C("Edge"))\|\|C("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61446)
Category:	dropped
Size (bytes):	903601
Entropy (8bit):	5.542639129707521
Encrypted:	false
SSDEEP:	6144:UzZnHVa6PSjKmXNJ6wwQrVDctAKjKmXNJ6wwQrVDcSjKmXNJ6wwQrVDc8jpROxmO:+nsdiBhROxmCxvJVCgbZpItCN77aU
MD5:	12A3C1EDB661853D05C11C16A3C03871
SHA1:	08A639A57ED3165C3E6C70900182585FA7E68BEF
SHA-256:	678765AB9F45BCFE3F8CDB0B247CC1F6968A06170911C4D742371AC8B09DE4E5
SHA-512:	DB8214C018711BF0AE02691E23E6014FC47F2F87D84386FE6BA3B4436443DEF4AA2A393CA1A762E2A283EC6ACF6DDD740B294D55DB39465C9F44ECA952B30F53
Malicious:	false
Preview:	/! For license information please see videoUtils-22e089ff-1721378485014.js.LICENSE.txt /.(()=>{var e={495:(e,t,i)=>{"use strict";var n=i(840);e.exports=function(e,t){return void 0===t&&(t=!1),function(i,r,s){if(i)e(i);else if(r.statusCode>=400&&r.statusCode<=599){var o=s;if(t)if(n.TextDecoder){var a=(void 0===(l=r.headers&&r.headers["content-type"])&&(l=""),l.toLowerCase().split(";").reduce((function(e,t){var i=t.split("="),n=i[0],r=i[1];return"charset"===n.trim()?r.trim():e}),"utf-8"));try{o=new TextDecoder(a).decode(s)}catch(e){}}else o=String.fromCharCode.apply(null,new Uint8Array(s));e({cause:o})}else e(null,s);var l}}},36:(e,t,i)=>{"use strict";var n=i(840),r=i(634),s=i(56);l.httpHandler=i(495);var o=function(e){var t={};return e?(e.trim().split("\n").forEach((function(e){var i=e.indexOf(":"),n=e.slice(0,i).trim().toLowerCase(),r=e.slice(i+1).trim();void 0===t[n]?t[n]=r:Array.isArray(t[n])?t[n].push(r):t[n]=[t[n],r]})),t):t};function a(e,t,i){var n=e;return s(t)?(i=t,"string"==t

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (745)
Category:	dropped
Size (bytes):	1403
Entropy (8bit):	5.150059387548565
Encrypted:	false
SSDEEP:	24:2QoU4TZM2p6KaDNalKBsaA1G6PFxCOXskAvA0oIKz9YMxN5HK6cKgeyH5nK5xzue:B4TZM2plh65A0o7pNpK6qH45duMDpos
MD5:	FD02EDF106D5501F7E87D17452887750
SHA1:	500F64B65CF47E7A10B720648054C208F61F4719
SHA-256:	8E1B84265E633C043720DD0921476C16BC9F75E393E855C9116CA7C3A847B5C7
SHA-512:	82C44C65CA8242B12593D4F782E862834C0F1F958951CD97F7CB42F37A9A31DF7B834F2FAAC12EE6646FECE37B1C26F8361BE0084B28CC6B24160BC1BFC8F26F
Malicious:	false
Preview:	(function(){var f=window,g="items",h="prototype",l="hasOwnProperty";var m={id:"ti",affiliation:"ta",revenue:"tr",tax:"tt",shipping:"ts",currency:"cu"},n={id:"ti",sku:"ic",name:"in",category:"iv",price:"ip",quantity:"iq",currency:"cu"},p={items:!0};var q=function(a){a.send&&(this.c=a,this.a={})};q[h].e=function(a){r(this,a.id,a)};q[h].d=function(a){var b=r(this,a.id);b[g]\|\|(b.items={});var c=b[g][""+a.sku],e=c\|\|{};b.currency&&(e.currency=b.currency);for(var d in a)a[l](d)&&a[d]&&(e[d]=a[d]);c\|\|(b[g][""+a.sku]=e)};q[h].f=function(){if(!this.c)throw"No tracker found.";for(var a in this.a)if(this.a[l](a)){var b=this.a[a];s(this,"transaction",b,m);var b=b[g],c;for(c in b)b[l](c)&&s(this,"item",b[c],n)}this.b()};q[h].b=function(){this.a={}};.var r=function(a,b,c){if(!b)throw"Transaction id is a required field.";b=""+b;var e=a.a[b];e\|\|(e={},e.id=b);for(var d in c)c[l](d)&&c[d]&&(e[d]=c[d]);a.a[b]=e;return a.a[b]},s=function(a,b,c,e){var d={},k;for(k in c)c[k]&&c[l](k)&&(e[l](k)?d["&"+e[k]]=c[

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (28302)
Category:	dropped
Size (bytes):	105773
Entropy (8bit):	5.4883920551670995
Encrypted:	false
SSDEEP:	1536:lTQn6LOuNJiVKDqvZHghYjB1KdDIipGOrHkwxqm1RUXCNqvs727ir4ffooY+:enVKsjB1K6EFrHkMqQRrNqvb7d
MD5:	6720D5FF3999C3DFA856DCEF9ACBC689
SHA1:	F744687FF51F8C758EE83839C82AFEB21CF079AB
SHA-256:	1C4445F7B3A872A00B8CEE6290D921ACBD528038A8ACF05C963B3E5B5AF32317
SHA-512:	55ADAE8A1AD2B7CEE3F9E84DB80FF3D48CE25B65D6036B455ABD47CA58AB071AEA56A0736C0971BCECD410552875EC61CDCEDF84217679C4E4C4B316E304D17D
Malicious:	false
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (41240), with no line terminators
Category:	dropped
Size (bytes):	41240
Entropy (8bit):	5.486208173780917
Encrypted:	false
SSDEEP:	768:bOnQkmXmVEGA5hTH6wzJzhUf2awTf58YqP3QXMYEei5FEclnEp/sU3v9Yc:KnKaEr593zJ1UOawyFeeEp/pv9Yc
MD5:	CAD91A5224C24FE72B8E7A93BC5647AD
SHA1:	2984961DAF5D47C65E420AEFCB2457A5D643F853
SHA-256:	952E970E1EC5E946A7A3F3C1799B0C9175DCEA84FA1D91F871D79849E4F11BD2
SHA-512:	222A140A13F8B437EEB3F83877548EB15F3425EBFFE356026CC9D2A9FF49FE98DE4A8049018CC2930F92D790BC224F9DEE15E5C1DE58079B44B9B74133E0E086
Malicious:	false
Preview:	(()=>{var e={955:e=>{e.exports={ver:1,feedbackUrl:"//feedback.adrecover.com/ARWebService/feedback",hbFeedbackUrl:"//feedback.adrecover.com/ArHbWebService/feedback",frameDomain:"//delivery.adrecover.com",rendererIframeUrl:"/recover.html",auctionIframeUrl:"/auction.html",adRequestOptimizerIframeUrl:"/adRequestOptimizer.html",xpathWaitTimeout:5e3,domain:"",previewSetupStr:"previewSetup",previewComplianceStr:"previewCompliance",adTextHeightAboveAd:14,heartBeatInterval:3e4,heartBeatStartDelay:2e3,AUCTION_IFRAME_ID:"ar-hb-auction-iframe",REQUEST_BLOCKING_RULE_FETCHER_IFRAME_ID:"ar-request-blocking-rule-engine",REFRESH_TYPES:{AT:"Active Tab",BG:"Background",AV:"Active View"},DEFAULT_REFRESH_INTERVAL:3e4,DEFAULT_REFRESH_TYPE:"BG",REFRESH_BATCHING_INTERVAL:100,DEFAULT_DATDOG_LOG_SAMPLING:2,DATADOG_LOGGING_VERSION:1,refreshEligibleCountries:["AU","AT","BE","BR","HR","DK","FR","DE","HK","KR","MX","NL","PE","PL","SG","SI","ES","SE","CH","AE","TR","GB","US","JP"],noAdLabelSiteList:[37741,37740,4272

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3078
Entropy (8bit):	5.248403812695168
Encrypted:	false
SSDEEP:	96:b6RUgc0OmZkiNzEDaTpXpDidLqhPkTb7Dty1UP/uCj:b6mZ0Otwfid2hc3Ny1ej
MD5:	0510C77EC86184B8FF1468CE2BA2C948
SHA1:	118FB14DEEFA1D12A632190863D7CD1370BA5584
SHA-256:	6A4869317C124E5B256EDF05E6B0C5217F331BED0836ABDED96CC2F4B4718823
SHA-512:	6D667816DEB4561C4E5A2C75A6639B2A35A620DFF5CE0220AD6571D8ECF939CE0D75CD0720BA6F44C0C40A6DB35C6EC3C93CD7A5927561D73B72CB68F97439A7
Malicious:	false
Preview:	{"3pvendor":"if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag);\n};;var audigentPropertyId = '777';\nif (audigentPropertyId && audigentP

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130
Entropy (8bit):	4.951993225504516
Encrypted:	false
SSDEEP:	3:OXMRp/A6MB2jk4lBVQA8K4HTrvLyTHJADWAidjv3PY:OXOHMB2jkUbN4T2py6g
MD5:	FAD6723551AA9D82E8DDB8E4EDA49562
SHA1:	E62DF033D5408A8CDE76286651B09C98ED41F2D6
SHA-256:	2BF5F5E1B4091A4CD8FA2ABA2EA03D70C838FFBDA6D5B5553004F57AF80D22FE
SHA-512:	6603F249418BA08DBCF61A924E6BE101D7FA859BCE6B3FEF49B314801D70CA4B68FBD0B75AF11761B2A815D3D44C4A3802D46239B9D326B68BC3D8861E490EAC
Malicious:	false
Preview:	{. "addr": "8.46.123.33",. "base_id": "cr75DWaZf823c174c3749853ba0c807b",. "domain": "multitran.com",. "guid": "3NReH58FJfN".}

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8923), with no line terminators
Category:	dropped
Size (bytes):	8923
Entropy (8bit):	5.423720580298053
Encrypted:	false
SSDEEP:	192:XeqyXzeyIPGyFyyweB/NO1EZEmR1tjZasG4557ThNBFkumAagW/f2rl9Ee6:XeqyXzeyWGyFyy761EZEmRTjAsX7ThNm
MD5:	A421CAFD19C21284BE567B12002CF378
SHA1:	04EB45DB143D2E7E878CD42EF62B5BB353B2F1B5
SHA-256:	44295993215F23E61ED69DDF661A6529E7A66099F2B7A52CD40EFE10432E7DE9
SHA-512:	0C7CAA56ECC9FAACAD8A359E49640B02DEB87A3E2F784BAD10056CEC70A8DF1B94E2F7E905158E1445A6CB1102EBBACF876432EAAD59991EBFF35D86D668BB49
Malicious:	false
Preview:	<html><head><link rel="icon" href="data:,"></head><body><script>(()=>{var e={192:(e,t,n)=>{const o=n(662),r="https://ads.servenobid.com",i=function(e){const t=window.nobidQueryString.gdpr?Number(window.nobidQueryString.gdpr):0,n=window.nobidQueryString.gdpr_consent?window.nobidQueryString.gdpr_consent:"";let o="1YN-";window.nobidQueryString.usp_consent?o=window.nobidQueryString.usp_consent:window.nobidQueryString.us_privacy&&(o=window.nobidQueryString.us_privacy);const r="gdpr="+t+"&gdpr_consent="+n+"&us_privacy="+o+"&";return e?encodeURIComponent(r):r},s=function(e,t,n,o){if(document.body){const i=document.createElement("iframe");i.style.display="none";const s=void 0!==n&&n?n:"";i.src=t+(o?"":encodeURIComponent(r+"/sync?pid="+e+"&uid="+s)),document.body.appendChild(i)}else setTimeout((function(){s(e,t,n)}),3e3)},c=function(e,t,n,o){if(document.body){const i=void 0!==n&&n?n:"",s=new Image(0,0);s.style.display="none",s.src=t+(o?"":encodeURIComponent(r+"/sync?pid="+e+"&uid="+i))}else set

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61446)
Category:	dropped
Size (bytes):	903601
Entropy (8bit):	5.542639129707521
Encrypted:	false
SSDEEP:	6144:UzZnHVa6PSjKmXNJ6wwQrVDctAKjKmXNJ6wwQrVDcSjKmXNJ6wwQrVDc8jpROxmO:+nsdiBhROxmCxvJVCgbZpItCN77aU
MD5:	12A3C1EDB661853D05C11C16A3C03871
SHA1:	08A639A57ED3165C3E6C70900182585FA7E68BEF
SHA-256:	678765AB9F45BCFE3F8CDB0B247CC1F6968A06170911C4D742371AC8B09DE4E5
SHA-512:	DB8214C018711BF0AE02691E23E6014FC47F2F87D84386FE6BA3B4436443DEF4AA2A393CA1A762E2A283EC6ACF6DDD740B294D55DB39465C9F44ECA952B30F53
Malicious:	false
Preview:	/! For license information please see videoUtils-22e089ff-1721378485014.js.LICENSE.txt /.(()=>{var e={495:(e,t,i)=>{"use strict";var n=i(840);e.exports=function(e,t){return void 0===t&&(t=!1),function(i,r,s){if(i)e(i);else if(r.statusCode>=400&&r.statusCode<=599){var o=s;if(t)if(n.TextDecoder){var a=(void 0===(l=r.headers&&r.headers["content-type"])&&(l=""),l.toLowerCase().split(";").reduce((function(e,t){var i=t.split("="),n=i[0],r=i[1];return"charset"===n.trim()?r.trim():e}),"utf-8"));try{o=new TextDecoder(a).decode(s)}catch(e){}}else o=String.fromCharCode.apply(null,new Uint8Array(s));e({cause:o})}else e(null,s);var l}}},36:(e,t,i)=>{"use strict";var n=i(840),r=i(634),s=i(56);l.httpHandler=i(495);var o=function(e){var t={};return e?(e.trim().split("\n").forEach((function(e){var i=e.indexOf(":"),n=e.slice(0,i).trim().toLowerCase(),r=e.slice(i+1).trim();void 0===t[n]?t[n]=r:Array.isArray(t[n])?t[n].push(r):t[n]=[t[n],r]})),t):t};function a(e,t,i){var n=e;return s(t)?(i=t,"string"==t

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	dropped
Size (bytes):	779
Entropy (8bit):	5.489282572569137
Encrypted:	false
SSDEEP:	24:OfwQ9+woZdphxxjAVhZsmpnzn8XTwoZtPphg1j3VhZ6jpnzC9XX:OfwGtOPTAVBNzGMOPPgp3V0NzC1X
MD5:	598C89904B612360235CF5F468D0BA6B
SHA1:	F4C9FB6ACCF02B2DF5E7E42B4B525603ACB71557
SHA-256:	AEC0EC42A0BF0B10CC6FC536A27A863418365BBEF782CF16F1FFBD69252E9C09
SHA-512:	2EFA71C9469B277D0C6993A034A23746AF0B6152E396FFCCA6DD412595E31FB2C9773CB91C1191AD1FAE3D704292B6C41119FB7E700A51409F14E5D49C43BE16
Malicious:	false
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-INDEPENDENT-SEGMENTS.#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio",LANGUAGE="eng",NAME="English",AUTOSELECT=YES,DEFAULT=YES,URI="hls/eng/main.m3u8".#EXT-X-STREAM-INF:BANDWIDTH=715328,AVERAGE-BANDWIDTH=439290,CODECS="avc1.64001e,mp4a.40.2",RESOLUTION=640x360,FRAME-RATE=25.000,AUDIO="audio".hls/360p/main.m3u8.#EXT-X-I-FRAME-STREAM-INF:BANDWIDTH=117674,AVERAGE-BANDWIDTH=65530,CODECS="avc1.64001e",RESOLUTION=640x360,URI="hls/360p/main_I-Frame.m3u8".#EXT-X-STREAM-INF:BANDWIDTH=1308280,AVERAGE-BANDWIDTH=650178,CODECS="avc1.64001e,mp4a.40.2",RESOLUTION=848x480,FRAME-RATE=25.000,AUDIO="audio".hls/480p/main.m3u8.#EXT-X-I-FRAME-STREAM-INF:BANDWIDTH=173377,AVERAGE-BANDWIDTH=105000,CODECS="avc1.64001e",RESOLUTION=848x480,URI="hls/480p/main_I-Frame.m3u8".

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43601), with no line terminators
Category:	dropped
Size (bytes):	43601
Entropy (8bit):	5.402364414514305
Encrypted:	false
SSDEEP:	768:1d/cUfKfSwsQtstmUCTk110eBgDp4/F7lOkwJTWD:1RcUfpQtw4AWDWtrwJKD
MD5:	AD78EAF46246CAC6849005EB8B50AE6F
SHA1:	18A2EE72E1116EFD8C903102C2453436DA01CE74
SHA-256:	5FD7FC4B8BE9C2EEB3EFB728F0483D444E4A8DB80F0597E4EF7950105638BB08
SHA-512:	9770BCD8EFD5EED0297C608F91C307810FD0056AAE54EF22A71536031D4070BD301F3F1FEBB783193EFE636D124DF2B38FD23970F1BA80C0AD37350047167A4A
Malicious:	false
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16576_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16576_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16576_a(a)}}var sync16576_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16576_c; if("function"==typeof Object.setPrototypeOf)sync16576_c=Object.setPrototypeOf;else{var sync16576_d;a:{var sync16576_ba={Ua:!0}

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85656
Entropy (8bit):	5.366277182250809
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOi79xfWBZ+Bjda4w9W3qT9a986:v4J+OlfOM9xrCW6T9a98Hr2
MD5:	1D35678C5EDBB639AB7AA5CCE0856F57
SHA1:	3B0F35285A7088B1FD321773696F9D3B45D31942
SHA-256:	DFA729D82A3EFFADAB1000181CB99108F232721E3B0AF74CFAE4C12704B35A32
SHA-512:	40057CEBA29C0A8D984A08FC0FB056F999F715EE7054A4D6C332AD5B2F26916FAD78F7092FB2588A5BDD7EB04541C773E0E0C3E3C1A920F9E14E9F540C8DFBBB
Malicious:	false
Preview:	/! jQuery v2.2.2 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.2",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	dropped
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.723231428797621
Encrypted:	false
SSDEEP:	3:YQZoM/9WUghIcbfnHYn:YQP/9W55Yn
MD5:	4775C20C71B9F73D9F7B740311281966
SHA1:	72C33AE1B68600FE3C632F13C037DB61D8264623
SHA-256:	0919E613419116E8EEA640987578D0B50A31E7FDEF364D14C63D67EBA1355E76
SHA-512:	FA5198A0614CB6821AAC9854126417373EF6A5876F0939668BF159CB316C444EDB09DC93F833E88C8F3F5450729911F7C2D578C25F098CB993DB0FDE72CDBD6D
Malicious:	false
Preview:	{"url_key_mapping_0":"05b931d2-cfd8-11ea-9450-6807152005bb"}

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1000x750, components 3
Category:	dropped
Size (bytes):	90706
Entropy (8bit):	7.978385110078155
Encrypted:	false
SSDEEP:	1536:71nDB0ousJGRX0H45VF545G1aPGXqW79k/Hfm/foRV1HShaNsFUyrkyr:ZnFBKDzSGlXqWyfUfoj1pWpr
MD5:	5792F579666103440674DE56EA36527D
SHA1:	923534E25F951EFFD15343391F9C1048960072E3
SHA-256:	0A7F2B5EB701DC4EED080F7ADAD0FDC944155096C8DAC95722B017A670A33177
SHA-512:	93574ED308038DDFFEA5391E49D959BC373F27E132031A005BB67569D6444E8F68AC0314C6565B783BA1B43499CFE91B1E1F6F8E1317A9C3F489DFDC29F31C65
Malicious:	false
Preview:	.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................U.........................!1.AQ."aq..2B...#R....3br.C....$%Ss....45c...&Dd...ET.'et................................0........................!1.AQ.2"a.q#3BR..$.4..............?...j..t....V2.S......T.hH.lz..6YX)..r..,.go.=.I7..{.P.&X8.]H\|=.m...>i.tB).c-f..>L..hG.u..OBpGz..Xs..!<hQ.... .S\|.....B..;..X2.m.Q..u.R;P.d..h.i`....I.eC[..D.~.....A.*@...m....J.4../B.<...C..f.(.n._\|.a.@.g".TD.q.E.\u(U..:.jF.NeC..G....#...n. ....E2.h...y...P.qt..dn"@..L..2.............FC...&...E........1.e....{..W...4p.;........+"N.uO.L...;.........U.fQ..f...1.;Ub.......[..S..8...r..q.6...+.q....G;..X....Qv.0~........w..&ar..)......c.67V...$..4.6V../...RE......{..5.:..4)#s[}.^...[]..@.JlN..../fS..6..d..U.c1.Z..a....s..$..T. .]H..XA...s0..)...vy..W..A.._.-dl.. -dJ.b...R".70e..l...xh.N.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56888), with no line terminators
Category:	dropped
Size (bytes):	56888
Entropy (8bit):	5.418495886740826
Encrypted:	false
SSDEEP:	768:tvB5S2oiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4G:kE
MD5:	1E77F38A1DF1490D4175E3C4878BD150
SHA1:	555B823C75571D723FA86F42C6A4710AE97AE9A2
SHA-256:	492DB2CA577F4D221E3E28239C19E7DB05F1701B298BF278FC4D1FCB92563586
SHA-512:	0808FDAB6BE9051A251C951990A7EBEA4777BF5A83A82884BF28DB733E5CDF6FC763F9DCA243F5848E91ABEBA7A5FF47533C478686DFC410ACBA9EFF7D7CFFE7
Malicious:	false
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	190
Entropy (8bit):	4.724649190606844
Encrypted:	false
SSDEEP:	3:YRMZXKOLz59ifHtKfnS3uWwMLjSnBMB3RYAs2HJHdLUfNVJpPdFH/JJVrmV:Y+T98NruW3LunAYlGdLUfNVJpPDfJJVU
MD5:	72EE6B03CD3D70450D566B2E66E8992F
SHA1:	9AF52020A954D60319878A881B741BAE8A3B93C5
SHA-256:	71F0C958E33905CB028DFD76FF7FCFFA9D57A260845594E84D116530E3F80A36
SHA-512:	D21327FED8735C7C1A636A1784A19A07F40E0F155C58483147745B2D2936D000C4F5CCD0B8E6E7B5298C362508102235343B0A7D9D927BF4A88F012D714636F8
Malicious:	false
Preview:	{"tid":681,"solution":[{"name":"publink","src":"https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js","configName":"publink_options","config":{"pubcid":{},"loadAts":false}}]}

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31061), with LF, NEL line terminators
Category:	dropped
Size (bytes):	55092
Entropy (8bit):	5.295786539632903
Encrypted:	false
SSDEEP:	1536:XFbSKxfqPPkqR3KQXd+2KundjO43OeqiZEL6RZe7:VuqPBM3OD7
MD5:	42030B0BDFFEC6A0E52EED3CA3229DD3
SHA1:	FF8CC8D1EC900A9F7135C7A361810549C40406B1
SHA-256:	43F804D38A294C6DF1CE8EE64FB95AD0FF5A8D6D5685D9537DF02212668A1DFF
SHA-512:	5B97FF7174BC06198BE133CE87F98AEF38F7FF66923D4DAE27054066BC4231B216F282310D5162AB06BE904EFE99479AB70B26E68943999B514533BCD6A42498
Malicious:	false
Preview:	/!. pubcid.js 2.0.5 - https://github.com/prebid/Shared-id-v2/. * SPDX-License-Identifier: Apache-2.0. */!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)}

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4013)
Category:	dropped
Size (bytes):	154566
Entropy (8bit):	5.601244721149456
Encrypted:	false
SSDEEP:	3072:PoxdQ7J+uqzVSMTu4jtJb+bVDiYKedaqB+mfT7lH6rKmC+PXCD0ZfRAAyaR3:PoxdQ8uqzVSMTu4jtJKBDiYKeEqB5fTY
MD5:	911A0A26D09497C7D34FB72964A104AB
SHA1:	DDBEBED48095BB71A93970FCC570B24BB2D5F5A4
SHA-256:	DDEA855747D9E3AB5D0B752FC323025DF208942FC6237C4357233D2825062B66
SHA-512:	A3B85F04CD1D162BE40BDCCE23843B4CF2C00760522359BCBEDC002311FE3124B29DB8665D22237CC6A7C82E5CA256B1F50392760053F9B11C26BC7E9CFDCE51
Malicious:	false
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.422459369377636
Encrypted:	false
SSDEEP:	12:PGfPdycycd2YyIDeg9ignuVnU7545S/9P4uNcN9W8M18bNGNwJg9gGkUYWuU1RDW:OfzSgL/mV6v+uPDRxTBBAWnfijJX
MD5:	4DC01FC4A5D09712550850529A1E0C07
SHA1:	5FF41C09E34035F7723EC26A0638066BF9DF00D1
SHA-256:	95E39DBA0505355BB4966C7439A10E87288A76865645F12789533104E30D963B
SHA-512:	97C6E1E39CB08620C582000C6AA3B5EE03843211539312AE202D1B6F280297C622B143CA6C5F9B9C28CDADBF35028DFA4CDF4E27FD502FA4E130039F58FC0166
Malicious:	false
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-TARGETDURATION:4.#EXT-X-MEDIA-SEQUENCE:1.#EXT-X-PLAYLIST-TYPE:VOD.#EXTINF:4.000,.main_00001.ts.#EXTINF:4.000,.main_00002.ts.#EXTINF:4.000,.main_00003.ts.#EXTINF:4.000,.main_00004.ts.#EXTINF:4.000,.main_00005.ts.#EXTINF:4.000,.main_00006.ts.#EXTINF:4.000,.main_00007.ts.#EXTINF:4.000,.main_00008.ts.#EXTINF:4.000,.main_00009.ts.#EXTINF:4.000,.main_00010.ts.#EXTINF:4.000,.main_00011.ts.#EXTINF:4.000,.main_00012.ts.#EXTINF:4.000,.main_00013.ts.#EXTINF:4.000,.main_00014.ts.#EXTINF:4.000,.main_00015.ts.#EXTINF:4.000,.main_00016.ts.#EXTINF:4.000,.main_00017.ts.#EXTINF:4.000,.main_00018.ts.#EXTINF:4.000,.main_00019.ts.#EXTINF:4.000,.main_00020.ts.#EXTINF:4.000,.main_00021.ts.#EXTINF:4.000,.main_00022.ts.#EXTINF:4.000,.main_00023.ts.#EXTINF:4.000,.main_00024.ts.#EXTINF:4.000,.main_00025.ts.#EXTINF:4.000,.main_00026.ts.#EXTINF:4.000,.main_00027.ts.#EXTINF:4.000,.main_00028.ts.#EXTINF:4.000,.main_00029.ts.#EXTINF:4.000,.main_00030.ts.#EXTINF:4.000,.main_00031.ts.#EX

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.540555438036487
Encrypted:	false
SSDEEP:	3:YIzXl0fkvPL7exaLjJp2ERh2in:YIjl0cXnexSJp2Eein
MD5:	473E4B36E07048E5F44049958A0C1A5C
SHA1:	5C43C070CD58696BD5AA867849993FD54A2F7DCB
SHA-256:	519864B1E7D420ABFEC7EEA36517261F18642D186F7B1BEEC183FC93BC533CCF
SHA-512:	BD7047F0BA2E646D623EDDA72EDBF3393CB88C362CA81443189DDEA7B72C474461554FCFF837D13B9969E7B2184BC778C601837EC31DB73DBA72AF2F2EE70391
Malicious:	false
Preview:	{"message":"Route GET:/v1/openrtb not found","error":"Not Found","statusCode":404}

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65467)
Category:	dropped
Size (bytes):	899658
Entropy (8bit):	5.350204169370189
Encrypted:	false
SSDEEP:	12288:eAV7QDzMmGv49nI0soQlWWCihyiBjGAfJciiR9R:3Q8mGQ1soQlWWCihyiBjGAfJcZR9R
MD5:	D904C2A669BF7724222047E8ED40DF44
SHA1:	34092A3F52610FA4723EA7E6AC9C201FBFB6D987
SHA-256:	D95B066BA718DA0C1909C69F15D0E32373B0B53AFB952F5CD414C0FC2A00A2C9
SHA-512:	C0FC8F6021733F63A91FA5B2CF26DE6BC9638875B475029F76607E15EC8299C1B07D8DDCD070EC92C55B83E474DF0F14083B44E9B4A1516AA2D34CCF1AB1C98C
Malicious:	false
Preview:	/! For license information please see videoBundle.js.LICENSE.txt /.(()=>{var e={2505:(e,t,n)=>{e.exports=n(8015)},5592:(e,t,n)=>{"use strict";var r=n(9516),i=n(7522),o=n(3948),a=n(9106),s=n(9615),c=n(2012),u=n(4202),l=n(4896),d=n(5845),f=n(8563),p=n(5656);e.exports=function(e){return new Promise((function(t,n){var h,v=e.data,m=e.headers,g=e.responseType;function y(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}r.isFormData(v)&&r.isStandardBrowserEnv()&&delete m["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var w=e.auth.username\|\|"",E=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";m.Authorization="Basic "+btoa(w+":"+E)}var S=s(e.baseURL,e.url);function _(){if(b){var r="getAllResponseHeaders"in b?c(b.getAllResponseHeaders()):null,o={data:g&&"text"!==g&&"json"!==g?b.response:b.responseText,status:b.status,statusText:b.statusText,headers:r,config:e,request:b};i((function(e){t(e),y()}),(function(e){n(e),y()}),o),b=nu

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.377567157116928
Encrypted:	false
SSDEEP:	3:mSPe1PRDyuSUln:mSyRDyPC
MD5:	F51735FF3351B4593AC65E6A9DA7197C
SHA1:	DA0FFFF17CF3615852A9074C49C83E1DDAC76B8A
SHA-256:	1C59714D56C78DB546A324FB924D1621786E7C047F346175F824B047BFBCEE94
SHA-512:	F8C2153DD6E2CBFC342BE72C6621587CBDC50D6613512156C184DDC8EBCD097A6A4D25C515A4F1C83E6DC4EA59AF1FE12931DB1D364A7EA46F3D9039AC4CCB3A
Malicious:	false
Preview:	ChsKBw0TNArOGgAKBw1+dr+9GgAKBw3v1XmJGgA=

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	dropped
Size (bytes):	2033
Entropy (8bit):	4.604649200608636
Encrypted:	false
SSDEEP:	12:PGfSd2wM5zWRekI50L04X0W9lDL5xLf/o5TmQy4Ws5ec9mg5iMGgvWvxtLRFuG9g:OfHjK8ttfFzuaC7Ws6NJ
MD5:	50ED6EEB08C43DB6DC32BC0AC5677AC3
SHA1:	0B816B75676DAE2D72D273435550237A9E63B48B
SHA-256:	9639E0D06615990D857BF9BC3E2D81195DD2FA86DEC0619421A707B08725548E
SHA-512:	3F200FAEEA5BCCFBD0DCC1597179188AA06F0D09715C4B7F2C2C0EC4917C05FB6647795535DE1CB2B5723A715474E4F5FFF54F911959B52E50862662B862D161
Malicious:	false
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-TARGETDURATION:5.#EXT-X-MEDIA-SEQUENCE:1.#EXT-X-PLAYLIST-TYPE:VOD.#EXTINF:4.053,.main_00001.aac.#EXTINF:3.989,.main_00002.aac.#EXTINF:4.011,.main_00003.aac.#EXTINF:3.989,.main_00004.aac.#EXTINF:4.011,.main_00005.aac.#EXTINF:3.989,.main_00006.aac.#EXTINF:4.011,.main_00007.aac.#EXTINF:3.989,.main_00008.aac.#EXTINF:4.011,.main_00009.aac.#EXTINF:3.989,.main_00010.aac.#EXTINF:4.011,.main_00011.aac.#EXTINF:3.989,.main_00012.aac.#EXTINF:4.011,.main_00013.aac.#EXTINF:3.989,.main_00014.aac.#EXTINF:4.011,.main_00015.aac.#EXTINF:3.989,.main_00016.aac.#EXTINF:4.011,.main_00017.aac.#EXTINF:3.989,.main_00018.aac.#EXTINF:4.011,.main_00019.aac.#EXTINF:3.989,.main_00020.aac.#EXTINF:4.011,.main_00021.aac.#EXTINF:3.989,.main_00022.aac.#EXTINF:4.011,.main_00023.aac.#EXTINF:3.989,.main_00024.aac.#EXTINF:4.011,.main_00025.aac.#EXTINF:3.989,.main_00026.aac.#EXTINF:4.011,.main_00027.aac.#EXTINF:3.989,.main_00028.aac.#EXTINF:4.011,.main_00029.aac.#EXTINF:3.989,.main_00030.aac.#E

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15896), with no line terminators
Category:	dropped
Size (bytes):	15896
Entropy (8bit):	5.503616373683869
Encrypted:	false
SSDEEP:	384:GGJ01yJn5yOIVmxV/ZUN/4hDEwu85wWoJNmpPvIE:GGJ00JngOCyZ+8l2Wush
MD5:	C73E0CB111244BC0796DA0E83348068B
SHA1:	C83D2843508D6BA4827C2DCA0670FFBDD4F1E4ED
SHA-256:	9913C1ABBE147B7CC94C91FBE26B22D24F72B98F4DA5514D376A473B3D10ACD5
SHA-512:	9DF2085B42D146263164156B483EFEBB829DD49434591A2F511A4DE31E69A469DB4612C200382A9CABE10F11A3C5C52EB89AC7590F02149367BB144AC65E6CD9
Malicious:	false
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aF){return typeof aF==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(an(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&an(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},aq=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	868321
Entropy (8bit):	5.658447148927787
Encrypted:	false
SSDEEP:	24576:/G6vg0hzRaegfOue9cPc59BNcMG/nANRoRyNXx:/G6vg0hzR7gfOuHE59BNcMwnANRoRyNh
MD5:	3F8F1344A4882CFAFC5030EAE706770F
SHA1:	6C3DFFAA5A6AD3106ADC5C43338DC3291D29E06D
SHA-256:	373E2D63DF6B75ADCC1DDBA0DCFC511A2F1188D206F02C332FAB189A1EE84165
SHA-512:	D16D31EC8C8D58B1DAD5A6C46F7C5CC00DD7FBC49ED6798734D452DADCBA275271A8BEAC5E90065165E4BAC970C6B954F6E987D517B506CB16CD1383E2927DB2
Malicious:	false
Preview:	!function(n){var r={};function i(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.m=n,i.c=r,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)i.d(n,r,function(e){return t[e]}.bind(null,r));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,n){n(1),n(10)},function(e,t,n){function c(e){return(c="function"==typeof Sy

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	dropped
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50357), with no line terminators
Category:	dropped
Size (bytes):	50358
Entropy (8bit):	5.2181356017561
Encrypted:	false
SSDEEP:	768:g7VNmagZTrKaskbeznZ5H8roxxbwxgwrsc:gSagUCGn7ck0xv
MD5:	EDC96E5BF861142792E04BE06B39697C
SHA1:	1715176511209C2917D148CC950BD550F3D33DCE
SHA-256:	938C64115CE60B98EE8151D7EB28208567753F3D4EBBE0AA0F56618C555A18FB
SHA-512:	9E2913865364B5662F48E54E53FA3E515B067E9136180215B3764AEF65FF9C059797983F091A8A982DEAAEECD265E7AA926C19103403CF317311B518D129B243
Malicious:	false
Preview:	!function(t){var n={};function e(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,function(n){return t[n]}.bind(null,o));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=127)}([function(t,n,e){(function(n){var e=function(t){return t&&t.Math==Math&&t};t.exports=e(

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.4.0, contains:\012- Audio file with ID3 version 2.4.0, contains:\012- MPEG ADTS, AAC, v4 LC, 48 kHz, stereo
Category:	dropped
Size (bytes):	132544
Entropy (8bit):	7.978883118468681
Encrypted:	false
SSDEEP:	3072:4tmZeBOWo8uTu1q31C1km3KiLoTUs9rtYa9cbJtwxm1qheZPWP0:4Qe4F8uC1SCmXY84bJ8mAheZPWc
MD5:	A7E16CCB8C3D32CF7D08764E29225624
SHA1:	8E494448E0E1FC55E7DE0BEDE0C9ADE1E433955E
SHA-256:	2777BC72290B8A8DD29F4408B994282339C41F00628C43258C30F48D323C6A6D
SHA-512:	D05E18E18C71B6163A25E5625C0CD51C8E4BA88B9B0F7030DE4DD136D63BDA8789B55913B9F0D51197D1AAE22AF88CD7AD0E60E64A85E992BD24766BB01D5255
Malicious:	false
Preview:	ID3......?PRIV...5..com.apple.streaming.transportStreamTimestamp........ID3......FPRIV...<..com.elementaltechnologies.timestamp.utc.2023-01-11T00:00:00Z..L....!0..=...L.F_.!^........<.T, V.........S.'\|o.......\|.(.......m.z.o>#e.x......U%.<..Z.w..:.Iy............A....G.m.S..qv.q..q.2+@...\|....cBzp..B... ..S..Hv.}...1:..H@^..4..1\.t.....p....?.h(.O.S.Xgp`.Vz;....?...x.5.._V..../\e@}..4w..tw]......g.p`....Bgx[.........q.N8...8.!.....8..D..97....i.Fti..S`~..-..%.lF....D1..t.9.R.C5...B..z.I........R.[S...r$..A...eX%7$.....E.+{...t....\...@.......H@.}<4.:...!<g..m..c&._.>.\|.0i.....Y.j.e..8....`P.um.f..'.).n.W..c.:....].=ON.%8.$H3.$.&'s.b:Fz;.qr.N(...........A.....@..x.>'.....g:.,..8..\|..}.....@...L.^..!\|..........k........7f..iB).'.K....$...)...q..}..%q.}..1...w.W..L.TYVc3..2.C..V.I../["m..A...xB..i).'..../o.u..!...T26C..O....n..%x.(.Af.....r? ,.\|.q.1..y>..Uc...w..8.\|......t^...j{#7?#d..2v.....t.F./.)..a....z..o..nK..Ok..9..g.sL..j.....-.v.m....g...l.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2387), with no line terminators
Category:	dropped
Size (bytes):	2387
Entropy (8bit):	4.495258354894514
Encrypted:	false
SSDEEP:	48:JdMRuMRRYMR7MRdxmZCxRlWrwJxwDoHN2:HMRuMRyMR7MRdxuMR0rwJxwsHw
MD5:	D0A8E87E56CD4A19D4D6613ED97A1662
SHA1:	4671505DC5C709BA31C4D856068B3A257F00EC90
SHA-256:	AF9BF864564E57298F9F8C2421BD17E40FE0F8F409E26C8C5CB503DB91B683B7
SHA-512:	0245114809184F64823286ABECB2F49542AA07ACA7BB1BEEA44689B7DA5B6892AA4D5977A96222BF0AD6A0F6424459CEAFA8290E512AC4E0D6F29917602CC9E7
Malicious:	false
Preview:	<script>var apcnf = '{"googMsgType":"apcnf","config":"[[[[null,3,null,[],null,null,\\\"DIV#start\\\\u003eDIV\\\\u003eTABLE\\\\u003eTBODY\\\\u003eTR\\\\u003eTD.htop\\\"],2,[\\\"10px\\\",\\\"10px\\\",true],[0],null,[],[],1,[],[],[]],[[null,3,null,[],null,null,\\\"DIV#start\\\\u003eDIV\\\\u003eTABLE\\\\u003eTBODY\\\\u003eTR\\\\u003eTD.htop\\\"],3,[\\\"10px\\\",\\\"10px\\\",true],[0],null,[],[],1,[],[],[]],[[null,0,null,[],null,null,\\\"DIV.secondindent\\\"],4,[\\\"10px\\\",\\\"10px\\\",true],[0],null,[],[],1,[],[],[]],[[null,0,null,[],null,null,\\\"TABLE#phrasetable\\\"],1,[\\\"10px\\\",\\\"10px\\\",true],[2],null,[],[],1,[],[],[]],[[null,0,null,[],null,null,\\\"DIV.secondindent\\\"],1,[\\\"10px\\\",\\\"10px\\\",true],[0],null,[],[],1,[],[],[]],[[null,2,null,[],null,null,\\\"DIV#start\\\\u003eDIV\\\\u003eTABLE\\\\u003eTBODY\\\\u003eTR\\\\u003eTD.htop\\\"],2,[\\\"10px\\\",\\\"10px\\\",true],[0],null,[],[],1,[],[],[]]],[],null,\\\"20240925_103529\\\",[],[[[[null,null,null,[],null,null,\\\"D

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.2946732421267315
Encrypted:	false
SSDEEP:	24:E1tXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1tXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	BB54A4724507795586291E5D583C861A
SHA1:	B4383DFADD4B7EDF30DD830F07D1C91E717235CB
SHA-256:	35C3162B611C3AAA72C002B914BE112F207E0F3BCE58A033EC0437D9AAD814E9
SHA-512:	AB2A3015BA3EB4AC1951848EB8F4215DE67D1ECBEE99A3E96B913CDBE2E617110580D9A46F47E071A80F7691C696D41D48A79CE45759B8D1599584432A6E2D4B
Malicious:	false
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	dropped
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	dropped
Size (bytes):	489606
Entropy (8bit):	5.518697260783774
Encrypted:	false
SSDEEP:	6144:VAFyxeXMn6+WtjSqsTiykUhAGJaf+7N8vxYKe8BmYSFVW9ZuRJi2+o:qUeXMgyksJhN6aKn7EmZA3
MD5:	C6D0D8650C94EA6ADA46306DB5C9A92C
SHA1:	8BD3FFAF67A0A78A4932E49C23EFD5CFAEFD4159
SHA-256:	35E9CCB1D2B7A55AC143B6BA8704E240AE9217D76F1DB2CB735501AF0B5EB765
SHA-512:	0FA0A3A2DD5C001BB165AED92721BD86065D011B46158262D50CC2A4E6C64135DF749EDF98FACB4013AC29289CA49AEE849F830DFB35A32B68FFE67F89516269
Malicious:	false
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ba,da,ia,va,xa,Aa,Ia,

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	dropped
Size (bytes):	2779
Entropy (8bit):	5.256421685296428
Encrypted:	false
SSDEEP:	48:XFZp/sZ3lYQc7ArfSM3eIubF1QkNsKclMtPp/7qgAsFte6NPvD9T5AyNBK:1f/6lGUrff3eFLhNs+G6hb9xK
MD5:	7B430C6350A59A7CF22B9ADECCBA327B
SHA1:	B48D3C289BCB6809BB52FFFD8F013055ED6BCD65
SHA-256:	058ED961BFE422AF7BFC65865F4C08531EC8ACE995F8A1EC560A46581CB7712C
SHA-512:	BBB70E6C0318ED68FC6810E0210D010FC743B9987C6ED15A43C5D308A96A43331B79C3FAB1B39A9034398418FA3321EEC8C51998D79C981E3F511DA3B398326A
Malicious:	false
Preview:	(function(){var e=window,f="push",k="length",l="prototype",q=function(a){if(a.get&&a.set){this.clear();var d=a.get("buildHitTask");a.set("buildHitTask",n(this,d));a.set("_rlt",p(this,a.get("_rlt")))}},r={action:"pa",promoAction:"promoa",id:"ti",affiliation:"ta",revenue:"tr",tax:"tt",shipping:"ts",coupon:"tcc",step:"cos",label:"col",option:"col",options:"col",list:"pal",listSource:"pls"},t={id:"id",name:"nm",brand:"br",category:"ca",variant:"va",position:"ps",price:"pr",quantity:"qt",coupon:"cc","dimension(\\d+)":"cd",."metric(\\d+)":"cm"},u={id:"id",name:"nm",creative:"cr",position:"ps"},v=function(a,d){this.name=a;this.source=d;this.e=[]},w="detail checkout checkout_option click add remove purchase refund".split(" ");q[l].clear=function(){this.b=void 0;this.f=[];this.a=[];this.g=[];this.d=void 0};q[l].h=function(a,d){var b=d\|\|{};"promo_click"==a?b.promoAction="click":b.action=a;this.b=x(b)};q[l].j=function(a){(a=x(a))&&this.f[f](a)};.q[l].i=function(a){var d=x(a);if(d){var b,c=a.list\|

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31483)
Category:	dropped
Size (bytes):	41101
Entropy (8bit):	5.487016788603861
Encrypted:	false
SSDEEP:	768:BJ0k2X1s0isUbIzsyar47nDkVT6gAGRqopvKteMrTIbONJQzjIGLus403BRMP+s/:BSlsXsU8zsyOVT6gWPwLuOK
MD5:	9CCBE796744FE78E1F7B5D86ADDD6EFE
SHA1:	A7DB9307AB1808570075352235E6F659CD182C7E
SHA-256:	C870F508B3B2A5EEB7C8BFCF0BF7CAFDA0322B7D2EADF5A0DAD363C9EAFA2ED6
SHA-512:	D0D719C70906325F01A7210CC4EDCEFB3F940D3BD6AF976CF7868CE05C739AA3AB4CD6BC9BF8412EA38A8B33176EF0AA7CA5865F29F88F8A886334EAEA0B0AE6
Malicious:	false
Preview:	(()=>{(()=>{var It={3156:function(T,L,_){(function(V,O){T.exports=L=O()})(this,function(){var V=V\|\|function(O,M){var P;if(typeof window!="undefined"&&window.crypto&&(P=window.crypto),typeof self!="undefined"&&self.crypto&&(P=self.crypto),typeof globalThis!="undefined"&&globalThis.crypto&&(P=globalThis.crypto),!P&&typeof window!="undefined"&&window.msCrypto&&(P=window.msCrypto),!P&&typeof _.g!="undefined"&&_.g.crypto&&(P=_.g.crypto),!P)try{P=_(477)}catch(o){}var D=function(){if(P){if(typeof P.getRandomValues=="function")try{return P.getRandomValues(new Uint32Array(1))[0]}catch(o){}if(typeof P.randomBytes=="function")try{return P.randomBytes(4).readInt32LE()}catch(o){}}throw new Error("Native crypto module could not be used to get secure random number.")},N=Object.create\|\|function(){function o(){}return function(p){var g;return o.prototype=p,g=new o,o.prototype=null,g}}(),Q={},Y=Q.lib={},J=Y.Base=function(){return{extend:function(o){var p=N(this);return o&&p.mixIn(o),(!p.hasOwnProperty("

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	dropped
Size (bytes):	563
Entropy (8bit):	5.112757246539186
Encrypted:	false
SSDEEP:	12:2JqxH2pzDD5wm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2JLtwfm8uVCxwgxkHEZ1VZflok
MD5:	FD3E81DCCB7D11E102DFBE4C19791C80
SHA1:	EC66160D47F6E788817B853B612DEAE9F50C79BF
SHA-256:	E66D8D6A3D90A1AC81ED830DE9966386D2A21FFE77590586AA472E1FD024C15D
SHA-512:	722FE3016E53BB2CAF8FFB30FE818037430E761B844E02FBE4ADE2337DF309050E4B2EFE7637313888654262078F8EC0936323A98D17E0ED92EAD41A1046B957
Malicious:	false
Preview:	(function () {try {const accountId = "2e7e1587-d92f-46dd-8721-80b53eccb87e";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1113
Entropy (8bit):	7.733873722131295
Encrypted:	false
SSDEEP:	24:I/6i4EfPN9l4MAezXsdkNMkJyLgV4Zv2HaqWTFnv:I/6itVbAEckNpJyLc4ZoWBnv
MD5:	4691F7B4838677EB865D79562D5A88DA
SHA1:	53F3AAA6F379DE899C38D6652661B5C33B4B1776
SHA-256:	4451DC45557B532464C9AA016DD6759A91AEA3014FA121DD721B36B05AF73CBA
SHA-512:	92B74F52535A63F0C24DCB131183FDCE00D68EAD6F159B4D3D0C10B487BE071E98EBB473985235F1F121491853A9CFC5D3D120185F6EAA8EB06EE8E738DC0176
Malicious:	false
Preview:	.PNG........IHDR...d...d.....p.T....pHYs.................IDATx...O.WU....Fa..!hc....2..O.Q.a.1.C4.....R.. ](: ..1"..qQD.........Ff3..@.Y....7....@..9.{.{.....s.0.{.;?..B.!..B.!..B.....R...W....,....r.W...vN..8...L.O....[..0w.....`B.s.Y...Ux..&w...g.......,o....]..v..zGs...0.aB..O....`-.l..;....r5w.....lN....`........e...L...v..ni:.o...&.V..k.T...3"..M...t..M....4.0._w..4.......~U....7M..D)o..M...e.....N....}.}_I...P.[.......It....RW@......?A.^.+`Ly..,....}...#..*..)...n..(.A....lD..R'..J..o........t.Iy.~y......A.M{.v.#.iQ...b}.xGy`&....z.t._.r...n@.u......G._...T...q....D.wR..39..).E.o.{r.....7 .1.=.qX..)).. .-.M'....."..('.a..X...K..h.......2Zt.'......Eq?%..Z..\|4.+......v...T.....W...d.(...x..x..}U9F..,...+'y...}..OZ.y...>6.u}.[t.l......kQ....-Z..o.c.(.S.Zt..j..d..Uq.j.w...YB1..._..v..(.u.E.0l.......>.t..m...mG.O.7.'g`?......v.Ww...~.\|t.k.g..q..[t..#\|.pP.....1Mm/f..lgaa.7.-....)...H..).?..dU.?mJ..v..\.m[...Q.o:..u...[N.5.r.x2sq

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG transport stream data
Category:	dropped
Size (bytes):	257372
Entropy (8bit):	7.883309015881379
Encrypted:	false
SSDEEP:	6144:9EDJwrecg+7hxaBXkyYkVQnnrZK0eY+GLEB9DRkgOSOQUoeywQl:mW6F+7aOyYvnnrUPY+GobFZONC
MD5:	6245330A0F027F342755C6F5A48F8C22
SHA1:	CD01A1246594E6C61D19A1A1D50314DBDF5FBB39
SHA-256:	98FD28950C408C426C8278E73E1F1330B53BCE94A5EEA8EB9BF59A23C07EC786
SHA-512:	4F620A35CA9D27B7BF60039FB414ADCDF8E54BDE73CBAF0EC61676290BB61BF89B159CFA9E9568D1BF5CB27E87B3C362EAF0C61B80E76A53B37B6EAA9D8D68FC
Malicious:	false
Preview:	G@...............-Px........................................................................................................................................................................GA.....".............x.....(.d..?....xd..h..................................................................................................................................................GA.1.....~..........1.......~A..........'d...r.......x.}j............q0........p...Y`....(..,........s...t@........................H..lt\|>Ox....]<.~Elemental Video Engine(tm) www.elementaG...ltechnologies.com.....%...A_.:"I.%.A.2.....So..+l.."H@?.h....y.$....... .7.s.....v><..]5+...VsH.V.:..@Ak.......A.5...A...yv.E.....XK....m.a.X...Idv...t.J..U.A=.}b..td..XiK......G...gL.z]tj.......).%.n./].w...?D..Uwm....A.L.H..Ti.....t2NG....!....P^.jz....6a.O.!........X<.h.).h.8.i..IT$qC.b.^..Ky;{.X.9.....& -U....-...B.3..;....Ql.!K5....+.gI.IQ'.Sw...y..b..o..G...#,..1T......PAqO...u......."...Dl....o"B.w......U.

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	dropped
Size (bytes):	538794
Entropy (8bit):	5.487833385314626
Encrypted:	false
SSDEEP:	6144:FH/pzYnEqprWvmOJIjSrW9uLqzO7R3+BBKJ60nXbOYwaYzQXFR+f4h+jVg:V/+QslqRFRl+jVg
MD5:	94FDCDF869D34A6195B40FF5ACD2F9DB
SHA1:	90D729CF4E722195776792451B479A6FFF49E4F3
SHA-256:	E915AC20E2D52E6B6608C99D23BD3253C18F972D839EA5C485B356A55FCC7BDD
SHA-512:	6A02FA0ABB92AEBAD4251275FC53F08AF952FAB872AE0743E0F0CE731C63DFDC4A361A77F3D2C67F3B3DA79C6FB95FE702ACA1E4F5C9B29A3C421793214C8A9E
Malicious:	false
Preview:	var D0=Object.defineProperty,B0=Object.defineProperties;var q0=Object.getOwnPropertyDescriptors;var Ur=Object.getOwnPropertySymbols;var Yo=Object.prototype.hasOwnProperty,Xo=Object.prototype.propertyIsEnumerable;var Ko=(J,nt,tt)=>nt in J?D0(J,nt,{enumerable:!0,configurable:!0,writable:!0,value:tt}):J[nt]=tt,E=(J,nt)=>{for(var tt in nt\|\|(nt={}))Yo.call(nt,tt)&&Ko(J,tt,nt[tt]);if(Ur)for(var tt of Ur(nt))Xo.call(nt,tt)&&Ko(J,tt,nt[tt]);return J},U=(J,nt)=>B0(J,q0(nt));var Jo=(J,nt)=>{var tt={};for(var yt in J)Yo.call(J,yt)&&nt.indexOf(yt)<0&&(tt[yt]=J[yt]);if(J!=null&&Ur)for(var yt of Ur(J))nt.indexOf(yt)<0&&Xo.call(J,yt)&&(tt[yt]=J[yt]);return tt};var D=(J,nt,tt)=>new Promise((yt,Be)=>{var Lr=Ot=>{try{qe(tt.next(Ot))}catch(at){Be(at)}},_e=Ot=>{try{qe(tt.throw(Ot))}catch(at){Be(at)}},qe=Ot=>Ot.done?yt(Ot.value):Promise.resolve(Ot.value).then(Lr,_e);qe((tt=tt.apply(J,nt)).next())});(function(){"use strict";var J=document.createElement("style");J.textContent=`@charset "UTF-8";@import"https:

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	771
Entropy (8bit):	5.366570237695752
Encrypted:	false
SSDEEP:	12:kxPQzmNuPbFqH7Bo+2WUyl72U/a+sUVy90hKo8KBGGx1PE+Nk:kaaNB9/h/wWy9IsKBGGrPE5
MD5:	54D4ED8232098F3C702A2E8F43DB6A90
SHA1:	50BC7282751CD35D471C0B381079C3616FC2F8CB
SHA-256:	95CACACB82F309C2DB0D9BEC7E80AC05C5F435D94B4739D3377225BD633B15FD
SHA-512:	F7606311254E132E201B5EA1D19426BCDDCA9938868947803448D05478A67E91D128C7040103260144A32CC53A44CE171EB260287A3429537D6DEEB37E98C4DF
Malicious:	false
Preview:	<html><head></head><body><img src="//ads.servenobid.com/sync?pid=317&uid=2809080294951148902&gdpr=0&gdpr_consent=" />.<img src="https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=" />.<img src="https://dsp-cookie.adfarm1.adition.com/?ssp=5&gdpr=0&gdpr_consent=" />.<img src="https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent=" />.<img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=160&partneruserid=1&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	452
Entropy (8bit):	3.7272402047360784
Encrypted:	false
SSDEEP:	12:emhVfDDn9XyqIshUkIjxBshUkIjxTK9tC:emjfP97dqkiIqkipL
MD5:	AE9DAB9D1DD15FB81A387415DA6B4270
SHA1:	1FB9E158F9984871A7113893DFC86165A0C5DDBF
SHA-256:	E8BB7FF3EC48956EF0CEC8DE67542930D548E8F38BF5E03DAF3ECEE12405C342
SHA-512:	5044EEE358125DD1C52879FA0A926574FAC98686A5EDB96A6DC84611D9D5A93ECE489C9F56948156834AB596CAEE3934ECAAB82E8E0F0C62F06E1D11E372CF70
Malicious:	false
Preview:	[null,[[["103512698"],["1254144"],["21687543875"],["22917490941"],["23201698805"],["25873276"],["424536528"],["7047"],["7103"]]],[[["103512698",1],["1254144",1],["21687543875",1],["22917490941",1],["23201698805",1],["25873276",1],["424536528",1],["7047",1],["7103",0]]],[[["103512698",1],["1254144",1],["21687543875",1],["22917490941",1],["23201698805",1],["25873276",1],["424536528",1],["7047",1],["7103",1]]],[[["7047",1,[[1]]],["1254144",1,[[1]]]]]]

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2090)
Category:	dropped
Size (bytes):	418195
Entropy (8bit):	5.587316024181749
Encrypted:	false
SSDEEP:	12288:lrdM10FHgBY5IuDnnFU6uCwZ76KwSCpu0bsq5RdRonybc1EvvDxef0Ng2zRjykkN:lrdM10FHgBY5IuDnnbujZ76KwSCpu0g7
MD5:	3123FAB09C0475FF73D0188373E6F6B9
SHA1:	B1774AE4FFFCE2C1D3578E508E2A335E67E1F62D
SHA-256:	FF2B855B7A1CD4F6D1C4CE1B54EC1877D779603E118206B8E6CEE1B2FAEF55A6
SHA-512:	6FCC43D1E6695DD0D370DFB4A58B560755A4C87D56BA2735E306235BB6368267ACA5D380BA02F70688D8E37B99C4B6A58D13D77BD141CDA4921BC787B294F8B5
Malicious:	false
Preview:	(function(sttc){'use strict';var ba,da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ia={},ka={};function ma(a,b,c){if(!c\|\|a!=null){c=ka[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function na(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ia?f=ia:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(ia,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ka[d]===void 0&&(a=Math.random()*1E9>>>0,ka[d]=ha?fa.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	24
Entropy (8bit):	3.386842188131012
Encrypted:	false
SSDEEP:	3:AVhcRYD:AVhcRm
MD5:	09F71EFBED1212B64851B5A8032EC26F
SHA1:	EC10DB2BD5556DFC406F32AD9DF9944D11B14233
SHA-256:	89F2D4E6C7A6C41C13C2E7A75E526AA60B9D5274FE28B2D82801C6BEB6BEB879
SHA-512:	48B0B3A340EE2DC39A346E8CE4C67697F166362CEFC60247848858A011C23C0E14C8914B90BC431CC063EE96FAB113064EA2DBC36988B2CBFB5F54183AA67E1E
Malicious:	false
Preview:	upstream request timeout

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	dropped
Size (bytes):	64008
Entropy (8bit):	5.409207504163155
Encrypted:	false
SSDEEP:	1536:Yv22/Pobzfha4zCDlorEZ65WCQBDsGZpICEYg:52YbbFzCDhiyDYCEz
MD5:	CF32C374258DD4179B8E9C85B78B46BB
SHA1:	1B3F367B5748559CA0B7EED5926A6496C1C5FF1C
SHA-256:	B9172BC6887A78E4C69C0C87D43747C5338E177C8F73B5160B2532E039FCCF2D
SHA-512:	7C8B291E03774283298CDD55D81C8F07473A9DE52EC8F01201D3E4C60CD5BC060CE0E6915BE87669AF9B4DFD8E609077AFFE5D5EEAA253FECB21D2CC0A6B3CF8
Malicious:	false
Preview:	.....var __IntegralASDiagnosticCall = (function() {..try {...var alreadySent = {};...return function(code, err, config) {....try {.....if (!__IASScope.isDomless) {......try {.......__IASScope.postMessage(........{.........code,.........name: 'jsdiag',.........origin: 'ias',........},........'*'.......);......} catch (_) {}.....}......var gen = function(code, err, config) {......var url = '//diag.adsafeprotected.com/js?';......try {.......var errMsg = err && err.message ? encodeURIComponent(err.message.replace(/ /g, '-')).substring(0, 200) : '';.......url += 'code:fwjs-diag-' + code;.......url += '&err:' + errMsg;.......url += '&codeanderr:' + code + '_' + errMsg;.......if (config) {................url += '&version:' + config.version \|\| '';........url += '&server:' + config.mn \|\| '';........url += '&region:' + config.region \|\| '';........url += '&mode:' + config.mode \|\| '';........url += '&forceAppend:' + config.forceAppend \|\| '';........url += '&asid:' + config.asid \|\| '';........url +

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	31666
Entropy (8bit):	5.397564672661937
Encrypted:	false
SSDEEP:	384:npzjVkjElIVonxb6qOq+WZT8HjiyUv5aYe9hiVw6rCRNbzgM/BwNwgmx/tXTxw4k:nxjNl3x8XBHa4iVwmytzimx/hcg6/K3w
MD5:	B0A74586B183DB7082EA48B6EA43EDE3
SHA1:	5CEC77CD9C2A7EC472327533B0E32D2D5DA8634D
SHA-256:	36CB859BE5A639C678F317D76C5C589DA1B5E08820FCCE41D67C38B517EFA959
SHA-512:	88A1BA500A6CA668014C54D442DCA1487C1FFBE0E57BAA53A4F4E9C0038F12B981F3A1FC38B598EA4822EB0E086FAF0A4C5DC8601C9BB91C2B6B6BFC3E0945A2
Malicious:	false
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=ba(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.78857068384846
Encrypted:	false
SSDEEP:	3:YxhAJTDRq21HJACNN7kYCiNQDxPSYUSun:YnjKHiEkYCiNQtPSMu
MD5:	286D2FA15269AA425F7776830A29FE99
SHA1:	418D810B459BC7897441896FC61212DDA4BCBA61
SHA-256:	495928E3DB09FE1B67B33774963686D4B9DFA126A8BBB96A666E514D60E320AE
SHA-512:	993307C4473B04299AC34C35B13AFD05ACAB6FDAD90136043C4F212F6E61EA8ADD38ADA08FD19C4A8519EA124458B95BF3DD22C79646DE80D3D894C3E2F8898F
Malicious:	false
Preview:	{"TDID":"86615713-b29f-431c-837a-c85024f7c24f","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-09-30T13:17:06"}

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.4.0, contains:\012- Audio file with ID3 version 2.4.0, contains:\012- MPEG ADTS, AAC, v4 LC, 48 kHz, stereo
Category:	dropped
Size (bytes):	132544
Entropy (8bit):	7.978883118468681
Encrypted:	false
SSDEEP:	3072:4tmZeBOWo8uTu1q31C1km3KiLoTUs9rtYa9cbJtwxm1qheZPWP0:4Qe4F8uC1SCmXY84bJ8mAheZPWc
MD5:	A7E16CCB8C3D32CF7D08764E29225624
SHA1:	8E494448E0E1FC55E7DE0BEDE0C9ADE1E433955E
SHA-256:	2777BC72290B8A8DD29F4408B994282339C41F00628C43258C30F48D323C6A6D
SHA-512:	D05E18E18C71B6163A25E5625C0CD51C8E4BA88B9B0F7030DE4DD136D63BDA8789B55913B9F0D51197D1AAE22AF88CD7AD0E60E64A85E992BD24766BB01D5255
Malicious:	false
Preview:	ID3......?PRIV...5..com.apple.streaming.transportStreamTimestamp........ID3......FPRIV...<..com.elementaltechnologies.timestamp.utc.2023-01-11T00:00:00Z..L....!0..=...L.F_.!^........<.T, V.........S.'\|o.......\|.(.......m.z.o>#e.x......U%.<..Z.w..:.Iy............A....G.m.S..qv.q..q.2+@...\|....cBzp..B... ..S..Hv.}...1:..H@^..4..1\.t.....p....?.h(.O.S.Xgp`.Vz;....?...x.5.._V..../\e@}..4w..tw]......g.p`....Bgx[.........q.N8...8.!.....8..D..97....i.Fti..S`~..-..%.lF....D1..t.9.R.C5...B..z.I........R.[S...r$..A...eX%7$.....E.+{...t....\...@.......H@.}<4.:...!<g..m..c&._.>.\|.0i.....Y.j.e..8....`P.um.f..'.).n.W..c.:....].=ON.%8.$H3.$.&'s.b:Fz;.qr.N(...........A.....@..x.>'.....g:.,..8..\|..}.....@...L.^..!\|..........k........7f..iB).'.K....$...)...q..}..%q.}..1...w.W..L.TYVc3..2.C..V.I../["m..A...xB..i).'..../o.u..!...T26C..O....n..%x.(.Af.....r? ,.\|.q.1..y>..Uc...w..8.\|......t^...j{#7?#d..2v.....t.F./.)..a....z..o..nK..Ok..9..g.sL..j.....-.v.m....g...l.

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1676)
Category:	dropped
Size (bytes):	432005
Entropy (8bit):	5.5381788565495
Encrypted:	false
SSDEEP:	6144:T3YWcpv2GzTxWxFx5zBfLWJ07SoaI/Q37I7AfPObPI7T:IPx0f3i0vaIoLIcfPObPI7T
MD5:	1EE46D2C018538947B47234181F790BD
SHA1:	3C413879E0AAB3A3589AE802F797D54EB33EF4D0
SHA-256:	5098A02B6BD4A41B562E1D3118E7C7EC56D09436CBB9C8C828C61E5554AC2D36
SHA-512:	8749848C329B3DF26C6A2B9D7229057CF51E64141C01D4B912D2026B6D6EA2D1C31298F0A643EC9918D8ED823E712B1B84AFCD37114789A38421EE1AD1833808
Malicious:	false
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var l,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),r=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	270658
Entropy (8bit):	5.573148004356036
Encrypted:	false
SSDEEP:	6144:nRqpmFU7glq04d7G3BsEemveDNDH0fxnQd:RTW7gQnhife
MD5:	6F61D8CCE63FD19FBDEB0666864893ED
SHA1:	D6292089E315363CA27C753804CCAD04ABC246BB
SHA-256:	EF78BAA0E2E2C3EAB060DB43F85FCCD3ECF347B03E386B2C8FB7E7EAF1A1FEE6
SHA-512:	9A7C43225CFC508CC931FAB417775578BF00896BE6FD122E87237A07F313F9FFDC92ADC1AE67DB77A486A431A2F3FC827A27C4084D2FF913CD456179013C4B75
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":11},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","multitran\\.com"],"tag_id":13},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":14},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":15},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","v

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64713)
Category:	dropped
Size (bytes):	466327
Entropy (8bit):	5.393543879073552
Encrypted:	false
SSDEEP:	6144:3iterV4R8kND8jPhj2QtajcgC2vCJB9LrBw/H:Rh4iketArvClLO/H
MD5:	3D65C0799092F206D9EE24D1AD02A28C
SHA1:	4B2B63E78047FF485D2283C3B389FD0D93178EDD
SHA-256:	BA54422E28DB4A076D13B3F9775010227B30221455B601AB0BB4840BF7F34418
SHA-512:	2BAF9C05CF1DEABEF58E9224752C970056A3BD8E520DD216FFDE2AD7595CBAAFC0ABDB14D2E3DFFDD6C9F63214EB38C9BD6166A5DBCD8DF1AA1DAE82F3E5CBA6
Malicious:	false
Preview:	/* prebid.js v8.27.0.Updated: 2024-08-01.Modules: currency, schain, userId, id5IdSystem, id5AnalyticsAdapter, liveIntentIdSystem, unifiedIdSystem, criteoIdSystem, consentManagement, consentManagementUsp, sharedIdSystem, quantcastIdSystem, identityLinkIdSystem, deepintentDpesIdSystem, publinkIdSystem, amxBidAdapter, appnexusBidAdapter, criteoBidAdapter, eplanningBidAdapter, gridBidAdapter, insticatorBidAdapter, ixBidAdapter, medianetBidAdapter, nobidBidAdapter, onetagBidAdapter, rubiconBidAdapter, sharethroughBidAdapter, smartadserverBidAdapter, smilewantedBidAdapter, sovrnBidAdapter */.if(window._apPbJs&&window._apPbJs.libLoaded)try{window._apPbJs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing '_apPbJs' instance. Load aborted.")}catch(e){}else (function(){.!function(){var n,e={5706:function(n,e,t){t.d(e,{Pd:function(){return d},Th:function(){return s},_U:function(){return f}});var r=t(5730),i=t(4358),o=t(265),a=t(4614),u=(0,t(8640

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	272
Entropy (8bit):	4.932428905055227
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeCWxRZ8oklZqMz3s6VT3RxK9MGJG5oeX:8DIGoXbfCYKpEe3RZ8q03sWTrK95JTeX
MD5:	7F7ADB27D689E02A5F7645B15691B531
SHA1:	1897C0BDD0ECB93D5276BECC142821672FC845A9
SHA-256:	88A009C9C03ADC7AC66A534E4A00C8760F4C5861E15CF0FA4F8CE69B85316D14
SHA-512:	BA13838C6EBC194224513FB0CB548D71C6670A6BAF8488F6A9E144468D19E70DA2691443AE3D9975A8CD7F210DAC03D4BBEA5AFBDFB9EA7A7F7067EA249C526C
Malicious:	false
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64561)
Category:	dropped
Size (bytes):	489606
Entropy (8bit):	5.518697260783774
Encrypted:	false
SSDEEP:	6144:VAFyxeXMn6+WtjSqsTiykUhAGJaf+7N8vxYKe8BmYSFVW9ZuRJi2+o:qUeXMgyksJhN6aKn7EmZA3
MD5:	C6D0D8650C94EA6ADA46306DB5C9A92C
SHA1:	8BD3FFAF67A0A78A4932E49C23EFD5CFAEFD4159
SHA-256:	35E9CCB1D2B7A55AC143B6BA8704E240AE9217D76F1DB2CB735501AF0B5EB765
SHA-512:	0FA0A3A2DD5C001BB165AED92721BD86065D011B46158262D50CC2A4E6C64135DF749EDF98FACB4013AC29289CA49AEE849F830DFB35A32B68FFE67F89516269
Malicious:	false
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . Copyright Google LLC . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. ./ ./ . .Math.uuid.js (v1.4) .http://www.broofa.com .mailto:robert@broofa.com .Copyright (c) 2010 Robert Kieffer .Dual licensed under the MIT and GPL licenses. .*/ .var ba,da,ia,va,xa,Aa,Ia,

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO-8859 text
Category:	dropped
Size (bytes):	30672
Entropy (8bit):	4.8153133788837135
Encrypted:	false
SSDEEP:	768:Bs3FfH00prDFON3pF7/dlFLFrMM9FIFl7Fhx1FTF2FI7HbcFyF7FYgjt4p9LFrFp:Bs3545BrhN19CT7nx1ZQS7HbcoBCg6Nz
MD5:	428FE83B72CD08D88851B112A55418DD
SHA1:	B9688E824C8B1CD1060756AF12AD57EDCBAFE22C
SHA-256:	BAF8FDE02C86BD90A40C7BE8C4F6E54D2A6D922858F59B93EA358D056887CE8F
SHA-512:	864390865B33A1423087CBEFAB2B94289237BD1AEBFA43E4F4450B7F998B3BBA54EBF9FCFDB1B01323B9D18092E1136459E83AB4DD038EECE7706F222412290E
Malicious:	false
Preview:	body {. ;.}..:root {. --accent-light: #427DB1;. --accent-dark: #194A76;. /* #3B709F; /.}..body,.td {. / font-size: 102%; /. color: black;. font-family: Times New Roman, Times, serif;.}..option {. width: auto;. overflow: hidden;. white-space: nowrap;. text-overflow: ellipsis;.}..ul,.li,.ol {. list-style-position: outside;. text-align: justify;.}..ul,.ol {. margin: 10px 20px 10px;.}../ Mark-up table styles/...vertical-middle {. vertical-align: middle;.}...settings-table td, ..settings-table input[type="checkbox"],..settings-table .helpicon {. vertical-align: middle;.}../ End of Mark-up table styles*/..td.home {. text-align: justify;.}..input,.textarea {. font-family: arial, sans-serif;. //font-size: 0.8em;. font-size: 80%;. //border-radius: 4px;.}..textarea {. border-radius: 4px;. overflow-x: hidden;.}..td.userterms {. //padding-top: 5px;. padding-left: 1em;. padding-right: 3px;. //padding-bottom: 10p

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	dropped
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.2946732421267315
Encrypted:	false
SSDEEP:	24:E1tXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1tXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	BB54A4724507795586291E5D583C861A
SHA1:	B4383DFADD4B7EDF30DD830F07D1C91E717235CB
SHA-256:	35C3162B611C3AAA72C002B914BE112F207E0F3BCE58A033EC0437D9AAD814E9
SHA-512:	AB2A3015BA3EB4AC1951848EB8F4215DE67D1ECBEE99A3E96B913CDBE2E617110580D9A46F47E071A80F7691C696D41D48A79CE45759B8D1599584432A6E2D4B
Malicious:	false
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.1437125988438455
Encrypted:	false
SSDEEP:	3:qVv/FTL//rLv+rGXIL//+ac4NGL:qF/pjv8V6X4QL
MD5:	F4EFD6C3FB6FF75C0C266C1967109D39
SHA1:	AD1B3230DDF4DD734BEFD09DFB793619FDA0961F
SHA-256:	5A8701497007489A6358A67AFD48C19F7421CC26F286E94388868A48BBE3FEBB
SHA-512:	9838DF59D1174426B4F5B49B493A52B078FB4A8E33DC5DAE97D61F8AF97261DB6F3F143EC42ABEF2B2CAFC03ADD1D1773ABFD529DF17F2FE0C369A4E4B4076C1
Malicious:	false
Preview:	<html>. <body>. <script src="audio.js"></script>. </body>.</html>.

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 252 x 90
Category:	dropped
Size (bytes):	3833
Entropy (8bit):	7.7724697956929445
Encrypted:	false
SSDEEP:	96:yKQedWJEGxrJQu6BjEI2l/BftikDgDOTq:7ZkxKtdM5l/DDTq
MD5:	9C5702323DA8F5210F51640D3ABD722B
SHA1:	9DFC5A073602830EC61224E77CC24F0C0C2EC4D2
SHA-256:	F85AF3C9B4562F23DCF1440406115B61D7E016D8E1D925F81DCC9A65B7791323
SHA-512:	8F4102B8F394052FE7CDBB6C04A36DDFB4BEF6FB3BB4CB6C5018674FB45E5983C8DD419CD0B2F500E7AC0FB2CE8C36DB97C6D3FB05BE24DD531AEA8D279FE615
Malicious:	false
Preview:	GIF89a..Z.............645SQRpno...........A..U..\|...m..l..k..r..r..u. .."..#..$.....0..0..0..6..5..9..=..@..@..@..@..F..E..H..L..M..]..`..`..f..m..p..w...............................u..v..v..t..s..q..p..o..y..s..w..z..y..r..z..\|..x..}..~..\|..{.....y.....\|....... ..!..&..0..@..@..O..Q..P..P..Z..`..`..j..p..t................................................................~..}..{..y..z..x..}.....\|..\|........~..\|.........................................................................!.."..&..)..0..1..0..4..9..?..@..@..F..J..M..N..V..[..^..`..g..p..p..u..y..\|.........................................'&&DCC~}}a``......................................................................................................................................!.......,......Z........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`...SC...... .E.=b..3C.Z..N.=.....f.Kx.....D.!.F.6.#G...C..*..(.Y"...N..Cp...WXH.bp...

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (899), with CRLF line terminators
Category:	dropped
Size (bytes):	18200
Entropy (8bit):	5.535966838417494
Encrypted:	false
SSDEEP:	192:Nm9f0spgPcE1D76wx5nFFu03eOCg03OCg0S8h1tYiNV0OY2Gh2swUHAmUk5xTSG7:Ncf0sp4cw5nFgU0f1fbtYKGAPHFgN
MD5:	A71C04E830529B324C5903881B7317CC
SHA1:	A5FF831FFF81DE65AF6A440688F749E4E225F2E8
SHA-256:	E9CFA8EB5882190F5AC2581179EBA28B758FC5F1700ED321A6B177B581C70D21
SHA-512:	9FF7B96F5C077C1DD776E03319324DD3B234076ADF885D772BF4AFC390B127596318A91808ED4D045A7332C4B71D2315F92B1CDCDB8246CDCF12379F00B6784E
Malicious:	false
Preview:	<!doctype html>..<html lang="en" xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta charset="utf-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0">..<title>Dictionary</title>..<meta property="og:title" content="Dictionary"><meta name="keywords" lang = "en" content="Multitran,dictionary,translation">..<meta name="description" content="Multitran dictionary">..<meta name="google" content="notranslate"/>..<link rel="stylesheet" href="/style.css?v=394" type="text/css">..<script src="/script.js?v=34"></script>..<script data-cfasync="false" type="text/javascript">(function(w, d) { var s = d.createElement('script'); s.src = '//cdn.adpushup.com/42845/adpushup.js'; s.crossOrigin='anonymous'; s.type = 'text/javascript'; s.async = true; (d.getElementsByTagName('head')[0] \|\| d.getElementsByTagName('body')[0]).appendChild(s); w.adpushup = w.adpushup \|\| {que:[]}; })(window, document);</script>..<script data-cfasync="false" type="text/javascript">(function

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27104)
Category:	dropped
Size (bytes):	43638
Entropy (8bit):	5.361148094990428
Encrypted:	false
SSDEEP:	768:af8/g/Nl1s/stRfo0B2FwyNxdYKriRzCsvFvCuQ:afUoNlM0fYrDuCuQ
MD5:	C4F8F606E8D26E30B45D83965E4C0905
SHA1:	F791F5B936EAC352D7F483A12450E6B9DD064772
SHA-256:	27A7C1F2F2C7018314D78B422F71E0EDA4F6904F261E36D93956F65E308D82EA
SHA-512:	11F3BB13686F77E0D40829826CC45A1E456978FFFCB0677FA16F1E1AE9C2A1558A2048FF376D9B486B5263D8572367FF2031F9A07F3DCAB152A69FF15D98EAC2
Malicious:	false
Preview:	var comments = 'User-Sync: generated: 2024-09-25 20:33:51 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":0,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1",

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	452
Entropy (8bit):	3.7272402047360784
Encrypted:	false
SSDEEP:	12:emhVfDDn9XyqIshUkIjxBshUkIjxTK9tC:emjfP97dqkiIqkipL
MD5:	AE9DAB9D1DD15FB81A387415DA6B4270
SHA1:	1FB9E158F9984871A7113893DFC86165A0C5DDBF
SHA-256:	E8BB7FF3EC48956EF0CEC8DE67542930D548E8F38BF5E03DAF3ECEE12405C342
SHA-512:	5044EEE358125DD1C52879FA0A926574FAC98686A5EDB96A6DC84611D9D5A93ECE489C9F56948156834AB596CAEE3934ECAAB82E8E0F0C62F06E1D11E372CF70
Malicious:	false
Preview:	[null,[[["103512698"],["1254144"],["21687543875"],["22917490941"],["23201698805"],["25873276"],["424536528"],["7047"],["7103"]]],[[["103512698",1],["1254144",1],["21687543875",1],["22917490941",1],["23201698805",1],["25873276",1],["424536528",1],["7047",1],["7103",0]]],[[["103512698",1],["1254144",1],["21687543875",1],["22917490941",1],["23201698805",1],["25873276",1],["424536528",1],["7047",1],["7103",1]]],[[["7047",1,[[1]]],["1254144",1,[[1]]]]]]

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 39 x 43
Category:	dropped
Size (bytes):	2432
Entropy (8bit):	7.431091411062187
Encrypted:	false
SSDEEP:	48:CaRS1gtRn5cbZryF6SCn4ufBPXR1BWrULxymgCVrGRTAv:y1Y5c9rce4upp1BKULUmHVrv
MD5:	B57FA36366F0FD7C181823B22692AAED
SHA1:	9539AB6CF26C4DA5F4EDBB4FB6673ADE2CEFBA6F
SHA-256:	84EF44DE31F650C728008AAF8E391A55D127A089C9FB13F82BA1FAD93FF947C1
SHA-512:	CD27F7A7B03A340F2EC4AAF7FAC33E0AA0CFD15C28EEE5BBA47EEC041BDC531CE72BC5766B34F20C6D987FFD5CFEEEDAB98EB28BEC9DB9B1054BCCC3FDB9C720
Malicious:	false
Preview:	GIF89a'.+....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................,....'.+.........>i..1..K.i..D....#n....n..y.............lW.h.t.I.n].cs..3...U.z..F..~........{..%.ef..a3....8,..i".lM4~.n..L.jk..+g...W........<.XqkgLS]R.~qaF..0~P..+...:..S..FF..t$.qk*.UGV..M.....c`.By.T.P

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2089)
Category:	dropped
Size (bytes):	6498
Entropy (8bit):	4.967894351050471
Encrypted:	false
SSDEEP:	192:R3elHi1d2/yfuvO+CMaim3+9SHUEpCqr28h1k:Rr1UauhWidCJh6
MD5:	516635EEA2C88968732C42663169046C
SHA1:	74E80CB69D67CD1F1526F774CEC1514270CDE406
SHA-256:	B53E29C841671AC1919F7E8EA544BB62E4F267106DB51A250DF7C32A6E6FB5F7
SHA-512:	FCEA12F0E55EB81545B26DF6432750BB4E1A9673C6ED2AA11F95BC2793B7CC8CE9C494C8339375E0A31E143D6B6159DE4B6513E1A60C1917A5379AC90F3157C6
Malicious:	false
Preview:	<script>.(function(){.. function docReady(fn) {. if(document.readyState === "complete" \|\| document.readyState === "interactive"){. setTimeout(fn, 1);. }else{. document.addEventListener("DOMContentLoaded", fn);. }. }.. function getSearchParameters() {. var prmstr = window.location.search.substr(1);. return prmstr != null && prmstr != "" ? transformToAssocArray(prmstr) : {};. }.. function loadAsyncScript(src, callback){. var script = document.createElement('script');. script.src = src;. script.type = 'text/javascript';. script.async = true;. if(callback != null){. if (script.readyState) { // IE, incl. IE9. script.onreadystatechange = function() {. if (script.readyState == "loaded" \|\| script.readyState == "complete") {. script.onreadystatechange = null;. callback();. }.

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32027)
Category:	dropped
Size (bytes):	108104
Entropy (8bit):	5.6216850222428425
Encrypted:	false
SSDEEP:	1536:AHepZazzVMczK6CHjJfV31iBf0w8aOz/AY9RxqdOUaeWG5nt:VZanVM4o2MwJ+CdN5t
MD5:	BDDFB5A57B9CB42A5637FFD1F0D603C5
SHA1:	65284D9BA18CC99686171E0C332635611DF47077
SHA-256:	3C941750B791006D5837D83A02DD5B262D9E5BFC58FC025F40AF3D91952403CA
SHA-512:	FB2ED4CB2EA1DFF3574818388D8B57044663FBCBFA0914DAA2B55DAF4599621A14E3022ACFE08A4DDC23FAF8B109D686A3CE3514582607F9D64EF0A84F29B812
Malicious:	false
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9474
Entropy (8bit):	5.432757713049797
Encrypted:	false
SSDEEP:	192:Bxxr+73Uj4HCNYbN8NjNY3YNON+FNLNmpNgNjNS3mNuN8fN/NFXNVNeN13cNdN5u:fAGYhKZ22EUxmvOZAMkEVFdb0Fqz9u
MD5:	A8BD471CEDE34DFFEABB4862A985AA5B
SHA1:	B77177A2BC9DE3D5E707658980D3266799652439
SHA-256:	C85F48F3EEBD736CF6695777432E7EB987F8F7669D3D4E08D9FA47A11C85DE28
SHA-512:	C9750CE4C32B0769D1A1A81BC2917D4ED685622658C87CF5E3EB3459AF3279B482CD2715127748485E81A0F9B30E356DE1F5042D54F25C12D505D2530ED4C015
Malicious:	false
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. f

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (2348)
Category:	dropped
Size (bytes):	13374
Entropy (8bit):	4.966483248006134
Encrypted:	false
SSDEEP:	384:HxsQGpKu5oq2vOuPg1B8eW1l9VBZ3eG6eC/Q:HVGpfoq2vOug1eeW1rVB5eG6RQ
MD5:	73A5549C6881ED29929997D352718454
SHA1:	F6277E03CF6E2EE812300CDF410CD953A2998B9C
SHA-256:	94E795AFCFD81E861FBEB5F2BA8E7989C62D9B20F38B3F3F4773313CEC11AFFA
SHA-512:	5AC6D96EEE6127C09A5AF57D7960DC81F4D7013DAD709512796F4AC71A1F5E1A7D85772D5CC22F66E67F7E8DC2556865D44F0DA5E7F8543B9D080B3DA7AC6E69
Malicious:	false
Preview:	!function (t, u) {. const COOKIE_TTL = 57600; // (16 * 60 * 60);. const CURRENT_SECONDS = Math.round(new Date() / 1000);. . const GDPR_APPLIES = false;. . const NEED_GDPR_FLAGS = ['apn', 'ttd', 'rub', 'smart', 'son', 'index', 'onetag'];. const NEED_HADRON_MATCH = ['index'];. const ID_MATCH_VENDORS = {. "apn": 32, "ttd": 21, "adx": 755, "ado": 565, "pub": 76, "son": 104, "goo": 561, "rub": 52,. "impr": 253, "smart": 45, "ppnt": 81, "unruly": 36, "openx": 69,. "tapad": 89, "index": 10, "onetag": 241. }. const AU_1D_KEY = '1d';.. function getCookie(d, key) {. let fkey = "_au_" + key + "=";. let decodedCookie = decodeURIComponent(d.cookie);. let ca = decodedCookie.split(';');. for (let i = 0; i < ca.length; i++) {. let c = ca[i];. while (c.charAt(0) == ' ') {. c = c.substring(1);. }. if (c.indexOf(fkey) == 0) {. return c.substring(fkey.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.5251270918749356
Encrypted:	false
SSDEEP:	3:n9m6QiFL4:nVm
MD5:	B205296F7C49C67BAF5B78E8163061A7
SHA1:	828DED5C881601F44CE02CCB9E8B98D214B5E9AA
SHA-256:	281A6CECFF9B473286243BDC58329C1D8141B979E8985EA968D7D975F3A50E05
SHA-512:	ABBB243E84448F153F337C61919C36F68F2503F14F7301A903ED76B5A321C60C09C5E5D1174E77EBE3199A1F7A900A0668555B729F008547DD26A00937FF7B5B
Malicious:	false
Preview:	partner parameter must not be null

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65478)
Category:	dropped
Size (bytes):	234704
Entropy (8bit):	5.427718662498054
Encrypted:	false
SSDEEP:	1536:1M0lDe2YZMbrNJTsTzma+vPP2HPCcI8Vx62UYn2U8A5mMby/I7tILVd56xMd4Mul:eSJvNpsuiPxdu/2gIoJM
MD5:	413546E6DB1ADA0E3550D199BD93AD57
SHA1:	AE6CC4CED7CF8A34467F53016F077E73095FCFCE
SHA-256:	EB87C0447BD19366919BDB8913F775CACA732AC31CBC5E5D42E4DB5DF39437CE
SHA-512:	9759AF989A794BD291BAE1E2C0F4195F85B316F3BC06980719DD0C613F18AD2D9BDC89CCFD929FB2D74310F7CF94D75434643C0F0AF677F1D0C12A82F23EC7C4
Malicious:	false
Preview:	/* cnvr-coreid 2.4.2 - Fri, 20 Oct 2023 23:15:46 GMT */.(function(){var __webpack_modules__={1556:function(e,t,n){"use strict";function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}n(2526),n(1817),n(1539),n(2165),n(6992),n(8783),n(3948),n(4747),n(7941);var o=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")};Object.defineProperty(t,"__esModule",{value:!0});var i=function(){function e(){}return e.prototype.clone=function(){var e=this,t=new this.constructor;return Object.keys(this).forEach((function(n){var r=e.deepClone(e[n]);void 0!==r&&(t[n]=r)})),t}

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1470)
Category:	dropped
Size (bytes):	2502
Entropy (8bit):	5.443178793350041
Encrypted:	false
SSDEEP:	48:4SCgFywyFRbQRXvVJqc2qpmeLidvOZ1XxLQvgKqFHW+ZUrShQSvL8lFvLNW:BCgFywyHbQRfWipHqvO23oHLZUrShzvd
MD5:	4EA74CCC855DF25A2E6999479A856195
SHA1:	81D6D0B7B636F184412F44FEBCF743954C4F2370
SHA-256:	4737C9B30BC2333CFF8D2774D6A5A8F0C23CEF65444B8633D61F50955D823C2E
SHA-512:	2E4A2703DB372B76C863D705D58A7432C80C8F7765842834250D160B56A28B28C8B388774CFEBEFC83A334288A19D566842829EA074C305D63DF3A0714D550A2
Malicious:	false
Preview:	.<!DOCTYPE html>.<html lang="en">.<head>. <title>User sync</title>. <meta charset="UTF-8">. <script>. (function () {. function userSyncer(){var t="mtx_ss",e=0>window.location.protocol.indexOf("s");function i(t){var e=document.createElement("img");e.setAttribute("height","0px"),e.setAttribute("width","0px"),e.setAttribute("alt",""),e.setAttribute("style","position:absolute;border:0;"),e.onerror=function(){return this.style.display="none"},e.setAttribute("src",t),document.body.appendChild(e)}function n(t){var e=document.createElement("iframe");e.style.display="none",e.src=t,document.body.appendChild(e)}function r(t,e){var i=document.createElement("script");e&&(i.onload=e),i.type="text/javascript",i.src=t,document.body.appendChild(i)}function o(t){r("https://synchrobox.adswizz.com/register2.php",function(){r("https://delivery-cdn-cf.adswizz.com/adswizz/js/SynchroClient2.js",function(){i(t+"&uid="+encodeURIComponent(com_adswizz_synchro_getListenerId()))})})}retur

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65467)
Category:	dropped
Size (bytes):	899658
Entropy (8bit):	5.350204169370189
Encrypted:	false
SSDEEP:	12288:eAV7QDzMmGv49nI0soQlWWCihyiBjGAfJciiR9R:3Q8mGQ1soQlWWCihyiBjGAfJcZR9R
MD5:	D904C2A669BF7724222047E8ED40DF44
SHA1:	34092A3F52610FA4723EA7E6AC9C201FBFB6D987
SHA-256:	D95B066BA718DA0C1909C69F15D0E32373B0B53AFB952F5CD414C0FC2A00A2C9
SHA-512:	C0FC8F6021733F63A91FA5B2CF26DE6BC9638875B475029F76607E15EC8299C1B07D8DDCD070EC92C55B83E474DF0F14083B44E9B4A1516AA2D34CCF1AB1C98C
Malicious:	false
Preview:	/! For license information please see videoBundle.js.LICENSE.txt /.(()=>{var e={2505:(e,t,n)=>{e.exports=n(8015)},5592:(e,t,n)=>{"use strict";var r=n(9516),i=n(7522),o=n(3948),a=n(9106),s=n(9615),c=n(2012),u=n(4202),l=n(4896),d=n(5845),f=n(8563),p=n(5656);e.exports=function(e){return new Promise((function(t,n){var h,v=e.data,m=e.headers,g=e.responseType;function y(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}r.isFormData(v)&&r.isStandardBrowserEnv()&&delete m["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var w=e.auth.username\|\|"",E=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";m.Authorization="Basic "+btoa(w+":"+E)}var S=s(e.baseURL,e.url);function _(){if(b){var r="getAllResponseHeaders"in b?c(b.getAllResponseHeaders()):null,o={data:g&&"text"!==g&&"json"!==g?b.response:b.responseText,status:b.status,statusText:b.statusText,headers:r,config:e,request:b};i((function(e){t(e),y()}),(function(e){n(e),y()}),o),b=nu

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	24
Entropy (8bit):	3.386842188131012
Encrypted:	false
SSDEEP:	3:AVhcRYD:AVhcRm
MD5:	09F71EFBED1212B64851B5A8032EC26F
SHA1:	EC10DB2BD5556DFC406F32AD9DF9944D11B14233
SHA-256:	89F2D4E6C7A6C41C13C2E7A75E526AA60B9D5274FE28B2D82801C6BEB6BEB879
SHA-512:	48B0B3A340EE2DC39A346E8CE4C67697F166362CEFC60247848858A011C23C0E14C8914B90BC431CC063EE96FAB113064EA2DBC36988B2CBFB5F54183AA67E1E
Malicious:	false
Preview:	upstream request timeout

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ISO-8859 text, with CRLF line terminators
Category:	dropped
Size (bytes):	1201
Entropy (8bit):	5.822802946046991
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsfAwa7JZRGNeHX+AYcvP2wCGKAYOL6pgk5:lmIAq1UowiJZ+eHX+AdP2ze52pgk5
MD5:	B3B1D7051F61DA1235A8BD483082B07F
SHA1:	4A5EF342B721C513CE93BBC359EDD0330620BA62
SHA-256:	927E749F32F0FFC5C3F255581CE52810454433AF868239CA90B17F6D365AFE2C
SHA-512:	BE07263AF762FC724B495F6A8EA85F671B04ADC8236EA735B301E12B577190E969FEE2EA4510C78CADE272C8065A2F2014F6039C6E36C7A12E68C00BC03CD0BC
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=windows-1251"/>..<title>500 - .......... ...... ........</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>...... .......</h1></div>..<div id="content">.. <div class="

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd/2oTlSHYB1p:6v/lhPfZMys+RlOAp
MD5:	48B7A1E65C0E92830152164B22A7C37D
SHA1:	16F99525ED7FEEE4E80D1E32DF48D36286CDFCA4
SHA-256:	E3849FDC1EAB88579B20B1B56875D6EF8299C4AD165E03921400CCAE69149861
SHA-512:	8846633046618696DFE7DCF6397D2588A8334DD2349B1300EFF197E336FF3193A83AB8900D6666A0D7A0A6F797D323A4AEE2BD05FA7A2EB8B888F3EA85459489
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c``...........}....IEND.B`.

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.561814811046517
Encrypted:	false
SSDEEP:	3:YM2zWXJvN3VuLAx6XJJRMLkJ5fMYn:YM2khkAyJJRMLA2Y
MD5:	7016DA56C324CA7D24D38F363FB98B3C
SHA1:	DF7BBC4D5D99C9EFECC2885523BC53176AD1354A
SHA-256:	BA8451F39B0887DFFF955335E5BF9007D350BF5C2D9F5EF697E07275ECBC331A
SHA-512:	89849DA0DE17EE15FE25B99B5D697C100149BDEF67436817AD1BA1BFB8B478D6079A929EBD8E899F75A425B97FC8DE5248800EFBABDC06562B0A9CD4B490CE84
Malicious:	false
Preview:	{"ingestUrl":"https://api.id5-sync.com/analytics/event","sampling":10}

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23843), with escape sequences
Category:	dropped
Size (bytes):	23930
Entropy (8bit):	5.42714919475621
Encrypted:	false
SSDEEP:	384:EqR7eZk8qlPRy4+TWLc2dImKhHQRv9t6A2s7/vINwMViTnGTBKKsomM8LKrY:ENZkblPMud716VKwwIiOKDkDY
MD5:	1CFFDD5C82CD0AFF2F453D352EA5903A
SHA1:	1BA286119EEEC53D6C99E2ED640D75EBD467B244
SHA-256:	20133CC700841EC85F087FF9834A922B482B9135E98574A9AFEBADE4C754558C
SHA-512:	7A625952E55D00A0A8D6B8E075375D27A6AD81A01A615FE430C08FFC56CF62E2745EF09E102EAED4DB35C4A5EDFB439DB64986A11234C3DE70FA7C459214F599
Malicious:	false
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function a(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function i(){return Math.round(2147483647*Math.random())}var c=/qcdbgc=1$/.test(window.location.toString());function u(e,t){if("undefined"!=typeof console){var n="ERROR"===e?".[41m QuantJS .[0m":".[44m QuantJS .[0m";console.log.apply(console,[n].conca

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31061), with LF, NEL line terminators
Category:	dropped
Size (bytes):	55092
Entropy (8bit):	5.295786539632903
Encrypted:	false
SSDEEP:	1536:XFbSKxfqPPkqR3KQXd+2KundjO43OeqiZEL6RZe7:VuqPBM3OD7
MD5:	42030B0BDFFEC6A0E52EED3CA3229DD3
SHA1:	FF8CC8D1EC900A9F7135C7A361810549C40406B1
SHA-256:	43F804D38A294C6DF1CE8EE64FB95AD0FF5A8D6D5685D9537DF02212668A1DFF
SHA-512:	5B97FF7174BC06198BE133CE87F98AEF38F7FF66923D4DAE27054066BC4231B216F282310D5162AB06BE904EFE99479AB70B26E68943999B514533BCD6A42498
Malicious:	false
Preview:	/!. pubcid.js 2.0.5 - https://github.com/prebid/Shared-id-v2/. * SPDX-License-Identifier: Apache-2.0. */!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)}

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	2934
Entropy (8bit):	5.431229702152407
Encrypted:	false
SSDEEP:	48:kHbLCfmz2GO5bBrGOox1GOGU9dNblGOh/gr51jGO+om6EGOUj5MueOSy9DOGOch:ICeBEBSbxkhYDbUSbT6bxUDyPHh
MD5:	C951B34A68B53291B2B4A6C020240961
SHA1:	95CDCBA2712DEEBA3451B8A6BA24FB70B66FADC6
SHA-256:	1AA11173CB11D24223CD2B9C470F092ADFCCF1C6516A72BB35278F705EE4E099
SHA-512:	18728FF30C4AABA81FB8F2C1C71FD8FB6FE135F1ED1E79F0A8EA032B25A38175D9CD727AFF8AE9BEC47E41ACF6F82599149DB4AC27C0058B26F0A1FF1EB04874
Malicious:	false
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_8f91b3c0-4256-4af1-9422-b299c036a719&gdpr=0&gdpr_consent=&us_privacy=1---" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV84ZjkxYjNjMC00MjU2LTRhZjEtOTQyMi1iMjk5YzAzNmE3MTk=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	31666
Entropy (8bit):	5.397564672661937
Encrypted:	false
SSDEEP:	384:npzjVkjElIVonxb6qOq+WZT8HjiyUv5aYe9hiVw6rCRNbzgM/BwNwgmx/tXTxw4k:nxjNl3x8XBHa4iVwmytzimx/hcg6/K3w
MD5:	B0A74586B183DB7082EA48B6EA43EDE3
SHA1:	5CEC77CD9C2A7EC472327533B0E32D2D5DA8634D
SHA-256:	36CB859BE5A639C678F317D76C5C589DA1B5E08820FCCE41D67C38B517EFA959
SHA-512:	88A1BA500A6CA668014C54D442DCA1487C1FFBE0E57BAA53A4F4E9C0038F12B981F3A1FC38B598EA4822EB0E086FAF0A4C5DC8601C9BB91C2B6B6BFC3E0945A2
Malicious:	false
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=ba(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Static File Info

General

File type:	Microsoft Excel 2007+
Entropy (8bit):	7.895908101190763
TrID:	Excel Microsoft Office Open XML Format document (35004/1) 81.40% ZIP compressed archive (8000/1) 18.60%
File name:	Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx
File size:	662'119 bytes
MD5:	8a46f520bc41b8cc95a6b23c858037f3
SHA1:	bb7a330637d77c0d1f37e901e38a06af4ef08d1c
SHA256:	c5f56fa320f363b23fb9275ffa1a9aa8f9941adc13b72f7bd4a4ff91d87368c1
SHA512:	7269ecd37f0ff6ced87890bea43584ef83e04fddab2f6e116ac2dc6b2d4df849c8c8a67baa3455b62b6254de169473bfae35e3074be40668268adf52ed8e1ef3
SSDEEP:	12288:Ly1/2POfqdnnnnnnnO7/UnnnnnnndnnnnnnnHIXWR6U2Z56Alll3cEGXzybx49dL:Ly1/2UZAZyF49dL
TLSH:	C4E46DEBDE349D1F89C6B57DCA7B913BA780B903028058DD5BD0106F12DAB8AE14BF15
File Content Preview:	PK..........!.. .T............[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	35e58a8c0c8a85b9

Static OLE Info

General

Document Type:	OpenXML
Number of OLE Files:	1

OLE File "Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx"

Indicators

Has Summary Info:
Application Name:
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	False

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 15:16:47.119481087 CEST	192.168.2.4	1.1.1.1	0x3294	Standard query (0)	www.multitran.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:47.119625092 CEST	192.168.2.4	1.1.1.1	0x998b	Standard query (0)	www.multitran.ru	65	IN (0x0001)	false
Sep 30, 2024 15:16:48.290184975 CEST	192.168.2.4	1.1.1.1	0xeb68	Standard query (0)	www.multitran.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:48.290342093 CEST	192.168.2.4	1.1.1.1	0x3996	Standard query (0)	www.multitran.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:49.521998882 CEST	192.168.2.4	1.1.1.1	0xf9c0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:49.522191048 CEST	192.168.2.4	1.1.1.1	0xf59f	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:49.571310043 CEST	192.168.2.4	1.1.1.1	0x7937	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:49.571508884 CEST	192.168.2.4	1.1.1.1	0x4565	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:50.502638102 CEST	192.168.2.4	1.1.1.1	0xc779	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:50.502756119 CEST	192.168.2.4	1.1.1.1	0x801a	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:50.515443087 CEST	192.168.2.4	1.1.1.1	0x7a54	Standard query (0)	www.multitran.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:50.515520096 CEST	192.168.2.4	1.1.1.1	0x7edc	Standard query (0)	www.multitran.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:50.672018051 CEST	192.168.2.4	1.1.1.1	0x92c0	Standard query (0)	cdn.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:50.672214985 CEST	192.168.2.4	1.1.1.1	0x486d	Standard query (0)	cdn.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:50.672725916 CEST	192.168.2.4	1.1.1.1	0x185d	Standard query (0)	delivery.adrecover.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:50.672864914 CEST	192.168.2.4	1.1.1.1	0x7b1c	Standard query (0)	delivery.adrecover.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:51.704227924 CEST	192.168.2.4	1.1.1.1	0x8527	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.704435110 CEST	192.168.2.4	1.1.1.1	0xb049	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:51.835680962 CEST	192.168.2.4	1.1.1.1	0xf204	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.836253881 CEST	192.168.2.4	1.1.1.1	0x29c7	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:51.840781927 CEST	192.168.2.4	1.1.1.1	0x3bff	Standard query (0)	delivery.adrecover.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.841051102 CEST	192.168.2.4	1.1.1.1	0x50b6	Standard query (0)	delivery.adrecover.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:52.472273111 CEST	192.168.2.4	1.1.1.1	0x71c	Standard query (0)	cdn.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:52.472430944 CEST	192.168.2.4	1.1.1.1	0x5c51	Standard query (0)	cdn.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:52.625402927 CEST	192.168.2.4	1.1.1.1	0xb642	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:52.625595093 CEST	192.168.2.4	1.1.1.1	0x5d60	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:53.254789114 CEST	192.168.2.4	1.1.1.1	0x19a4	Standard query (0)	http-intake.logs.us5.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.254973888 CEST	192.168.2.4	1.1.1.1	0x7ef4	Standard query (0)	http-intake.logs.us5.datadoghq.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:53.303512096 CEST	192.168.2.4	1.1.1.1	0x2fb6	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.303750038 CEST	192.168.2.4	1.1.1.1	0xb00f	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:53.304482937 CEST	192.168.2.4	1.1.1.1	0xe696	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.305324078 CEST	192.168.2.4	1.1.1.1	0xa70f	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:53.305783987 CEST	192.168.2.4	1.1.1.1	0x571d	Standard query (0)	e3.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.306045055 CEST	192.168.2.4	1.1.1.1	0xced9	Standard query (0)	e3.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:53.444953918 CEST	192.168.2.4	1.1.1.1	0xee80	Standard query (0)	keymap.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.445131063 CEST	192.168.2.4	1.1.1.1	0x54a	Standard query (0)	keymap.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:54.529022932 CEST	192.168.2.4	1.1.1.1	0x4a36	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:54.530242920 CEST	192.168.2.4	1.1.1.1	0xf89f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:54.724008083 CEST	192.168.2.4	1.1.1.1	0xdd42	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:54.724186897 CEST	192.168.2.4	1.1.1.1	0x71e7	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:55.090979099 CEST	192.168.2.4	1.1.1.1	0x8be5	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.091121912 CEST	192.168.2.4	1.1.1.1	0x34a3	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:55.212099075 CEST	192.168.2.4	1.1.1.1	0xe3e	Standard query (0)	e3.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.212483883 CEST	192.168.2.4	1.1.1.1	0xfb5b	Standard query (0)	e3.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:55.215243101 CEST	192.168.2.4	1.1.1.1	0x18c7	Standard query (0)	keymap.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.215418100 CEST	192.168.2.4	1.1.1.1	0x9f7e	Standard query (0)	keymap.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:55.215843916 CEST	192.168.2.4	1.1.1.1	0x16c5	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.216054916 CEST	192.168.2.4	1.1.1.1	0x4ec5	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:55.371437073 CEST	192.168.2.4	1.1.1.1	0xa01b	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.371565104 CEST	192.168.2.4	1.1.1.1	0x4c14	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:55.884499073 CEST	192.168.2.4	1.1.1.1	0x5c91	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.884629965 CEST	192.168.2.4	1.1.1.1	0xd02	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:56.139035940 CEST	192.168.2.4	1.1.1.1	0xb6d7	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.139276028 CEST	192.168.2.4	1.1.1.1	0xc05b	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:56.139703035 CEST	192.168.2.4	1.1.1.1	0xd71c	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.139909983 CEST	192.168.2.4	1.1.1.1	0x48f	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:56.140353918 CEST	192.168.2.4	1.1.1.1	0x6de3	Standard query (0)	secure.cdn.fastclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.140563011 CEST	192.168.2.4	1.1.1.1	0x38b0	Standard query (0)	secure.cdn.fastclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:56.142447948 CEST	192.168.2.4	1.1.1.1	0x6f4d	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.142592907 CEST	192.168.2.4	1.1.1.1	0xc4b4	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:56.143040895 CEST	192.168.2.4	1.1.1.1	0x5859	Standard query (0)	cdn.hadronid.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.143273115 CEST	192.168.2.4	1.1.1.1	0x512c	Standard query (0)	cdn.hadronid.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:56.144926071 CEST	192.168.2.4	1.1.1.1	0xb2f9	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.145335913 CEST	192.168.2.4	1.1.1.1	0x29a8	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:56.968961000 CEST	192.168.2.4	1.1.1.1	0x8112	Standard query (0)	id.hadron.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.969297886 CEST	192.168.2.4	1.1.1.1	0x7c6e	Standard query (0)	id.hadron.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:16:57.111282110 CEST	192.168.2.4	1.1.1.1	0xec68	Standard query (0)	cdn.hadronid.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.111618042 CEST	192.168.2.4	1.1.1.1	0x601a	Standard query (0)	cdn.hadronid.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:57.347418070 CEST	192.168.2.4	1.1.1.1	0x3e02	Standard query (0)	secure.cdn.fastclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.347528934 CEST	192.168.2.4	1.1.1.1	0x7375	Standard query (0)	secure.cdn.fastclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:57.376821995 CEST	192.168.2.4	1.1.1.1	0xd994	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.376945972 CEST	192.168.2.4	1.1.1.1	0x7bd2	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:57.531945944 CEST	192.168.2.4	1.1.1.1	0xebaf	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.532135010 CEST	192.168.2.4	1.1.1.1	0x1590	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:57.603106022 CEST	192.168.2.4	1.1.1.1	0xa8a0	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.603264093 CEST	192.168.2.4	1.1.1.1	0x330a	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:57.672307014 CEST	192.168.2.4	1.1.1.1	0x8646	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.672606945 CEST	192.168.2.4	1.1.1.1	0x5cfd	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:57.673141956 CEST	192.168.2.4	1.1.1.1	0x7f87	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.673264980 CEST	192.168.2.4	1.1.1.1	0x374a	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:58.065201998 CEST	192.168.2.4	1.1.1.1	0x2e52	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.066009998 CEST	192.168.2.4	1.1.1.1	0x9f44	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:58.364381075 CEST	192.168.2.4	1.1.1.1	0x77e1	Standard query (0)	http-intake.logs.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.364525080 CEST	192.168.2.4	1.1.1.1	0xae07	Standard query (0)	http-intake.logs.datadoghq.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:58.479645967 CEST	192.168.2.4	1.1.1.1	0xce62	Standard query (0)	video.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.480025053 CEST	192.168.2.4	1.1.1.1	0x1fd	Standard query (0)	video.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:58.639138937 CEST	192.168.2.4	1.1.1.1	0x1411	Standard query (0)	proc.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.639710903 CEST	192.168.2.4	1.1.1.1	0x683c	Standard query (0)	proc.ad.cpe.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:58.860605001 CEST	192.168.2.4	1.1.1.1	0x145	Standard query (0)	id.hadron.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.860733032 CEST	192.168.2.4	1.1.1.1	0x1008	Standard query (0)	id.hadron.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:16:58.864963055 CEST	192.168.2.4	1.1.1.1	0x7837	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.865107059 CEST	192.168.2.4	1.1.1.1	0xdf01	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Sep 30, 2024 15:16:58.888983011 CEST	192.168.2.4	1.1.1.1	0x39d3	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.889128923 CEST	192.168.2.4	1.1.1.1	0x1057	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:59.483254910 CEST	192.168.2.4	1.1.1.1	0xeacf	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.483608961 CEST	192.168.2.4	1.1.1.1	0x1862	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:59.486430883 CEST	192.168.2.4	1.1.1.1	0x35cd	Standard query (0)	video.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.486572027 CEST	192.168.2.4	1.1.1.1	0xa70d	Standard query (0)	video.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:16:59.536040068 CEST	192.168.2.4	1.1.1.1	0xb23b	Standard query (0)	proc.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.536392927 CEST	192.168.2.4	1.1.1.1	0x2ffb	Standard query (0)	proc.ad.cpe.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:00.229125977 CEST	192.168.2.4	1.1.1.1	0x38fd	Standard query (0)	a.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.229477882 CEST	192.168.2.4	1.1.1.1	0x67d5	Standard query (0)	a.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:00.459537983 CEST	192.168.2.4	1.1.1.1	0xe6a2	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:00.459537983 CEST	192.168.2.4	1.1.1.1	0xa1e7	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.026603937 CEST	192.168.2.4	1.1.1.1	0xc946	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.026758909 CEST	192.168.2.4	1.1.1.1	0x3db5	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.030493975 CEST	192.168.2.4	1.1.1.1	0x543a	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.030646086 CEST	192.168.2.4	1.1.1.1	0xa28c	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.034411907 CEST	192.168.2.4	1.1.1.1	0x80c1	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.034585953 CEST	192.168.2.4	1.1.1.1	0x249	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.038315058 CEST	192.168.2.4	1.1.1.1	0xf573	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038477898 CEST	192.168.2.4	1.1.1.1	0x8149	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.041631937 CEST	192.168.2.4	1.1.1.1	0xcdd8	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.041766882 CEST	192.168.2.4	1.1.1.1	0x8c2f	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.043417931 CEST	192.168.2.4	1.1.1.1	0x33bd	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.043675900 CEST	192.168.2.4	1.1.1.1	0xe9b0	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.048477888 CEST	192.168.2.4	1.1.1.1	0xdbd5	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.048614025 CEST	192.168.2.4	1.1.1.1	0x940b	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.052376032 CEST	192.168.2.4	1.1.1.1	0xa82c	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.052653074 CEST	192.168.2.4	1.1.1.1	0x40e	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.056492090 CEST	192.168.2.4	1.1.1.1	0x473e	Standard query (0)	prebid.smilewanted.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.056766033 CEST	192.168.2.4	1.1.1.1	0xecc0	Standard query (0)	prebid.smilewanted.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.062154055 CEST	192.168.2.4	1.1.1.1	0xd0ea	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.062423944 CEST	192.168.2.4	1.1.1.1	0x7a62	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.116055965 CEST	192.168.2.4	1.1.1.1	0x61f0	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.116358995 CEST	192.168.2.4	1.1.1.1	0x22ff	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.116734028 CEST	192.168.2.4	1.1.1.1	0xf67c	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.117816925 CEST	192.168.2.4	1.1.1.1	0xc3f2	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.118838072 CEST	192.168.2.4	1.1.1.1	0x3296	Standard query (0)	api.id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.119122028 CEST	192.168.2.4	1.1.1.1	0x8f5d	Standard query (0)	api.id5-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.120026112 CEST	192.168.2.4	1.1.1.1	0x10c4	Standard query (0)	pbjs.e-planning.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124566078 CEST	192.168.2.4	1.1.1.1	0x61f5	Standard query (0)	pbjs.e-planning.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.125540018 CEST	192.168.2.4	1.1.1.1	0x57f	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.125972986 CEST	192.168.2.4	1.1.1.1	0xf161	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.323725939 CEST	192.168.2.4	1.1.1.1	0x8b53	Standard query (0)	a.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.323959112 CEST	192.168.2.4	1.1.1.1	0x8068	Standard query (0)	a.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.363603115 CEST	192.168.2.4	1.1.1.1	0xb2b4	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.363790035 CEST	192.168.2.4	1.1.1.1	0xcfd1	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.369205952 CEST	192.168.2.4	1.1.1.1	0xb730	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.369424105 CEST	192.168.2.4	1.1.1.1	0xbbd0	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.374092102 CEST	192.168.2.4	1.1.1.1	0x519	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.374214888 CEST	192.168.2.4	1.1.1.1	0xc7e5	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.671210051 CEST	192.168.2.4	1.1.1.1	0x2b77	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.671421051 CEST	192.168.2.4	1.1.1.1	0x82a8	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.795598984 CEST	192.168.2.4	1.1.1.1	0xed47	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.795742989 CEST	192.168.2.4	1.1.1.1	0x9bff	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.897217989 CEST	192.168.2.4	1.1.1.1	0xaf18	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.897372007 CEST	192.168.2.4	1.1.1.1	0x3bc1	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:01.987962961 CEST	192.168.2.4	1.1.1.1	0x4c98	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.988182068 CEST	192.168.2.4	1.1.1.1	0x1185	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.009053946 CEST	192.168.2.4	1.1.1.1	0x5a81	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.009198904 CEST	192.168.2.4	1.1.1.1	0xfd4d	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.029608965 CEST	192.168.2.4	1.1.1.1	0xa760	Standard query (0)	pbjs.e-planning.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.029786110 CEST	192.168.2.4	1.1.1.1	0x8f62	Standard query (0)	pbjs.e-planning.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.035604000 CEST	192.168.2.4	1.1.1.1	0xca75	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.035914898 CEST	192.168.2.4	1.1.1.1	0x7a8a	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.079864025 CEST	192.168.2.4	1.1.1.1	0x798a	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.080030918 CEST	192.168.2.4	1.1.1.1	0x3c50	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.085273981 CEST	192.168.2.4	1.1.1.1	0xb7e8	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.085412979 CEST	192.168.2.4	1.1.1.1	0x71ed	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.119714975 CEST	192.168.2.4	1.1.1.1	0x50e9	Standard query (0)	api.id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.119949102 CEST	192.168.2.4	1.1.1.1	0xfe3d	Standard query (0)	api.id5-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.125868082 CEST	192.168.2.4	1.1.1.1	0x37ef	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126097918 CEST	192.168.2.4	1.1.1.1	0xad34	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.168260098 CEST	192.168.2.4	1.1.1.1	0xf103	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.168545008 CEST	192.168.2.4	1.1.1.1	0x38f9	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.397701025 CEST	192.168.2.4	1.1.1.1	0x87f8	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.397830009 CEST	192.168.2.4	1.1.1.1	0x1907	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.460954905 CEST	192.168.2.4	1.1.1.1	0x6daa	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.461302996 CEST	192.168.2.4	1.1.1.1	0xc1c2	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.478445053 CEST	192.168.2.4	1.1.1.1	0x9b4c	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.478579998 CEST	192.168.2.4	1.1.1.1	0x9adf	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.479116917 CEST	192.168.2.4	1.1.1.1	0x1339	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.479235888 CEST	192.168.2.4	1.1.1.1	0x8ea1	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:02.636301041 CEST	192.168.2.4	1.1.1.1	0xafa9	Standard query (0)	b.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.636761904 CEST	192.168.2.4	1.1.1.1	0xdecc	Standard query (0)	b.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:03.188021898 CEST	192.168.2.4	1.1.1.1	0x542e	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.188186884 CEST	192.168.2.4	1.1.1.1	0x3a1e	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Sep 30, 2024 15:17:03.700409889 CEST	192.168.2.4	1.1.1.1	0xf58e	Standard query (0)	p.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.700750113 CEST	192.168.2.4	1.1.1.1	0x1fb4	Standard query (0)	p.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:03.702255011 CEST	192.168.2.4	1.1.1.1	0x2ee9	Standard query (0)	b.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.702390909 CEST	192.168.2.4	1.1.1.1	0xef1e	Standard query (0)	b.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:04.316787004 CEST	192.168.2.4	1.1.1.1	0xe380	Standard query (0)	ids.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.316915989 CEST	192.168.2.4	1.1.1.1	0x9bcd	Standard query (0)	ids.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:04.420357943 CEST	192.168.2.4	1.1.1.1	0xe0f4	Standard query (0)	seg.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.420470953 CEST	192.168.2.4	1.1.1.1	0xe937	Standard query (0)	seg.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:04.422559977 CEST	192.168.2.4	1.1.1.1	0xd9f9	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.422772884 CEST	192.168.2.4	1.1.1.1	0x795f	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:04.425105095 CEST	192.168.2.4	1.1.1.1	0x5456	Standard query (0)	p.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.425286055 CEST	192.168.2.4	1.1.1.1	0x7daa	Standard query (0)	p.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.166608095 CEST	192.168.2.4	1.1.1.1	0x1f4e	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.166867018 CEST	192.168.2.4	1.1.1.1	0x813d	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.167785883 CEST	192.168.2.4	1.1.1.1	0xa6d6	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.169076920 CEST	192.168.2.4	1.1.1.1	0xa033	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.673419952 CEST	192.168.2.4	1.1.1.1	0xfc89	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.673579931 CEST	192.168.2.4	1.1.1.1	0x5adc	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.675077915 CEST	192.168.2.4	1.1.1.1	0x690e	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.675399065 CEST	192.168.2.4	1.1.1.1	0xe799	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.841819048 CEST	192.168.2.4	1.1.1.1	0xe54d	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.842273951 CEST	192.168.2.4	1.1.1.1	0xb2e1	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.843333006 CEST	192.168.2.4	1.1.1.1	0x54db	Standard query (0)	cs.ingage.tech	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.843681097 CEST	192.168.2.4	1.1.1.1	0x7560	Standard query (0)	cs.ingage.tech	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.844126940 CEST	192.168.2.4	1.1.1.1	0xf657	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.844583035 CEST	192.168.2.4	1.1.1.1	0x1974	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.845180988 CEST	192.168.2.4	1.1.1.1	0xb159	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.845558882 CEST	192.168.2.4	1.1.1.1	0xa73c	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.846895933 CEST	192.168.2.4	1.1.1.1	0x7f01	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.847112894 CEST	192.168.2.4	1.1.1.1	0x560	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.848722935 CEST	192.168.2.4	1.1.1.1	0x111d	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.848879099 CEST	192.168.2.4	1.1.1.1	0x4cd9	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.852803946 CEST	192.168.2.4	1.1.1.1	0xd9ff	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.852942944 CEST	192.168.2.4	1.1.1.1	0x3c56	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.883949995 CEST	192.168.2.4	1.1.1.1	0x19cb	Standard query (0)	csync.smilewanted.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.884083033 CEST	192.168.2.4	1.1.1.1	0x19ae	Standard query (0)	csync.smilewanted.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:05.885219097 CEST	192.168.2.4	1.1.1.1	0x8408	Standard query (0)	public.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.885458946 CEST	192.168.2.4	1.1.1.1	0x8e22	Standard query (0)	public.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.569313049 CEST	192.168.2.4	1.1.1.1	0x43f4	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.569483995 CEST	192.168.2.4	1.1.1.1	0xb0b7	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.577059031 CEST	192.168.2.4	1.1.1.1	0xcf09	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.577234983 CEST	192.168.2.4	1.1.1.1	0x4800	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.637965918 CEST	192.168.2.4	1.1.1.1	0x4ad3	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.638099909 CEST	192.168.2.4	1.1.1.1	0xf237	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.645241022 CEST	192.168.2.4	1.1.1.1	0x4b4	Standard query (0)	trace-eu.mediago.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.645370007 CEST	192.168.2.4	1.1.1.1	0xf7a6	Standard query (0)	trace-eu.mediago.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.646137953 CEST	192.168.2.4	1.1.1.1	0x66dc	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.646249056 CEST	192.168.2.4	1.1.1.1	0x389a	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.646910906 CEST	192.168.2.4	1.1.1.1	0xaf9a	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.647123098 CEST	192.168.2.4	1.1.1.1	0xaba2	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.647468090 CEST	192.168.2.4	1.1.1.1	0xd889	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.647588968 CEST	192.168.2.4	1.1.1.1	0x49ee	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.651130915 CEST	192.168.2.4	1.1.1.1	0x79f8	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.651288986 CEST	192.168.2.4	1.1.1.1	0x236a	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.671947002 CEST	192.168.2.4	1.1.1.1	0xc884	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.672072887 CEST	192.168.2.4	1.1.1.1	0x1032	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.840728045 CEST	192.168.2.4	1.1.1.1	0x38d9	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.840867043 CEST	192.168.2.4	1.1.1.1	0xe100	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.863082886 CEST	192.168.2.4	1.1.1.1	0x6556	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.863293886 CEST	192.168.2.4	1.1.1.1	0x30da	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.863765001 CEST	192.168.2.4	1.1.1.1	0xeaea	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.864008904 CEST	192.168.2.4	1.1.1.1	0x6ef5	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.871998072 CEST	192.168.2.4	1.1.1.1	0x393e	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.872211933 CEST	192.168.2.4	1.1.1.1	0x451f	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.912570000 CEST	192.168.2.4	1.1.1.1	0x203c	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.912750959 CEST	192.168.2.4	1.1.1.1	0x50e8	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:06.990622044 CEST	192.168.2.4	1.1.1.1	0xf55e	Standard query (0)	amazon-tam-match.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.990766048 CEST	192.168.2.4	1.1.1.1	0x84e1	Standard query (0)	amazon-tam-match.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.007657051 CEST	192.168.2.4	1.1.1.1	0xb7c6	Standard query (0)	sync.inmobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.007790089 CEST	192.168.2.4	1.1.1.1	0xebe5	Standard query (0)	sync.inmobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.191087961 CEST	192.168.2.4	1.1.1.1	0x20aa	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.191211939 CEST	192.168.2.4	1.1.1.1	0xc808	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.335841894 CEST	192.168.2.4	1.1.1.1	0xf920	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.336275101 CEST	192.168.2.4	1.1.1.1	0xeb8c	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.358922005 CEST	192.168.2.4	1.1.1.1	0x84a5	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.359110117 CEST	192.168.2.4	1.1.1.1	0xb8fc	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.415106058 CEST	192.168.2.4	1.1.1.1	0x64b8	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.415358067 CEST	192.168.2.4	1.1.1.1	0xdfeb	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.546030045 CEST	192.168.2.4	1.1.1.1	0x8b9a	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.546156883 CEST	192.168.2.4	1.1.1.1	0x88af	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.608460903 CEST	192.168.2.4	1.1.1.1	0x2453	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.608694077 CEST	192.168.2.4	1.1.1.1	0xdeb2	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.692346096 CEST	192.168.2.4	1.1.1.1	0xd4ce	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.692487001 CEST	192.168.2.4	1.1.1.1	0x63ca	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.708039045 CEST	192.168.2.4	1.1.1.1	0x8c7	Standard query (0)	pixel.33across.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.708224058 CEST	192.168.2.4	1.1.1.1	0xc50a	Standard query (0)	pixel.33across.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.916376114 CEST	192.168.2.4	1.1.1.1	0xaf8a	Standard query (0)	static.smilewanted.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.916547060 CEST	192.168.2.4	1.1.1.1	0x303d	Standard query (0)	static.smilewanted.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.931477070 CEST	192.168.2.4	1.1.1.1	0x433c	Standard query (0)	cs-server-s2s.yellowblue.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.931646109 CEST	192.168.2.4	1.1.1.1	0x42c4	Standard query (0)	cs-server-s2s.yellowblue.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:07.944283009 CEST	192.168.2.4	1.1.1.1	0xe195	Standard query (0)	cdn.dxkulture.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.944425106 CEST	192.168.2.4	1.1.1.1	0x4196	Standard query (0)	cdn.dxkulture.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.008586884 CEST	192.168.2.4	1.1.1.1	0x92c9	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.008753061 CEST	192.168.2.4	1.1.1.1	0x8c0e	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.009816885 CEST	192.168.2.4	1.1.1.1	0x1ea6	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.010140896 CEST	192.168.2.4	1.1.1.1	0xad3b	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.036335945 CEST	192.168.2.4	1.1.1.1	0xd717	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.036480904 CEST	192.168.2.4	1.1.1.1	0xc7fc	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.036887884 CEST	192.168.2.4	1.1.1.1	0xd6b0	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.037009001 CEST	192.168.2.4	1.1.1.1	0x4bfa	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.038074017 CEST	192.168.2.4	1.1.1.1	0x41d2	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.038213015 CEST	192.168.2.4	1.1.1.1	0xe862	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.038594961 CEST	192.168.2.4	1.1.1.1	0x805	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.038813114 CEST	192.168.2.4	1.1.1.1	0xf4aa	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.039519072 CEST	192.168.2.4	1.1.1.1	0x9957	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.039644957 CEST	192.168.2.4	1.1.1.1	0xefde	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.077027082 CEST	192.168.2.4	1.1.1.1	0x95af	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.077286959 CEST	192.168.2.4	1.1.1.1	0xe0ad	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.082503080 CEST	192.168.2.4	1.1.1.1	0xc62c	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.082686901 CEST	192.168.2.4	1.1.1.1	0xb071	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.083915949 CEST	192.168.2.4	1.1.1.1	0x3ad8	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.084148884 CEST	192.168.2.4	1.1.1.1	0xd8b7	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.089927912 CEST	192.168.2.4	1.1.1.1	0xe1f6	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.090133905 CEST	192.168.2.4	1.1.1.1	0x7c89	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.100935936 CEST	192.168.2.4	1.1.1.1	0x10a0	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.101202965 CEST	192.168.2.4	1.1.1.1	0xc870	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.531115055 CEST	192.168.2.4	1.1.1.1	0xa98a	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.531549931 CEST	192.168.2.4	1.1.1.1	0x9499	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.543433905 CEST	192.168.2.4	1.1.1.1	0x1310	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.543550014 CEST	192.168.2.4	1.1.1.1	0x7742	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.550873995 CEST	192.168.2.4	1.1.1.1	0x4989	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.551413059 CEST	192.168.2.4	1.1.1.1	0x5650	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.552581072 CEST	192.168.2.4	1.1.1.1	0xa652	Standard query (0)	dsp-cookie.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.552719116 CEST	192.168.2.4	1.1.1.1	0x991f	Standard query (0)	dsp-cookie.adfarm1.adition.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.553999901 CEST	192.168.2.4	1.1.1.1	0x4be5	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.554178953 CEST	192.168.2.4	1.1.1.1	0x1803	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.554584980 CEST	192.168.2.4	1.1.1.1	0x3870	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.554728985 CEST	192.168.2.4	1.1.1.1	0x8cbd	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.557081938 CEST	192.168.2.4	1.1.1.1	0x7713	Standard query (0)	dsp-ap.eskimi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.557224989 CEST	192.168.2.4	1.1.1.1	0x8c95	Standard query (0)	dsp-ap.eskimi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.890589952 CEST	192.168.2.4	1.1.1.1	0x6a9d	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.890844107 CEST	192.168.2.4	1.1.1.1	0xc42b	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.891139984 CEST	192.168.2.4	1.1.1.1	0x30d0	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.891272068 CEST	192.168.2.4	1.1.1.1	0x6d4f	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.891781092 CEST	192.168.2.4	1.1.1.1	0xa17f	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.892205000 CEST	192.168.2.4	1.1.1.1	0xa446	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.892915964 CEST	192.168.2.4	1.1.1.1	0x3e67	Standard query (0)	d5p.de17a.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.893333912 CEST	192.168.2.4	1.1.1.1	0xe9d1	Standard query (0)	d5p.de17a.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.894155025 CEST	192.168.2.4	1.1.1.1	0xc7fb	Standard query (0)	dsp.360yield.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.894315004 CEST	192.168.2.4	1.1.1.1	0x4259	Standard query (0)	dsp.360yield.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.895766020 CEST	192.168.2.4	1.1.1.1	0x51d	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.895910978 CEST	192.168.2.4	1.1.1.1	0x510e	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.896398067 CEST	192.168.2.4	1.1.1.1	0x2e3d	Standard query (0)	cr.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.896697044 CEST	192.168.2.4	1.1.1.1	0x3be2	Standard query (0)	cr.frontend.weborama.fr	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.897154093 CEST	192.168.2.4	1.1.1.1	0x7278	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.897401094 CEST	192.168.2.4	1.1.1.1	0xafe7	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.898530960 CEST	192.168.2.4	1.1.1.1	0xe4e1	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898705959 CEST	192.168.2.4	1.1.1.1	0x271b	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.900684118 CEST	192.168.2.4	1.1.1.1	0xb176	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.900897026 CEST	192.168.2.4	1.1.1.1	0xbc5c	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Sep 30, 2024 15:17:08.907011032 CEST	192.168.2.4	1.1.1.1	0xdd74	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.907361984 CEST	192.168.2.4	1.1.1.1	0x7f75	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.134028912 CEST	192.168.2.4	1.1.1.1	0x9b77	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.134219885 CEST	192.168.2.4	1.1.1.1	0xb646	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.138319969 CEST	192.168.2.4	1.1.1.1	0x75ce	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.138473034 CEST	192.168.2.4	1.1.1.1	0x48ca	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.138745070 CEST	192.168.2.4	1.1.1.1	0xb386	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.138883114 CEST	192.168.2.4	1.1.1.1	0x673b	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.630302906 CEST	192.168.2.4	1.1.1.1	0xfd65	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.630601883 CEST	192.168.2.4	1.1.1.1	0xd3c6	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.631213903 CEST	192.168.2.4	1.1.1.1	0x60e3	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.631500006 CEST	192.168.2.4	1.1.1.1	0x5dda	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.642548084 CEST	192.168.2.4	1.1.1.1	0x4269	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.642677069 CEST	192.168.2.4	1.1.1.1	0x9411	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.643413067 CEST	192.168.2.4	1.1.1.1	0x7e4c	Standard query (0)	groundcontrol.rendering.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.643524885 CEST	192.168.2.4	1.1.1.1	0x5c78	Standard query (0)	groundcontrol.rendering.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.777208090 CEST	192.168.2.4	1.1.1.1	0x5cf7	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.777343035 CEST	192.168.2.4	1.1.1.1	0xe474	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.896215916 CEST	192.168.2.4	1.1.1.1	0xaf33	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.896661043 CEST	192.168.2.4	1.1.1.1	0x4241	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.902406931 CEST	192.168.2.4	1.1.1.1	0xf80	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.902534008 CEST	192.168.2.4	1.1.1.1	0xc349	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.941899061 CEST	192.168.2.4	1.1.1.1	0x7e8e	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.942033052 CEST	192.168.2.4	1.1.1.1	0xba71	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.951889992 CEST	192.168.2.4	1.1.1.1	0xcc98	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952064991 CEST	192.168.2.4	1.1.1.1	0x628	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:09.973767996 CEST	192.168.2.4	1.1.1.1	0x69e2	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.974050999 CEST	192.168.2.4	1.1.1.1	0x4914	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.013019085 CEST	192.168.2.4	1.1.1.1	0xeedf	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.013164997 CEST	192.168.2.4	1.1.1.1	0xe24c	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.014931917 CEST	192.168.2.4	1.1.1.1	0xf8d5	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.015085936 CEST	192.168.2.4	1.1.1.1	0x7fff	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.015613079 CEST	192.168.2.4	1.1.1.1	0x919a	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.016185999 CEST	192.168.2.4	1.1.1.1	0xd7a4	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.017155886 CEST	192.168.2.4	1.1.1.1	0xed2d	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.017323971 CEST	192.168.2.4	1.1.1.1	0x2a59	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.019326925 CEST	192.168.2.4	1.1.1.1	0xd96f	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.019651890 CEST	192.168.2.4	1.1.1.1	0xaf88	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.045202971 CEST	192.168.2.4	1.1.1.1	0xf90e	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.045353889 CEST	192.168.2.4	1.1.1.1	0xa6e8	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.080339909 CEST	192.168.2.4	1.1.1.1	0x5d80	Standard query (0)	visitor-risecode.omnitagjs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.080571890 CEST	192.168.2.4	1.1.1.1	0x5ff2	Standard query (0)	visitor-risecode.omnitagjs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.083759069 CEST	192.168.2.4	1.1.1.1	0xcc80	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.083957911 CEST	192.168.2.4	1.1.1.1	0x1d1a	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.188201904 CEST	192.168.2.4	1.1.1.1	0x2b3e	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.188441038 CEST	192.168.2.4	1.1.1.1	0x380b	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.230701923 CEST	192.168.2.4	1.1.1.1	0x19fd	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.230840921 CEST	192.168.2.4	1.1.1.1	0x8136	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.268148899 CEST	192.168.2.4	1.1.1.1	0x1d0f	Standard query (0)	eexsync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.268522024 CEST	192.168.2.4	1.1.1.1	0x4949	Standard query (0)	eexsync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.271934032 CEST	192.168.2.4	1.1.1.1	0x95da	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.272099972 CEST	192.168.2.4	1.1.1.1	0xcef7	Standard query (0)	id.a-mx.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.307796955 CEST	192.168.2.4	1.1.1.1	0x9500	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.307951927 CEST	192.168.2.4	1.1.1.1	0xc02e	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.311358929 CEST	192.168.2.4	1.1.1.1	0x38f6	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.311551094 CEST	192.168.2.4	1.1.1.1	0xe4df	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.312800884 CEST	192.168.2.4	1.1.1.1	0x82ba	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.312998056 CEST	192.168.2.4	1.1.1.1	0xf865	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.425823927 CEST	192.168.2.4	1.1.1.1	0xea28	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.426114082 CEST	192.168.2.4	1.1.1.1	0xda0c	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.502760887 CEST	192.168.2.4	1.1.1.1	0x4b6e	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.502886057 CEST	192.168.2.4	1.1.1.1	0xe114	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.518757105 CEST	192.168.2.4	1.1.1.1	0x61e9	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.518897057 CEST	192.168.2.4	1.1.1.1	0x3a49	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.751147985 CEST	192.168.2.4	1.1.1.1	0x5914	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.751302958 CEST	192.168.2.4	1.1.1.1	0x64ec	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.769949913 CEST	192.168.2.4	1.1.1.1	0x3028	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.770097017 CEST	192.168.2.4	1.1.1.1	0xbf14	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.775260925 CEST	192.168.2.4	1.1.1.1	0xa821	Standard query (0)	sync.serverbid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.775590897 CEST	192.168.2.4	1.1.1.1	0x60ce	Standard query (0)	sync.serverbid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:10.776288986 CEST	192.168.2.4	1.1.1.1	0xc695	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.776803017 CEST	192.168.2.4	1.1.1.1	0x8256	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.105231047 CEST	192.168.2.4	1.1.1.1	0xcfc7	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.105415106 CEST	192.168.2.4	1.1.1.1	0xe245	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.162832022 CEST	192.168.2.4	1.1.1.1	0x27bf	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.162977934 CEST	192.168.2.4	1.1.1.1	0xa9ae	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.192023993 CEST	192.168.2.4	1.1.1.1	0xd5ef	Standard query (0)	pixels.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.192368031 CEST	192.168.2.4	1.1.1.1	0xbc94	Standard query (0)	pixels.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.208462954 CEST	192.168.2.4	1.1.1.1	0xdc94	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.209002018 CEST	192.168.2.4	1.1.1.1	0xbac8	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.221026897 CEST	192.168.2.4	1.1.1.1	0xe0db	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.221463919 CEST	192.168.2.4	1.1.1.1	0xdae0	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.335844994 CEST	192.168.2.4	1.1.1.1	0x12ab	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.336360931 CEST	192.168.2.4	1.1.1.1	0x9a18	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.339240074 CEST	192.168.2.4	1.1.1.1	0x3e41	Standard query (0)	dsp-cookie.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.340361118 CEST	192.168.2.4	1.1.1.1	0x1c2e	Standard query (0)	dsp-cookie.adfarm1.adition.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.419876099 CEST	192.168.2.4	1.1.1.1	0xb47	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.420092106 CEST	192.168.2.4	1.1.1.1	0x1c99	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.421211004 CEST	192.168.2.4	1.1.1.1	0x2d42	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.421406031 CEST	192.168.2.4	1.1.1.1	0xeff8	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.448766947 CEST	192.168.2.4	1.1.1.1	0x6b1c	Standard query (0)	creative-assets.quantcount.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.448914051 CEST	192.168.2.4	1.1.1.1	0x6776	Standard query (0)	creative-assets.quantcount.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.479305029 CEST	192.168.2.4	1.1.1.1	0x5b18	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.479531050 CEST	192.168.2.4	1.1.1.1	0xb7e9	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:11.587860107 CEST	192.168.2.4	1.1.1.1	0x3b47	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.588016987 CEST	192.168.2.4	1.1.1.1	0x6f26	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.722129107 CEST	192.168.2.4	1.1.1.1	0x1731	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.722335100 CEST	192.168.2.4	1.1.1.1	0xd55a	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.728738070 CEST	192.168.2.4	1.1.1.1	0x2653	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.728961945 CEST	192.168.2.4	1.1.1.1	0x9efc	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.802330017 CEST	192.168.2.4	1.1.1.1	0x4b59	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.802485943 CEST	192.168.2.4	1.1.1.1	0xc3af	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.802968025 CEST	192.168.2.4	1.1.1.1	0xfe6d	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.803179979 CEST	192.168.2.4	1.1.1.1	0xa7c6	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.807816982 CEST	192.168.2.4	1.1.1.1	0xbc98	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.808051109 CEST	192.168.2.4	1.1.1.1	0x7d0e	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.815191984 CEST	192.168.2.4	1.1.1.1	0xa6b4	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.815427065 CEST	192.168.2.4	1.1.1.1	0x5259	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.897681952 CEST	192.168.2.4	1.1.1.1	0xfc8c	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.898041964 CEST	192.168.2.4	1.1.1.1	0xda84	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.909008026 CEST	192.168.2.4	1.1.1.1	0xde37	Standard query (0)	equativ-match.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.909190893 CEST	192.168.2.4	1.1.1.1	0xdb84	Standard query (0)	equativ-match.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.912477970 CEST	192.168.2.4	1.1.1.1	0x7fff	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.912656069 CEST	192.168.2.4	1.1.1.1	0x3ee3	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.915950060 CEST	192.168.2.4	1.1.1.1	0xf47d	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.916158915 CEST	192.168.2.4	1.1.1.1	0x4d9f	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:12.991132021 CEST	192.168.2.4	1.1.1.1	0xfc0e	Standard query (0)	s2s.yieldlove-ad-serving.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.991424084 CEST	192.168.2.4	1.1.1.1	0xcca3	Standard query (0)	s2s.yieldlove-ad-serving.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.034631968 CEST	192.168.2.4	1.1.1.1	0xbecd	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.034876108 CEST	192.168.2.4	1.1.1.1	0x3af3	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.035723925 CEST	192.168.2.4	1.1.1.1	0x795c	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.035949945 CEST	192.168.2.4	1.1.1.1	0x38bc	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.059667110 CEST	192.168.2.4	1.1.1.1	0xb8b5	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.059813976 CEST	192.168.2.4	1.1.1.1	0x92e8	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.168591976 CEST	192.168.2.4	1.1.1.1	0x49e6	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.168766022 CEST	192.168.2.4	1.1.1.1	0x2df	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.247008085 CEST	192.168.2.4	1.1.1.1	0x912f	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.247198105 CEST	192.168.2.4	1.1.1.1	0xe882	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.339533091 CEST	192.168.2.4	1.1.1.1	0x2373	Standard query (0)	u.ipw.metadsp.co.uk	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.339668989 CEST	192.168.2.4	1.1.1.1	0xb432	Standard query (0)	u.ipw.metadsp.co.uk	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.343458891 CEST	192.168.2.4	1.1.1.1	0x57f3	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.343628883 CEST	192.168.2.4	1.1.1.1	0x39fa	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.521987915 CEST	192.168.2.4	1.1.1.1	0x2e3e	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.522138119 CEST	192.168.2.4	1.1.1.1	0x3965	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.638775110 CEST	192.168.2.4	1.1.1.1	0x365	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.638982058 CEST	192.168.2.4	1.1.1.1	0xa986	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.677556992 CEST	192.168.2.4	1.1.1.1	0xfcd7	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.677717924 CEST	192.168.2.4	1.1.1.1	0xb734	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.684149981 CEST	192.168.2.4	1.1.1.1	0x338c	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.684533119 CEST	192.168.2.4	1.1.1.1	0x6c1c	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.685086012 CEST	192.168.2.4	1.1.1.1	0x1df3	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.685252905 CEST	192.168.2.4	1.1.1.1	0x8d33	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.705396891 CEST	192.168.2.4	1.1.1.1	0xec25	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.706564903 CEST	192.168.2.4	1.1.1.1	0xac68	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.706713915 CEST	192.168.2.4	1.1.1.1	0x82c2	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.715085983 CEST	192.168.2.4	1.1.1.1	0x55e4	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.715219975 CEST	192.168.2.4	1.1.1.1	0x8048	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.719811916 CEST	192.168.2.4	1.1.1.1	0x3940	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.719961882 CEST	192.168.2.4	1.1.1.1	0x356	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.798432112 CEST	192.168.2.4	1.1.1.1	0x59c5	Standard query (0)	ads.dxkulture.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.798667908 CEST	192.168.2.4	1.1.1.1	0x2d23	Standard query (0)	ads.dxkulture.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.838767052 CEST	192.168.2.4	1.1.1.1	0xcc33	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.839153051 CEST	192.168.2.4	1.1.1.1	0x71d3	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.989336967 CEST	192.168.2.4	1.1.1.1	0x6cd9	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.989528894 CEST	192.168.2.4	1.1.1.1	0xb6ae	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.990470886 CEST	192.168.2.4	1.1.1.1	0xf12a	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.990612984 CEST	192.168.2.4	1.1.1.1	0xc8ab	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.991136074 CEST	192.168.2.4	1.1.1.1	0xdfef	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.991523981 CEST	192.168.2.4	1.1.1.1	0x32e6	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.993664980 CEST	192.168.2.4	1.1.1.1	0xd7bb	Standard query (0)	green.erne.co	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.994035006 CEST	192.168.2.4	1.1.1.1	0x26c3	Standard query (0)	green.erne.co	65	IN (0x0001)	false
Sep 30, 2024 15:17:14.011329889 CEST	192.168.2.4	1.1.1.1	0x1227	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.011570930 CEST	192.168.2.4	1.1.1.1	0x1370	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:14.292144060 CEST	192.168.2.4	1.1.1.1	0xcb1	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.292371988 CEST	192.168.2.4	1.1.1.1	0xac4f	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Sep 30, 2024 15:17:14.294914007 CEST	192.168.2.4	1.1.1.1	0x14ee	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.295310020 CEST	192.168.2.4	1.1.1.1	0x6cf0	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:14.316108942 CEST	192.168.2.4	1.1.1.1	0xb56f	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.316337109 CEST	192.168.2.4	1.1.1.1	0x521d	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:14.454149008 CEST	192.168.2.4	1.1.1.1	0x976	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.454309940 CEST	192.168.2.4	1.1.1.1	0x9efc	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:14.466599941 CEST	192.168.2.4	1.1.1.1	0x751f	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.467319012 CEST	192.168.2.4	1.1.1.1	0x2536	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.564409971 CEST	192.168.2.4	1.1.1.1	0xa3be	Standard query (0)	sync.e-volution.ai	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.564594030 CEST	192.168.2.4	1.1.1.1	0xdfb4	Standard query (0)	sync.e-volution.ai	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.710550070 CEST	192.168.2.4	1.1.1.1	0x1cc0	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.710694075 CEST	192.168.2.4	1.1.1.1	0x5068	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.778675079 CEST	192.168.2.4	1.1.1.1	0xebe5	Standard query (0)	ids.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.778830051 CEST	192.168.2.4	1.1.1.1	0xf9a4	Standard query (0)	ids.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.784029961 CEST	192.168.2.4	1.1.1.1	0xcea1	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.784384966 CEST	192.168.2.4	1.1.1.1	0x1750	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.814059973 CEST	192.168.2.4	1.1.1.1	0x555d	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.814479113 CEST	192.168.2.4	1.1.1.1	0x5d1d	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.834156036 CEST	192.168.2.4	1.1.1.1	0x7a4f	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.834428072 CEST	192.168.2.4	1.1.1.1	0x9f7	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.848468065 CEST	192.168.2.4	1.1.1.1	0xf24b	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.848656893 CEST	192.168.2.4	1.1.1.1	0x3e77	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.871469021 CEST	192.168.2.4	1.1.1.1	0x5899	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.871611118 CEST	192.168.2.4	1.1.1.1	0x437	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.873646975 CEST	192.168.2.4	1.1.1.1	0x88d6	Standard query (0)	pixel-eu.onaudience.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.873805046 CEST	192.168.2.4	1.1.1.1	0x8099	Standard query (0)	pixel-eu.onaudience.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:15.923099995 CEST	192.168.2.4	1.1.1.1	0x60dc	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.923337936 CEST	192.168.2.4	1.1.1.1	0x913d	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.100562096 CEST	192.168.2.4	1.1.1.1	0xb236	Standard query (0)	us.shb-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.100789070 CEST	192.168.2.4	1.1.1.1	0x95f0	Standard query (0)	us.shb-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.595932007 CEST	192.168.2.4	1.1.1.1	0x4d8f	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.596482038 CEST	192.168.2.4	1.1.1.1	0x14b5	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.791887045 CEST	192.168.2.4	1.1.1.1	0x1c17	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.792045116 CEST	192.168.2.4	1.1.1.1	0xc01a	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.795181036 CEST	192.168.2.4	1.1.1.1	0x1b85	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.795345068 CEST	192.168.2.4	1.1.1.1	0xd411	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.897972107 CEST	192.168.2.4	1.1.1.1	0xa3f2	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.898756027 CEST	192.168.2.4	1.1.1.1	0xee5d	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.899458885 CEST	192.168.2.4	1.1.1.1	0x971e	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.899600029 CEST	192.168.2.4	1.1.1.1	0xcdcc	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.950949907 CEST	192.168.2.4	1.1.1.1	0x8f1d	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.951088905 CEST	192.168.2.4	1.1.1.1	0x9e2b	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.961886883 CEST	192.168.2.4	1.1.1.1	0x9997	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.962184906 CEST	192.168.2.4	1.1.1.1	0xc258	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:16.994251013 CEST	192.168.2.4	1.1.1.1	0x19c7	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.994410992 CEST	192.168.2.4	1.1.1.1	0xb204	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:17.484513998 CEST	192.168.2.4	1.1.1.1	0x54ad	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.484765053 CEST	192.168.2.4	1.1.1.1	0x4220	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:17.516933918 CEST	192.168.2.4	1.1.1.1	0x7cf0	Standard query (0)	sonata-notifications.taptapnetworks.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.517182112 CEST	192.168.2.4	1.1.1.1	0x4c50	Standard query (0)	sonata-notifications.taptapnetworks.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:17.741151094 CEST	192.168.2.4	1.1.1.1	0xf55a	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.741658926 CEST	192.168.2.4	1.1.1.1	0xcbcf	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:17.834569931 CEST	192.168.2.4	1.1.1.1	0x37af	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.834808111 CEST	192.168.2.4	1.1.1.1	0x67b5	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.073929071 CEST	192.168.2.4	1.1.1.1	0x2ed6	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.074315071 CEST	192.168.2.4	1.1.1.1	0xd741	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.075444937 CEST	192.168.2.4	1.1.1.1	0xc389	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.075634956 CEST	192.168.2.4	1.1.1.1	0xc093	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.076662064 CEST	192.168.2.4	1.1.1.1	0x67cb	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.076857090 CEST	192.168.2.4	1.1.1.1	0xbb93	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.081937075 CEST	192.168.2.4	1.1.1.1	0x8368	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.082293034 CEST	192.168.2.4	1.1.1.1	0x3227	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.084203959 CEST	192.168.2.4	1.1.1.1	0xee93	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.084332943 CEST	192.168.2.4	1.1.1.1	0xca1e	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.085825920 CEST	192.168.2.4	1.1.1.1	0x585b	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.086050034 CEST	192.168.2.4	1.1.1.1	0xe16f	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.091469049 CEST	192.168.2.4	1.1.1.1	0x8c03	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.091797113 CEST	192.168.2.4	1.1.1.1	0x5225	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.093456984 CEST	192.168.2.4	1.1.1.1	0x92c2	Standard query (0)	static.smilewanted.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.093683958 CEST	192.168.2.4	1.1.1.1	0x856	Standard query (0)	static.smilewanted.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.126198053 CEST	192.168.2.4	1.1.1.1	0x2e5e	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.126529932 CEST	192.168.2.4	1.1.1.1	0xd920	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.147628069 CEST	192.168.2.4	1.1.1.1	0xd033	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.147773981 CEST	192.168.2.4	1.1.1.1	0xa2f1	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.151930094 CEST	192.168.2.4	1.1.1.1	0xa450	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.152080059 CEST	192.168.2.4	1.1.1.1	0xc8f2	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.154822111 CEST	192.168.2.4	1.1.1.1	0xd653	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.155041933 CEST	192.168.2.4	1.1.1.1	0x7cf1	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.156270981 CEST	192.168.2.4	1.1.1.1	0x74f4	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.156416893 CEST	192.168.2.4	1.1.1.1	0xf25c	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.158221006 CEST	192.168.2.4	1.1.1.1	0x1295	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.158452034 CEST	192.168.2.4	1.1.1.1	0xf291	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.172952890 CEST	192.168.2.4	1.1.1.1	0x2b15	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.173074961 CEST	192.168.2.4	1.1.1.1	0x324a	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.178709030 CEST	192.168.2.4	1.1.1.1	0xc7b7	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.178982973 CEST	192.168.2.4	1.1.1.1	0x8f4d	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.180394888 CEST	192.168.2.4	1.1.1.1	0x9ee8	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.180524111 CEST	192.168.2.4	1.1.1.1	0xdfc	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.186449051 CEST	192.168.2.4	1.1.1.1	0x7042	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.186604023 CEST	192.168.2.4	1.1.1.1	0xa8e7	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.188015938 CEST	192.168.2.4	1.1.1.1	0xd9b4	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.188201904 CEST	192.168.2.4	1.1.1.1	0x68fa	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.192964077 CEST	192.168.2.4	1.1.1.1	0x17b6	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193124056 CEST	192.168.2.4	1.1.1.1	0x5a21	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.205780029 CEST	192.168.2.4	1.1.1.1	0x1a2a	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.205780029 CEST	192.168.2.4	1.1.1.1	0xab9	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.207653046 CEST	192.168.2.4	1.1.1.1	0xfe40	Standard query (0)	groundcontrol.rendering.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.207794905 CEST	192.168.2.4	1.1.1.1	0xe1ec	Standard query (0)	groundcontrol.rendering.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.209614038 CEST	192.168.2.4	1.1.1.1	0x5f70	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.209777117 CEST	192.168.2.4	1.1.1.1	0x4b63	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.223418951 CEST	192.168.2.4	1.1.1.1	0x8e4e	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.224087000 CEST	192.168.2.4	1.1.1.1	0x1a13	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.224972963 CEST	192.168.2.4	1.1.1.1	0xaf7b	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.225162983 CEST	192.168.2.4	1.1.1.1	0x38a3	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.255038023 CEST	192.168.2.4	1.1.1.1	0x2a33	Standard query (0)	sync.serverbid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.255193949 CEST	192.168.2.4	1.1.1.1	0x337e	Standard query (0)	sync.serverbid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.260044098 CEST	192.168.2.4	1.1.1.1	0x6b60	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.260807991 CEST	192.168.2.4	1.1.1.1	0x38a9	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.285540104 CEST	192.168.2.4	1.1.1.1	0x906a	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.285722017 CEST	192.168.2.4	1.1.1.1	0xf555	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.330033064 CEST	192.168.2.4	1.1.1.1	0xf4da	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.330189943 CEST	192.168.2.4	1.1.1.1	0x6370	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.344306946 CEST	192.168.2.4	1.1.1.1	0x1c4f	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.344454050 CEST	192.168.2.4	1.1.1.1	0x2809	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.345746994 CEST	192.168.2.4	1.1.1.1	0x6a97	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.346004963 CEST	192.168.2.4	1.1.1.1	0x19fa	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.459835052 CEST	192.168.2.4	1.1.1.1	0xba5	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.460134029 CEST	192.168.2.4	1.1.1.1	0x92e1	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.462577105 CEST	192.168.2.4	1.1.1.1	0x1133	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.463099003 CEST	192.168.2.4	1.1.1.1	0x439	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.465770960 CEST	192.168.2.4	1.1.1.1	0x1d48	Standard query (0)	creative-assets.quantcount.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.466253996 CEST	192.168.2.4	1.1.1.1	0x7e3b	Standard query (0)	creative-assets.quantcount.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.487752914 CEST	192.168.2.4	1.1.1.1	0x93f3	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.487972975 CEST	192.168.2.4	1.1.1.1	0xcbbd	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.490715981 CEST	192.168.2.4	1.1.1.1	0x31a6	Standard query (0)	cs-server-s2s.yellowblue.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.490951061 CEST	192.168.2.4	1.1.1.1	0xace3	Standard query (0)	cs-server-s2s.yellowblue.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.515151978 CEST	192.168.2.4	1.1.1.1	0x33f4	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.515346050 CEST	192.168.2.4	1.1.1.1	0xd39a	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.557867050 CEST	192.168.2.4	1.1.1.1	0xfc8a	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.558099985 CEST	192.168.2.4	1.1.1.1	0xeb44	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.574394941 CEST	192.168.2.4	1.1.1.1	0xab96	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.574544907 CEST	192.168.2.4	1.1.1.1	0x9648	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.576805115 CEST	192.168.2.4	1.1.1.1	0x1abd	Standard query (0)	s2s.yieldlove-ad-serving.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.576932907 CEST	192.168.2.4	1.1.1.1	0x1fb7	Standard query (0)	s2s.yieldlove-ad-serving.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.588614941 CEST	192.168.2.4	1.1.1.1	0x9f91	Standard query (0)	tracker-shr.ortb.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.588814020 CEST	192.168.2.4	1.1.1.1	0xc873	Standard query (0)	tracker-shr.ortb.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.589910984 CEST	192.168.2.4	1.1.1.1	0x5014	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.590061903 CEST	192.168.2.4	1.1.1.1	0xaf2a	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.594364882 CEST	192.168.2.4	1.1.1.1	0xff5f	Standard query (0)	ads.dxkulture.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.594722033 CEST	192.168.2.4	1.1.1.1	0x9c40	Standard query (0)	ads.dxkulture.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.595204115 CEST	192.168.2.4	1.1.1.1	0x791d	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.595439911 CEST	192.168.2.4	1.1.1.1	0x71ae	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.602246046 CEST	192.168.2.4	1.1.1.1	0x9b4d	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.602380991 CEST	192.168.2.4	1.1.1.1	0x22d7	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.607522964 CEST	192.168.2.4	1.1.1.1	0xbbbc	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.607676029 CEST	192.168.2.4	1.1.1.1	0x4d76	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.615215063 CEST	192.168.2.4	1.1.1.1	0x6b30	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.615701914 CEST	192.168.2.4	1.1.1.1	0xf9f6	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.774178982 CEST	192.168.2.4	1.1.1.1	0x67ec	Standard query (0)	sync.inmobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.774329901 CEST	192.168.2.4	1.1.1.1	0xea03	Standard query (0)	sync.inmobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.912406921 CEST	192.168.2.4	1.1.1.1	0x6bf9	Standard query (0)	tracker-shr.ortb.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.912765980 CEST	192.168.2.4	1.1.1.1	0xaa17	Standard query (0)	tracker-shr.ortb.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.925276041 CEST	192.168.2.4	1.1.1.1	0x318d	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.925436020 CEST	192.168.2.4	1.1.1.1	0x7d50	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.939598083 CEST	192.168.2.4	1.1.1.1	0x3496	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.939816952 CEST	192.168.2.4	1.1.1.1	0x9a7b	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:18.963654995 CEST	192.168.2.4	1.1.1.1	0x810e	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.963895082 CEST	192.168.2.4	1.1.1.1	0xc9dd	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:19.613616943 CEST	192.168.2.4	1.1.1.1	0x5da8	Standard query (0)	tracker-shr.ortb.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:19.677011967 CEST	192.168.2.4	1.1.1.1	0x7fd8	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:19.677151918 CEST	192.168.2.4	1.1.1.1	0x352f	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:19.832268953 CEST	192.168.2.4	1.1.1.1	0x8b8d	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:19.832588911 CEST	192.168.2.4	1.1.1.1	0xb163	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:20.334975958 CEST	192.168.2.4	1.1.1.1	0x603b	Standard query (0)	z.moatads.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.335336924 CEST	192.168.2.4	1.1.1.1	0x2e75	Standard query (0)	z.moatads.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:20.565838099 CEST	192.168.2.4	1.1.1.1	0xbf5c	Standard query (0)	pixel.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.566066980 CEST	192.168.2.4	1.1.1.1	0xeff6	Standard query (0)	pixel.adsafeprotected.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:20.653337955 CEST	192.168.2.4	1.1.1.1	0x5da8	Standard query (0)	tracker-shr.ortb.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:21.013782024 CEST	192.168.2.4	1.1.1.1	0x47da	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:21.014059067 CEST	192.168.2.4	1.1.1.1	0xac00	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:21.091696978 CEST	192.168.2.4	1.1.1.1	0x6977	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:21.091859102 CEST	192.168.2.4	1.1.1.1	0x25b3	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:21.581469059 CEST	192.168.2.4	1.1.1.1	0x93a8	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:21.581639051 CEST	192.168.2.4	1.1.1.1	0x9e5a	Standard query (0)	ssum.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:21.668766022 CEST	192.168.2.4	1.1.1.1	0x5da8	Standard query (0)	tracker-shr.ortb.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:22.100922108 CEST	192.168.2.4	1.1.1.1	0xdc2b	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:22.101166964 CEST	192.168.2.4	1.1.1.1	0xc625	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:22.109906912 CEST	192.168.2.4	1.1.1.1	0x1e39	Standard query (0)	d9.flashtalking.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:22.110085964 CEST	192.168.2.4	1.1.1.1	0x3994	Standard query (0)	d9.flashtalking.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:23.025624990 CEST	192.168.2.4	1.1.1.1	0x8165	Standard query (0)	eu-notify-rtb.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:23.026274920 CEST	192.168.2.4	1.1.1.1	0xe96	Standard query (0)	_8443._https.eu-notify-rtb.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:23.756426096 CEST	192.168.2.4	1.1.1.1	0x5da8	Standard query (0)	tracker-shr.ortb.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:25.919002056 CEST	192.168.2.4	1.1.1.1	0x4efe	Standard query (0)	www.multitran.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:25.919138908 CEST	192.168.2.4	1.1.1.1	0x1cdf	Standard query (0)	www.multitran.ru	65	IN (0x0001)	false
Sep 30, 2024 15:17:27.058832884 CEST	192.168.2.4	1.1.1.1	0x2a09	Standard query (0)	www.multitran.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:27.059036016 CEST	192.168.2.4	1.1.1.1	0xcdc	Standard query (0)	www.multitran.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:27.759583950 CEST	192.168.2.4	1.1.1.1	0x5da8	Standard query (0)	tracker-shr.ortb.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:28.303607941 CEST	192.168.2.4	1.1.1.1	0xefd4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:28.303944111 CEST	192.168.2.4	1.1.1.1	0xcad7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:28.335594893 CEST	192.168.2.4	1.1.1.1	0x1159	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:28.335966110 CEST	192.168.2.4	1.1.1.1	0x2f56	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:29.357144117 CEST	192.168.2.4	1.1.1.1	0xc846	Standard query (0)	cdn.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:29.357573986 CEST	192.168.2.4	1.1.1.1	0x2ec1	Standard query (0)	cdn.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:29.358129978 CEST	192.168.2.4	1.1.1.1	0xed5f	Standard query (0)	delivery.adrecover.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:29.358688116 CEST	192.168.2.4	1.1.1.1	0x1a5a	Standard query (0)	delivery.adrecover.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:30.280967951 CEST	192.168.2.4	1.1.1.1	0xcf9d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:30.281373978 CEST	192.168.2.4	1.1.1.1	0x790	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:30.540177107 CEST	192.168.2.4	1.1.1.1	0xbe94	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:30.540355921 CEST	192.168.2.4	1.1.1.1	0xf27f	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:31.961091042 CEST	192.168.2.4	1.1.1.1	0x5eb5	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:31.961322069 CEST	192.168.2.4	1.1.1.1	0xd23	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:31.962927103 CEST	192.168.2.4	1.1.1.1	0x7e5c	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:31.963207006 CEST	192.168.2.4	1.1.1.1	0xb3f6	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:31.963989019 CEST	192.168.2.4	1.1.1.1	0xa72c	Standard query (0)	e3.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:31.964246988 CEST	192.168.2.4	1.1.1.1	0x505c	Standard query (0)	e3.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:31.988213062 CEST	192.168.2.4	1.1.1.1	0xe546	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:32.061682940 CEST	192.168.2.4	1.1.1.1	0x9135	Standard query (0)	keymap.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:32.062102079 CEST	192.168.2.4	1.1.1.1	0x7ade	Standard query (0)	keymap.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:32.083564043 CEST	192.168.2.4	1.1.1.1	0x9f15	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:32.083756924 CEST	192.168.2.4	1.1.1.1	0x38e3	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:33.356204987 CEST	192.168.2.4	1.1.1.1	0x2a2a	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:33.356440067 CEST	192.168.2.4	1.1.1.1	0xd24c	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:34.415420055 CEST	192.168.2.4	1.1.1.1	0x410b	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.415534973 CEST	192.168.2.4	1.1.1.1	0xa372	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:34.457225084 CEST	192.168.2.4	1.1.1.1	0x59d4	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.457375050 CEST	192.168.2.4	1.1.1.1	0x2625	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:34.984569073 CEST	192.168.2.4	1.1.1.1	0x53c1	Standard query (0)	secure.cdn.fastclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.984846115 CEST	192.168.2.4	1.1.1.1	0x1f	Standard query (0)	secure.cdn.fastclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:34.985330105 CEST	192.168.2.4	1.1.1.1	0x738b	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.985610962 CEST	192.168.2.4	1.1.1.1	0x1091	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:34.986227036 CEST	192.168.2.4	1.1.1.1	0x3aa	Standard query (0)	cdn.hadronid.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.986568928 CEST	192.168.2.4	1.1.1.1	0xbab9	Standard query (0)	cdn.hadronid.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:35.524364948 CEST	192.168.2.4	1.1.1.1	0x286c	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:35.525031090 CEST	192.168.2.4	1.1.1.1	0xdcb8	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:35.832515001 CEST	192.168.2.4	1.1.1.1	0xb67f	Standard query (0)	id.hadron.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:35.832834005 CEST	192.168.2.4	1.1.1.1	0x6c28	Standard query (0)	id.hadron.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:36.560688972 CEST	192.168.2.4	1.1.1.1	0x1de5	Standard query (0)	video.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.561023951 CEST	192.168.2.4	1.1.1.1	0x216c	Standard query (0)	video.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:36.948627949 CEST	192.168.2.4	1.1.1.1	0xeee5	Standard query (0)	http-intake.logs.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.948779106 CEST	192.168.2.4	1.1.1.1	0x6a07	Standard query (0)	http-intake.logs.datadoghq.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:37.606142044 CEST	192.168.2.4	1.1.1.1	0x34f1	Standard query (0)	proc.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.606398106 CEST	192.168.2.4	1.1.1.1	0x5dc6	Standard query (0)	proc.ad.cpe.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:37.725588083 CEST	192.168.2.4	1.1.1.1	0xe4c9	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.725755930 CEST	192.168.2.4	1.1.1.1	0x385	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:37.813613892 CEST	192.168.2.4	1.1.1.1	0xee97	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.814013958 CEST	192.168.2.4	1.1.1.1	0x597c	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:38.476062059 CEST	192.168.2.4	1.1.1.1	0x339a	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:38.476304054 CEST	192.168.2.4	1.1.1.1	0x5cfe	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:38.481754065 CEST	192.168.2.4	1.1.1.1	0x72af	Standard query (0)	a.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:38.481961966 CEST	192.168.2.4	1.1.1.1	0xe955	Standard query (0)	a.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.397619963 CEST	192.168.2.4	1.1.1.1	0x9ece	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.397816896 CEST	192.168.2.4	1.1.1.1	0x3dc7	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.406233072 CEST	192.168.2.4	1.1.1.1	0x5fc4	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.406411886 CEST	192.168.2.4	1.1.1.1	0xeff5	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.421024084 CEST	192.168.2.4	1.1.1.1	0xdeec	Standard query (0)	api.id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.421185970 CEST	192.168.2.4	1.1.1.1	0x7784	Standard query (0)	api.id5-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.438849926 CEST	192.168.2.4	1.1.1.1	0x4aca	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.439035892 CEST	192.168.2.4	1.1.1.1	0xdde	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.441473007 CEST	192.168.2.4	1.1.1.1	0x55e	Standard query (0)	pbjs.e-planning.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.441643000 CEST	192.168.2.4	1.1.1.1	0x664	Standard query (0)	pbjs.e-planning.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.450618029 CEST	192.168.2.4	1.1.1.1	0x76c3	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.450787067 CEST	192.168.2.4	1.1.1.1	0xcd7f	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.453941107 CEST	192.168.2.4	1.1.1.1	0xfce6	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.454085112 CEST	192.168.2.4	1.1.1.1	0x3725	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.461764097 CEST	192.168.2.4	1.1.1.1	0xc53a	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.461945057 CEST	192.168.2.4	1.1.1.1	0x6c61	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.464585066 CEST	192.168.2.4	1.1.1.1	0xfe78	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.464823008 CEST	192.168.2.4	1.1.1.1	0xc573	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.468751907 CEST	192.168.2.4	1.1.1.1	0x2b5b	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.469080925 CEST	192.168.2.4	1.1.1.1	0xe027	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.474586964 CEST	192.168.2.4	1.1.1.1	0x5bd4	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.474761009 CEST	192.168.2.4	1.1.1.1	0xff63	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.477478981 CEST	192.168.2.4	1.1.1.1	0xe547	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.477657080 CEST	192.168.2.4	1.1.1.1	0x5fac	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.486651897 CEST	192.168.2.4	1.1.1.1	0xede7	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.487041950 CEST	192.168.2.4	1.1.1.1	0x8406	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.490470886 CEST	192.168.2.4	1.1.1.1	0x7c	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.490618944 CEST	192.168.2.4	1.1.1.1	0x9dfa	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.496153116 CEST	192.168.2.4	1.1.1.1	0x88f8	Standard query (0)	prebid.smilewanted.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.496587992 CEST	192.168.2.4	1.1.1.1	0x95d7	Standard query (0)	prebid.smilewanted.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.651578903 CEST	192.168.2.4	1.1.1.1	0xfff4	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.651674986 CEST	192.168.2.4	1.1.1.1	0xd553	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.658412933 CEST	192.168.2.4	1.1.1.1	0x9fa3	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.658569098 CEST	192.168.2.4	1.1.1.1	0x5bac	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.665781975 CEST	192.168.2.4	1.1.1.1	0xd8ae	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.665929079 CEST	192.168.2.4	1.1.1.1	0x778c	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:39.949098110 CEST	192.168.2.4	1.1.1.1	0xdcf8	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.949274063 CEST	192.168.2.4	1.1.1.1	0x1116	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:40.720587969 CEST	192.168.2.4	1.1.1.1	0xde6a	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.721306086 CEST	192.168.2.4	1.1.1.1	0xe443	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:40.804027081 CEST	192.168.2.4	1.1.1.1	0xefe1	Standard query (0)	p.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.804186106 CEST	192.168.2.4	1.1.1.1	0xedbf	Standard query (0)	p.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:40.843658924 CEST	192.168.2.4	1.1.1.1	0xd15e	Standard query (0)	ids.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.843847990 CEST	192.168.2.4	1.1.1.1	0x97f1	Standard query (0)	ids.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:40.845499039 CEST	192.168.2.4	1.1.1.1	0xda97	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.845716000 CEST	192.168.2.4	1.1.1.1	0x5cd7	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:41.186115026 CEST	192.168.2.4	1.1.1.1	0x67c9	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.186417103 CEST	192.168.2.4	1.1.1.1	0x6687	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:41.186981916 CEST	192.168.2.4	1.1.1.1	0x7cf9	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.187208891 CEST	192.168.2.4	1.1.1.1	0x84e3	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:41.187542915 CEST	192.168.2.4	1.1.1.1	0x7cdf	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.187654972 CEST	192.168.2.4	1.1.1.1	0x3e1c	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:41.506676912 CEST	192.168.2.4	1.1.1.1	0x6e68	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.507244110 CEST	192.168.2.4	1.1.1.1	0xc30e	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:41.517314911 CEST	192.168.2.4	1.1.1.1	0x9161	Standard query (0)	seg.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.517493010 CEST	192.168.2.4	1.1.1.1	0xd87c	Standard query (0)	seg.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:42.246747017 CEST	192.168.2.4	1.1.1.1	0x9626	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.246900082 CEST	192.168.2.4	1.1.1.1	0x3329	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:42.391099930 CEST	192.168.2.4	1.1.1.1	0x1b8d	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.391309023 CEST	192.168.2.4	1.1.1.1	0x6b3a	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:42.391870022 CEST	192.168.2.4	1.1.1.1	0x4ba1	Standard query (0)	sync.colossusssp.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.392149925 CEST	192.168.2.4	1.1.1.1	0xdea8	Standard query (0)	sync.colossusssp.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:42.589581966 CEST	192.168.2.4	1.1.1.1	0xc8f	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.589803934 CEST	192.168.2.4	1.1.1.1	0xfd0f	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:42.590368986 CEST	192.168.2.4	1.1.1.1	0x7554	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.590595007 CEST	192.168.2.4	1.1.1.1	0x8fa1	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:42.609046936 CEST	192.168.2.4	1.1.1.1	0xa080	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.609327078 CEST	192.168.2.4	1.1.1.1	0xa8ba	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:42.647933960 CEST	192.168.2.4	1.1.1.1	0x63cb	Standard query (0)	amazon-tam-match.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.648089886 CEST	192.168.2.4	1.1.1.1	0x4d59	Standard query (0)	amazon-tam-match.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:42.945063114 CEST	192.168.2.4	1.1.1.1	0x6ff8	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.948014975 CEST	192.168.2.4	1.1.1.1	0xc1cd	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:43.457515001 CEST	192.168.2.4	1.1.1.1	0xc4fa	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.457990885 CEST	192.168.2.4	1.1.1.1	0x8752	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:43.458667994 CEST	192.168.2.4	1.1.1.1	0x6e3d	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.458839893 CEST	192.168.2.4	1.1.1.1	0x1e29	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:43.460664988 CEST	192.168.2.4	1.1.1.1	0xd340	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.460920095 CEST	192.168.2.4	1.1.1.1	0x4f9c	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:43.471684933 CEST	192.168.2.4	1.1.1.1	0x788d	Standard query (0)	public.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.472074986 CEST	192.168.2.4	1.1.1.1	0xa77b	Standard query (0)	public.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:43.475188017 CEST	192.168.2.4	1.1.1.1	0xadd9	Standard query (0)	csync.smilewanted.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.475888968 CEST	192.168.2.4	1.1.1.1	0x14d8	Standard query (0)	csync.smilewanted.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:43.847526073 CEST	192.168.2.4	1.1.1.1	0x296b	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.848069906 CEST	192.168.2.4	1.1.1.1	0xf5d7	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.384958029 CEST	192.168.2.4	1.1.1.1	0xf81c	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.385150909 CEST	192.168.2.4	1.1.1.1	0xc27a	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.412278891 CEST	192.168.2.4	1.1.1.1	0x9879	Standard query (0)	static.smilewanted.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.412431002 CEST	192.168.2.4	1.1.1.1	0xfae0	Standard query (0)	static.smilewanted.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.560354948 CEST	192.168.2.4	1.1.1.1	0xa47a	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.561058044 CEST	192.168.2.4	1.1.1.1	0xc76a	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.581132889 CEST	192.168.2.4	1.1.1.1	0xdde1	Standard query (0)	pixel.33across.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.581358910 CEST	192.168.2.4	1.1.1.1	0xecb2	Standard query (0)	pixel.33across.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.622634888 CEST	192.168.2.4	1.1.1.1	0xcef1	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.622797012 CEST	192.168.2.4	1.1.1.1	0x922c	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.735153913 CEST	192.168.2.4	1.1.1.1	0x7149	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.735491991 CEST	192.168.2.4	1.1.1.1	0xc22c	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.770848989 CEST	192.168.2.4	1.1.1.1	0xf50	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.770982027 CEST	192.168.2.4	1.1.1.1	0x9a19	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.786927938 CEST	192.168.2.4	1.1.1.1	0x74d1	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.787498951 CEST	192.168.2.4	1.1.1.1	0x2f42	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.876106024 CEST	192.168.2.4	1.1.1.1	0xd91	Standard query (0)	cs-server-s2s.yellowblue.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.876288891 CEST	192.168.2.4	1.1.1.1	0x8d98	Standard query (0)	cs-server-s2s.yellowblue.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:44.893544912 CEST	192.168.2.4	1.1.1.1	0x7f86	Standard query (0)	cdn.dxkulture.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.893707037 CEST	192.168.2.4	1.1.1.1	0xb284	Standard query (0)	cdn.dxkulture.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.034538031 CEST	192.168.2.4	1.1.1.1	0x9d1	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.034671068 CEST	192.168.2.4	1.1.1.1	0xb138	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.036005020 CEST	192.168.2.4	1.1.1.1	0x33fe	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.036190987 CEST	192.168.2.4	1.1.1.1	0x3509	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.037412882 CEST	192.168.2.4	1.1.1.1	0x1464	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.037661076 CEST	192.168.2.4	1.1.1.1	0x688e	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.038225889 CEST	192.168.2.4	1.1.1.1	0xd82	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.038364887 CEST	192.168.2.4	1.1.1.1	0x89df	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.039706945 CEST	192.168.2.4	1.1.1.1	0x7c62	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.039937973 CEST	192.168.2.4	1.1.1.1	0x7d8	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.041747093 CEST	192.168.2.4	1.1.1.1	0xa882	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.041973114 CEST	192.168.2.4	1.1.1.1	0x7194	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.051158905 CEST	192.168.2.4	1.1.1.1	0xff64	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051511049 CEST	192.168.2.4	1.1.1.1	0x3d25	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.207104921 CEST	192.168.2.4	1.1.1.1	0xa5bf	Standard query (0)	1x1.a-mo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.207298040 CEST	192.168.2.4	1.1.1.1	0xf935	Standard query (0)	1x1.a-mo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.217137098 CEST	192.168.2.4	1.1.1.1	0x17c3	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.217272043 CEST	192.168.2.4	1.1.1.1	0x6c28	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.231422901 CEST	192.168.2.4	1.1.1.1	0x1f30	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.231609106 CEST	192.168.2.4	1.1.1.1	0x25ce	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.284713030 CEST	192.168.2.4	1.1.1.1	0x5762	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.285018921 CEST	192.168.2.4	1.1.1.1	0xfc51	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.372736931 CEST	192.168.2.4	1.1.1.1	0x78be	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.373179913 CEST	192.168.2.4	1.1.1.1	0x62bf	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.386260986 CEST	192.168.2.4	1.1.1.1	0x9572	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.386395931 CEST	192.168.2.4	1.1.1.1	0x1ce8	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.419007063 CEST	192.168.2.4	1.1.1.1	0x31c8	Standard query (0)	casale-match.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.419158936 CEST	192.168.2.4	1.1.1.1	0x25b6	Standard query (0)	casale-match.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.431560993 CEST	192.168.2.4	1.1.1.1	0xbad	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.431740046 CEST	192.168.2.4	1.1.1.1	0x2802	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.442671061 CEST	192.168.2.4	1.1.1.1	0x5c8c	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.442987919 CEST	192.168.2.4	1.1.1.1	0x4226	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.447563887 CEST	192.168.2.4	1.1.1.1	0xca11	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.447707891 CEST	192.168.2.4	1.1.1.1	0x845	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.448766947 CEST	192.168.2.4	1.1.1.1	0x5f9a	Standard query (0)	cm.ctnsnet.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.448915005 CEST	192.168.2.4	1.1.1.1	0x4109	Standard query (0)	cm.ctnsnet.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.451989889 CEST	192.168.2.4	1.1.1.1	0x793c	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.452131033 CEST	192.168.2.4	1.1.1.1	0xe6d9	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.453212023 CEST	192.168.2.4	1.1.1.1	0x6556	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.453351021 CEST	192.168.2.4	1.1.1.1	0xfe92	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.517731905 CEST	192.168.2.4	1.1.1.1	0xcd91	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.517877102 CEST	192.168.2.4	1.1.1.1	0xaa21	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.518637896 CEST	192.168.2.4	1.1.1.1	0xa725	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.518960953 CEST	192.168.2.4	1.1.1.1	0x7e5c	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.543564081 CEST	192.168.2.4	1.1.1.1	0xf1f7	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.543785095 CEST	192.168.2.4	1.1.1.1	0xd943	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.550156116 CEST	192.168.2.4	1.1.1.1	0xf381	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.550318003 CEST	192.168.2.4	1.1.1.1	0x566c	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.579521894 CEST	192.168.2.4	1.1.1.1	0x9c79	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.579724073 CEST	192.168.2.4	1.1.1.1	0x35f9	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.586723089 CEST	192.168.2.4	1.1.1.1	0xf83c	Standard query (0)	us.shb-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.587223053 CEST	192.168.2.4	1.1.1.1	0x28f3	Standard query (0)	us.shb-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.740441084 CEST	192.168.2.4	1.1.1.1	0x243e	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.742904902 CEST	192.168.2.4	1.1.1.1	0x2b66	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:45.851078033 CEST	192.168.2.4	1.1.1.1	0x64cd	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.851380110 CEST	192.168.2.4	1.1.1.1	0x141a	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.064022064 CEST	192.168.2.4	1.1.1.1	0x5bca	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.064166069 CEST	192.168.2.4	1.1.1.1	0xb2ba	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.185269117 CEST	192.168.2.4	1.1.1.1	0x4460	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.185502052 CEST	192.168.2.4	1.1.1.1	0xe687	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.186533928 CEST	192.168.2.4	1.1.1.1	0x1a76	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.186665058 CEST	192.168.2.4	1.1.1.1	0x6ab9	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.234726906 CEST	192.168.2.4	1.1.1.1	0xd259	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.235027075 CEST	192.168.2.4	1.1.1.1	0x5afa	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.355338097 CEST	192.168.2.4	1.1.1.1	0xd7e3	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.355671883 CEST	192.168.2.4	1.1.1.1	0x4e11	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.450285912 CEST	192.168.2.4	1.1.1.1	0xac80	Standard query (0)	ads.dxkulture.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.450506926 CEST	192.168.2.4	1.1.1.1	0xf896	Standard query (0)	ads.dxkulture.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.457726002 CEST	192.168.2.4	1.1.1.1	0xcd5d	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.457880974 CEST	192.168.2.4	1.1.1.1	0x1bbd	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.463526964 CEST	192.168.2.4	1.1.1.1	0x1225	Standard query (0)	cs.iqzone.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.463674068 CEST	192.168.2.4	1.1.1.1	0x8c52	Standard query (0)	cs.iqzone.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.465514898 CEST	192.168.2.4	1.1.1.1	0xb00e	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.465744972 CEST	192.168.2.4	1.1.1.1	0x44d3	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.466226101 CEST	192.168.2.4	1.1.1.1	0xf03e	Standard query (0)	33across-match.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.466579914 CEST	192.168.2.4	1.1.1.1	0x2463	Standard query (0)	33across-match.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.490598917 CEST	192.168.2.4	1.1.1.1	0x9fb3	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.490745068 CEST	192.168.2.4	1.1.1.1	0xd0d9	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.521392107 CEST	192.168.2.4	1.1.1.1	0x878e	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.521799088 CEST	192.168.2.4	1.1.1.1	0x1b1a	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.591607094 CEST	192.168.2.4	1.1.1.1	0xd637	Standard query (0)	pixels.ad.gt	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.591763973 CEST	192.168.2.4	1.1.1.1	0xb7b	Standard query (0)	pixels.ad.gt	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.686377048 CEST	192.168.2.4	1.1.1.1	0xb85a	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.686531067 CEST	192.168.2.4	1.1.1.1	0xa271	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.923551083 CEST	192.168.2.4	1.1.1.1	0x2190	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.923763037 CEST	192.168.2.4	1.1.1.1	0x5d1c	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:46.996448994 CEST	192.168.2.4	1.1.1.1	0x812f	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.996592999 CEST	192.168.2.4	1.1.1.1	0xd339	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.045763969 CEST	192.168.2.4	1.1.1.1	0x197b	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.045896053 CEST	192.168.2.4	1.1.1.1	0x7a14	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.093761921 CEST	192.168.2.4	1.1.1.1	0x6a6f	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.094122887 CEST	192.168.2.4	1.1.1.1	0x4aa5	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.094461918 CEST	192.168.2.4	1.1.1.1	0xe73f	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.094588995 CEST	192.168.2.4	1.1.1.1	0x7e4a	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.189523935 CEST	192.168.2.4	1.1.1.1	0x67a5	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.189764023 CEST	192.168.2.4	1.1.1.1	0x558d	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.300271988 CEST	192.168.2.4	1.1.1.1	0x7607	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.301882029 CEST	192.168.2.4	1.1.1.1	0x87db	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.302524090 CEST	192.168.2.4	1.1.1.1	0x1d60	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.302665949 CEST	192.168.2.4	1.1.1.1	0x429	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.303267956 CEST	192.168.2.4	1.1.1.1	0xe4f7	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.303538084 CEST	192.168.2.4	1.1.1.1	0x8a92	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.358880997 CEST	192.168.2.4	1.1.1.1	0x6626	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.359158039 CEST	192.168.2.4	1.1.1.1	0xa499	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.370695114 CEST	192.168.2.4	1.1.1.1	0x896e	Standard query (0)	casale-match.dotomi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.370830059 CEST	192.168.2.4	1.1.1.1	0xd6cf	Standard query (0)	casale-match.dotomi.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.443000078 CEST	192.168.2.4	1.1.1.1	0x5aeb	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.443348885 CEST	192.168.2.4	1.1.1.1	0x45d	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.444098949 CEST	192.168.2.4	1.1.1.1	0x7450	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.444289923 CEST	192.168.2.4	1.1.1.1	0xd7eb	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.444794893 CEST	192.168.2.4	1.1.1.1	0x9547	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.447055101 CEST	192.168.2.4	1.1.1.1	0x6074	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.449498892 CEST	192.168.2.4	1.1.1.1	0xf37f	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.449691057 CEST	192.168.2.4	1.1.1.1	0x668d	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.451023102 CEST	192.168.2.4	1.1.1.1	0x5b7e	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.451369047 CEST	192.168.2.4	1.1.1.1	0xb5c3	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.451950073 CEST	192.168.2.4	1.1.1.1	0x5442	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.452110052 CEST	192.168.2.4	1.1.1.1	0x628f	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.484496117 CEST	192.168.2.4	1.1.1.1	0xc5b7	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.484638929 CEST	192.168.2.4	1.1.1.1	0x9cbe	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.663192987 CEST	192.168.2.4	1.1.1.1	0xee5f	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.663506031 CEST	192.168.2.4	1.1.1.1	0x4b5f	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.730063915 CEST	192.168.2.4	1.1.1.1	0xff88	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.730392933 CEST	192.168.2.4	1.1.1.1	0x9f22	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.738769054 CEST	192.168.2.4	1.1.1.1	0xcf6c	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.738919020 CEST	192.168.2.4	1.1.1.1	0x4a7c	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:47.943747997 CEST	192.168.2.4	1.1.1.1	0x6263	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.944051027 CEST	192.168.2.4	1.1.1.1	0x25c1	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.088522911 CEST	192.168.2.4	1.1.1.1	0xa250	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.088660002 CEST	192.168.2.4	1.1.1.1	0xffa4	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.238888025 CEST	192.168.2.4	1.1.1.1	0x14ec	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.239087105 CEST	192.168.2.4	1.1.1.1	0x4a22	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.372472048 CEST	192.168.2.4	1.1.1.1	0x1886	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.372663021 CEST	192.168.2.4	1.1.1.1	0x5897	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.453119993 CEST	192.168.2.4	1.1.1.1	0xdd8c	Standard query (0)	ads.dxkulture.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.453190088 CEST	192.168.2.4	1.1.1.1	0x2064	Standard query (0)	ads.dxkulture.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.540975094 CEST	192.168.2.4	1.1.1.1	0xe797	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.541223049 CEST	192.168.2.4	1.1.1.1	0xe83b	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.634795904 CEST	192.168.2.4	1.1.1.1	0x4113	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.634941101 CEST	192.168.2.4	1.1.1.1	0x1aaf	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.736888885 CEST	192.168.2.4	1.1.1.1	0x449c	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.737040043 CEST	192.168.2.4	1.1.1.1	0xd19d	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.744402885 CEST	192.168.2.4	1.1.1.1	0x8f7c	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.744590998 CEST	192.168.2.4	1.1.1.1	0x9906	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.854013920 CEST	192.168.2.4	1.1.1.1	0xd348	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.854192019 CEST	192.168.2.4	1.1.1.1	0xd04b	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:48.864962101 CEST	192.168.2.4	1.1.1.1	0xc5af	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.865214109 CEST	192.168.2.4	1.1.1.1	0x5870	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.021228075 CEST	192.168.2.4	1.1.1.1	0x1e59	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.021373987 CEST	192.168.2.4	1.1.1.1	0xd46c	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.092035055 CEST	192.168.2.4	1.1.1.1	0x4d34	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.092705011 CEST	192.168.2.4	1.1.1.1	0x6fe0	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.455290079 CEST	192.168.2.4	1.1.1.1	0x3db0	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.455507994 CEST	192.168.2.4	1.1.1.1	0x7e03	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.478926897 CEST	192.168.2.4	1.1.1.1	0x4018	Standard query (0)	eexsync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.479302883 CEST	192.168.2.4	1.1.1.1	0xd3e7	Standard query (0)	eexsync.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.631532907 CEST	192.168.2.4	1.1.1.1	0xaeab	Standard query (0)	ads.creative-serving.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.631829977 CEST	192.168.2.4	1.1.1.1	0x3e3f	Standard query (0)	ads.creative-serving.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.709306955 CEST	192.168.2.4	1.1.1.1	0x5192	Standard query (0)	s2s.t13.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.709619045 CEST	192.168.2.4	1.1.1.1	0x9af7	Standard query (0)	s2s.t13.io	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.713207960 CEST	192.168.2.4	1.1.1.1	0xe805	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.713416100 CEST	192.168.2.4	1.1.1.1	0xce8e	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.946141005 CEST	192.168.2.4	1.1.1.1	0xfbdf	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.946554899 CEST	192.168.2.4	1.1.1.1	0xec	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Sep 30, 2024 15:17:49.993946075 CEST	192.168.2.4	1.1.1.1	0x5134	Standard query (0)	dsp.nrich.ai	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.994085073 CEST	192.168.2.4	1.1.1.1	0x989e	Standard query (0)	dsp.nrich.ai	65	IN (0x0001)	false
Sep 30, 2024 15:17:50.758213043 CEST	192.168.2.4	1.1.1.1	0xcd9d	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:52.779376030 CEST	192.168.2.4	1.1.1.1	0xd5c8	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:52.779670000 CEST	192.168.2.4	1.1.1.1	0x2101	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:17:56.597455978 CEST	192.168.2.4	1.1.1.1	0xca48	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:56.597584009 CEST	192.168.2.4	1.1.1.1	0xa06c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:06.820805073 CEST	192.168.2.4	1.1.1.1	0x8006	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:17.553930998 CEST	192.168.2.4	1.1.1.1	0x47ac	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:17.554292917 CEST	192.168.2.4	1.1.1.1	0x5154	Standard query (0)	bidder.criteo.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:41.220833063 CEST	192.168.2.4	1.1.1.1	0xc518	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.221025944 CEST	192.168.2.4	1.1.1.1	0xfb8a	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:41.227679014 CEST	192.168.2.4	1.1.1.1	0x6068	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227829933 CEST	192.168.2.4	1.1.1.1	0x2556	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:41.232228994 CEST	192.168.2.4	1.1.1.1	0xc4e7	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.232454062 CEST	192.168.2.4	1.1.1.1	0x8ef0	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:41.233935118 CEST	192.168.2.4	1.1.1.1	0x3482	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.234247923 CEST	192.168.2.4	1.1.1.1	0xb078	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:41.258850098 CEST	192.168.2.4	1.1.1.1	0x891a	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.258994102 CEST	192.168.2.4	1.1.1.1	0x7d9f	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:46.968889952 CEST	192.168.2.4	1.1.1.1	0xe23e	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.968889952 CEST	192.168.2.4	1.1.1.1	0x4df9	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:46.970524073 CEST	192.168.2.4	1.1.1.1	0xa37	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.970524073 CEST	192.168.2.4	1.1.1.1	0x1cba	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:47.466233015 CEST	192.168.2.4	1.1.1.1	0xec92	Standard query (0)	e3.adpushup.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.466528893 CEST	192.168.2.4	1.1.1.1	0x236f	Standard query (0)	e3.adpushup.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:47.467196941 CEST	192.168.2.4	1.1.1.1	0x5b1f	Standard query (0)	1x1.a-mo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.467611074 CEST	192.168.2.4	1.1.1.1	0x5c79	Standard query (0)	1x1.a-mo.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:47.498176098 CEST	192.168.2.4	1.1.1.1	0xb8a5	Standard query (0)	ads.mountain.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.498403072 CEST	192.168.2.4	1.1.1.1	0xa8b3	Standard query (0)	ads.mountain.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:47.499298096 CEST	192.168.2.4	1.1.1.1	0xcc1e	Standard query (0)	a018.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.499566078 CEST	192.168.2.4	1.1.1.1	0x4bcc	Standard query (0)	a018.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:47.500684977 CEST	192.168.2.4	1.1.1.1	0x4a93	Standard query (0)	us-east-1.event.prod.bidr.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.501250982 CEST	192.168.2.4	1.1.1.1	0x35fb	Standard query (0)	us-east-1.event.prod.bidr.io	65	IN (0x0001)	false
Sep 30, 2024 15:18:47.502059937 CEST	192.168.2.4	1.1.1.1	0x2a8f	Standard query (0)	http-intake.logs.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.502342939 CEST	192.168.2.4	1.1.1.1	0x8760	Standard query (0)	http-intake.logs.datadoghq.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:48.660023928 CEST	192.168.2.4	1.1.1.1	0xad2b	Standard query (0)	gs.mountain.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.660023928 CEST	192.168.2.4	1.1.1.1	0x705	Standard query (0)	gs.mountain.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:48.661051035 CEST	192.168.2.4	1.1.1.1	0x606e	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.661595106 CEST	192.168.2.4	1.1.1.1	0xbeee	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Sep 30, 2024 15:18:48.665292025 CEST	192.168.2.4	1.1.1.1	0xcc8e	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:48.665292025 CEST	192.168.2.4	1.1.1.1	0x9366	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.492863894 CEST	192.168.2.4	1.1.1.1	0x46f6	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.493184090 CEST	192.168.2.4	1.1.1.1	0x7f91	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.495682001 CEST	192.168.2.4	1.1.1.1	0x89d8	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.495906115 CEST	192.168.2.4	1.1.1.1	0x6061	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.515060902 CEST	192.168.2.4	1.1.1.1	0xf53a	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.515192032 CEST	192.168.2.4	1.1.1.1	0xbcba	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.516201019 CEST	192.168.2.4	1.1.1.1	0x1c78	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.516474962 CEST	192.168.2.4	1.1.1.1	0x744a	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.519650936 CEST	192.168.2.4	1.1.1.1	0x4d4a	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.519879103 CEST	192.168.2.4	1.1.1.1	0x9871	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.521667957 CEST	192.168.2.4	1.1.1.1	0xb29c	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.521934986 CEST	192.168.2.4	1.1.1.1	0x1ce9	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.523205042 CEST	192.168.2.4	1.1.1.1	0x410d	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.523673058 CEST	192.168.2.4	1.1.1.1	0xbdc9	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.526782990 CEST	192.168.2.4	1.1.1.1	0xfd2d	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.526957035 CEST	192.168.2.4	1.1.1.1	0x9c3a	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.793730974 CEST	192.168.2.4	1.1.1.1	0xd472	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.793950081 CEST	192.168.2.4	1.1.1.1	0x1350	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.794693947 CEST	192.168.2.4	1.1.1.1	0xfd4	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.794976950 CEST	192.168.2.4	1.1.1.1	0xf2b7	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.820178986 CEST	192.168.2.4	1.1.1.1	0x8df0	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.820352077 CEST	192.168.2.4	1.1.1.1	0x4e1	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.821357965 CEST	192.168.2.4	1.1.1.1	0x7ad	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.821547985 CEST	192.168.2.4	1.1.1.1	0xe867	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.822398901 CEST	192.168.2.4	1.1.1.1	0x2ad2	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.822645903 CEST	192.168.2.4	1.1.1.1	0x28ed	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.823436975 CEST	192.168.2.4	1.1.1.1	0x2737	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.823678017 CEST	192.168.2.4	1.1.1.1	0xf529	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.824243069 CEST	192.168.2.4	1.1.1.1	0xc1b4	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.824470997 CEST	192.168.2.4	1.1.1.1	0x71d7	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.825279951 CEST	192.168.2.4	1.1.1.1	0xe650	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.825535059 CEST	192.168.2.4	1.1.1.1	0x3de2	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.826062918 CEST	192.168.2.4	1.1.1.1	0xb4ea	Standard query (0)	sync.adprime.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.826296091 CEST	192.168.2.4	1.1.1.1	0x9835	Standard query (0)	sync.adprime.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:49.826865911 CEST	192.168.2.4	1.1.1.1	0x437	Standard query (0)	sync.springserve.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.827003002 CEST	192.168.2.4	1.1.1.1	0x8f42	Standard query (0)	sync.springserve.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:50.051275015 CEST	192.168.2.4	1.1.1.1	0x78b1	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.051738977 CEST	192.168.2.4	1.1.1.1	0xf1f3	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:50.092571020 CEST	192.168.2.4	1.1.1.1	0x60e8	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.092864037 CEST	192.168.2.4	1.1.1.1	0xaff0	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:50.605544090 CEST	192.168.2.4	1.1.1.1	0x6547	Standard query (0)	c.mountain.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.607068062 CEST	192.168.2.4	1.1.1.1	0x3b48	Standard query (0)	c.mountain.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:50.658852100 CEST	192.168.2.4	1.1.1.1	0x97c8	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.659226894 CEST	192.168.2.4	1.1.1.1	0xab13	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:51.117686987 CEST	192.168.2.4	1.1.1.1	0xec88	Standard query (0)	events.mountain.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:51.117887020 CEST	192.168.2.4	1.1.1.1	0x3ec3	Standard query (0)	events.mountain.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:51.950321913 CEST	192.168.2.4	1.1.1.1	0x400c	Standard query (0)	sync-service.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:51.950557947 CEST	192.168.2.4	1.1.1.1	0xd5f5	Standard query (0)	sync-service.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:52.518526077 CEST	192.168.2.4	1.1.1.1	0x30ab	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:52.518731117 CEST	192.168.2.4	1.1.1.1	0x89d	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Sep 30, 2024 15:18:53.598388910 CEST	192.168.2.4	1.1.1.1	0xe096	Standard query (0)	t.mountain.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:53.598530054 CEST	192.168.2.4	1.1.1.1	0x2690	Standard query (0)	t.mountain.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:54.101795912 CEST	192.168.2.4	1.1.1.1	0x762d	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:54.101986885 CEST	192.168.2.4	1.1.1.1	0xa1d1	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Sep 30, 2024 15:18:56.077240944 CEST	192.168.2.4	1.1.1.1	0xa50d	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:56.081053972 CEST	192.168.2.4	1.1.1.1	0xff87	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 15:18:56.463979006 CEST	192.168.2.4	1.1.1.1	0x823f	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:01.220546961 CEST	192.168.2.4	1.1.1.1	0x836e	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:01.220829964 CEST	192.168.2.4	1.1.1.1	0x23bf	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Sep 30, 2024 15:19:05.121552944 CEST	192.168.2.4	1.1.1.1	0x26c9	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.121891975 CEST	192.168.2.4	1.1.1.1	0xef61	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Sep 30, 2024 15:19:05.195466042 CEST	192.168.2.4	1.1.1.1	0x7753	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.195790052 CEST	192.168.2.4	1.1.1.1	0x7d16	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Sep 30, 2024 15:19:05.350677013 CEST	192.168.2.4	1.1.1.1	0xe904	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:07.041143894 CEST	192.168.2.4	1.1.1.1	0x4c2b	Standard query (0)	jelly.mdhv.io	65	IN (0x0001)	false
Sep 30, 2024 15:19:07.041143894 CEST	192.168.2.4	1.1.1.1	0xae46	Standard query (0)	jelly.mdhv.io	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.286936998 CEST	192.168.2.4	1.1.1.1	0xc716	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.287355900 CEST	192.168.2.4	1.1.1.1	0x27e7	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:19:41.295536041 CEST	192.168.2.4	1.1.1.1	0x8004	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.295712948 CEST	192.168.2.4	1.1.1.1	0x1789	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:19:41.298281908 CEST	192.168.2.4	1.1.1.1	0xab3	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.298441887 CEST	192.168.2.4	1.1.1.1	0x6783	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:19:41.311837912 CEST	192.168.2.4	1.1.1.1	0xb318	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.312283039 CEST	192.168.2.4	1.1.1.1	0xff78	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:19:41.315530062 CEST	192.168.2.4	1.1.1.1	0x9061	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.315675020 CEST	192.168.2.4	1.1.1.1	0x5a9d	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:19:41.434122086 CEST	192.168.2.4	1.1.1.1	0xb21e	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.434468985 CEST	192.168.2.4	1.1.1.1	0xc666	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:20:01.241055012 CEST	192.168.2.4	1.1.1.1	0x41ae	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:01.241576910 CEST	192.168.2.4	1.1.1.1	0x92e3	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Sep 30, 2024 15:20:02.472259998 CEST	192.168.2.4	1.1.1.1	0x2e9f	Standard query (0)	http-intake.logs.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.472786903 CEST	192.168.2.4	1.1.1.1	0xe2f6	Standard query (0)	http-intake.logs.datadoghq.com	65	IN (0x0001)	false
Sep 30, 2024 15:20:28.535233974 CEST	192.168.2.4	1.1.1.1	0xffe0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:28.535586119 CEST	192.168.2.4	1.1.1.1	0x7022	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:21:01.220505953 CEST	192.168.2.4	1.1.1.1	0xfd63	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.221512079 CEST	192.168.2.4	1.1.1.1	0x38a2	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:21:01.222352982 CEST	192.168.2.4	1.1.1.1	0xcfc8	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.222531080 CEST	192.168.2.4	1.1.1.1	0x7084	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:21:01.229247093 CEST	192.168.2.4	1.1.1.1	0xa860	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.229547024 CEST	192.168.2.4	1.1.1.1	0x511f	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:21:01.265916109 CEST	192.168.2.4	1.1.1.1	0xa998	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.266220093 CEST	192.168.2.4	1.1.1.1	0xbf7b	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:21:02.770560980 CEST	192.168.2.4	1.1.1.1	0x83f7	Standard query (0)	http-intake.logs.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.770776987 CEST	192.168.2.4	1.1.1.1	0xfcbb	Standard query (0)	http-intake.logs.datadoghq.com	65	IN (0x0001)	false
Sep 30, 2024 15:21:21.232678890 CEST	192.168.2.4	1.1.1.1	0x7367	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:21.233069897 CEST	192.168.2.4	1.1.1.1	0x7831	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:21:21.237107992 CEST	192.168.2.4	1.1.1.1	0xd0f8	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:21.237447023 CEST	192.168.2.4	1.1.1.1	0xcd64	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:22:02.791712999 CEST	192.168.2.4	1.1.1.1	0x593e	Standard query (0)	http-intake.logs.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.791934967 CEST	192.168.2.4	1.1.1.1	0xaab1	Standard query (0)	http-intake.logs.datadoghq.com	65	IN (0x0001)	false
Sep 30, 2024 15:22:21.221982956 CEST	192.168.2.4	1.1.1.1	0x3ea8	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.222330093 CEST	192.168.2.4	1.1.1.1	0x2128	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:22:21.223078966 CEST	192.168.2.4	1.1.1.1	0xba	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.223294973 CEST	192.168.2.4	1.1.1.1	0x14da	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:22:21.224060059 CEST	192.168.2.4	1.1.1.1	0xa1f9	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.224370956 CEST	192.168.2.4	1.1.1.1	0x777f	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:22:21.230057001 CEST	192.168.2.4	1.1.1.1	0x7149	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.230268002 CEST	192.168.2.4	1.1.1.1	0xe693	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Sep 30, 2024 15:22:21.282752037 CEST	192.168.2.4	1.1.1.1	0xb118	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.282973051 CEST	192.168.2.4	1.1.1.1	0xcc38	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:22:41.216182947 CEST	192.168.2.4	1.1.1.1	0x858	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.216411114 CEST	192.168.2.4	1.1.1.1	0x331c	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
Sep 30, 2024 15:22:41.223110914 CEST	192.168.2.4	1.1.1.1	0x3885	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.223536968 CEST	192.168.2.4	1.1.1.1	0xc20e	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:22:41.225666046 CEST	192.168.2.4	1.1.1.1	0x75b2	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.225909948 CEST	192.168.2.4	1.1.1.1	0x64cf	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:23:26.219156027 CEST	192.168.2.4	1.1.1.1	0xd39e	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.219367981 CEST	192.168.2.4	1.1.1.1	0xaa55	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:23:26.220331907 CEST	192.168.2.4	1.1.1.1	0x9276	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.220331907 CEST	192.168.2.4	1.1.1.1	0x25b8	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:23:26.225792885 CEST	192.168.2.4	1.1.1.1	0x127c	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.226020098 CEST	192.168.2.4	1.1.1.1	0xd127	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:23:26.267980099 CEST	192.168.2.4	1.1.1.1	0x517b	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.268131971 CEST	192.168.2.4	1.1.1.1	0x3d6b	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:23:27.400887012 CEST	192.168.2.4	1.1.1.1	0xcc02	Standard query (0)	http-intake.logs.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:27.401118040 CEST	192.168.2.4	1.1.1.1	0x23ef	Standard query (0)	http-intake.logs.datadoghq.com	65	IN (0x0001)	false
Sep 30, 2024 15:23:46.289604902 CEST	192.168.2.4	1.1.1.1	0xe64a	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:46.289872885 CEST	192.168.2.4	1.1.1.1	0x8846	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:23:46.367847919 CEST	192.168.2.4	1.1.1.1	0x2a23	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:46.367847919 CEST	192.168.2.4	1.1.1.1	0x2b58	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Sep 30, 2024 15:24:06.282278061 CEST	192.168.2.4	1.1.1.1	0xc23	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:06.282418966 CEST	192.168.2.4	1.1.1.1	0x7c45	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Sep 30, 2024 15:24:26.274801016 CEST	192.168.2.4	1.1.1.1	0xae6	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.275099039 CEST	192.168.2.4	1.1.1.1	0x7bb0	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Sep 30, 2024 15:24:26.276021957 CEST	192.168.2.4	1.1.1.1	0xa130	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Sep 30, 2024 15:24:26.276021957 CEST	192.168.2.4	1.1.1.1	0xae38	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.280487061 CEST	192.168.2.4	1.1.1.1	0x9573	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.280782938 CEST	192.168.2.4	1.1.1.1	0x98a9	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Sep 30, 2024 15:24:26.336710930 CEST	192.168.2.4	1.1.1.1	0x5bf6	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.336903095 CEST	192.168.2.4	1.1.1.1	0x9e07	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Sep 30, 2024 15:24:27.561028957 CEST	192.168.2.4	1.1.1.1	0x6d7e	Standard query (0)	http-intake.logs.datadoghq.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.561366081 CEST	192.168.2.4	1.1.1.1	0x7304	Standard query (0)	http-intake.logs.datadoghq.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 15:15:38.004643917 CEST	1.1.1.1	192.168.2.4	0xb346	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:15:38.004643917 CEST	1.1.1.1	192.168.2.4	0xb346	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:42.105642080 CEST	1.1.1.1	192.168.2.4	0x745f	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:42.105642080 CEST	1.1.1.1	192.168.2.4	0x745f	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:47.173432112 CEST	1.1.1.1	192.168.2.4	0x3294	No error (0)	www.multitran.ru		65.109.102.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:48.297333956 CEST	1.1.1.1	192.168.2.4	0xeb68	No error (0)	www.multitran.com		65.109.102.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:49.529012918 CEST	1.1.1.1	192.168.2.4	0xf9c0	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:49.578519106 CEST	1.1.1.1	192.168.2.4	0x7937	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:49.578706026 CEST	1.1.1.1	192.168.2.4	0x4565	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:16:50.509747982 CEST	1.1.1.1	192.168.2.4	0xc779	No error (0)	play.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:50.523504972 CEST	1.1.1.1	192.168.2.4	0x7a54	No error (0)	www.multitran.com		65.109.102.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:50.679785967 CEST	1.1.1.1	192.168.2.4	0x92c0	No error (0)	cdn.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:50.679785967 CEST	1.1.1.1	192.168.2.4	0x92c0	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:50.679785967 CEST	1.1.1.1	192.168.2.4	0x92c0	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:50.680387020 CEST	1.1.1.1	192.168.2.4	0x486d	No error (0)	cdn.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:50.680387020 CEST	1.1.1.1	192.168.2.4	0x486d	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:50.680455923 CEST	1.1.1.1	192.168.2.4	0x185d	No error (0)	delivery.adrecover.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:50.680455923 CEST	1.1.1.1	192.168.2.4	0x185d	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:50.680455923 CEST	1.1.1.1	192.168.2.4	0x185d	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:50.680469036 CEST	1.1.1.1	192.168.2.4	0x7b1c	No error (0)	delivery.adrecover.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:50.680469036 CEST	1.1.1.1	192.168.2.4	0x7b1c	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:51.711246967 CEST	1.1.1.1	192.168.2.4	0x8527	No error (0)	googleads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.711364031 CEST	1.1.1.1	192.168.2.4	0xb049	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:16:51.842552900 CEST	1.1.1.1	192.168.2.4	0xf204	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.842552900 CEST	1.1.1.1	192.168.2.4	0xf204	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.842552900 CEST	1.1.1.1	192.168.2.4	0xf204	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.842552900 CEST	1.1.1.1	192.168.2.4	0xf204	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.847985029 CEST	1.1.1.1	192.168.2.4	0x3bff	No error (0)	delivery.adrecover.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:51.847985029 CEST	1.1.1.1	192.168.2.4	0x3bff	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:51.847985029 CEST	1.1.1.1	192.168.2.4	0x3bff	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:51.848225117 CEST	1.1.1.1	192.168.2.4	0x50b6	No error (0)	delivery.adrecover.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:51.848225117 CEST	1.1.1.1	192.168.2.4	0x50b6	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:52.480532885 CEST	1.1.1.1	192.168.2.4	0x71c	No error (0)	cdn.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:52.480532885 CEST	1.1.1.1	192.168.2.4	0x71c	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:52.480532885 CEST	1.1.1.1	192.168.2.4	0x71c	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:52.488029957 CEST	1.1.1.1	192.168.2.4	0x5c51	No error (0)	cdn.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:52.488029957 CEST	1.1.1.1	192.168.2.4	0x5c51	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:52.633820057 CEST	1.1.1.1	192.168.2.4	0xb642	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:52.633820057 CEST	1.1.1.1	192.168.2.4	0xb642	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:52.633820057 CEST	1.1.1.1	192.168.2.4	0xb642	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:52.633820057 CEST	1.1.1.1	192.168.2.4	0xb642	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.264286995 CEST	1.1.1.1	192.168.2.4	0x19a4	No error (0)	http-intake.logs.us5.datadoghq.com		34.149.66.130	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.311434031 CEST	1.1.1.1	192.168.2.4	0xe696	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.311434031 CEST	1.1.1.1	192.168.2.4	0xe696	No error (0)	d1ykf07e75w7ss.cloudfront.net		13.224.186.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.312572002 CEST	1.1.1.1	192.168.2.4	0xa70f	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.312897921 CEST	1.1.1.1	192.168.2.4	0x571d	No error (0)	e3.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.312897921 CEST	1.1.1.1	192.168.2.4	0x571d	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.312897921 CEST	1.1.1.1	192.168.2.4	0x571d	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.313695908 CEST	1.1.1.1	192.168.2.4	0x2fb6	No error (0)	securepubads.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:53.314115047 CEST	1.1.1.1	192.168.2.4	0xced9	No error (0)	e3.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.314115047 CEST	1.1.1.1	192.168.2.4	0xced9	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.320801020 CEST	1.1.1.1	192.168.2.4	0xb00f	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:16:53.453727961 CEST	1.1.1.1	192.168.2.4	0x54a	No error (0)	keymap.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.453727961 CEST	1.1.1.1	192.168.2.4	0x54a	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.453742027 CEST	1.1.1.1	192.168.2.4	0xee80	No error (0)	keymap.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.453742027 CEST	1.1.1.1	192.168.2.4	0xee80	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:53.453742027 CEST	1.1.1.1	192.168.2.4	0xee80	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:54.537275076 CEST	1.1.1.1	192.168.2.4	0xf89f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:16:54.538667917 CEST	1.1.1.1	192.168.2.4	0x4a36	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:54.733853102 CEST	1.1.1.1	192.168.2.4	0xdd42	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:54.733853102 CEST	1.1.1.1	192.168.2.4	0xdd42	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:54.733853102 CEST	1.1.1.1	192.168.2.4	0xdd42	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:54.733853102 CEST	1.1.1.1	192.168.2.4	0xdd42	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:54.733853102 CEST	1.1.1.1	192.168.2.4	0xdd42	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:54.733853102 CEST	1.1.1.1	192.168.2.4	0xdd42	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:54.733891010 CEST	1.1.1.1	192.168.2.4	0x71e7	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:54.733891010 CEST	1.1.1.1	192.168.2.4	0x71e7	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.098706007 CEST	1.1.1.1	192.168.2.4	0x8be5	No error (0)	config.aps.amazon-adsystem.com		18.245.31.123	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.098706007 CEST	1.1.1.1	192.168.2.4	0x8be5	No error (0)	config.aps.amazon-adsystem.com		18.245.31.92	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.098706007 CEST	1.1.1.1	192.168.2.4	0x8be5	No error (0)	config.aps.amazon-adsystem.com		18.245.31.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.098706007 CEST	1.1.1.1	192.168.2.4	0x8be5	No error (0)	config.aps.amazon-adsystem.com		18.245.31.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.219446898 CEST	1.1.1.1	192.168.2.4	0xfb5b	No error (0)	e3.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.219446898 CEST	1.1.1.1	192.168.2.4	0xfb5b	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.219671965 CEST	1.1.1.1	192.168.2.4	0xe3e	No error (0)	e3.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.219671965 CEST	1.1.1.1	192.168.2.4	0xe3e	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.219671965 CEST	1.1.1.1	192.168.2.4	0xe3e	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.222790956 CEST	1.1.1.1	192.168.2.4	0x16c5	No error (0)	securepubads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.223031998 CEST	1.1.1.1	192.168.2.4	0x18c7	No error (0)	keymap.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.223031998 CEST	1.1.1.1	192.168.2.4	0x18c7	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.223031998 CEST	1.1.1.1	192.168.2.4	0x18c7	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.223498106 CEST	1.1.1.1	192.168.2.4	0x4ec5	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:16:55.223514080 CEST	1.1.1.1	192.168.2.4	0x9f7e	No error (0)	keymap.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.223514080 CEST	1.1.1.1	192.168.2.4	0x9f7e	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.379601002 CEST	1.1.1.1	192.168.2.4	0xa01b	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:55.379601002 CEST	1.1.1.1	192.168.2.4	0xa01b	No error (0)	d1ykf07e75w7ss.cloudfront.net		13.224.186.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:55.380496025 CEST	1.1.1.1	192.168.2.4	0x4c14	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.111330986 CEST	1.1.1.1	192.168.2.4	0xd02	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.111330986 CEST	1.1.1.1	192.168.2.4	0xd02	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.113468885 CEST	1.1.1.1	192.168.2.4	0x5c91	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.113468885 CEST	1.1.1.1	192.168.2.4	0x5c91	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.113468885 CEST	1.1.1.1	192.168.2.4	0x5c91	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.113468885 CEST	1.1.1.1	192.168.2.4	0x5c91	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.113468885 CEST	1.1.1.1	192.168.2.4	0x5c91	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.113468885 CEST	1.1.1.1	192.168.2.4	0x5c91	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.146051884 CEST	1.1.1.1	192.168.2.4	0xc05b	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.147198915 CEST	1.1.1.1	192.168.2.4	0x6de3	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.147212029 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.147212029 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.57	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.147212029 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.15	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.147212029 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.147212029 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.147454977 CEST	1.1.1.1	192.168.2.4	0x48f	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.147902966 CEST	1.1.1.1	192.168.2.4	0x38b0	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.148029089 CEST	1.1.1.1	192.168.2.4	0xb6d7	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.148029089 CEST	1.1.1.1	192.168.2.4	0xb6d7	No error (0)	www3.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.149256945 CEST	1.1.1.1	192.168.2.4	0x6f4d	No error (0)	tags.crwdcntrl.net		65.9.66.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.149256945 CEST	1.1.1.1	192.168.2.4	0x6f4d	No error (0)	tags.crwdcntrl.net		65.9.66.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.149256945 CEST	1.1.1.1	192.168.2.4	0x6f4d	No error (0)	tags.crwdcntrl.net		65.9.66.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.149256945 CEST	1.1.1.1	192.168.2.4	0x6f4d	No error (0)	tags.crwdcntrl.net		65.9.66.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.150367022 CEST	1.1.1.1	192.168.2.4	0x512c	No error (0)	cdn.hadronid.net			65	IN (0x0001)	false
Sep 30, 2024 15:16:56.151125908 CEST	1.1.1.1	192.168.2.4	0x5859	No error (0)	cdn.hadronid.net		104.22.53.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.151125908 CEST	1.1.1.1	192.168.2.4	0x5859	No error (0)	cdn.hadronid.net		104.22.52.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.151125908 CEST	1.1.1.1	192.168.2.4	0x5859	No error (0)	cdn.hadronid.net		172.67.36.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.152781010 CEST	1.1.1.1	192.168.2.4	0xb2f9	No error (0)	config.aps.amazon-adsystem.com		18.245.31.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.152781010 CEST	1.1.1.1	192.168.2.4	0xb2f9	No error (0)	config.aps.amazon-adsystem.com		18.245.31.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.152781010 CEST	1.1.1.1	192.168.2.4	0xb2f9	No error (0)	config.aps.amazon-adsystem.com		18.245.31.123	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.152781010 CEST	1.1.1.1	192.168.2.4	0xb2f9	No error (0)	config.aps.amazon-adsystem.com		18.245.31.92	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:56.976186037 CEST	1.1.1.1	192.168.2.4	0x8112	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:56.976772070 CEST	1.1.1.1	192.168.2.4	0x7c6e	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:57.118556023 CEST	1.1.1.1	192.168.2.4	0xec68	No error (0)	cdn.hadronid.net		104.22.52.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.118556023 CEST	1.1.1.1	192.168.2.4	0xec68	No error (0)	cdn.hadronid.net		172.67.36.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.118556023 CEST	1.1.1.1	192.168.2.4	0xec68	No error (0)	cdn.hadronid.net		104.22.53.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.118927956 CEST	1.1.1.1	192.168.2.4	0x601a	No error (0)	cdn.hadronid.net			65	IN (0x0001)	false
Sep 30, 2024 15:16:57.355041027 CEST	1.1.1.1	192.168.2.4	0x3e02	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:57.355726004 CEST	1.1.1.1	192.168.2.4	0x7375	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:57.383769035 CEST	1.1.1.1	192.168.2.4	0xd994	No error (0)	bcp.crwdcntrl.net		52.19.187.77	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.383769035 CEST	1.1.1.1	192.168.2.4	0xd994	No error (0)	bcp.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.383769035 CEST	1.1.1.1	192.168.2.4	0xd994	No error (0)	bcp.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.383769035 CEST	1.1.1.1	192.168.2.4	0xd994	No error (0)	bcp.crwdcntrl.net		54.171.123.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.383769035 CEST	1.1.1.1	192.168.2.4	0xd994	No error (0)	bcp.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.383769035 CEST	1.1.1.1	192.168.2.4	0xd994	No error (0)	bcp.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.383769035 CEST	1.1.1.1	192.168.2.4	0xd994	No error (0)	bcp.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.383769035 CEST	1.1.1.1	192.168.2.4	0xd994	No error (0)	bcp.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.543514013 CEST	1.1.1.1	192.168.2.4	0xebaf	No error (0)	tags.crwdcntrl.net		65.9.66.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.543514013 CEST	1.1.1.1	192.168.2.4	0xebaf	No error (0)	tags.crwdcntrl.net		65.9.66.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.543514013 CEST	1.1.1.1	192.168.2.4	0xebaf	No error (0)	tags.crwdcntrl.net		65.9.66.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.543514013 CEST	1.1.1.1	192.168.2.4	0xebaf	No error (0)	tags.crwdcntrl.net		65.9.66.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.609797955 CEST	1.1.1.1	192.168.2.4	0xa8a0	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:57.609797955 CEST	1.1.1.1	192.168.2.4	0xa8a0	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.609797955 CEST	1.1.1.1	192.168.2.4	0xa8a0	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.609797955 CEST	1.1.1.1	192.168.2.4	0xa8a0	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.609797955 CEST	1.1.1.1	192.168.2.4	0xa8a0	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.610441923 CEST	1.1.1.1	192.168.2.4	0x330a	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:57.679342031 CEST	1.1.1.1	192.168.2.4	0x8646	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:57.679342031 CEST	1.1.1.1	192.168.2.4	0x8646	No error (0)	www3.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.680366993 CEST	1.1.1.1	192.168.2.4	0x7f87	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:57.680366993 CEST	1.1.1.1	192.168.2.4	0x7f87	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.57	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.680366993 CEST	1.1.1.1	192.168.2.4	0x7f87	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.15	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.680366993 CEST	1.1.1.1	192.168.2.4	0x7f87	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.680366993 CEST	1.1.1.1	192.168.2.4	0x7f87	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:57.681001902 CEST	1.1.1.1	192.168.2.4	0x374a	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:57.684709072 CEST	1.1.1.1	192.168.2.4	0x5cfd	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.073204041 CEST	1.1.1.1	192.168.2.4	0x9f44	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:16:58.073481083 CEST	1.1.1.1	192.168.2.4	0x2e52	No error (0)	securepubads.g.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.93	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.124	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.55	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.6	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373265982 CEST	1.1.1.1	192.168.2.4	0x77e1	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373776913 CEST	1.1.1.1	192.168.2.4	0xae07	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.373776913 CEST	1.1.1.1	192.168.2.4	0xae07	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.499864101 CEST	1.1.1.1	192.168.2.4	0xce62	No error (0)	video.adpushup.com	1792641740.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.499864101 CEST	1.1.1.1	192.168.2.4	0xce62	No error (0)	1792641740.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.499864101 CEST	1.1.1.1	192.168.2.4	0xce62	No error (0)	1792641740.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.499864101 CEST	1.1.1.1	192.168.2.4	0xce62	No error (0)	1792641740.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.499864101 CEST	1.1.1.1	192.168.2.4	0xce62	No error (0)	1792641740.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.499864101 CEST	1.1.1.1	192.168.2.4	0xce62	No error (0)	1792641740.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.499864101 CEST	1.1.1.1	192.168.2.4	0xce62	No error (0)	1792641740.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.499864101 CEST	1.1.1.1	192.168.2.4	0xce62	No error (0)	1792641740.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.500546932 CEST	1.1.1.1	192.168.2.4	0x1fd	No error (0)	video.adpushup.com	1792641740.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.647797108 CEST	1.1.1.1	192.168.2.4	0x1411	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.650800943 CEST	1.1.1.1	192.168.2.4	0x683c	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.870295048 CEST	1.1.1.1	192.168.2.4	0x145	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.870569944 CEST	1.1.1.1	192.168.2.4	0x1008	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.873732090 CEST	1.1.1.1	192.168.2.4	0x7837	No error (0)	bcp.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.873732090 CEST	1.1.1.1	192.168.2.4	0x7837	No error (0)	bcp.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.873732090 CEST	1.1.1.1	192.168.2.4	0x7837	No error (0)	bcp.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.873732090 CEST	1.1.1.1	192.168.2.4	0x7837	No error (0)	bcp.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.873732090 CEST	1.1.1.1	192.168.2.4	0x7837	No error (0)	bcp.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.873732090 CEST	1.1.1.1	192.168.2.4	0x7837	No error (0)	bcp.crwdcntrl.net		52.19.187.77	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.873732090 CEST	1.1.1.1	192.168.2.4	0x7837	No error (0)	bcp.crwdcntrl.net		54.171.123.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.873732090 CEST	1.1.1.1	192.168.2.4	0x7837	No error (0)	bcp.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.896049976 CEST	1.1.1.1	192.168.2.4	0x1057	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.896959066 CEST	1.1.1.1	192.168.2.4	0x39d3	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:58.896959066 CEST	1.1.1.1	192.168.2.4	0x39d3	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.896959066 CEST	1.1.1.1	192.168.2.4	0x39d3	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.896959066 CEST	1.1.1.1	192.168.2.4	0x39d3	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:58.896959066 CEST	1.1.1.1	192.168.2.4	0x39d3	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493098974 CEST	1.1.1.1	192.168.2.4	0xeacf	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493516922 CEST	1.1.1.1	192.168.2.4	0x1862	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:59.493516922 CEST	1.1.1.1	192.168.2.4	0x1862	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:16:59.500461102 CEST	1.1.1.1	192.168.2.4	0x35cd	No error (0)	video.adpushup.com	1792641740.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:59.500461102 CEST	1.1.1.1	192.168.2.4	0x35cd	No error (0)	1792641740.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.500461102 CEST	1.1.1.1	192.168.2.4	0x35cd	No error (0)	1792641740.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.500461102 CEST	1.1.1.1	192.168.2.4	0x35cd	No error (0)	1792641740.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.500461102 CEST	1.1.1.1	192.168.2.4	0x35cd	No error (0)	1792641740.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.500461102 CEST	1.1.1.1	192.168.2.4	0x35cd	No error (0)	1792641740.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.500461102 CEST	1.1.1.1	192.168.2.4	0x35cd	No error (0)	1792641740.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.500461102 CEST	1.1.1.1	192.168.2.4	0x35cd	No error (0)	1792641740.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:16:59.509839058 CEST	1.1.1.1	192.168.2.4	0xa70d	No error (0)	video.adpushup.com	1792641740.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:59.559930086 CEST	1.1.1.1	192.168.2.4	0xb23b	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:16:59.562371016 CEST	1.1.1.1	192.168.2.4	0x2ffb	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:00.236742973 CEST	1.1.1.1	192.168.2.4	0x38fd	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:00.238487005 CEST	1.1.1.1	192.168.2.4	0x67d5	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466516972 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466737986 CEST	1.1.1.1	192.168.2.4	0xe6a2	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:00.466737986 CEST	1.1.1.1	192.168.2.4	0xe6a2	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:01.035445929 CEST	1.1.1.1	192.168.2.4	0x3db5	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.035561085 CEST	1.1.1.1	192.168.2.4	0xc946	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.035561085 CEST	1.1.1.1	192.168.2.4	0xc946	No error (0)	btlr-eu-central-1.sharethrough.com		18.159.212.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.038326025 CEST	1.1.1.1	192.168.2.4	0x543a	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.045083046 CEST	1.1.1.1	192.168.2.4	0x80c1	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.045083046 CEST	1.1.1.1	192.168.2.4	0x80c1	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.045732975 CEST	1.1.1.1	192.168.2.4	0x249	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:01.046318054 CEST	1.1.1.1	192.168.2.4	0xf573	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.046318054 CEST	1.1.1.1	192.168.2.4	0xf573	No error (0)	ads.servenobid.com		54.220.49.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.046318054 CEST	1.1.1.1	192.168.2.4	0xf573	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.046318054 CEST	1.1.1.1	192.168.2.4	0xf573	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.046318054 CEST	1.1.1.1	192.168.2.4	0xf573	No error (0)	ads.servenobid.com		52.214.117.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.046318054 CEST	1.1.1.1	192.168.2.4	0xf573	No error (0)	ads.servenobid.com		63.33.110.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.046318054 CEST	1.1.1.1	192.168.2.4	0xf573	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.046318054 CEST	1.1.1.1	192.168.2.4	0xf573	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.051076889 CEST	1.1.1.1	192.168.2.4	0xcdd8	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.051076889 CEST	1.1.1.1	192.168.2.4	0xcdd8	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.051076889 CEST	1.1.1.1	192.168.2.4	0xcdd8	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.051076889 CEST	1.1.1.1	192.168.2.4	0xcdd8	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.051076889 CEST	1.1.1.1	192.168.2.4	0xcdd8	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.051076889 CEST	1.1.1.1	192.168.2.4	0xcdd8	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.052282095 CEST	1.1.1.1	192.168.2.4	0xe9b0	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.052282095 CEST	1.1.1.1	192.168.2.4	0xe9b0	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.155.119.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.225.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		99.81.214.212	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.51.195.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.210.21.58	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.208.249.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.216.33.27	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057244062 CEST	1.1.1.1	192.168.2.4	0xdbd5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.207.102	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057723045 CEST	1.1.1.1	192.168.2.4	0x940b	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057723045 CEST	1.1.1.1	192.168.2.4	0x940b	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057723045 CEST	1.1.1.1	192.168.2.4	0x940b	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.057723045 CEST	1.1.1.1	192.168.2.4	0x940b	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.061256886 CEST	1.1.1.1	192.168.2.4	0x40e	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Sep 30, 2024 15:17:01.061273098 CEST	1.1.1.1	192.168.2.4	0xa82c	No error (0)	ex.ingage.tech		104.18.41.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.061273098 CEST	1.1.1.1	192.168.2.4	0xa82c	No error (0)	ex.ingage.tech		172.64.146.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.064228058 CEST	1.1.1.1	192.168.2.4	0x473e	No error (0)	prebid.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.064228058 CEST	1.1.1.1	192.168.2.4	0x473e	No error (0)	prebid.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.064228058 CEST	1.1.1.1	192.168.2.4	0x473e	No error (0)	prebid.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.064922094 CEST	1.1.1.1	192.168.2.4	0xecc0	No error (0)	prebid.smilewanted.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:01.069763899 CEST	1.1.1.1	192.168.2.4	0x7a62	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.070276022 CEST	1.1.1.1	192.168.2.4	0xd0ea	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124540091 CEST	1.1.1.1	192.168.2.4	0x61f0	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124540091 CEST	1.1.1.1	192.168.2.4	0x61f0	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124540091 CEST	1.1.1.1	192.168.2.4	0x61f0	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124540091 CEST	1.1.1.1	192.168.2.4	0x61f0	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.244.15.236	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124773979 CEST	1.1.1.1	192.168.2.4	0xf67c	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124773979 CEST	1.1.1.1	192.168.2.4	0xf67c	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124773979 CEST	1.1.1.1	192.168.2.4	0xf67c	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124773979 CEST	1.1.1.1	192.168.2.4	0xf67c	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.124773979 CEST	1.1.1.1	192.168.2.4	0xf67c	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.125628948 CEST	1.1.1.1	192.168.2.4	0x22ff	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.125628948 CEST	1.1.1.1	192.168.2.4	0x22ff	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.125628948 CEST	1.1.1.1	192.168.2.4	0x22ff	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.126776934 CEST	1.1.1.1	192.168.2.4	0xc3f2	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.127264977 CEST	1.1.1.1	192.168.2.4	0x3296	No error (0)	api.id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.128649950 CEST	1.1.1.1	192.168.2.4	0x10c4	No error (0)	pbjs.e-planning.net		193.3.178.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.132932901 CEST	1.1.1.1	192.168.2.4	0x57f	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.133737087 CEST	1.1.1.1	192.168.2.4	0xf161	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.332139015 CEST	1.1.1.1	192.168.2.4	0x8b53	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.334532976 CEST	1.1.1.1	192.168.2.4	0x8068	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.370697975 CEST	1.1.1.1	192.168.2.4	0xb2b4	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.370697975 CEST	1.1.1.1	192.168.2.4	0xb2b4	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.370697975 CEST	1.1.1.1	192.168.2.4	0xb2b4	No error (0)	hbopenbid-ams.pubmnet.com		185.64.189.112	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.371285915 CEST	1.1.1.1	192.168.2.4	0xcfd1	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.371285915 CEST	1.1.1.1	192.168.2.4	0xcfd1	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.376379967 CEST	1.1.1.1	192.168.2.4	0xb730	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.376379967 CEST	1.1.1.1	192.168.2.4	0xb730	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.376379967 CEST	1.1.1.1	192.168.2.4	0xb730	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.376379967 CEST	1.1.1.1	192.168.2.4	0xb730	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.380611897 CEST	1.1.1.1	192.168.2.4	0xbbd0	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.381064892 CEST	1.1.1.1	192.168.2.4	0xc7e5	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.383578062 CEST	1.1.1.1	192.168.2.4	0x519	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.383578062 CEST	1.1.1.1	192.168.2.4	0x519	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.383578062 CEST	1.1.1.1	192.168.2.4	0x519	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.383578062 CEST	1.1.1.1	192.168.2.4	0x519	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.383578062 CEST	1.1.1.1	192.168.2.4	0x519	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.478817940 CEST	1.1.1.1	192.168.2.4	0x3796	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.478817940 CEST	1.1.1.1	192.168.2.4	0x3796	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.679445028 CEST	1.1.1.1	192.168.2.4	0x2b77	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.679445028 CEST	1.1.1.1	192.168.2.4	0x2b77	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.684421062 CEST	1.1.1.1	192.168.2.4	0x82a8	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:01.803401947 CEST	1.1.1.1	192.168.2.4	0x9bff	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.804363966 CEST	1.1.1.1	192.168.2.4	0xed47	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.804363966 CEST	1.1.1.1	192.168.2.4	0xed47	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.804363966 CEST	1.1.1.1	192.168.2.4	0xed47	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.804363966 CEST	1.1.1.1	192.168.2.4	0xed47	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.804363966 CEST	1.1.1.1	192.168.2.4	0xed47	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:01.906662941 CEST	1.1.1.1	192.168.2.4	0x3bc1	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.906662941 CEST	1.1.1.1	192.168.2.4	0x3bc1	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.994965076 CEST	1.1.1.1	192.168.2.4	0x1185	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.995316982 CEST	1.1.1.1	192.168.2.4	0x4c98	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:01.995316982 CEST	1.1.1.1	192.168.2.4	0x4c98	No error (0)	btlr-eu-central-1.sharethrough.com		18.159.212.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.016743898 CEST	1.1.1.1	192.168.2.4	0x5a81	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.016743898 CEST	1.1.1.1	192.168.2.4	0x5a81	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.016743898 CEST	1.1.1.1	192.168.2.4	0x5a81	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.016743898 CEST	1.1.1.1	192.168.2.4	0x5a81	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.016743898 CEST	1.1.1.1	192.168.2.4	0x5a81	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.038687944 CEST	1.1.1.1	192.168.2.4	0xa760	No error (0)	pbjs.e-planning.net		193.3.178.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.225.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.76.222.75	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.71.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.207.102	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.17.26.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.19.188.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.75.137.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.043905973 CEST	1.1.1.1	192.168.2.4	0xca75	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.253.139.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.044610023 CEST	1.1.1.1	192.168.2.4	0x7a8a	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.044610023 CEST	1.1.1.1	192.168.2.4	0x7a8a	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.044610023 CEST	1.1.1.1	192.168.2.4	0x7a8a	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.044610023 CEST	1.1.1.1	192.168.2.4	0x7a8a	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.088864088 CEST	1.1.1.1	192.168.2.4	0x3c50	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.088964939 CEST	1.1.1.1	192.168.2.4	0x798a	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.095427990 CEST	1.1.1.1	192.168.2.4	0xb7e8	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.095427990 CEST	1.1.1.1	192.168.2.4	0xb7e8	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.095427990 CEST	1.1.1.1	192.168.2.4	0xb7e8	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.095427990 CEST	1.1.1.1	192.168.2.4	0xb7e8	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.095427990 CEST	1.1.1.1	192.168.2.4	0xb7e8	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.095427990 CEST	1.1.1.1	192.168.2.4	0xb7e8	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.126966953 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	api.id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.134429932 CEST	1.1.1.1	192.168.2.4	0x37ef	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.134429932 CEST	1.1.1.1	192.168.2.4	0x37ef	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.134429932 CEST	1.1.1.1	192.168.2.4	0x37ef	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.134429932 CEST	1.1.1.1	192.168.2.4	0x37ef	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.134429932 CEST	1.1.1.1	192.168.2.4	0x37ef	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.134429932 CEST	1.1.1.1	192.168.2.4	0x37ef	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.134429932 CEST	1.1.1.1	192.168.2.4	0x37ef	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.134429932 CEST	1.1.1.1	192.168.2.4	0x37ef	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.177053928 CEST	1.1.1.1	192.168.2.4	0x38f9	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.187351942 CEST	1.1.1.1	192.168.2.4	0xf103	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.406172991 CEST	1.1.1.1	192.168.2.4	0x87f8	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.406172991 CEST	1.1.1.1	192.168.2.4	0x87f8	No error (0)	ads.servenobid.com		52.214.117.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.406172991 CEST	1.1.1.1	192.168.2.4	0x87f8	No error (0)	ads.servenobid.com		54.220.49.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.406172991 CEST	1.1.1.1	192.168.2.4	0x87f8	No error (0)	ads.servenobid.com		63.33.110.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.406172991 CEST	1.1.1.1	192.168.2.4	0x87f8	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.406172991 CEST	1.1.1.1	192.168.2.4	0x87f8	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.406172991 CEST	1.1.1.1	192.168.2.4	0x87f8	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.406172991 CEST	1.1.1.1	192.168.2.4	0x87f8	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.467952013 CEST	1.1.1.1	192.168.2.4	0x6daa	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.232	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485707998 CEST	1.1.1.1	192.168.2.4	0x9adf	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485707998 CEST	1.1.1.1	192.168.2.4	0x9adf	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485707998 CEST	1.1.1.1	192.168.2.4	0x9adf	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485953093 CEST	1.1.1.1	192.168.2.4	0x1339	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485953093 CEST	1.1.1.1	192.168.2.4	0x1339	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485953093 CEST	1.1.1.1	192.168.2.4	0x1339	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485953093 CEST	1.1.1.1	192.168.2.4	0x1339	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485974073 CEST	1.1.1.1	192.168.2.4	0x9b4c	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485974073 CEST	1.1.1.1	192.168.2.4	0x9b4c	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485974073 CEST	1.1.1.1	192.168.2.4	0x9b4c	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.485974073 CEST	1.1.1.1	192.168.2.4	0x9b4c	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		13.35.57.188	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.486114979 CEST	1.1.1.1	192.168.2.4	0x8ea1	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:02.646236897 CEST	1.1.1.1	192.168.2.4	0xafa9	No error (0)	b.sharethrough.com		18.66.122.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.646236897 CEST	1.1.1.1	192.168.2.4	0xafa9	No error (0)	b.sharethrough.com		18.66.122.40	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.646236897 CEST	1.1.1.1	192.168.2.4	0xafa9	No error (0)	b.sharethrough.com		18.66.122.15	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:02.646236897 CEST	1.1.1.1	192.168.2.4	0xafa9	No error (0)	b.sharethrough.com		18.66.122.92	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.312000036 CEST	1.1.1.1	192.168.2.4	0x542e	No error (0)	ex.ingage.tech		172.64.146.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.312000036 CEST	1.1.1.1	192.168.2.4	0x542e	No error (0)	ex.ingage.tech		104.18.41.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.312055111 CEST	1.1.1.1	192.168.2.4	0x3a1e	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Sep 30, 2024 15:17:03.707561016 CEST	1.1.1.1	192.168.2.4	0xf58e	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:03.708398104 CEST	1.1.1.1	192.168.2.4	0x1fb4	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:03.710294008 CEST	1.1.1.1	192.168.2.4	0x2ee9	No error (0)	b.sharethrough.com		18.66.122.92	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.710294008 CEST	1.1.1.1	192.168.2.4	0x2ee9	No error (0)	b.sharethrough.com		18.66.122.15	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.710294008 CEST	1.1.1.1	192.168.2.4	0x2ee9	No error (0)	b.sharethrough.com		18.66.122.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:03.710294008 CEST	1.1.1.1	192.168.2.4	0x2ee9	No error (0)	b.sharethrough.com		18.66.122.40	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.323735952 CEST	1.1.1.1	192.168.2.4	0xe380	No error (0)	ids.ad.gt		52.40.251.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.323735952 CEST	1.1.1.1	192.168.2.4	0xe380	No error (0)	ids.ad.gt		35.160.198.55	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.323735952 CEST	1.1.1.1	192.168.2.4	0xe380	No error (0)	ids.ad.gt		52.39.103.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.323735952 CEST	1.1.1.1	192.168.2.4	0xe380	No error (0)	ids.ad.gt		44.224.248.60	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.323735952 CEST	1.1.1.1	192.168.2.4	0xe380	No error (0)	ids.ad.gt		44.242.111.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.323735952 CEST	1.1.1.1	192.168.2.4	0xe380	No error (0)	ids.ad.gt		35.161.165.219	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.323735952 CEST	1.1.1.1	192.168.2.4	0xe380	No error (0)	ids.ad.gt		52.24.72.232	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.323735952 CEST	1.1.1.1	192.168.2.4	0xe380	No error (0)	ids.ad.gt		44.228.30.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.427809000 CEST	1.1.1.1	192.168.2.4	0xe937	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:04.427845955 CEST	1.1.1.1	192.168.2.4	0xe0f4	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.429336071 CEST	1.1.1.1	192.168.2.4	0xd9f9	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:04.433660984 CEST	1.1.1.1	192.168.2.4	0x7daa	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:04.433826923 CEST	1.1.1.1	192.168.2.4	0x5456	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.173949957 CEST	1.1.1.1	192.168.2.4	0x1f4e	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.173949957 CEST	1.1.1.1	192.168.2.4	0x1f4e	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.173949957 CEST	1.1.1.1	192.168.2.4	0x1f4e	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.173949957 CEST	1.1.1.1	192.168.2.4	0x1f4e	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.176654100 CEST	1.1.1.1	192.168.2.4	0xa033	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.176654100 CEST	1.1.1.1	192.168.2.4	0xa033	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.627068043 CEST	1.1.1.1	192.168.2.4	0x631	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.627068043 CEST	1.1.1.1	192.168.2.4	0x631	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.627068043 CEST	1.1.1.1	192.168.2.4	0x631	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.680932045 CEST	1.1.1.1	192.168.2.4	0x5adc	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681396961 CEST	1.1.1.1	192.168.2.4	0xfc89	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681396961 CEST	1.1.1.1	192.168.2.4	0xfc89	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.681952000 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.849011898 CEST	1.1.1.1	192.168.2.4	0xb2e1	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.850681067 CEST	1.1.1.1	192.168.2.4	0xe54d	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.850693941 CEST	1.1.1.1	192.168.2.4	0x54db	No error (0)	cs.ingage.tech	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.850693941 CEST	1.1.1.1	192.168.2.4	0x54db	No error (0)	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		52.72.235.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.850693941 CEST	1.1.1.1	192.168.2.4	0x54db	No error (0)	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		52.0.64.242	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.850693941 CEST	1.1.1.1	192.168.2.4	0x54db	No error (0)	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		54.162.45.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.851196051 CEST	1.1.1.1	192.168.2.4	0x7560	No error (0)	cs.ingage.tech	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.851504087 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.851504087 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.851504087 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.851504087 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.851504087 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.851504087 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.852128029 CEST	1.1.1.1	192.168.2.4	0xb159	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.852128029 CEST	1.1.1.1	192.168.2.4	0xb159	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.852128029 CEST	1.1.1.1	192.168.2.4	0xb159	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.852128029 CEST	1.1.1.1	192.168.2.4	0xb159	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.852128029 CEST	1.1.1.1	192.168.2.4	0xb159	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.854777098 CEST	1.1.1.1	192.168.2.4	0x560	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855005980 CEST	1.1.1.1	192.168.2.4	0x7f01	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.207.102	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.208.55.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		99.81.11.189	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.74.242.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.215.102.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.225.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.78.188.125	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.855535984 CEST	1.1.1.1	192.168.2.4	0x111d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.217.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.857709885 CEST	1.1.1.1	192.168.2.4	0x4cd9	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.857709885 CEST	1.1.1.1	192.168.2.4	0x4cd9	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.857709885 CEST	1.1.1.1	192.168.2.4	0x4cd9	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.857709885 CEST	1.1.1.1	192.168.2.4	0x4cd9	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:05.859934092 CEST	1.1.1.1	192.168.2.4	0xd9ff	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.859934092 CEST	1.1.1.1	192.168.2.4	0xd9ff	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.860027075 CEST	1.1.1.1	192.168.2.4	0x3c56	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:05.890695095 CEST	1.1.1.1	192.168.2.4	0x19cb	No error (0)	csync.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.890695095 CEST	1.1.1.1	192.168.2.4	0x19cb	No error (0)	csync.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.890695095 CEST	1.1.1.1	192.168.2.4	0x19cb	No error (0)	csync.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.892160892 CEST	1.1.1.1	192.168.2.4	0x19ae	No error (0)	csync.smilewanted.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:05.893387079 CEST	1.1.1.1	192.168.2.4	0x8408	No error (0)	public.servenobid.com		18.245.31.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.893387079 CEST	1.1.1.1	192.168.2.4	0x8408	No error (0)	public.servenobid.com		18.245.31.15	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.893387079 CEST	1.1.1.1	192.168.2.4	0x8408	No error (0)	public.servenobid.com		18.245.31.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:05.893387079 CEST	1.1.1.1	192.168.2.4	0x8408	No error (0)	public.servenobid.com		18.245.31.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.581171989 CEST	1.1.1.1	192.168.2.4	0x43f4	No error (0)	cs.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.588450909 CEST	1.1.1.1	192.168.2.4	0xcf09	No error (0)	match.prod.bidr.io		52.210.237.114	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.588450909 CEST	1.1.1.1	192.168.2.4	0xcf09	No error (0)	match.prod.bidr.io		34.243.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.588450909 CEST	1.1.1.1	192.168.2.4	0xcf09	No error (0)	match.prod.bidr.io		52.214.31.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.588450909 CEST	1.1.1.1	192.168.2.4	0xcf09	No error (0)	match.prod.bidr.io		52.212.197.58	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.588450909 CEST	1.1.1.1	192.168.2.4	0xcf09	No error (0)	match.prod.bidr.io		52.214.158.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.588450909 CEST	1.1.1.1	192.168.2.4	0xcf09	No error (0)	match.prod.bidr.io		52.31.14.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.588450909 CEST	1.1.1.1	192.168.2.4	0xcf09	No error (0)	match.prod.bidr.io		52.210.91.197	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.645045996 CEST	1.1.1.1	192.168.2.4	0x4ad3	No error (0)	s.ad.smaato.net		13.32.27.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.645045996 CEST	1.1.1.1	192.168.2.4	0x4ad3	No error (0)	s.ad.smaato.net		13.32.27.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.645045996 CEST	1.1.1.1	192.168.2.4	0x4ad3	No error (0)	s.ad.smaato.net		13.32.27.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.645045996 CEST	1.1.1.1	192.168.2.4	0x4ad3	No error (0)	s.ad.smaato.net		13.32.27.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.653240919 CEST	1.1.1.1	192.168.2.4	0x66dc	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.653914928 CEST	1.1.1.1	192.168.2.4	0xaf9a	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.653929949 CEST	1.1.1.1	192.168.2.4	0x4b4	No error (0)	trace-eu.mediago.io		35.214.168.80	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.654810905 CEST	1.1.1.1	192.168.2.4	0xd889	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.655374050 CEST	1.1.1.1	192.168.2.4	0x389a	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.657840967 CEST	1.1.1.1	192.168.2.4	0x79f8	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.657840967 CEST	1.1.1.1	192.168.2.4	0x79f8	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.657840967 CEST	1.1.1.1	192.168.2.4	0x79f8	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.657840967 CEST	1.1.1.1	192.168.2.4	0x79f8	No error (0)	nydc1.outbrain.org		70.42.32.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.658409119 CEST	1.1.1.1	192.168.2.4	0x236a	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.658409119 CEST	1.1.1.1	192.168.2.4	0x236a	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.658409119 CEST	1.1.1.1	192.168.2.4	0x236a	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.678636074 CEST	1.1.1.1	192.168.2.4	0xc884	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.678636074 CEST	1.1.1.1	192.168.2.4	0xc884	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.679090977 CEST	1.1.1.1	192.168.2.4	0x1032	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:06.848159075 CEST	1.1.1.1	192.168.2.4	0xe100	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.849637985 CEST	1.1.1.1	192.168.2.4	0x38d9	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.849637985 CEST	1.1.1.1	192.168.2.4	0x38d9	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.30.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.872199059 CEST	1.1.1.1	192.168.2.4	0xeaea	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.872226954 CEST	1.1.1.1	192.168.2.4	0x6556	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.872253895 CEST	1.1.1.1	192.168.2.4	0x6ef5	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.879287958 CEST	1.1.1.1	192.168.2.4	0x393e	No error (0)	cs.admanmedia.com		80.77.87.161	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:06.919784069 CEST	1.1.1.1	192.168.2.4	0x50e8	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:06.919784069 CEST	1.1.1.1	192.168.2.4	0x50e8	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.000495911 CEST	1.1.1.1	192.168.2.4	0x84e1	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.001288891 CEST	1.1.1.1	192.168.2.4	0xf55e	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.015188932 CEST	1.1.1.1	192.168.2.4	0xb7c6	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.016844988 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.198868036 CEST	1.1.1.1	192.168.2.4	0xc808	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.199054956 CEST	1.1.1.1	192.168.2.4	0x20aa	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.199054956 CEST	1.1.1.1	192.168.2.4	0x20aa	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.152	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.199054956 CEST	1.1.1.1	192.168.2.4	0x20aa	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.342818975 CEST	1.1.1.1	192.168.2.4	0xf920	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.342818975 CEST	1.1.1.1	192.168.2.4	0xf920	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.342818975 CEST	1.1.1.1	192.168.2.4	0xf920	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.343054056 CEST	1.1.1.1	192.168.2.4	0xeb8c	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.343054056 CEST	1.1.1.1	192.168.2.4	0xeb8c	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.368521929 CEST	1.1.1.1	192.168.2.4	0xb8fc	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.368521929 CEST	1.1.1.1	192.168.2.4	0xb8fc	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.368521929 CEST	1.1.1.1	192.168.2.4	0xb8fc	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.368644953 CEST	1.1.1.1	192.168.2.4	0x84a5	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.368644953 CEST	1.1.1.1	192.168.2.4	0x84a5	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.368644953 CEST	1.1.1.1	192.168.2.4	0x84a5	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.368644953 CEST	1.1.1.1	192.168.2.4	0x84a5	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.368644953 CEST	1.1.1.1	192.168.2.4	0x84a5	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.422312975 CEST	1.1.1.1	192.168.2.4	0x64b8	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.422312975 CEST	1.1.1.1	192.168.2.4	0x64b8	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.422312975 CEST	1.1.1.1	192.168.2.4	0x64b8	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.422312975 CEST	1.1.1.1	192.168.2.4	0x64b8	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.422312975 CEST	1.1.1.1	192.168.2.4	0x64b8	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.422312975 CEST	1.1.1.1	192.168.2.4	0x64b8	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.422312975 CEST	1.1.1.1	192.168.2.4	0x64b8	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.422312975 CEST	1.1.1.1	192.168.2.4	0x64b8	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.553231001 CEST	1.1.1.1	192.168.2.4	0x8b9a	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.553231001 CEST	1.1.1.1	192.168.2.4	0x8b9a	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.553231001 CEST	1.1.1.1	192.168.2.4	0x8b9a	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.554919958 CEST	1.1.1.1	192.168.2.4	0x88af	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.616058111 CEST	1.1.1.1	192.168.2.4	0x2453	No error (0)	cm.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.699877977 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	g2.gumgum.com		52.212.222.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.699877977 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	g2.gumgum.com		176.34.224.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.699877977 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	g2.gumgum.com		52.31.202.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.699877977 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	g2.gumgum.com		52.212.210.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.699877977 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	g2.gumgum.com		3.248.14.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.699877977 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	g2.gumgum.com		54.217.9.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.699877977 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	g2.gumgum.com		52.31.253.151	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.699877977 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	g2.gumgum.com		54.155.161.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.715607882 CEST	1.1.1.1	192.168.2.4	0x8c7	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.715607882 CEST	1.1.1.1	192.168.2.4	0x8c7	No error (0)	pixel.33across.com		67.202.105.24	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.924515009 CEST	1.1.1.1	192.168.2.4	0x303d	No error (0)	static.smilewanted.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:07.925117970 CEST	1.1.1.1	192.168.2.4	0xaf8a	No error (0)	static.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.925117970 CEST	1.1.1.1	192.168.2.4	0xaf8a	No error (0)	static.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.925117970 CEST	1.1.1.1	192.168.2.4	0xaf8a	No error (0)	static.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.939834118 CEST	1.1.1.1	192.168.2.4	0x433c	No error (0)	cs-server-s2s.yellowblue.io		3.229.16.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.939834118 CEST	1.1.1.1	192.168.2.4	0x433c	No error (0)	cs-server-s2s.yellowblue.io		34.236.56.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.939834118 CEST	1.1.1.1	192.168.2.4	0x433c	No error (0)	cs-server-s2s.yellowblue.io		34.198.59.63	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.939834118 CEST	1.1.1.1	192.168.2.4	0x433c	No error (0)	cs-server-s2s.yellowblue.io		34.227.62.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.939834118 CEST	1.1.1.1	192.168.2.4	0x433c	No error (0)	cs-server-s2s.yellowblue.io		34.199.107.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.939834118 CEST	1.1.1.1	192.168.2.4	0x433c	No error (0)	cs-server-s2s.yellowblue.io		44.216.231.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.939834118 CEST	1.1.1.1	192.168.2.4	0x433c	No error (0)	cs-server-s2s.yellowblue.io		52.1.110.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.939834118 CEST	1.1.1.1	192.168.2.4	0x433c	No error (0)	cs-server-s2s.yellowblue.io		107.22.244.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.952485085 CEST	1.1.1.1	192.168.2.4	0x4196	No error (0)	cdn.dxkulture.com	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.952485085 CEST	1.1.1.1	192.168.2.4	0x4196	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:07.952953100 CEST	1.1.1.1	192.168.2.4	0xe195	No error (0)	cdn.dxkulture.com	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:07.952953100 CEST	1.1.1.1	192.168.2.4	0xe195	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		172.64.145.29	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:07.952953100 CEST	1.1.1.1	192.168.2.4	0xe195	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		104.18.42.227	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.015784979 CEST	1.1.1.1	192.168.2.4	0x92c9	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.015784979 CEST	1.1.1.1	192.168.2.4	0x92c9	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.015784979 CEST	1.1.1.1	192.168.2.4	0x92c9	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.015784979 CEST	1.1.1.1	192.168.2.4	0x92c9	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	idaas-ext.cph.liveintent.com		54.173.74.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	idaas-ext.cph.liveintent.com		3.209.208.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	idaas-ext.cph.liveintent.com		52.7.209.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	idaas-ext.cph.liveintent.com		18.215.102.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	idaas-ext.cph.liveintent.com		52.201.92.115	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	idaas-ext.cph.liveintent.com		44.215.250.231	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	idaas-ext.cph.liveintent.com		44.194.57.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.016700983 CEST	1.1.1.1	192.168.2.4	0x1ea6	No error (0)	idaas-ext.cph.liveintent.com		52.23.140.152	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.020845890 CEST	1.1.1.1	192.168.2.4	0xad3b	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.043417931 CEST	1.1.1.1	192.168.2.4	0xd717	No error (0)	cm.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.043457985 CEST	1.1.1.1	192.168.2.4	0xd6b0	No error (0)	s.amazon-adsystem.com		98.82.154.76	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.044677019 CEST	1.1.1.1	192.168.2.4	0x41d2	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.044677019 CEST	1.1.1.1	192.168.2.4	0x41d2	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.044677019 CEST	1.1.1.1	192.168.2.4	0x41d2	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.045517921 CEST	1.1.1.1	192.168.2.4	0xf4aa	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.045517921 CEST	1.1.1.1	192.168.2.4	0xf4aa	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.045607090 CEST	1.1.1.1	192.168.2.4	0x805	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.045607090 CEST	1.1.1.1	192.168.2.4	0x805	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.045607090 CEST	1.1.1.1	192.168.2.4	0x805	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.045607090 CEST	1.1.1.1	192.168.2.4	0x805	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.045607090 CEST	1.1.1.1	192.168.2.4	0x805	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.045607090 CEST	1.1.1.1	192.168.2.4	0x805	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047120094 CEST	1.1.1.1	192.168.2.4	0xefde	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047120094 CEST	1.1.1.1	192.168.2.4	0xefde	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047120094 CEST	1.1.1.1	192.168.2.4	0xefde	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.147.230	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.152.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.150.204	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.201.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.255.228.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.047133923 CEST	1.1.1.1	192.168.2.4	0x9957	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.23.243	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.51.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.248.75.162	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.51.221.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.49.236.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.96.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.78.106.223	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.211.250.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.083867073 CEST	1.1.1.1	192.168.2.4	0x95af	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.194.48.199	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.084114075 CEST	1.1.1.1	192.168.2.4	0xe0ad	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.084114075 CEST	1.1.1.1	192.168.2.4	0xe0ad	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.089773893 CEST	1.1.1.1	192.168.2.4	0xb071	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.089773893 CEST	1.1.1.1	192.168.2.4	0xb071	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.089907885 CEST	1.1.1.1	192.168.2.4	0xc62c	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.089907885 CEST	1.1.1.1	192.168.2.4	0xc62c	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.090548038 CEST	1.1.1.1	192.168.2.4	0x3ad8	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.090548038 CEST	1.1.1.1	192.168.2.4	0x3ad8	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.090548038 CEST	1.1.1.1	192.168.2.4	0x3ad8	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.090548038 CEST	1.1.1.1	192.168.2.4	0x3ad8	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.090548038 CEST	1.1.1.1	192.168.2.4	0x3ad8	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.091193914 CEST	1.1.1.1	192.168.2.4	0xd8b7	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.097711086 CEST	1.1.1.1	192.168.2.4	0x7c89	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	nld-prebid.a-mx.net		163.5.194.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	nld-prebid.a-mx.net		163.5.194.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	nld-prebid.a-mx.net		163.5.194.36	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	nld-prebid.a-mx.net		163.5.194.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	nld-prebid.a-mx.net		163.5.194.37	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	nld-prebid.a-mx.net		163.5.194.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	nld-prebid.a-mx.net		163.5.194.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.099169970 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	nld-prebid.a-mx.net		163.5.194.31	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.243.220.226	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.225.24.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.23.51.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.217.116.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.95.52.72	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		107.23.94.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		107.20.229.154	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109239101 CEST	1.1.1.1	192.168.2.4	0x10a0	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.202.42.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.109751940 CEST	1.1.1.1	192.168.2.4	0xc870	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.539860010 CEST	1.1.1.1	192.168.2.4	0x9499	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.540518045 CEST	1.1.1.1	192.168.2.4	0xa98a	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.540518045 CEST	1.1.1.1	192.168.2.4	0xa98a	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.550303936 CEST	1.1.1.1	192.168.2.4	0x1310	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.550303936 CEST	1.1.1.1	192.168.2.4	0x1310	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.550854921 CEST	1.1.1.1	192.168.2.4	0x7742	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.558727980 CEST	1.1.1.1	192.168.2.4	0x4989	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.558727980 CEST	1.1.1.1	192.168.2.4	0x4989	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.559264898 CEST	1.1.1.1	192.168.2.4	0xa652	No error (0)	dsp-cookie.adfarm1.adition.com		80.82.210.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561284065 CEST	1.1.1.1	192.168.2.4	0x4be5	No error (0)	sync.srv.stackadapt.com		54.157.37.140	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561284065 CEST	1.1.1.1	192.168.2.4	0x4be5	No error (0)	sync.srv.stackadapt.com		54.174.109.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561284065 CEST	1.1.1.1	192.168.2.4	0x4be5	No error (0)	sync.srv.stackadapt.com		54.160.160.188	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561284065 CEST	1.1.1.1	192.168.2.4	0x4be5	No error (0)	sync.srv.stackadapt.com		54.162.218.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561284065 CEST	1.1.1.1	192.168.2.4	0x4be5	No error (0)	sync.srv.stackadapt.com		54.152.127.111	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561284065 CEST	1.1.1.1	192.168.2.4	0x4be5	No error (0)	sync.srv.stackadapt.com		54.167.160.195	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561284065 CEST	1.1.1.1	192.168.2.4	0x4be5	No error (0)	sync.srv.stackadapt.com		54.157.243.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561284065 CEST	1.1.1.1	192.168.2.4	0x4be5	No error (0)	sync.srv.stackadapt.com		54.157.181.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561408997 CEST	1.1.1.1	192.168.2.4	0x8cbd	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561408997 CEST	1.1.1.1	192.168.2.4	0x8cbd	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561408997 CEST	1.1.1.1	192.168.2.4	0x8cbd	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.561862946 CEST	1.1.1.1	192.168.2.4	0x5650	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.562707901 CEST	1.1.1.1	192.168.2.4	0x3870	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.562707901 CEST	1.1.1.1	192.168.2.4	0x3870	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.562707901 CEST	1.1.1.1	192.168.2.4	0x3870	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.564528942 CEST	1.1.1.1	192.168.2.4	0x7713	No error (0)	dsp-ap.eskimi.com		188.42.63.48	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.245.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.156.26	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.193.25	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.247.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.146.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.223.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.170.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.219.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.184.204	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898855925 CEST	1.1.1.1	192.168.2.4	0x30d0	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.156.181	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.898941994 CEST	1.1.1.1	192.168.2.4	0xa17f	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.899014950 CEST	1.1.1.1	192.168.2.4	0x6d4f	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.900638103 CEST	1.1.1.1	192.168.2.4	0x6a9d	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902563095 CEST	1.1.1.1	192.168.2.4	0x3e67	No error (0)	d5p.de17a.com	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902563095 CEST	1.1.1.1	192.168.2.4	0x3e67	No error (0)	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com		13.53.196.230	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902563095 CEST	1.1.1.1	192.168.2.4	0x3e67	No error (0)	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com		13.50.192.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	dsp.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	euw-ice.360yield.com		34.248.56.28	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	euw-ice.360yield.com		18.203.30.77	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	euw-ice.360yield.com		54.194.234.1	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	euw-ice.360yield.com		52.51.158.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	euw-ice.360yield.com		34.251.142.61	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	euw-ice.360yield.com		54.194.167.154	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	euw-ice.360yield.com		108.128.221.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.902740955 CEST	1.1.1.1	192.168.2.4	0xc7fb	No error (0)	euw-ice.360yield.com		34.250.159.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.903193951 CEST	1.1.1.1	192.168.2.4	0xe9d1	No error (0)	d5p.de17a.com	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.904859066 CEST	1.1.1.1	192.168.2.4	0x51d	No error (0)	sync.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.904859066 CEST	1.1.1.1	192.168.2.4	0x51d	No error (0)	sync.crwdcntrl.net		54.171.123.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.904859066 CEST	1.1.1.1	192.168.2.4	0x51d	No error (0)	sync.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.904859066 CEST	1.1.1.1	192.168.2.4	0x51d	No error (0)	sync.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.904859066 CEST	1.1.1.1	192.168.2.4	0x51d	No error (0)	sync.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.904859066 CEST	1.1.1.1	192.168.2.4	0x51d	No error (0)	sync.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.904859066 CEST	1.1.1.1	192.168.2.4	0x51d	No error (0)	sync.crwdcntrl.net		52.19.187.77	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.904859066 CEST	1.1.1.1	192.168.2.4	0x51d	No error (0)	sync.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.905635118 CEST	1.1.1.1	192.168.2.4	0xafe7	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:08.905817032 CEST	1.1.1.1	192.168.2.4	0x4259	No error (0)	dsp.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.905817032 CEST	1.1.1.1	192.168.2.4	0x4259	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.906326056 CEST	1.1.1.1	192.168.2.4	0x7278	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.906326056 CEST	1.1.1.1	192.168.2.4	0x7278	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.906326056 CEST	1.1.1.1	192.168.2.4	0x7278	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.907839060 CEST	1.1.1.1	192.168.2.4	0x271b	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.908504009 CEST	1.1.1.1	192.168.2.4	0xe4e1	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.908504009 CEST	1.1.1.1	192.168.2.4	0xe4e1	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.908504009 CEST	1.1.1.1	192.168.2.4	0xe4e1	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.910170078 CEST	1.1.1.1	192.168.2.4	0xb176	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.910170078 CEST	1.1.1.1	192.168.2.4	0xb176	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.910170078 CEST	1.1.1.1	192.168.2.4	0xb176	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:08.915561914 CEST	1.1.1.1	192.168.2.4	0xdd74	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:08.916404009 CEST	1.1.1.1	192.168.2.4	0x7f75	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.141046047 CEST	1.1.1.1	192.168.2.4	0x9b77	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.141046047 CEST	1.1.1.1	192.168.2.4	0x9b77	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.145837069 CEST	1.1.1.1	192.168.2.4	0x75ce	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.145837069 CEST	1.1.1.1	192.168.2.4	0x75ce	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.145867109 CEST	1.1.1.1	192.168.2.4	0x673b	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.145867109 CEST	1.1.1.1	192.168.2.4	0x673b	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.145899057 CEST	1.1.1.1	192.168.2.4	0xb386	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.145899057 CEST	1.1.1.1	192.168.2.4	0xb386	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.145899057 CEST	1.1.1.1	192.168.2.4	0xb386	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.577039957 CEST	1.1.1.1	192.168.2.4	0x715a	No error (0)	cr.frontend.weborama.fr		34.111.129.221	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.637274981 CEST	1.1.1.1	192.168.2.4	0xfd65	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.637274981 CEST	1.1.1.1	192.168.2.4	0xfd65	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.637274981 CEST	1.1.1.1	192.168.2.4	0xfd65	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.637615919 CEST	1.1.1.1	192.168.2.4	0xd3c6	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.637615919 CEST	1.1.1.1	192.168.2.4	0xd3c6	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.637871027 CEST	1.1.1.1	192.168.2.4	0x60e3	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.637871027 CEST	1.1.1.1	192.168.2.4	0x60e3	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.638941050 CEST	1.1.1.1	192.168.2.4	0x5dda	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:09.649919987 CEST	1.1.1.1	192.168.2.4	0x4269	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.649919987 CEST	1.1.1.1	192.168.2.4	0x4269	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.649970055 CEST	1.1.1.1	192.168.2.4	0x9411	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.650691986 CEST	1.1.1.1	192.168.2.4	0x7e4c	No error (0)	groundcontrol.rendering.sharethrough.com		13.32.27.87	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.650691986 CEST	1.1.1.1	192.168.2.4	0x7e4c	No error (0)	groundcontrol.rendering.sharethrough.com		13.32.27.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.650691986 CEST	1.1.1.1	192.168.2.4	0x7e4c	No error (0)	groundcontrol.rendering.sharethrough.com		13.32.27.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.650691986 CEST	1.1.1.1	192.168.2.4	0x7e4c	No error (0)	groundcontrol.rendering.sharethrough.com		13.32.27.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.784162998 CEST	1.1.1.1	192.168.2.4	0x5cf7	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.784162998 CEST	1.1.1.1	192.168.2.4	0x5cf7	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.784162998 CEST	1.1.1.1	192.168.2.4	0x5cf7	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.784418106 CEST	1.1.1.1	192.168.2.4	0xe474	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.784418106 CEST	1.1.1.1	192.168.2.4	0xe474	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.912703991 CEST	1.1.1.1	192.168.2.4	0xaf33	No error (0)	hde.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.912703991 CEST	1.1.1.1	192.168.2.4	0xaf33	No error (0)	hde.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.912734032 CEST	1.1.1.1	192.168.2.4	0xf80	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.912734032 CEST	1.1.1.1	192.168.2.4	0xf80	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.913381100 CEST	1.1.1.1	192.168.2.4	0xc349	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.952063084 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.959328890 CEST	1.1.1.1	192.168.2.4	0x628	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:09.959949970 CEST	1.1.1.1	192.168.2.4	0xcc98	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.959949970 CEST	1.1.1.1	192.168.2.4	0xcc98	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:09.981709957 CEST	1.1.1.1	192.168.2.4	0x69e2	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:09.983021975 CEST	1.1.1.1	192.168.2.4	0x4914	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.021049023 CEST	1.1.1.1	192.168.2.4	0xeedf	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.021049023 CEST	1.1.1.1	192.168.2.4	0xeedf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.77.193.201	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.021049023 CEST	1.1.1.1	192.168.2.4	0xeedf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		63.34.243.231	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.021049023 CEST	1.1.1.1	192.168.2.4	0xeedf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.30.164.17	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.021049023 CEST	1.1.1.1	192.168.2.4	0xeedf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.194.192.48	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.021203041 CEST	1.1.1.1	192.168.2.4	0xe24c	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.022744894 CEST	1.1.1.1	192.168.2.4	0xf8d5	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.023571968 CEST	1.1.1.1	192.168.2.4	0x919a	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.023571968 CEST	1.1.1.1	192.168.2.4	0x919a	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.023571968 CEST	1.1.1.1	192.168.2.4	0x919a	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.023571968 CEST	1.1.1.1	192.168.2.4	0x919a	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.024291039 CEST	1.1.1.1	192.168.2.4	0xd7a4	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.024306059 CEST	1.1.1.1	192.168.2.4	0x7fff	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.026016951 CEST	1.1.1.1	192.168.2.4	0xed2d	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.028800011 CEST	1.1.1.1	192.168.2.4	0xd96f	No error (0)	rtb.adentifi.com		44.218.170.50	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.028800011 CEST	1.1.1.1	192.168.2.4	0xd96f	No error (0)	rtb.adentifi.com		3.233.49.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.028800011 CEST	1.1.1.1	192.168.2.4	0xd96f	No error (0)	rtb.adentifi.com		52.54.66.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.028800011 CEST	1.1.1.1	192.168.2.4	0xd96f	No error (0)	rtb.adentifi.com		3.208.227.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.028800011 CEST	1.1.1.1	192.168.2.4	0xd96f	No error (0)	rtb.adentifi.com		54.165.51.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.028800011 CEST	1.1.1.1	192.168.2.4	0xd96f	No error (0)	rtb.adentifi.com		3.215.91.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.055505991 CEST	1.1.1.1	192.168.2.4	0xf90e	No error (0)	contextual.media.net		88.221.168.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.091449976 CEST	1.1.1.1	192.168.2.4	0xcc80	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.091449976 CEST	1.1.1.1	192.168.2.4	0xcc80	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.091449976 CEST	1.1.1.1	192.168.2.4	0xcc80	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.092084885 CEST	1.1.1.1	192.168.2.4	0x1d1a	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.092084885 CEST	1.1.1.1	192.168.2.4	0x1d1a	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-risecode.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-us-west-2.omnitagjs.com		35.161.66.232	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-us-west-2.omnitagjs.com		44.226.251.54	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-us-west-2.omnitagjs.com		34.209.19.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-us-west-2.omnitagjs.com		34.213.171.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-us-west-2.omnitagjs.com		35.80.240.161	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-us-west-2.omnitagjs.com		54.189.137.96	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-us-west-2.omnitagjs.com		52.43.42.156	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109950066 CEST	1.1.1.1	192.168.2.4	0x5d80	No error (0)	visitor-us-west-2.omnitagjs.com		44.226.116.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.109960079 CEST	1.1.1.1	192.168.2.4	0x5ff2	No error (0)	visitor-risecode.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.196330070 CEST	1.1.1.1	192.168.2.4	0x2b3e	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.196330070 CEST	1.1.1.1	192.168.2.4	0x2b3e	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.196330070 CEST	1.1.1.1	192.168.2.4	0x2b3e	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.196330070 CEST	1.1.1.1	192.168.2.4	0x2b3e	No error (0)	ads.servenobid.com		63.33.110.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.196330070 CEST	1.1.1.1	192.168.2.4	0x2b3e	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.196330070 CEST	1.1.1.1	192.168.2.4	0x2b3e	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.196330070 CEST	1.1.1.1	192.168.2.4	0x2b3e	No error (0)	ads.servenobid.com		54.220.49.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.196330070 CEST	1.1.1.1	192.168.2.4	0x2b3e	No error (0)	ads.servenobid.com		52.214.117.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.237685919 CEST	1.1.1.1	192.168.2.4	0x8136	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.238637924 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.280098915 CEST	1.1.1.1	192.168.2.4	0x1d0f	No error (0)	eexsync.com		80.77.87.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.282429934 CEST	1.1.1.1	192.168.2.4	0x95da	No error (0)	id.a-mx.com		79.127.227.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.282429934 CEST	1.1.1.1	192.168.2.4	0x95da	No error (0)	id.a-mx.com		79.127.216.47	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.316668987 CEST	1.1.1.1	192.168.2.4	0x9500	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.316668987 CEST	1.1.1.1	192.168.2.4	0x9500	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.318067074 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	sync.ipredictive.com		52.54.151.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.318067074 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	sync.ipredictive.com		54.157.169.38	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.318067074 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	sync.ipredictive.com		52.4.129.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.318067074 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	sync.ipredictive.com		52.22.94.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.318067074 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	sync.ipredictive.com		52.7.226.103	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.318067074 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	sync.ipredictive.com		52.70.245.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.318067074 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	sync.ipredictive.com		54.152.74.168	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.318067074 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	sync.ipredictive.com		54.152.163.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.320352077 CEST	1.1.1.1	192.168.2.4	0x82ba	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.320352077 CEST	1.1.1.1	192.168.2.4	0x82ba	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.320352077 CEST	1.1.1.1	192.168.2.4	0x82ba	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.320352077 CEST	1.1.1.1	192.168.2.4	0x82ba	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.320352077 CEST	1.1.1.1	192.168.2.4	0x82ba	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.433689117 CEST	1.1.1.1	192.168.2.4	0xea28	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.512651920 CEST	1.1.1.1	192.168.2.4	0x4b6e	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.512651920 CEST	1.1.1.1	192.168.2.4	0x4b6e	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.512651920 CEST	1.1.1.1	192.168.2.4	0x4b6e	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.528398037 CEST	1.1.1.1	192.168.2.4	0x3a49	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.528409958 CEST	1.1.1.1	192.168.2.4	0x61e9	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.759175062 CEST	1.1.1.1	192.168.2.4	0x5914	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.759838104 CEST	1.1.1.1	192.168.2.4	0x64ec	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.776659966 CEST	1.1.1.1	192.168.2.4	0x3028	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.776659966 CEST	1.1.1.1	192.168.2.4	0x3028	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.776659966 CEST	1.1.1.1	192.168.2.4	0x3028	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.776659966 CEST	1.1.1.1	192.168.2.4	0x3028	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.776659966 CEST	1.1.1.1	192.168.2.4	0x3028	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.777714968 CEST	1.1.1.1	192.168.2.4	0xbf14	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.783766031 CEST	1.1.1.1	192.168.2.4	0xa821	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.783766031 CEST	1.1.1.1	192.168.2.4	0xa821	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.783766031 CEST	1.1.1.1	192.168.2.4	0xa821	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.127	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.783766031 CEST	1.1.1.1	192.168.2.4	0xa821	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.783766031 CEST	1.1.1.1	192.168.2.4	0xa821	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:10.783776045 CEST	1.1.1.1	192.168.2.4	0x60ce	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.784179926 CEST	1.1.1.1	192.168.2.4	0xc695	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:10.785092115 CEST	1.1.1.1	192.168.2.4	0x8256	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.194.52.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.75.182.109	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		63.32.50.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		34.250.181.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.50.81.5	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.209.79.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		63.34.124.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112078905 CEST	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.49.117.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112709999 CEST	1.1.1.1	192.168.2.4	0xe245	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112709999 CEST	1.1.1.1	192.168.2.4	0xe245	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.112709999 CEST	1.1.1.1	192.168.2.4	0xe245	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.169904947 CEST	1.1.1.1	192.168.2.4	0x27bf	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.169904947 CEST	1.1.1.1	192.168.2.4	0x27bf	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.170301914 CEST	1.1.1.1	192.168.2.4	0xa9ae	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.198697090 CEST	1.1.1.1	192.168.2.4	0xd5ef	No error (0)	pixels.ad.gt	pixels.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.201548100 CEST	1.1.1.1	192.168.2.4	0xbc94	No error (0)	pixels.ad.gt	pixels.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.226649046 CEST	1.1.1.1	192.168.2.4	0xdc94	No error (0)	hbx.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.230886936 CEST	1.1.1.1	192.168.2.4	0xe0db	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.230886936 CEST	1.1.1.1	192.168.2.4	0xe0db	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.230886936 CEST	1.1.1.1	192.168.2.4	0xe0db	No error (0)	dorpat.geo.iponweb.net		35.214.199.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.230896950 CEST	1.1.1.1	192.168.2.4	0xdae0	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.230896950 CEST	1.1.1.1	192.168.2.4	0xdae0	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.343117952 CEST	1.1.1.1	192.168.2.4	0x12ab	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.343117952 CEST	1.1.1.1	192.168.2.4	0x12ab	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.345024109 CEST	1.1.1.1	192.168.2.4	0x9a18	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.346796989 CEST	1.1.1.1	192.168.2.4	0x3e41	No error (0)	dsp-cookie.adfarm1.adition.com		80.82.210.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.426810980 CEST	1.1.1.1	192.168.2.4	0xb47	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.428802967 CEST	1.1.1.1	192.168.2.4	0x2d42	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.456235886 CEST	1.1.1.1	192.168.2.4	0x6776	No error (0)	creative-assets.quantcount.com	creative-assets-prod.advertise.qcinternal.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.461426020 CEST	1.1.1.1	192.168.2.4	0x6b1c	No error (0)	creative-assets.quantcount.com	creative-assets-prod.advertise.qcinternal.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.461426020 CEST	1.1.1.1	192.168.2.4	0x6b1c	No error (0)	creative-assets-prod.advertise.qcinternal.io		13.32.27.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.461426020 CEST	1.1.1.1	192.168.2.4	0x6b1c	No error (0)	creative-assets-prod.advertise.qcinternal.io		13.32.27.16	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.461426020 CEST	1.1.1.1	192.168.2.4	0x6b1c	No error (0)	creative-assets-prod.advertise.qcinternal.io		13.32.27.85	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.461426020 CEST	1.1.1.1	192.168.2.4	0x6b1c	No error (0)	creative-assets-prod.advertise.qcinternal.io		13.32.27.55	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:11.487663984 CEST	1.1.1.1	192.168.2.4	0x5b18	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.488903046 CEST	1.1.1.1	192.168.2.4	0xb7e9	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:11.596131086 CEST	1.1.1.1	192.168.2.4	0x6f26	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.729881048 CEST	1.1.1.1	192.168.2.4	0xd55a	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.730396986 CEST	1.1.1.1	192.168.2.4	0x1731	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.736114979 CEST	1.1.1.1	192.168.2.4	0x2653	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.736114979 CEST	1.1.1.1	192.168.2.4	0x2653	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.736114979 CEST	1.1.1.1	192.168.2.4	0x2653	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.809597015 CEST	1.1.1.1	192.168.2.4	0x4b59	No error (0)	sync.srv.stackadapt.com		54.175.124.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.809597015 CEST	1.1.1.1	192.168.2.4	0x4b59	No error (0)	sync.srv.stackadapt.com		54.147.108.51	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.809597015 CEST	1.1.1.1	192.168.2.4	0x4b59	No error (0)	sync.srv.stackadapt.com		54.147.101.158	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.809597015 CEST	1.1.1.1	192.168.2.4	0x4b59	No error (0)	sync.srv.stackadapt.com		54.156.180.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.809597015 CEST	1.1.1.1	192.168.2.4	0x4b59	No error (0)	sync.srv.stackadapt.com		54.204.195.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.809597015 CEST	1.1.1.1	192.168.2.4	0x4b59	No error (0)	sync.srv.stackadapt.com		54.157.243.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.809597015 CEST	1.1.1.1	192.168.2.4	0x4b59	No error (0)	sync.srv.stackadapt.com		54.152.149.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.809597015 CEST	1.1.1.1	192.168.2.4	0x4b59	No error (0)	sync.srv.stackadapt.com		54.162.218.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.810669899 CEST	1.1.1.1	192.168.2.4	0xfe6d	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.810669899 CEST	1.1.1.1	192.168.2.4	0xfe6d	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.812200069 CEST	1.1.1.1	192.168.2.4	0xa7c6	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.815104008 CEST	1.1.1.1	192.168.2.4	0xbc98	No error (0)	match.prod.bidr.io		52.210.91.197	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.815104008 CEST	1.1.1.1	192.168.2.4	0xbc98	No error (0)	match.prod.bidr.io		52.210.237.114	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.815104008 CEST	1.1.1.1	192.168.2.4	0xbc98	No error (0)	match.prod.bidr.io		52.212.197.58	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.815104008 CEST	1.1.1.1	192.168.2.4	0xbc98	No error (0)	match.prod.bidr.io		34.243.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.815104008 CEST	1.1.1.1	192.168.2.4	0xbc98	No error (0)	match.prod.bidr.io		52.214.31.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.815104008 CEST	1.1.1.1	192.168.2.4	0xbc98	No error (0)	match.prod.bidr.io		52.214.158.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.815104008 CEST	1.1.1.1	192.168.2.4	0xbc98	No error (0)	match.prod.bidr.io		52.31.14.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.822150946 CEST	1.1.1.1	192.168.2.4	0xa6b4	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.822150946 CEST	1.1.1.1	192.168.2.4	0xa6b4	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.822258949 CEST	1.1.1.1	192.168.2.4	0x5259	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.822258949 CEST	1.1.1.1	192.168.2.4	0x5259	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.904339075 CEST	1.1.1.1	192.168.2.4	0xfc8c	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.905059099 CEST	1.1.1.1	192.168.2.4	0xda84	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.905059099 CEST	1.1.1.1	192.168.2.4	0xda84	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.916193008 CEST	1.1.1.1	192.168.2.4	0xdb84	No error (0)	equativ-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.916971922 CEST	1.1.1.1	192.168.2.4	0xde37	No error (0)	equativ-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.919333935 CEST	1.1.1.1	192.168.2.4	0x3ee3	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.920175076 CEST	1.1.1.1	192.168.2.4	0x7fff	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.920175076 CEST	1.1.1.1	192.168.2.4	0x7fff	No error (0)	1.cpm.ak-is2.net		103.67.200.72	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.922698021 CEST	1.1.1.1	192.168.2.4	0xf47d	No error (0)	thrtle.com		3.219.3.151	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.922698021 CEST	1.1.1.1	192.168.2.4	0xf47d	No error (0)	thrtle.com		52.54.23.13	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.922698021 CEST	1.1.1.1	192.168.2.4	0xf47d	No error (0)	thrtle.com		54.87.168.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.922698021 CEST	1.1.1.1	192.168.2.4	0xf47d	No error (0)	thrtle.com		3.224.75.188	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.922698021 CEST	1.1.1.1	192.168.2.4	0xf47d	No error (0)	thrtle.com		18.233.106.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.922698021 CEST	1.1.1.1	192.168.2.4	0xf47d	No error (0)	thrtle.com		54.144.154.156	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.922698021 CEST	1.1.1.1	192.168.2.4	0xf47d	No error (0)	thrtle.com		34.197.201.22	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.922698021 CEST	1.1.1.1	192.168.2.4	0xf47d	No error (0)	thrtle.com		54.161.158.139	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.999147892 CEST	1.1.1.1	192.168.2.4	0xfc0e	No error (0)	s2s.yieldlove-ad-serving.net	pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:12.999147892 CEST	1.1.1.1	192.168.2.4	0xfc0e	No error (0)	pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com		35.156.32.92	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.999147892 CEST	1.1.1.1	192.168.2.4	0xfc0e	No error (0)	pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com		18.195.125.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:12.999665022 CEST	1.1.1.1	192.168.2.4	0xcca3	No error (0)	s2s.yieldlove-ad-serving.net	pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.042215109 CEST	1.1.1.1	192.168.2.4	0xbecd	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.042994022 CEST	1.1.1.1	192.168.2.4	0x795c	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.066725016 CEST	1.1.1.1	192.168.2.4	0xb8b5	No error (0)	cs.yellowblue.io		52.213.77.211	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.066725016 CEST	1.1.1.1	192.168.2.4	0xb8b5	No error (0)	cs.yellowblue.io		54.171.218.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.066725016 CEST	1.1.1.1	192.168.2.4	0xb8b5	No error (0)	cs.yellowblue.io		63.35.83.185	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.066725016 CEST	1.1.1.1	192.168.2.4	0xb8b5	No error (0)	cs.yellowblue.io		52.17.148.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.066725016 CEST	1.1.1.1	192.168.2.4	0xb8b5	No error (0)	cs.yellowblue.io		52.212.137.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.066725016 CEST	1.1.1.1	192.168.2.4	0xb8b5	No error (0)	cs.yellowblue.io		54.77.102.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.175900936 CEST	1.1.1.1	192.168.2.4	0x2df	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.176527023 CEST	1.1.1.1	192.168.2.4	0x49e6	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.176527023 CEST	1.1.1.1	192.168.2.4	0x49e6	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.176527023 CEST	1.1.1.1	192.168.2.4	0x49e6	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.81	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.176527023 CEST	1.1.1.1	192.168.2.4	0x49e6	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.61	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.176527023 CEST	1.1.1.1	192.168.2.4	0x49e6	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.256438017 CEST	1.1.1.1	192.168.2.4	0xe882	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.256438017 CEST	1.1.1.1	192.168.2.4	0xe882	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.256503105 CEST	1.1.1.1	192.168.2.4	0x912f	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.256503105 CEST	1.1.1.1	192.168.2.4	0x912f	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.256503105 CEST	1.1.1.1	192.168.2.4	0x912f	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.346945047 CEST	1.1.1.1	192.168.2.4	0xb432	No error (0)	u.ipw.metadsp.co.uk	pool-eu.rome.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.346945047 CEST	1.1.1.1	192.168.2.4	0xb432	No error (0)	pool-eu.rome.iponweb.net	rome-stable-europe-west4.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.347242117 CEST	1.1.1.1	192.168.2.4	0x2373	No error (0)	u.ipw.metadsp.co.uk	pool-eu.rome.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.347242117 CEST	1.1.1.1	192.168.2.4	0x2373	No error (0)	pool-eu.rome.iponweb.net	rome-stable-europe-west4.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.347242117 CEST	1.1.1.1	192.168.2.4	0x2373	No error (0)	rome-stable-europe-west4.pumpkin.uverse.iponweb.net		35.214.132.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.350253105 CEST	1.1.1.1	192.168.2.4	0x57f3	No error (0)	rtb.gumgum.com		52.17.180.203	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.350253105 CEST	1.1.1.1	192.168.2.4	0x57f3	No error (0)	rtb.gumgum.com		52.212.210.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.350253105 CEST	1.1.1.1	192.168.2.4	0x57f3	No error (0)	rtb.gumgum.com		52.31.202.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.350253105 CEST	1.1.1.1	192.168.2.4	0x57f3	No error (0)	rtb.gumgum.com		54.217.9.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.350253105 CEST	1.1.1.1	192.168.2.4	0x57f3	No error (0)	rtb.gumgum.com		52.212.222.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.350253105 CEST	1.1.1.1	192.168.2.4	0x57f3	No error (0)	rtb.gumgum.com		52.31.253.151	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.350253105 CEST	1.1.1.1	192.168.2.4	0x57f3	No error (0)	rtb.gumgum.com		176.34.224.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.350253105 CEST	1.1.1.1	192.168.2.4	0x57f3	No error (0)	rtb.gumgum.com		54.76.105.178	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.529086113 CEST	1.1.1.1	192.168.2.4	0x2e3e	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.529086113 CEST	1.1.1.1	192.168.2.4	0x2e3e	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.30.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.530148029 CEST	1.1.1.1	192.168.2.4	0x3965	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.645998001 CEST	1.1.1.1	192.168.2.4	0xa986	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.647001028 CEST	1.1.1.1	192.168.2.4	0x365	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.647001028 CEST	1.1.1.1	192.168.2.4	0x365	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.685273886 CEST	1.1.1.1	192.168.2.4	0xb734	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.685273886 CEST	1.1.1.1	192.168.2.4	0xb734	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.685565948 CEST	1.1.1.1	192.168.2.4	0xfcd7	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.685565948 CEST	1.1.1.1	192.168.2.4	0xfcd7	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.685565948 CEST	1.1.1.1	192.168.2.4	0xfcd7	No error (0)	spug-lhrc.pubmnet.com		185.64.190.81	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.184.204	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.193.25	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.245.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.170.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.211.103	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.255.241	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.156.181	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.156.26	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.223.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.146.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.247.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692080021 CEST	1.1.1.1	192.168.2.4	0x338c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.219.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.692137957 CEST	1.1.1.1	192.168.2.4	0x6c1c	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.693689108 CEST	1.1.1.1	192.168.2.4	0x1df3	Name error (3)	hb.yahoo.net	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.694581985 CEST	1.1.1.1	192.168.2.4	0x8d33	Name error (3)	hb.yahoo.net	none	none	65	IN (0x0001)	false
Sep 30, 2024 15:17:13.714056969 CEST	1.1.1.1	192.168.2.4	0xac68	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.714056969 CEST	1.1.1.1	192.168.2.4	0xac68	No error (0)	image8-v2.pubmnet.com	imgsync-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.714056969 CEST	1.1.1.1	192.168.2.4	0xac68	No error (0)	imgsync-amsfpairbc.pubmnet.com		198.47.127.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.714426994 CEST	1.1.1.1	192.168.2.4	0xec25	Name error (3)	hb.yahoo.net	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.716299057 CEST	1.1.1.1	192.168.2.4	0x82c2	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.716299057 CEST	1.1.1.1	192.168.2.4	0x82c2	No error (0)	image8-v2.pubmnet.com	imgsync-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.722604990 CEST	1.1.1.1	192.168.2.4	0x55e4	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.722604990 CEST	1.1.1.1	192.168.2.4	0x55e4	No error (0)	pixel.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.722604990 CEST	1.1.1.1	192.168.2.4	0x55e4	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.723870993 CEST	1.1.1.1	192.168.2.4	0x8048	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.726891041 CEST	1.1.1.1	192.168.2.4	0x3940	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.804905891 CEST	1.1.1.1	192.168.2.4	0x59c5	No error (0)	ads.dxkulture.com		45.55.126.71	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.845518112 CEST	1.1.1.1	192.168.2.4	0xcc33	No error (0)	ssp-sync.criteo.com	ssp-sync.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.845518112 CEST	1.1.1.1	192.168.2.4	0xcc33	No error (0)	ssp-sync.nl3.vip.prod.criteo.com		178.250.1.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.846612930 CEST	1.1.1.1	192.168.2.4	0x71d3	No error (0)	ssp-sync.criteo.com	ssp-sync.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.997628927 CEST	1.1.1.1	192.168.2.4	0xf12a	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.997945070 CEST	1.1.1.1	192.168.2.4	0x6cd9	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:13.999464035 CEST	1.1.1.1	192.168.2.4	0xdfef	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:13.999464035 CEST	1.1.1.1	192.168.2.4	0xdfef	No error (0)	rtb.adgrx.com		52.215.155.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.000089884 CEST	1.1.1.1	192.168.2.4	0x32e6	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.95.171.141	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.95.171.139	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.94.242.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.94.242.226	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.94.161.158	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.94.161.190	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.95.171.140	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.94.242.204	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.95.172.216	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.95.171.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.001678944 CEST	1.1.1.1	192.168.2.4	0xd7bb	No error (0)	green.erne.co		141.94.240.143	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.018619061 CEST	1.1.1.1	192.168.2.4	0x1227	No error (0)	a.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.018619061 CEST	1.1.1.1	192.168.2.4	0x1227	No error (0)	a.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.018933058 CEST	1.1.1.1	192.168.2.4	0x1370	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:14.300040960 CEST	1.1.1.1	192.168.2.4	0xcb1	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.300040960 CEST	1.1.1.1	192.168.2.4	0xcb1	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.302352905 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.323565960 CEST	1.1.1.1	192.168.2.4	0xb56f	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:14.325704098 CEST	1.1.1.1	192.168.2.4	0x521d	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:14.461023092 CEST	1.1.1.1	192.168.2.4	0x9efc	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:14.461023092 CEST	1.1.1.1	192.168.2.4	0x9efc	No error (0)	image8-v2.pubmnet.com	imgsync-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:14.461522102 CEST	1.1.1.1	192.168.2.4	0x976	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:14.461522102 CEST	1.1.1.1	192.168.2.4	0x976	No error (0)	image8-v2.pubmnet.com	imagsync-lhrpairbc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:14.461522102 CEST	1.1.1.1	192.168.2.4	0x976	No error (0)	imagsync-lhrpairbc.pubmatic.com		185.64.191.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.473865986 CEST	1.1.1.1	192.168.2.4	0x751f	No error (0)	sync.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.473865986 CEST	1.1.1.1	192.168.2.4	0x751f	No error (0)	sync.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.473865986 CEST	1.1.1.1	192.168.2.4	0x751f	No error (0)	sync.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:14.473865986 CEST	1.1.1.1	192.168.2.4	0x751f	No error (0)	sync.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.572268963 CEST	1.1.1.1	192.168.2.4	0xa3be	No error (0)	sync.e-volution.ai		91.227.144.188	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.572268963 CEST	1.1.1.1	192.168.2.4	0xa3be	No error (0)	sync.e-volution.ai		91.227.144.189	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.717330933 CEST	1.1.1.1	192.168.2.4	0x1cc0	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:15.717330933 CEST	1.1.1.1	192.168.2.4	0x1cc0	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.717582941 CEST	1.1.1.1	192.168.2.4	0x5068	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:15.786062956 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	ids.ad.gt		44.242.111.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.786062956 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	ids.ad.gt		52.13.192.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.786062956 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	ids.ad.gt		18.246.206.124	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.786062956 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	ids.ad.gt		52.39.103.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.786062956 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	ids.ad.gt		52.40.251.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.786062956 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	ids.ad.gt		44.224.248.60	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.786062956 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	ids.ad.gt		35.161.165.219	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.786062956 CEST	1.1.1.1	192.168.2.4	0xebe5	No error (0)	ids.ad.gt		44.228.30.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.790882111 CEST	1.1.1.1	192.168.2.4	0xcea1	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.790882111 CEST	1.1.1.1	192.168.2.4	0xcea1	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.790882111 CEST	1.1.1.1	192.168.2.4	0xcea1	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.790882111 CEST	1.1.1.1	192.168.2.4	0xcea1	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	euw-ice.360yield.com		54.76.21.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	euw-ice.360yield.com		34.254.130.157	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	euw-ice.360yield.com		52.211.204.195	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	euw-ice.360yield.com		34.252.31.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	euw-ice.360yield.com		52.30.160.207	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	euw-ice.360yield.com		52.19.89.169	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	euw-ice.360yield.com		54.194.167.154	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821475983 CEST	1.1.1.1	192.168.2.4	0x555d	No error (0)	euw-ice.360yield.com		18.203.30.77	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.821732998 CEST	1.1.1.1	192.168.2.4	0x5d1d	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:15.841204882 CEST	1.1.1.1	192.168.2.4	0x7a4f	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.841204882 CEST	1.1.1.1	192.168.2.4	0x7a4f	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.857899904 CEST	1.1.1.1	192.168.2.4	0x3e77	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:15.857950926 CEST	1.1.1.1	192.168.2.4	0xf24b	No error (0)	s.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.857950926 CEST	1.1.1.1	192.168.2.4	0xf24b	No error (0)	s.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.878536940 CEST	1.1.1.1	192.168.2.4	0x5899	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:15.879683971 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:15.881567001 CEST	1.1.1.1	192.168.2.4	0x88d6	No error (0)	pixel-eu.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.881567001 CEST	1.1.1.1	192.168.2.4	0x88d6	No error (0)	pixel-eu.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.881567001 CEST	1.1.1.1	192.168.2.4	0x88d6	No error (0)	pixel-eu.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.881567001 CEST	1.1.1.1	192.168.2.4	0x88d6	No error (0)	pixel-eu.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.881567001 CEST	1.1.1.1	192.168.2.4	0x88d6	No error (0)	pixel-eu.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.881567001 CEST	1.1.1.1	192.168.2.4	0x88d6	No error (0)	pixel-eu.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.881567001 CEST	1.1.1.1	192.168.2.4	0x88d6	No error (0)	pixel-eu.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.930490971 CEST	1.1.1.1	192.168.2.4	0x913d	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:15.936522007 CEST	1.1.1.1	192.168.2.4	0x60dc	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:15.936522007 CEST	1.1.1.1	192.168.2.4	0x60dc	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.111350060 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	us.shb-sync.com		8.2.110.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	nld-prebid.a-mx.net		163.5.194.36	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	nld-prebid.a-mx.net		163.5.194.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	nld-prebid.a-mx.net		163.5.194.37	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	nld-prebid.a-mx.net		163.5.194.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	nld-prebid.a-mx.net		163.5.194.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	nld-prebid.a-mx.net		163.5.194.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	nld-prebid.a-mx.net		163.5.194.31	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.603889942 CEST	1.1.1.1	192.168.2.4	0x4d8f	No error (0)	nld-prebid.a-mx.net		163.5.194.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.604420900 CEST	1.1.1.1	192.168.2.4	0x14b5	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:16.799494028 CEST	1.1.1.1	192.168.2.4	0x1c17	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:16.799494028 CEST	1.1.1.1	192.168.2.4	0x1c17	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.799494028 CEST	1.1.1.1	192.168.2.4	0x1c17	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.799494028 CEST	1.1.1.1	192.168.2.4	0x1c17	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.799494028 CEST	1.1.1.1	192.168.2.4	0x1c17	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.799529076 CEST	1.1.1.1	192.168.2.4	0xc01a	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:16.803886890 CEST	1.1.1.1	192.168.2.4	0xd411	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:16.805339098 CEST	1.1.1.1	192.168.2.4	0x1b85	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:16.905076027 CEST	1.1.1.1	192.168.2.4	0xa3f2	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.906055927 CEST	1.1.1.1	192.168.2.4	0x971e	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:16.906055927 CEST	1.1.1.1	192.168.2.4	0x971e	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.906055927 CEST	1.1.1.1	192.168.2.4	0x971e	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.906055927 CEST	1.1.1.1	192.168.2.4	0x971e	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.907033920 CEST	1.1.1.1	192.168.2.4	0xcdcc	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:16.958053112 CEST	1.1.1.1	192.168.2.4	0x8f1d	No error (0)	cs.krushmedia.com		8.2.110.134	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:16.968503952 CEST	1.1.1.1	192.168.2.4	0x9997	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.002005100 CEST	1.1.1.1	192.168.2.4	0x19c7	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:17.002005100 CEST	1.1.1.1	192.168.2.4	0x19c7	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:17.002005100 CEST	1.1.1.1	192.168.2.4	0x19c7	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:17.002005100 CEST	1.1.1.1	192.168.2.4	0x19c7	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.002005100 CEST	1.1.1.1	192.168.2.4	0x19c7	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.002893925 CEST	1.1.1.1	192.168.2.4	0xb204	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:17.002893925 CEST	1.1.1.1	192.168.2.4	0xb204	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:17.002893925 CEST	1.1.1.1	192.168.2.4	0xb204	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:17.491605043 CEST	1.1.1.1	192.168.2.4	0x54ad	No error (0)	sync.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.491605043 CEST	1.1.1.1	192.168.2.4	0x54ad	No error (0)	sync.crwdcntrl.net		52.19.187.77	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.491605043 CEST	1.1.1.1	192.168.2.4	0x54ad	No error (0)	sync.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.491605043 CEST	1.1.1.1	192.168.2.4	0x54ad	No error (0)	sync.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.491605043 CEST	1.1.1.1	192.168.2.4	0x54ad	No error (0)	sync.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.491605043 CEST	1.1.1.1	192.168.2.4	0x54ad	No error (0)	sync.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.491605043 CEST	1.1.1.1	192.168.2.4	0x54ad	No error (0)	sync.crwdcntrl.net		54.171.123.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.491605043 CEST	1.1.1.1	192.168.2.4	0x54ad	No error (0)	sync.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.524976969 CEST	1.1.1.1	192.168.2.4	0x7cf0	No error (0)	sonata-notifications.taptapnetworks.com		18.193.1.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.524976969 CEST	1.1.1.1	192.168.2.4	0x7cf0	No error (0)	sonata-notifications.taptapnetworks.com		3.127.201.16	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:17.749474049 CEST	1.1.1.1	192.168.2.4	0xcbcf	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:17.751454115 CEST	1.1.1.1	192.168.2.4	0xf55a	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:17.842291117 CEST	1.1.1.1	192.168.2.4	0x37af	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.081326008 CEST	1.1.1.1	192.168.2.4	0x2ed6	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.082076073 CEST	1.1.1.1	192.168.2.4	0xc093	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.082631111 CEST	1.1.1.1	192.168.2.4	0xc389	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.082631111 CEST	1.1.1.1	192.168.2.4	0xc389	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.083551884 CEST	1.1.1.1	192.168.2.4	0x67cb	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.089215994 CEST	1.1.1.1	192.168.2.4	0x3227	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.090882063 CEST	1.1.1.1	192.168.2.4	0xee93	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.090882063 CEST	1.1.1.1	192.168.2.4	0xee93	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.090882063 CEST	1.1.1.1	192.168.2.4	0xee93	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.091218948 CEST	1.1.1.1	192.168.2.4	0xca1e	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.091218948 CEST	1.1.1.1	192.168.2.4	0xca1e	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.092447996 CEST	1.1.1.1	192.168.2.4	0x8368	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.093107939 CEST	1.1.1.1	192.168.2.4	0x585b	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.233	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.098550081 CEST	1.1.1.1	192.168.2.4	0x8c03	No error (0)	s.amazon-adsystem.com		98.82.158.241	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.101629019 CEST	1.1.1.1	192.168.2.4	0x856	No error (0)	static.smilewanted.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:18.102282047 CEST	1.1.1.1	192.168.2.4	0x92c2	No error (0)	static.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.102282047 CEST	1.1.1.1	192.168.2.4	0x92c2	No error (0)	static.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.102282047 CEST	1.1.1.1	192.168.2.4	0x92c2	No error (0)	static.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.133162022 CEST	1.1.1.1	192.168.2.4	0xd920	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:18.134049892 CEST	1.1.1.1	192.168.2.4	0x2e5e	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.134049892 CEST	1.1.1.1	192.168.2.4	0x2e5e	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.134049892 CEST	1.1.1.1	192.168.2.4	0x2e5e	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.154567003 CEST	1.1.1.1	192.168.2.4	0xd033	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.154567003 CEST	1.1.1.1	192.168.2.4	0xd033	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.154567003 CEST	1.1.1.1	192.168.2.4	0xd033	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.158874035 CEST	1.1.1.1	192.168.2.4	0xa450	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.159106970 CEST	1.1.1.1	192.168.2.4	0xc8f2	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.161659002 CEST	1.1.1.1	192.168.2.4	0xd653	No error (0)	sync.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.161659002 CEST	1.1.1.1	192.168.2.4	0xd653	No error (0)	sync.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.161659002 CEST	1.1.1.1	192.168.2.4	0xd653	No error (0)	sync.crwdcntrl.net		54.171.123.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.161659002 CEST	1.1.1.1	192.168.2.4	0xd653	No error (0)	sync.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.161659002 CEST	1.1.1.1	192.168.2.4	0xd653	No error (0)	sync.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.161659002 CEST	1.1.1.1	192.168.2.4	0xd653	No error (0)	sync.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.161659002 CEST	1.1.1.1	192.168.2.4	0xd653	No error (0)	sync.crwdcntrl.net		52.19.187.77	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.161659002 CEST	1.1.1.1	192.168.2.4	0xd653	No error (0)	sync.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.163146019 CEST	1.1.1.1	192.168.2.4	0xf25c	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:18.163222075 CEST	1.1.1.1	192.168.2.4	0x74f4	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.163222075 CEST	1.1.1.1	192.168.2.4	0x74f4	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.165812969 CEST	1.1.1.1	192.168.2.4	0x1295	No error (0)	cm.g.doubleclick.net		172.217.23.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.179610014 CEST	1.1.1.1	192.168.2.4	0x2b15	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.179610014 CEST	1.1.1.1	192.168.2.4	0x2b15	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.179610014 CEST	1.1.1.1	192.168.2.4	0x2b15	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.179860115 CEST	1.1.1.1	192.168.2.4	0x324a	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.185967922 CEST	1.1.1.1	192.168.2.4	0xc7b7	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.185967922 CEST	1.1.1.1	192.168.2.4	0xc7b7	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.187179089 CEST	1.1.1.1	192.168.2.4	0x8f4d	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:18.187720060 CEST	1.1.1.1	192.168.2.4	0xdfc	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:18.188421965 CEST	1.1.1.1	192.168.2.4	0x9ee8	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.188421965 CEST	1.1.1.1	192.168.2.4	0x9ee8	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.152.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.201.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.147.230	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.26.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.193449974 CEST	1.1.1.1	192.168.2.4	0x7042	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.194569111 CEST	1.1.1.1	192.168.2.4	0xa8e7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.194569111 CEST	1.1.1.1	192.168.2.4	0xa8e7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.194569111 CEST	1.1.1.1	192.168.2.4	0xa8e7	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.194859028 CEST	1.1.1.1	192.168.2.4	0xd9b4	No error (0)	contextual.media.net		88.221.168.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.199908972 CEST	1.1.1.1	192.168.2.4	0x17b6	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.199908972 CEST	1.1.1.1	192.168.2.4	0x17b6	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.199908972 CEST	1.1.1.1	192.168.2.4	0x17b6	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.199908972 CEST	1.1.1.1	192.168.2.4	0x17b6	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.199908972 CEST	1.1.1.1	192.168.2.4	0x17b6	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.212641954 CEST	1.1.1.1	192.168.2.4	0x1a2a	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.213255882 CEST	1.1.1.1	192.168.2.4	0xab9	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.215452909 CEST	1.1.1.1	192.168.2.4	0xfe40	No error (0)	groundcontrol.rendering.sharethrough.com		13.32.27.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.215452909 CEST	1.1.1.1	192.168.2.4	0xfe40	No error (0)	groundcontrol.rendering.sharethrough.com		13.32.27.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.215452909 CEST	1.1.1.1	192.168.2.4	0xfe40	No error (0)	groundcontrol.rendering.sharethrough.com		13.32.27.87	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.215452909 CEST	1.1.1.1	192.168.2.4	0xfe40	No error (0)	groundcontrol.rendering.sharethrough.com		13.32.27.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.216979980 CEST	1.1.1.1	192.168.2.4	0x4b63	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.216979980 CEST	1.1.1.1	192.168.2.4	0x4b63	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.217602015 CEST	1.1.1.1	192.168.2.4	0x5f70	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.217602015 CEST	1.1.1.1	192.168.2.4	0x5f70	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.217602015 CEST	1.1.1.1	192.168.2.4	0x5f70	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.231102943 CEST	1.1.1.1	192.168.2.4	0x1a13	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.232549906 CEST	1.1.1.1	192.168.2.4	0x8e4e	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.232549906 CEST	1.1.1.1	192.168.2.4	0x8e4e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.212.244.58	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.232549906 CEST	1.1.1.1	192.168.2.4	0x8e4e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.75.24.168	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.232549906 CEST	1.1.1.1	192.168.2.4	0x8e4e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.211.133.254	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.232613087 CEST	1.1.1.1	192.168.2.4	0x38a3	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.234749079 CEST	1.1.1.1	192.168.2.4	0xaf7b	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.265202045 CEST	1.1.1.1	192.168.2.4	0x337e	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.266473055 CEST	1.1.1.1	192.168.2.4	0x2a33	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.266473055 CEST	1.1.1.1	192.168.2.4	0x2a33	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.266473055 CEST	1.1.1.1	192.168.2.4	0x2a33	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.266473055 CEST	1.1.1.1	192.168.2.4	0x2a33	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.266473055 CEST	1.1.1.1	192.168.2.4	0x2a33	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.127	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.268630028 CEST	1.1.1.1	192.168.2.4	0x6b60	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.292629004 CEST	1.1.1.1	192.168.2.4	0x906a	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.293245077 CEST	1.1.1.1	192.168.2.4	0xf555	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.338745117 CEST	1.1.1.1	192.168.2.4	0x6370	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.339560032 CEST	1.1.1.1	192.168.2.4	0xf4da	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.352655888 CEST	1.1.1.1	192.168.2.4	0x1c4f	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.352655888 CEST	1.1.1.1	192.168.2.4	0x1c4f	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.352655888 CEST	1.1.1.1	192.168.2.4	0x1c4f	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354518890 CEST	1.1.1.1	192.168.2.4	0x19fa	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354518890 CEST	1.1.1.1	192.168.2.4	0x19fa	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.194.48.199	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.96.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		3.248.166.48	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.248.75.162	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.51.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.132.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.228.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.354528904 CEST	1.1.1.1	192.168.2.4	0x6a97	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.21.147	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.468941927 CEST	1.1.1.1	192.168.2.4	0xba5	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.468941927 CEST	1.1.1.1	192.168.2.4	0xba5	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.468941927 CEST	1.1.1.1	192.168.2.4	0xba5	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.469559908 CEST	1.1.1.1	192.168.2.4	0x92e1	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.469559908 CEST	1.1.1.1	192.168.2.4	0x92e1	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.471451998 CEST	1.1.1.1	192.168.2.4	0x1133	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.471451998 CEST	1.1.1.1	192.168.2.4	0x1133	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.471920013 CEST	1.1.1.1	192.168.2.4	0x439	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.476077080 CEST	1.1.1.1	192.168.2.4	0x7e3b	No error (0)	creative-assets.quantcount.com	creative-assets-prod.advertise.qcinternal.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.477855921 CEST	1.1.1.1	192.168.2.4	0x1d48	No error (0)	creative-assets.quantcount.com	creative-assets-prod.advertise.qcinternal.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.477855921 CEST	1.1.1.1	192.168.2.4	0x1d48	No error (0)	creative-assets-prod.advertise.qcinternal.io		13.32.27.16	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.477855921 CEST	1.1.1.1	192.168.2.4	0x1d48	No error (0)	creative-assets-prod.advertise.qcinternal.io		13.32.27.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.477855921 CEST	1.1.1.1	192.168.2.4	0x1d48	No error (0)	creative-assets-prod.advertise.qcinternal.io		13.32.27.55	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.477855921 CEST	1.1.1.1	192.168.2.4	0x1d48	No error (0)	creative-assets-prod.advertise.qcinternal.io		13.32.27.85	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.496093988 CEST	1.1.1.1	192.168.2.4	0x93f3	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.496093988 CEST	1.1.1.1	192.168.2.4	0x93f3	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.497772932 CEST	1.1.1.1	192.168.2.4	0xcbbd	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.497772932 CEST	1.1.1.1	192.168.2.4	0xcbbd	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.499254942 CEST	1.1.1.1	192.168.2.4	0x31a6	No error (0)	cs-server-s2s.yellowblue.io		54.84.3.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.499254942 CEST	1.1.1.1	192.168.2.4	0x31a6	No error (0)	cs-server-s2s.yellowblue.io		34.227.62.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.499254942 CEST	1.1.1.1	192.168.2.4	0x31a6	No error (0)	cs-server-s2s.yellowblue.io		52.1.110.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.499254942 CEST	1.1.1.1	192.168.2.4	0x31a6	No error (0)	cs-server-s2s.yellowblue.io		3.229.16.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.499254942 CEST	1.1.1.1	192.168.2.4	0x31a6	No error (0)	cs-server-s2s.yellowblue.io		107.22.244.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.499254942 CEST	1.1.1.1	192.168.2.4	0x31a6	No error (0)	cs-server-s2s.yellowblue.io		34.236.56.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.499254942 CEST	1.1.1.1	192.168.2.4	0x31a6	No error (0)	cs-server-s2s.yellowblue.io		54.90.57.91	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.499254942 CEST	1.1.1.1	192.168.2.4	0x31a6	No error (0)	cs-server-s2s.yellowblue.io		54.156.198.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.523252010 CEST	1.1.1.1	192.168.2.4	0x33f4	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.523252010 CEST	1.1.1.1	192.168.2.4	0x33f4	No error (0)	1.cpm.ak-is2.net		103.67.200.72	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.524837017 CEST	1.1.1.1	192.168.2.4	0xd39a	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.566637039 CEST	1.1.1.1	192.168.2.4	0xfc8a	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.581756115 CEST	1.1.1.1	192.168.2.4	0xab96	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.581756115 CEST	1.1.1.1	192.168.2.4	0xab96	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.581756115 CEST	1.1.1.1	192.168.2.4	0xab96	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.582880020 CEST	1.1.1.1	192.168.2.4	0x9648	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.582880020 CEST	1.1.1.1	192.168.2.4	0x9648	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.583859921 CEST	1.1.1.1	192.168.2.4	0x1abd	No error (0)	s2s.yieldlove-ad-serving.net	pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.583859921 CEST	1.1.1.1	192.168.2.4	0x1abd	No error (0)	pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com		18.195.125.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.583859921 CEST	1.1.1.1	192.168.2.4	0x1abd	No error (0)	pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com		35.156.32.92	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.585452080 CEST	1.1.1.1	192.168.2.4	0x1fb7	No error (0)	s2s.yieldlove-ad-serving.net	pbs-cluster-prod-public-1705277228.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.596493959 CEST	1.1.1.1	192.168.2.4	0x5014	No error (0)	cs.yellowblue.io		52.213.77.211	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.596493959 CEST	1.1.1.1	192.168.2.4	0x5014	No error (0)	cs.yellowblue.io		54.171.218.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.596493959 CEST	1.1.1.1	192.168.2.4	0x5014	No error (0)	cs.yellowblue.io		54.77.102.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.596493959 CEST	1.1.1.1	192.168.2.4	0x5014	No error (0)	cs.yellowblue.io		52.212.137.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.596493959 CEST	1.1.1.1	192.168.2.4	0x5014	No error (0)	cs.yellowblue.io		63.35.83.185	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.596493959 CEST	1.1.1.1	192.168.2.4	0x5014	No error (0)	cs.yellowblue.io		52.17.148.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.601303101 CEST	1.1.1.1	192.168.2.4	0xff5f	No error (0)	ads.dxkulture.com		45.55.126.71	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.602531910 CEST	1.1.1.1	192.168.2.4	0x791d	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.602531910 CEST	1.1.1.1	192.168.2.4	0x791d	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.602531910 CEST	1.1.1.1	192.168.2.4	0x791d	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.603338957 CEST	1.1.1.1	192.168.2.4	0x71ae	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.603338957 CEST	1.1.1.1	192.168.2.4	0x71ae	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.611243963 CEST	1.1.1.1	192.168.2.4	0x9b4d	No error (0)	rtb.gumgum.com		54.77.143.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.611243963 CEST	1.1.1.1	192.168.2.4	0x9b4d	No error (0)	rtb.gumgum.com		54.217.9.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.611243963 CEST	1.1.1.1	192.168.2.4	0x9b4d	No error (0)	rtb.gumgum.com		46.137.58.190	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.611243963 CEST	1.1.1.1	192.168.2.4	0x9b4d	No error (0)	rtb.gumgum.com		52.212.222.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.611243963 CEST	1.1.1.1	192.168.2.4	0x9b4d	No error (0)	rtb.gumgum.com		52.212.210.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.611243963 CEST	1.1.1.1	192.168.2.4	0x9b4d	No error (0)	rtb.gumgum.com		52.17.180.203	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.611243963 CEST	1.1.1.1	192.168.2.4	0x9b4d	No error (0)	rtb.gumgum.com		54.155.161.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.611243963 CEST	1.1.1.1	192.168.2.4	0x9b4d	No error (0)	rtb.gumgum.com		52.31.202.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.614880085 CEST	1.1.1.1	192.168.2.4	0xbbbc	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.616801023 CEST	1.1.1.1	192.168.2.4	0x4d76	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.622015953 CEST	1.1.1.1	192.168.2.4	0x6b30	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.781999111 CEST	1.1.1.1	192.168.2.4	0x67ec	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.793653965 CEST	1.1.1.1	192.168.2.4	0xea03	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.932146072 CEST	1.1.1.1	192.168.2.4	0x318d	No error (0)	sync.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.932146072 CEST	1.1.1.1	192.168.2.4	0x318d	No error (0)	sync.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.932146072 CEST	1.1.1.1	192.168.2.4	0x318d	No error (0)	sync.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.932146072 CEST	1.1.1.1	192.168.2.4	0x318d	No error (0)	sync.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.946341991 CEST	1.1.1.1	192.168.2.4	0x3496	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.946341991 CEST	1.1.1.1	192.168.2.4	0x3496	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.946341991 CEST	1.1.1.1	192.168.2.4	0x3496	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.946341991 CEST	1.1.1.1	192.168.2.4	0x3496	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.946341991 CEST	1.1.1.1	192.168.2.4	0x3496	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:18.946922064 CEST	1.1.1.1	192.168.2.4	0x9a7b	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.971612930 CEST	1.1.1.1	192.168.2.4	0xc9dd	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:18.972019911 CEST	1.1.1.1	192.168.2.4	0x810e	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:19.683871031 CEST	1.1.1.1	192.168.2.4	0x7fd8	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:19.683871031 CEST	1.1.1.1	192.168.2.4	0x7fd8	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:19.683871031 CEST	1.1.1.1	192.168.2.4	0x7fd8	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:19.683871031 CEST	1.1.1.1	192.168.2.4	0x7fd8	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:19.683871031 CEST	1.1.1.1	192.168.2.4	0x7fd8	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:19.683871031 CEST	1.1.1.1	192.168.2.4	0x7fd8	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:19.684293985 CEST	1.1.1.1	192.168.2.4	0x352f	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:19.684293985 CEST	1.1.1.1	192.168.2.4	0x352f	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:19.840337992 CEST	1.1.1.1	192.168.2.4	0x8b8d	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:19.840337992 CEST	1.1.1.1	192.168.2.4	0x8b8d	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:19.841228008 CEST	1.1.1.1	192.168.2.4	0xb163	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:19.841228008 CEST	1.1.1.1	192.168.2.4	0xb163	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:20.344551086 CEST	1.1.1.1	192.168.2.4	0x603b	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:20.344588995 CEST	1.1.1.1	192.168.2.4	0x2e75	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	pixel.adsafeprotected.com	iepixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	iepixel.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.31.206.55	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.208.164.156	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.212.218.113	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.51.18.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		34.250.189.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.72.233.124	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		34.247.119.196	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.572952032 CEST	1.1.1.1	192.168.2.4	0xbf5c	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		34.246.113.16	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:20.574381113 CEST	1.1.1.1	192.168.2.4	0xeff6	No error (0)	pixel.adsafeprotected.com	iepixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:20.574381113 CEST	1.1.1.1	192.168.2.4	0xeff6	No error (0)	iepixel.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:21.021122932 CEST	1.1.1.1	192.168.2.4	0x47da	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:21.099184990 CEST	1.1.1.1	192.168.2.4	0x6977	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:21.100828886 CEST	1.1.1.1	192.168.2.4	0x25b3	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:21.588932991 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	ssum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:21.588932991 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	ssum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:21.589459896 CEST	1.1.1.1	192.168.2.4	0x9e5a	No error (0)	ssum.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:22.108279943 CEST	1.1.1.1	192.168.2.4	0xdc2b	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:22.108279943 CEST	1.1.1.1	192.168.2.4	0xdc2b	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:22.109671116 CEST	1.1.1.1	192.168.2.4	0xc625	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:22.118901014 CEST	1.1.1.1	192.168.2.4	0x1e39	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:22.118901014 CEST	1.1.1.1	192.168.2.4	0x1e39	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:22.118901014 CEST	1.1.1.1	192.168.2.4	0x1e39	No error (0)	tag.device9.com		52.50.91.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:22.118901014 CEST	1.1.1.1	192.168.2.4	0x1e39	No error (0)	tag.device9.com		54.171.182.154	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:22.118916035 CEST	1.1.1.1	192.168.2.4	0x3994	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:22.118916035 CEST	1.1.1.1	192.168.2.4	0x3994	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:23.033849955 CEST	1.1.1.1	192.168.2.4	0xe96	Name error (3)	_8443._https.eu-notify-rtb.quantserve.com	none	none	65	IN (0x0001)	false
Sep 30, 2024 15:17:23.034363031 CEST	1.1.1.1	192.168.2.4	0x8165	No error (0)	eu-notify-rtb.quantserve.com	edge.eu-central-1.rtb.quantserve.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:23.034363031 CEST	1.1.1.1	192.168.2.4	0x8165	No error (0)	edge.eu-central-1.rtb.quantserve.net		91.228.72.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:23.034363031 CEST	1.1.1.1	192.168.2.4	0x8165	No error (0)	edge.eu-central-1.rtb.quantserve.net		91.228.72.43	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:23.034363031 CEST	1.1.1.1	192.168.2.4	0x8165	No error (0)	edge.eu-central-1.rtb.quantserve.net		91.228.72.228	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:23.034363031 CEST	1.1.1.1	192.168.2.4	0x8165	No error (0)	edge.eu-central-1.rtb.quantserve.net		91.228.72.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:23.034363031 CEST	1.1.1.1	192.168.2.4	0x8165	No error (0)	edge.eu-central-1.rtb.quantserve.net		91.228.72.81	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:23.034363031 CEST	1.1.1.1	192.168.2.4	0x8165	No error (0)	edge.eu-central-1.rtb.quantserve.net		91.228.72.36	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:26.001502991 CEST	1.1.1.1	192.168.2.4	0x4efe	No error (0)	www.multitran.ru		65.109.102.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:27.066402912 CEST	1.1.1.1	192.168.2.4	0x2a09	No error (0)	www.multitran.com		65.109.102.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:28.312870026 CEST	1.1.1.1	192.168.2.4	0xefd4	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:28.313416958 CEST	1.1.1.1	192.168.2.4	0xcad7	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:28.343318939 CEST	1.1.1.1	192.168.2.4	0x1159	No error (0)	play.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:29.368083954 CEST	1.1.1.1	192.168.2.4	0xc846	No error (0)	cdn.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:29.368083954 CEST	1.1.1.1	192.168.2.4	0xc846	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:29.368083954 CEST	1.1.1.1	192.168.2.4	0xc846	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:29.368364096 CEST	1.1.1.1	192.168.2.4	0xed5f	No error (0)	delivery.adrecover.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:29.368364096 CEST	1.1.1.1	192.168.2.4	0xed5f	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:29.368364096 CEST	1.1.1.1	192.168.2.4	0xed5f	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:29.368923903 CEST	1.1.1.1	192.168.2.4	0x1a5a	No error (0)	delivery.adrecover.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:29.368923903 CEST	1.1.1.1	192.168.2.4	0x1a5a	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:29.369081974 CEST	1.1.1.1	192.168.2.4	0x2ec1	No error (0)	cdn.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:29.369081974 CEST	1.1.1.1	192.168.2.4	0x2ec1	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:30.287914991 CEST	1.1.1.1	192.168.2.4	0xcf9d	No error (0)	googleads.g.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:30.288404942 CEST	1.1.1.1	192.168.2.4	0x790	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:17:30.549062014 CEST	1.1.1.1	192.168.2.4	0xbe94	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:30.549062014 CEST	1.1.1.1	192.168.2.4	0xbe94	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:30.549062014 CEST	1.1.1.1	192.168.2.4	0xbe94	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:30.549062014 CEST	1.1.1.1	192.168.2.4	0xbe94	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:31.968091965 CEST	1.1.1.1	192.168.2.4	0x5eb5	No error (0)	securepubads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:31.968810081 CEST	1.1.1.1	192.168.2.4	0xd23	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:17:31.970112085 CEST	1.1.1.1	192.168.2.4	0x7e5c	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:31.970112085 CEST	1.1.1.1	192.168.2.4	0x7e5c	No error (0)	d1ykf07e75w7ss.cloudfront.net		13.224.186.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:31.970268965 CEST	1.1.1.1	192.168.2.4	0xb3f6	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:31.971299887 CEST	1.1.1.1	192.168.2.4	0x505c	No error (0)	e3.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:31.971299887 CEST	1.1.1.1	192.168.2.4	0x505c	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:31.972218037 CEST	1.1.1.1	192.168.2.4	0xa72c	No error (0)	e3.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:31.972218037 CEST	1.1.1.1	192.168.2.4	0xa72c	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:31.972218037 CEST	1.1.1.1	192.168.2.4	0xa72c	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:31.995793104 CEST	1.1.1.1	192.168.2.4	0xe546	Name error (3)	hb.yahoo.net	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:32.070935965 CEST	1.1.1.1	192.168.2.4	0x7ade	No error (0)	keymap.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:32.070935965 CEST	1.1.1.1	192.168.2.4	0x7ade	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:32.085979939 CEST	1.1.1.1	192.168.2.4	0x9135	No error (0)	keymap.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:32.085979939 CEST	1.1.1.1	192.168.2.4	0x9135	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:32.085979939 CEST	1.1.1.1	192.168.2.4	0x9135	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:32.090754986 CEST	1.1.1.1	192.168.2.4	0x9f15	No error (0)	googleads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:32.090987921 CEST	1.1.1.1	192.168.2.4	0x38e3	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:17:33.363318920 CEST	1.1.1.1	192.168.2.4	0x2a2a	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:33.363318920 CEST	1.1.1.1	192.168.2.4	0x2a2a	No error (0)	www3.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:33.364223957 CEST	1.1.1.1	192.168.2.4	0xd24c	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:34.424139977 CEST	1.1.1.1	192.168.2.4	0xa372	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:34.424139977 CEST	1.1.1.1	192.168.2.4	0xa372	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:34.424197912 CEST	1.1.1.1	192.168.2.4	0x410b	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:34.424197912 CEST	1.1.1.1	192.168.2.4	0x410b	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:34.424197912 CEST	1.1.1.1	192.168.2.4	0x410b	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.424197912 CEST	1.1.1.1	192.168.2.4	0x410b	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.424197912 CEST	1.1.1.1	192.168.2.4	0x410b	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.424197912 CEST	1.1.1.1	192.168.2.4	0x410b	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.464912891 CEST	1.1.1.1	192.168.2.4	0x59d4	No error (0)	config.aps.amazon-adsystem.com		18.245.31.92	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.464912891 CEST	1.1.1.1	192.168.2.4	0x59d4	No error (0)	config.aps.amazon-adsystem.com		18.245.31.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.464912891 CEST	1.1.1.1	192.168.2.4	0x59d4	No error (0)	config.aps.amazon-adsystem.com		18.245.31.123	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.464912891 CEST	1.1.1.1	192.168.2.4	0x59d4	No error (0)	config.aps.amazon-adsystem.com		18.245.31.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992150068 CEST	1.1.1.1	192.168.2.4	0x53c1	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992681980 CEST	1.1.1.1	192.168.2.4	0x738b	No error (0)	tags.crwdcntrl.net		65.9.66.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992681980 CEST	1.1.1.1	192.168.2.4	0x738b	No error (0)	tags.crwdcntrl.net		65.9.66.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992681980 CEST	1.1.1.1	192.168.2.4	0x738b	No error (0)	tags.crwdcntrl.net		65.9.66.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992681980 CEST	1.1.1.1	192.168.2.4	0x738b	No error (0)	tags.crwdcntrl.net		65.9.66.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992691994 CEST	1.1.1.1	192.168.2.4	0x1f	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992728949 CEST	1.1.1.1	192.168.2.4	0x3aa	No error (0)	cdn.hadronid.net		104.22.53.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992728949 CEST	1.1.1.1	192.168.2.4	0x3aa	No error (0)	cdn.hadronid.net		172.67.36.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.992728949 CEST	1.1.1.1	192.168.2.4	0x3aa	No error (0)	cdn.hadronid.net		104.22.52.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:34.993201971 CEST	1.1.1.1	192.168.2.4	0xbab9	No error (0)	cdn.hadronid.net			65	IN (0x0001)	false
Sep 30, 2024 15:17:35.532041073 CEST	1.1.1.1	192.168.2.4	0x286c	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:35.532041073 CEST	1.1.1.1	192.168.2.4	0x286c	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:35.532041073 CEST	1.1.1.1	192.168.2.4	0x286c	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:35.532041073 CEST	1.1.1.1	192.168.2.4	0x286c	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.57	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:35.532041073 CEST	1.1.1.1	192.168.2.4	0x286c	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.15	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:35.533612013 CEST	1.1.1.1	192.168.2.4	0xdcb8	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:35.840526104 CEST	1.1.1.1	192.168.2.4	0xb67f	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:35.841432095 CEST	1.1.1.1	192.168.2.4	0x6c28	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:36.581371069 CEST	1.1.1.1	192.168.2.4	0x1de5	No error (0)	video.adpushup.com	1792641740.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:36.581371069 CEST	1.1.1.1	192.168.2.4	0x1de5	No error (0)	1792641740.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.581371069 CEST	1.1.1.1	192.168.2.4	0x1de5	No error (0)	1792641740.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.581371069 CEST	1.1.1.1	192.168.2.4	0x1de5	No error (0)	1792641740.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.581371069 CEST	1.1.1.1	192.168.2.4	0x1de5	No error (0)	1792641740.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.581371069 CEST	1.1.1.1	192.168.2.4	0x1de5	No error (0)	1792641740.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.581371069 CEST	1.1.1.1	192.168.2.4	0x1de5	No error (0)	1792641740.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.581371069 CEST	1.1.1.1	192.168.2.4	0x1de5	No error (0)	1792641740.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.583858967 CEST	1.1.1.1	192.168.2.4	0x216c	No error (0)	video.adpushup.com	1792641740.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.48	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.6	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.2	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.124	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.957029104 CEST	1.1.1.1	192.168.2.4	0xeee5	No error (0)	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		3.233.146.93	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:36.959254980 CEST	1.1.1.1	192.168.2.4	0x6a07	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:36.959254980 CEST	1.1.1.1	192.168.2.4	0x6a07	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:37.613744974 CEST	1.1.1.1	192.168.2.4	0x34f1	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:37.614737988 CEST	1.1.1.1	192.168.2.4	0x5dc6	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:37.734066010 CEST	1.1.1.1	192.168.2.4	0xe4c9	No error (0)	securepubads.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.734126091 CEST	1.1.1.1	192.168.2.4	0x385	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821332932 CEST	1.1.1.1	192.168.2.4	0xee97	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821621895 CEST	1.1.1.1	192.168.2.4	0x597c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:37.821621895 CEST	1.1.1.1	192.168.2.4	0x597c	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:38.483165026 CEST	1.1.1.1	192.168.2.4	0x339a	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:38.483165026 CEST	1.1.1.1	192.168.2.4	0x339a	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:38.483165026 CEST	1.1.1.1	192.168.2.4	0x339a	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:38.483165026 CEST	1.1.1.1	192.168.2.4	0x339a	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:38.483165026 CEST	1.1.1.1	192.168.2.4	0x339a	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:38.483185053 CEST	1.1.1.1	192.168.2.4	0x5cfe	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:38.488838911 CEST	1.1.1.1	192.168.2.4	0x72af	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:38.489765882 CEST	1.1.1.1	192.168.2.4	0xe955	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.404475927 CEST	1.1.1.1	192.168.2.4	0x9ece	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.404475927 CEST	1.1.1.1	192.168.2.4	0x9ece	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.404475927 CEST	1.1.1.1	192.168.2.4	0x9ece	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.404475927 CEST	1.1.1.1	192.168.2.4	0x9ece	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		13.35.57.188	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.404731035 CEST	1.1.1.1	192.168.2.4	0x3dc7	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.404731035 CEST	1.1.1.1	192.168.2.4	0x3dc7	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.404731035 CEST	1.1.1.1	192.168.2.4	0x3dc7	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.413476944 CEST	1.1.1.1	192.168.2.4	0x5fc4	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.415930033 CEST	1.1.1.1	192.168.2.4	0xeff5	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.429435968 CEST	1.1.1.1	192.168.2.4	0xdeec	No error (0)	api.id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.216.33.27	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.141.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.229.25.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.155.119.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.194.198.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.207.102	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.18.254.145	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447105885 CEST	1.1.1.1	192.168.2.4	0x4aca	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.74.242.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447756052 CEST	1.1.1.1	192.168.2.4	0xdde	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447756052 CEST	1.1.1.1	192.168.2.4	0xdde	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447756052 CEST	1.1.1.1	192.168.2.4	0xdde	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.447756052 CEST	1.1.1.1	192.168.2.4	0xdde	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.450026989 CEST	1.1.1.1	192.168.2.4	0x55e	No error (0)	pbjs.e-planning.net		193.3.178.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.457596064 CEST	1.1.1.1	192.168.2.4	0x76c3	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.457596064 CEST	1.1.1.1	192.168.2.4	0x76c3	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.457773924 CEST	1.1.1.1	192.168.2.4	0xcd7f	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:39.463839054 CEST	1.1.1.1	192.168.2.4	0x3725	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.463839054 CEST	1.1.1.1	192.168.2.4	0x3725	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.468774080 CEST	1.1.1.1	192.168.2.4	0xc53a	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.468774080 CEST	1.1.1.1	192.168.2.4	0xc53a	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.468774080 CEST	1.1.1.1	192.168.2.4	0xc53a	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.468774080 CEST	1.1.1.1	192.168.2.4	0xc53a	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.468774080 CEST	1.1.1.1	192.168.2.4	0xc53a	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.468774080 CEST	1.1.1.1	192.168.2.4	0xc53a	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.468774080 CEST	1.1.1.1	192.168.2.4	0xc53a	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.468774080 CEST	1.1.1.1	192.168.2.4	0xc53a	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.471653938 CEST	1.1.1.1	192.168.2.4	0xfe78	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.471653938 CEST	1.1.1.1	192.168.2.4	0xfe78	No error (0)	btlr-eu-central-1.sharethrough.com		18.159.212.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.471878052 CEST	1.1.1.1	192.168.2.4	0xc573	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.475647926 CEST	1.1.1.1	192.168.2.4	0x2b5b	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.475647926 CEST	1.1.1.1	192.168.2.4	0x2b5b	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.475647926 CEST	1.1.1.1	192.168.2.4	0x2b5b	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.475647926 CEST	1.1.1.1	192.168.2.4	0x2b5b	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.475647926 CEST	1.1.1.1	192.168.2.4	0x2b5b	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.475647926 CEST	1.1.1.1	192.168.2.4	0x2b5b	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.481462955 CEST	1.1.1.1	192.168.2.4	0x5bd4	No error (0)	ex.ingage.tech		172.64.146.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.481462955 CEST	1.1.1.1	192.168.2.4	0x5bd4	No error (0)	ex.ingage.tech		104.18.41.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.482311964 CEST	1.1.1.1	192.168.2.4	0xff63	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Sep 30, 2024 15:17:39.485727072 CEST	1.1.1.1	192.168.2.4	0xe547	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.485727072 CEST	1.1.1.1	192.168.2.4	0xe547	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.485727072 CEST	1.1.1.1	192.168.2.4	0xe547	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.485727072 CEST	1.1.1.1	192.168.2.4	0xe547	No error (0)	ads.servenobid.com		52.214.117.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.485727072 CEST	1.1.1.1	192.168.2.4	0xe547	No error (0)	ads.servenobid.com		54.220.49.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.485727072 CEST	1.1.1.1	192.168.2.4	0xe547	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.485727072 CEST	1.1.1.1	192.168.2.4	0xe547	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.485727072 CEST	1.1.1.1	192.168.2.4	0xe547	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.493441105 CEST	1.1.1.1	192.168.2.4	0xede7	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.494921923 CEST	1.1.1.1	192.168.2.4	0x8406	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.497009993 CEST	1.1.1.1	192.168.2.4	0x7c	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.497420073 CEST	1.1.1.1	192.168.2.4	0x9dfa	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.503796101 CEST	1.1.1.1	192.168.2.4	0x88f8	No error (0)	prebid.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.503796101 CEST	1.1.1.1	192.168.2.4	0x88f8	No error (0)	prebid.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.503796101 CEST	1.1.1.1	192.168.2.4	0x88f8	No error (0)	prebid.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.505929947 CEST	1.1.1.1	192.168.2.4	0x95d7	No error (0)	prebid.smilewanted.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:39.658586025 CEST	1.1.1.1	192.168.2.4	0xd553	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.658838034 CEST	1.1.1.1	192.168.2.4	0xfff4	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.658838034 CEST	1.1.1.1	192.168.2.4	0xfff4	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.658838034 CEST	1.1.1.1	192.168.2.4	0xfff4	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.658838034 CEST	1.1.1.1	192.168.2.4	0xfff4	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.658838034 CEST	1.1.1.1	192.168.2.4	0xfff4	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.665036917 CEST	1.1.1.1	192.168.2.4	0x9fa3	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.665036917 CEST	1.1.1.1	192.168.2.4	0x9fa3	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.665036917 CEST	1.1.1.1	192.168.2.4	0x9fa3	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.665036917 CEST	1.1.1.1	192.168.2.4	0x9fa3	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.665299892 CEST	1.1.1.1	192.168.2.4	0x5bac	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.672981024 CEST	1.1.1.1	192.168.2.4	0xd8ae	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.672981024 CEST	1.1.1.1	192.168.2.4	0xd8ae	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.672981024 CEST	1.1.1.1	192.168.2.4	0xd8ae	No error (0)	hbopenbid-ams.pubmnet.com		185.64.189.112	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:39.676384926 CEST	1.1.1.1	192.168.2.4	0x778c	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.676384926 CEST	1.1.1.1	192.168.2.4	0x778c	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:39.959686995 CEST	1.1.1.1	192.168.2.4	0xdcf8	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.730643034 CEST	1.1.1.1	192.168.2.4	0xde6a	No error (0)	aax-eu.amazon-adsystem.com		52.95.115.255	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.811316967 CEST	1.1.1.1	192.168.2.4	0xedbf	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:40.811448097 CEST	1.1.1.1	192.168.2.4	0xefe1	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:40.850338936 CEST	1.1.1.1	192.168.2.4	0xd15e	No error (0)	ids.ad.gt		44.228.30.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.850338936 CEST	1.1.1.1	192.168.2.4	0xd15e	No error (0)	ids.ad.gt		52.35.67.63	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.850338936 CEST	1.1.1.1	192.168.2.4	0xd15e	No error (0)	ids.ad.gt		52.24.72.232	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.850338936 CEST	1.1.1.1	192.168.2.4	0xd15e	No error (0)	ids.ad.gt		52.39.103.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.850338936 CEST	1.1.1.1	192.168.2.4	0xd15e	No error (0)	ids.ad.gt		52.40.251.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.850338936 CEST	1.1.1.1	192.168.2.4	0xd15e	No error (0)	ids.ad.gt		44.224.248.60	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.850338936 CEST	1.1.1.1	192.168.2.4	0xd15e	No error (0)	ids.ad.gt		44.242.111.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.850338936 CEST	1.1.1.1	192.168.2.4	0xd15e	No error (0)	ids.ad.gt		35.160.198.55	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.136.225	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.48.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.16.68.25	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.22.163	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.152.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.98.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.852581024 CEST	1.1.1.1	192.168.2.4	0xda97	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.211.243	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:40.853372097 CEST	1.1.1.1	192.168.2.4	0x5cd7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:40.853372097 CEST	1.1.1.1	192.168.2.4	0x5cd7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:40.853372097 CEST	1.1.1.1	192.168.2.4	0x5cd7	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:41.193427086 CEST	1.1.1.1	192.168.2.4	0x67c9	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.193427086 CEST	1.1.1.1	192.168.2.4	0x67c9	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.193686962 CEST	1.1.1.1	192.168.2.4	0x7cf9	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:41.193686962 CEST	1.1.1.1	192.168.2.4	0x7cf9	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.193939924 CEST	1.1.1.1	192.168.2.4	0x6687	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:41.194042921 CEST	1.1.1.1	192.168.2.4	0x84e3	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194282055 CEST	1.1.1.1	192.168.2.4	0x7cdf	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194389105 CEST	1.1.1.1	192.168.2.4	0x3e1c	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:41.194389105 CEST	1.1.1.1	192.168.2.4	0x3e1c	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:41.513339043 CEST	1.1.1.1	192.168.2.4	0x6e68	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:41.525110006 CEST	1.1.1.1	192.168.2.4	0xd87c	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:41.525784016 CEST	1.1.1.1	192.168.2.4	0x9161	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.253731012 CEST	1.1.1.1	192.168.2.4	0x9626	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.253731012 CEST	1.1.1.1	192.168.2.4	0x9626	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.253731012 CEST	1.1.1.1	192.168.2.4	0x9626	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.253731012 CEST	1.1.1.1	192.168.2.4	0x9626	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.253731012 CEST	1.1.1.1	192.168.2.4	0x9626	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.254087925 CEST	1.1.1.1	192.168.2.4	0x3329	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.397860050 CEST	1.1.1.1	192.168.2.4	0x6b3a	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.397860050 CEST	1.1.1.1	192.168.2.4	0x6b3a	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	euw-ice.360yield.com		34.250.159.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	euw-ice.360yield.com		54.73.2.25	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	euw-ice.360yield.com		52.211.204.195	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	euw-ice.360yield.com		34.254.130.157	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	euw-ice.360yield.com		52.30.160.207	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	euw-ice.360yield.com		54.76.21.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	euw-ice.360yield.com		108.128.221.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398104906 CEST	1.1.1.1	192.168.2.4	0x1b8d	No error (0)	euw-ice.360yield.com		54.73.162.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398771048 CEST	1.1.1.1	192.168.2.4	0x4ba1	No error (0)	sync.colossusssp.com		172.240.155.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398771048 CEST	1.1.1.1	192.168.2.4	0x4ba1	No error (0)	sync.colossusssp.com		172.240.155.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.398771048 CEST	1.1.1.1	192.168.2.4	0x4ba1	No error (0)	sync.colossusssp.com		172.240.155.100	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.596415043 CEST	1.1.1.1	192.168.2.4	0xc8f	No error (0)	match.prod.bidr.io		34.243.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.596415043 CEST	1.1.1.1	192.168.2.4	0xc8f	No error (0)	match.prod.bidr.io		52.31.14.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.596415043 CEST	1.1.1.1	192.168.2.4	0xc8f	No error (0)	match.prod.bidr.io		52.214.158.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.596415043 CEST	1.1.1.1	192.168.2.4	0xc8f	No error (0)	match.prod.bidr.io		52.212.197.58	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.596415043 CEST	1.1.1.1	192.168.2.4	0xc8f	No error (0)	match.prod.bidr.io		52.214.31.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.596415043 CEST	1.1.1.1	192.168.2.4	0xc8f	No error (0)	match.prod.bidr.io		52.210.91.197	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.596415043 CEST	1.1.1.1	192.168.2.4	0xc8f	No error (0)	match.prod.bidr.io		52.210.237.114	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.597047091 CEST	1.1.1.1	192.168.2.4	0x7554	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.597047091 CEST	1.1.1.1	192.168.2.4	0x7554	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.597047091 CEST	1.1.1.1	192.168.2.4	0x7554	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.597047091 CEST	1.1.1.1	192.168.2.4	0x7554	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.597047091 CEST	1.1.1.1	192.168.2.4	0x7554	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.597047091 CEST	1.1.1.1	192.168.2.4	0x7554	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.616126060 CEST	1.1.1.1	192.168.2.4	0xa080	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.616126060 CEST	1.1.1.1	192.168.2.4	0xa080	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.30.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.616699934 CEST	1.1.1.1	192.168.2.4	0xa8ba	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.655155897 CEST	1.1.1.1	192.168.2.4	0x4d59	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.666882038 CEST	1.1.1.1	192.168.2.4	0x63cb	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.953044891 CEST	1.1.1.1	192.168.2.4	0x6ff8	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:42.953044891 CEST	1.1.1.1	192.168.2.4	0x6ff8	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:42.957573891 CEST	1.1.1.1	192.168.2.4	0xc1cd	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:43.467034101 CEST	1.1.1.1	192.168.2.4	0x8752	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:43.467047930 CEST	1.1.1.1	192.168.2.4	0xc4fa	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:43.467722893 CEST	1.1.1.1	192.168.2.4	0x6e3d	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:43.467722893 CEST	1.1.1.1	192.168.2.4	0x6e3d	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.467722893 CEST	1.1.1.1	192.168.2.4	0x6e3d	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.467722893 CEST	1.1.1.1	192.168.2.4	0x6e3d	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.467722893 CEST	1.1.1.1	192.168.2.4	0x6e3d	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.468137980 CEST	1.1.1.1	192.168.2.4	0xd340	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.468137980 CEST	1.1.1.1	192.168.2.4	0xd340	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.468307018 CEST	1.1.1.1	192.168.2.4	0x4f9c	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:43.479176044 CEST	1.1.1.1	192.168.2.4	0x788d	No error (0)	public.servenobid.com		18.245.31.15	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.479176044 CEST	1.1.1.1	192.168.2.4	0x788d	No error (0)	public.servenobid.com		18.245.31.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.479176044 CEST	1.1.1.1	192.168.2.4	0x788d	No error (0)	public.servenobid.com		18.245.31.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.479176044 CEST	1.1.1.1	192.168.2.4	0x788d	No error (0)	public.servenobid.com		18.245.31.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.483391047 CEST	1.1.1.1	192.168.2.4	0x14d8	No error (0)	csync.smilewanted.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:43.483901978 CEST	1.1.1.1	192.168.2.4	0xadd9	No error (0)	csync.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.483901978 CEST	1.1.1.1	192.168.2.4	0xadd9	No error (0)	csync.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.483901978 CEST	1.1.1.1	192.168.2.4	0xadd9	No error (0)	csync.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:43.854574919 CEST	1.1.1.1	192.168.2.4	0x296b	No error (0)	s.amazon-adsystem.com		98.82.156.207	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.393111944 CEST	1.1.1.1	192.168.2.4	0xf81c	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.419698000 CEST	1.1.1.1	192.168.2.4	0xfae0	No error (0)	static.smilewanted.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:44.419986010 CEST	1.1.1.1	192.168.2.4	0x9879	No error (0)	static.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.419986010 CEST	1.1.1.1	192.168.2.4	0x9879	No error (0)	static.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.419986010 CEST	1.1.1.1	192.168.2.4	0x9879	No error (0)	static.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.567848921 CEST	1.1.1.1	192.168.2.4	0xa47a	No error (0)	g2.gumgum.com		52.31.253.151	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.567848921 CEST	1.1.1.1	192.168.2.4	0xa47a	No error (0)	g2.gumgum.com		52.31.202.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.567848921 CEST	1.1.1.1	192.168.2.4	0xa47a	No error (0)	g2.gumgum.com		3.248.14.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.567848921 CEST	1.1.1.1	192.168.2.4	0xa47a	No error (0)	g2.gumgum.com		54.217.9.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.567848921 CEST	1.1.1.1	192.168.2.4	0xa47a	No error (0)	g2.gumgum.com		54.76.105.178	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.567848921 CEST	1.1.1.1	192.168.2.4	0xa47a	No error (0)	g2.gumgum.com		46.137.58.190	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.567848921 CEST	1.1.1.1	192.168.2.4	0xa47a	No error (0)	g2.gumgum.com		54.155.161.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.567848921 CEST	1.1.1.1	192.168.2.4	0xa47a	No error (0)	g2.gumgum.com		176.34.224.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.587930918 CEST	1.1.1.1	192.168.2.4	0xdde1	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.587930918 CEST	1.1.1.1	192.168.2.4	0xdde1	No error (0)	pixel.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.629645109 CEST	1.1.1.1	192.168.2.4	0x922c	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.629645109 CEST	1.1.1.1	192.168.2.4	0x922c	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.742782116 CEST	1.1.1.1	192.168.2.4	0x7149	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.742782116 CEST	1.1.1.1	192.168.2.4	0x7149	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.743366003 CEST	1.1.1.1	192.168.2.4	0xc22c	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:44.777717113 CEST	1.1.1.1	192.168.2.4	0x9a19	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.777796030 CEST	1.1.1.1	192.168.2.4	0xf50	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.794285059 CEST	1.1.1.1	192.168.2.4	0x74d1	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.794672966 CEST	1.1.1.1	192.168.2.4	0x2f42	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.883414030 CEST	1.1.1.1	192.168.2.4	0xd91	No error (0)	cs-server-s2s.yellowblue.io		107.22.244.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.883414030 CEST	1.1.1.1	192.168.2.4	0xd91	No error (0)	cs-server-s2s.yellowblue.io		34.236.56.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.883414030 CEST	1.1.1.1	192.168.2.4	0xd91	No error (0)	cs-server-s2s.yellowblue.io		52.1.110.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.883414030 CEST	1.1.1.1	192.168.2.4	0xd91	No error (0)	cs-server-s2s.yellowblue.io		54.156.198.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.883414030 CEST	1.1.1.1	192.168.2.4	0xd91	No error (0)	cs-server-s2s.yellowblue.io		3.229.16.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.883414030 CEST	1.1.1.1	192.168.2.4	0xd91	No error (0)	cs-server-s2s.yellowblue.io		54.84.3.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.883414030 CEST	1.1.1.1	192.168.2.4	0xd91	No error (0)	cs-server-s2s.yellowblue.io		34.227.62.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.883414030 CEST	1.1.1.1	192.168.2.4	0xd91	No error (0)	cs-server-s2s.yellowblue.io		44.216.231.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.901309013 CEST	1.1.1.1	192.168.2.4	0x7f86	No error (0)	cdn.dxkulture.com	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.901309013 CEST	1.1.1.1	192.168.2.4	0x7f86	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		104.18.42.227	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.901309013 CEST	1.1.1.1	192.168.2.4	0x7f86	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		172.64.145.29	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:44.901752949 CEST	1.1.1.1	192.168.2.4	0xb284	No error (0)	cdn.dxkulture.com	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:44.901752949 CEST	1.1.1.1	192.168.2.4	0xb284	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.49.236.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		3.248.166.48	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.21.147	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.51.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.248.75.162	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.51.221.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.132.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.042474985 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.228.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.043056965 CEST	1.1.1.1	192.168.2.4	0xb138	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.043056965 CEST	1.1.1.1	192.168.2.4	0xb138	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.72.128	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		108.128.18.152	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.71.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.208.55.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.209.202.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.241.206.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.141.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051064968 CEST	1.1.1.1	192.168.2.4	0x33fe	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.217.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051192999 CEST	1.1.1.1	192.168.2.4	0x89df	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051192999 CEST	1.1.1.1	192.168.2.4	0x89df	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051273108 CEST	1.1.1.1	192.168.2.4	0xd82	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051273108 CEST	1.1.1.1	192.168.2.4	0xd82	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051282883 CEST	1.1.1.1	192.168.2.4	0x7194	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051402092 CEST	1.1.1.1	192.168.2.4	0x7c62	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051402092 CEST	1.1.1.1	192.168.2.4	0x7c62	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051402092 CEST	1.1.1.1	192.168.2.4	0x7c62	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051402092 CEST	1.1.1.1	192.168.2.4	0x7c62	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051402092 CEST	1.1.1.1	192.168.2.4	0x7c62	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051598072 CEST	1.1.1.1	192.168.2.4	0x1464	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	nld-prebid.a-mx.net		163.5.194.36	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	nld-prebid.a-mx.net		163.5.194.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	nld-prebid.a-mx.net		163.5.194.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	nld-prebid.a-mx.net		163.5.194.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	nld-prebid.a-mx.net		163.5.194.37	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	nld-prebid.a-mx.net		163.5.194.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	nld-prebid.a-mx.net		163.5.194.31	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051776886 CEST	1.1.1.1	192.168.2.4	0xa882	No error (0)	nld-prebid.a-mx.net		163.5.194.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051785946 CEST	1.1.1.1	192.168.2.4	0x7d8	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051840067 CEST	1.1.1.1	192.168.2.4	0x3509	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051840067 CEST	1.1.1.1	192.168.2.4	0x3509	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051840067 CEST	1.1.1.1	192.168.2.4	0x3509	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.051840067 CEST	1.1.1.1	192.168.2.4	0x3509	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.87.157.158	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.95.52.72	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.227.143.10	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		100.25.247.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.205.29.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.205.93.126	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.144.188.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.058506012 CEST	1.1.1.1	192.168.2.4	0xff64	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.205.197.165	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.059475899 CEST	1.1.1.1	192.168.2.4	0x3d25	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.215820074 CEST	1.1.1.1	192.168.2.4	0xa5bf	No error (0)	1x1.a-mo.net		3.123.214.38	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.215820074 CEST	1.1.1.1	192.168.2.4	0xa5bf	No error (0)	1x1.a-mo.net		3.121.102.242	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.224014044 CEST	1.1.1.1	192.168.2.4	0x17c3	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.224014044 CEST	1.1.1.1	192.168.2.4	0x17c3	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238320112 CEST	1.1.1.1	192.168.2.4	0x25ce	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238320112 CEST	1.1.1.1	192.168.2.4	0x25ce	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.238389969 CEST	1.1.1.1	192.168.2.4	0x1f30	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.291501999 CEST	1.1.1.1	192.168.2.4	0x5762	No error (0)	ssp-sync.criteo.com	ssp-sync.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.291501999 CEST	1.1.1.1	192.168.2.4	0x5762	No error (0)	ssp-sync.nl3.vip.prod.criteo.com		178.250.1.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.291709900 CEST	1.1.1.1	192.168.2.4	0xfc51	No error (0)	ssp-sync.criteo.com	ssp-sync.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.380573034 CEST	1.1.1.1	192.168.2.4	0x78be	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.380573034 CEST	1.1.1.1	192.168.2.4	0x78be	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.380573034 CEST	1.1.1.1	192.168.2.4	0x78be	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.380573034 CEST	1.1.1.1	192.168.2.4	0x78be	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.380573034 CEST	1.1.1.1	192.168.2.4	0x78be	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.380573034 CEST	1.1.1.1	192.168.2.4	0x78be	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.380573034 CEST	1.1.1.1	192.168.2.4	0x78be	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.380573034 CEST	1.1.1.1	192.168.2.4	0x78be	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	euw-ice.360yield.com		108.128.45.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	euw-ice.360yield.com		34.253.109.191	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	euw-ice.360yield.com		52.209.201.66	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	euw-ice.360yield.com		52.19.89.169	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	euw-ice.360yield.com		34.251.142.61	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	euw-ice.360yield.com		34.248.56.28	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	euw-ice.360yield.com		52.51.158.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393012047 CEST	1.1.1.1	192.168.2.4	0x9572	No error (0)	euw-ice.360yield.com		52.211.204.195	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.393363953 CEST	1.1.1.1	192.168.2.4	0x1ce8	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.426745892 CEST	1.1.1.1	192.168.2.4	0x31c8	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.427568913 CEST	1.1.1.1	192.168.2.4	0x25b6	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.441687107 CEST	1.1.1.1	192.168.2.4	0xbad	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.441687107 CEST	1.1.1.1	192.168.2.4	0xbad	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.450321913 CEST	1.1.1.1	192.168.2.4	0x5c8c	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.450321913 CEST	1.1.1.1	192.168.2.4	0x5c8c	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.455146074 CEST	1.1.1.1	192.168.2.4	0xca11	No error (0)	sync.srv.stackadapt.com		54.147.115.81	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.455146074 CEST	1.1.1.1	192.168.2.4	0xca11	No error (0)	sync.srv.stackadapt.com		54.167.160.195	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.455146074 CEST	1.1.1.1	192.168.2.4	0xca11	No error (0)	sync.srv.stackadapt.com		54.209.225.147	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.455146074 CEST	1.1.1.1	192.168.2.4	0xca11	No error (0)	sync.srv.stackadapt.com		54.204.123.228	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.455146074 CEST	1.1.1.1	192.168.2.4	0xca11	No error (0)	sync.srv.stackadapt.com		54.157.243.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.455146074 CEST	1.1.1.1	192.168.2.4	0xca11	No error (0)	sync.srv.stackadapt.com		54.175.124.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.455146074 CEST	1.1.1.1	192.168.2.4	0xca11	No error (0)	sync.srv.stackadapt.com		54.211.170.55	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.455146074 CEST	1.1.1.1	192.168.2.4	0xca11	No error (0)	sync.srv.stackadapt.com		54.147.108.51	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.457565069 CEST	1.1.1.1	192.168.2.4	0x5f9a	No error (0)	cm.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.460329056 CEST	1.1.1.1	192.168.2.4	0x793c	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.460329056 CEST	1.1.1.1	192.168.2.4	0x793c	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.460329056 CEST	1.1.1.1	192.168.2.4	0x793c	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.460329056 CEST	1.1.1.1	192.168.2.4	0x793c	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.460329056 CEST	1.1.1.1	192.168.2.4	0x793c	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.460803032 CEST	1.1.1.1	192.168.2.4	0x6556	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.462101936 CEST	1.1.1.1	192.168.2.4	0x2802	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525120020 CEST	1.1.1.1	192.168.2.4	0xcd91	No error (0)	ads.servenobid.com		3.219.65.129	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525120020 CEST	1.1.1.1	192.168.2.4	0xcd91	No error (0)	ads.servenobid.com		52.70.143.91	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525120020 CEST	1.1.1.1	192.168.2.4	0xcd91	No error (0)	ads.servenobid.com		54.156.132.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525120020 CEST	1.1.1.1	192.168.2.4	0xcd91	No error (0)	ads.servenobid.com		54.80.82.1	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525120020 CEST	1.1.1.1	192.168.2.4	0xcd91	No error (0)	ads.servenobid.com		34.235.234.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525120020 CEST	1.1.1.1	192.168.2.4	0xcd91	No error (0)	ads.servenobid.com		34.199.105.107	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525895119 CEST	1.1.1.1	192.168.2.4	0xa725	No error (0)	s.ad.smaato.net		18.164.52.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525895119 CEST	1.1.1.1	192.168.2.4	0xa725	No error (0)	s.ad.smaato.net		18.164.52.25	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525895119 CEST	1.1.1.1	192.168.2.4	0xa725	No error (0)	s.ad.smaato.net		18.164.52.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.525895119 CEST	1.1.1.1	192.168.2.4	0xa725	No error (0)	s.ad.smaato.net		18.164.52.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.550319910 CEST	1.1.1.1	192.168.2.4	0xd943	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.550319910 CEST	1.1.1.1	192.168.2.4	0xd943	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.551836967 CEST	1.1.1.1	192.168.2.4	0xf1f7	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.551836967 CEST	1.1.1.1	192.168.2.4	0xf1f7	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.551836967 CEST	1.1.1.1	192.168.2.4	0xf1f7	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.557502031 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.557502031 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	1.cpm.ak-is2.net		103.67.200.72	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.559125900 CEST	1.1.1.1	192.168.2.4	0x566c	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.586922884 CEST	1.1.1.1	192.168.2.4	0x9c79	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.586922884 CEST	1.1.1.1	192.168.2.4	0x9c79	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.587133884 CEST	1.1.1.1	192.168.2.4	0x35f9	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.594460964 CEST	1.1.1.1	192.168.2.4	0xf83c	No error (0)	us.shb-sync.com		8.2.110.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.747399092 CEST	1.1.1.1	192.168.2.4	0x243e	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.747399092 CEST	1.1.1.1	192.168.2.4	0x243e	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.747399092 CEST	1.1.1.1	192.168.2.4	0x243e	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.747399092 CEST	1.1.1.1	192.168.2.4	0x243e	No error (0)	chidc2.outbrain.org		50.31.142.191	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.749711990 CEST	1.1.1.1	192.168.2.4	0x2b66	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.749711990 CEST	1.1.1.1	192.168.2.4	0x2b66	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.749711990 CEST	1.1.1.1	192.168.2.4	0x2b66	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.247.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.170.19	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.193.25	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.146.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.245.7	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.156.26	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.219.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.223.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.156.181	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858042002 CEST	1.1.1.1	192.168.2.4	0x64cd	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.184.204	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:45.858266115 CEST	1.1.1.1	192.168.2.4	0x141a	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.071749926 CEST	1.1.1.1	192.168.2.4	0x5bca	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.072228909 CEST	1.1.1.1	192.168.2.4	0xb2ba	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.192681074 CEST	1.1.1.1	192.168.2.4	0x4460	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.192681074 CEST	1.1.1.1	192.168.2.4	0x4460	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.192857027 CEST	1.1.1.1	192.168.2.4	0xe687	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:46.193334103 CEST	1.1.1.1	192.168.2.4	0x6ab9	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:46.194021940 CEST	1.1.1.1	192.168.2.4	0x1a76	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.194021940 CEST	1.1.1.1	192.168.2.4	0x1a76	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.241766930 CEST	1.1.1.1	192.168.2.4	0xd259	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.241766930 CEST	1.1.1.1	192.168.2.4	0xd259	No error (0)	image8-v2.pubmnet.com	imagsync-lhrpairbc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.241766930 CEST	1.1.1.1	192.168.2.4	0xd259	No error (0)	imagsync-lhrpairbc.pubmatic.com		185.64.191.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.242680073 CEST	1.1.1.1	192.168.2.4	0x5afa	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.242680073 CEST	1.1.1.1	192.168.2.4	0x5afa	No error (0)	image8-v2.pubmnet.com	imagsync-lhrpairbc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.362370968 CEST	1.1.1.1	192.168.2.4	0xd7e3	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.362370968 CEST	1.1.1.1	192.168.2.4	0xd7e3	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.362370968 CEST	1.1.1.1	192.168.2.4	0xd7e3	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.363018036 CEST	1.1.1.1	192.168.2.4	0x4e11	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.457238913 CEST	1.1.1.1	192.168.2.4	0xac80	No error (0)	ads.dxkulture.com		45.55.126.71	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.464811087 CEST	1.1.1.1	192.168.2.4	0xcd5d	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.465090036 CEST	1.1.1.1	192.168.2.4	0x1bbd	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.472414970 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.472414970 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.472414970 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.472714901 CEST	1.1.1.1	192.168.2.4	0x44d3	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.475821972 CEST	1.1.1.1	192.168.2.4	0x1225	No error (0)	cs.iqzone.com		8.2.111.13	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.483334064 CEST	1.1.1.1	192.168.2.4	0xf03e	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.483345032 CEST	1.1.1.1	192.168.2.4	0x2463	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.497530937 CEST	1.1.1.1	192.168.2.4	0x9fb3	No error (0)	contextual.media.net		88.221.168.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.528728008 CEST	1.1.1.1	192.168.2.4	0x878e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.529669046 CEST	1.1.1.1	192.168.2.4	0x1b1a	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.612098932 CEST	1.1.1.1	192.168.2.4	0xb7b	No error (0)	pixels.ad.gt	pixels.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.612241030 CEST	1.1.1.1	192.168.2.4	0xd637	No error (0)	pixels.ad.gt	pixels.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:46.696089983 CEST	1.1.1.1	192.168.2.4	0xa271	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:46.696858883 CEST	1.1.1.1	192.168.2.4	0xb85a	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.696858883 CEST	1.1.1.1	192.168.2.4	0xb85a	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:46.930430889 CEST	1.1.1.1	192.168.2.4	0x2190	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.011773109 CEST	1.1.1.1	192.168.2.4	0x812f	No error (0)	hbx.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.055660009 CEST	1.1.1.1	192.168.2.4	0x197b	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.055660009 CEST	1.1.1.1	192.168.2.4	0x197b	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.055660009 CEST	1.1.1.1	192.168.2.4	0x197b	No error (0)	spug-lhrc.pubmnet.com		185.64.190.81	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.055675983 CEST	1.1.1.1	192.168.2.4	0x7a14	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.055675983 CEST	1.1.1.1	192.168.2.4	0x7a14	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.100997925 CEST	1.1.1.1	192.168.2.4	0x6a6f	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.100997925 CEST	1.1.1.1	192.168.2.4	0x6a6f	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.100997925 CEST	1.1.1.1	192.168.2.4	0x6a6f	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.101737976 CEST	1.1.1.1	192.168.2.4	0x4aa5	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.101907015 CEST	1.1.1.1	192.168.2.4	0xe73f	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.198751926 CEST	1.1.1.1	192.168.2.4	0x67a5	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.198751926 CEST	1.1.1.1	192.168.2.4	0x67a5	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.198751926 CEST	1.1.1.1	192.168.2.4	0x67a5	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.198751926 CEST	1.1.1.1	192.168.2.4	0x67a5	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.198751926 CEST	1.1.1.1	192.168.2.4	0x67a5	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.198911905 CEST	1.1.1.1	192.168.2.4	0x558d	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.308485985 CEST	1.1.1.1	192.168.2.4	0x7607	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310369015 CEST	1.1.1.1	192.168.2.4	0x87db	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	nld-prebid.a-mx.net		163.5.194.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	nld-prebid.a-mx.net		163.5.194.31	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	nld-prebid.a-mx.net		163.5.194.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	nld-prebid.a-mx.net		163.5.194.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	nld-prebid.a-mx.net		163.5.194.37	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	nld-prebid.a-mx.net		163.5.194.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	nld-prebid.a-mx.net		163.5.194.36	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310411930 CEST	1.1.1.1	192.168.2.4	0x1d60	No error (0)	nld-prebid.a-mx.net		163.5.194.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.310832977 CEST	1.1.1.1	192.168.2.4	0x429	No error (0)	prebid.a-mo.net	nld-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.311639071 CEST	1.1.1.1	192.168.2.4	0x8a92	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.311639071 CEST	1.1.1.1	192.168.2.4	0x8a92	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.311707020 CEST	1.1.1.1	192.168.2.4	0xe4f7	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.311707020 CEST	1.1.1.1	192.168.2.4	0xe4f7	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.311707020 CEST	1.1.1.1	192.168.2.4	0xe4f7	No error (0)	dorpat.geo.iponweb.net		35.214.199.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.366739035 CEST	1.1.1.1	192.168.2.4	0x6626	No error (0)	cs.yellowblue.io		52.212.137.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.366739035 CEST	1.1.1.1	192.168.2.4	0x6626	No error (0)	cs.yellowblue.io		52.17.148.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.366739035 CEST	1.1.1.1	192.168.2.4	0x6626	No error (0)	cs.yellowblue.io		54.77.102.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.366739035 CEST	1.1.1.1	192.168.2.4	0x6626	No error (0)	cs.yellowblue.io		54.171.218.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.366739035 CEST	1.1.1.1	192.168.2.4	0x6626	No error (0)	cs.yellowblue.io		52.213.77.211	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.366739035 CEST	1.1.1.1	192.168.2.4	0x6626	No error (0)	cs.yellowblue.io		63.35.83.185	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.378495932 CEST	1.1.1.1	192.168.2.4	0x896e	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.411458969 CEST	1.1.1.1	192.168.2.4	0xd6cf	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450661898 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	sync.ipredictive.com		52.7.226.103	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450661898 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	sync.ipredictive.com		54.157.169.38	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450661898 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	sync.ipredictive.com		52.70.245.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450661898 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	sync.ipredictive.com		52.4.129.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450661898 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	sync.ipredictive.com		52.73.131.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450661898 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	sync.ipredictive.com		54.152.163.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450661898 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	sync.ipredictive.com		52.22.94.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450661898 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	sync.ipredictive.com		54.152.74.168	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.450973988 CEST	1.1.1.1	192.168.2.4	0xd7eb	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.451042891 CEST	1.1.1.1	192.168.2.4	0x7450	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.451664925 CEST	1.1.1.1	192.168.2.4	0x9547	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.455375910 CEST	1.1.1.1	192.168.2.4	0x6074	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.456437111 CEST	1.1.1.1	192.168.2.4	0x668d	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.456542969 CEST	1.1.1.1	192.168.2.4	0xf37f	No error (0)	dis.criteo.com	widget.fr3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.456542969 CEST	1.1.1.1	192.168.2.4	0xf37f	No error (0)	widget.fr3.vip.prod.criteo.com		178.250.7.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.457820892 CEST	1.1.1.1	192.168.2.4	0x5b7e	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.457820892 CEST	1.1.1.1	192.168.2.4	0x5b7e	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.457820892 CEST	1.1.1.1	192.168.2.4	0x5b7e	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.458807945 CEST	1.1.1.1	192.168.2.4	0x628f	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.458842993 CEST	1.1.1.1	192.168.2.4	0x5442	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.458842993 CEST	1.1.1.1	192.168.2.4	0x5442	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.492688894 CEST	1.1.1.1	192.168.2.4	0xc5b7	No error (0)	cm.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		3.248.166.48	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.49.236.173	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.132.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.211.250.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.96.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.78.106.223	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.228.45	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673928976 CEST	1.1.1.1	192.168.2.4	0xee5f	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.51.221.33	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673937082 CEST	1.1.1.1	192.168.2.4	0x4b5f	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.673937082 CEST	1.1.1.1	192.168.2.4	0x4b5f	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.741035938 CEST	1.1.1.1	192.168.2.4	0xff88	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:47.745548010 CEST	1.1.1.1	192.168.2.4	0xcf6c	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.745920897 CEST	1.1.1.1	192.168.2.4	0x4a7c	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:47.950520992 CEST	1.1.1.1	192.168.2.4	0x6263	No error (0)	s.amazon-adsystem.com		98.82.157.231	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.095434904 CEST	1.1.1.1	192.168.2.4	0xffa4	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.095664024 CEST	1.1.1.1	192.168.2.4	0xa250	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.095664024 CEST	1.1.1.1	192.168.2.4	0xa250	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.245731115 CEST	1.1.1.1	192.168.2.4	0x4a22	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.246210098 CEST	1.1.1.1	192.168.2.4	0x14ec	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.379420042 CEST	1.1.1.1	192.168.2.4	0x1886	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.379420042 CEST	1.1.1.1	192.168.2.4	0x1886	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.380379915 CEST	1.1.1.1	192.168.2.4	0x5897	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.463480949 CEST	1.1.1.1	192.168.2.4	0xdd8c	No error (0)	ads.dxkulture.com		45.55.126.71	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.550386906 CEST	1.1.1.1	192.168.2.4	0xe797	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.550386906 CEST	1.1.1.1	192.168.2.4	0xe797	No error (0)	image8-v2.pubmnet.com	imagsync-lhrpairbc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.550386906 CEST	1.1.1.1	192.168.2.4	0xe797	No error (0)	imagsync-lhrpairbc.pubmatic.com		185.64.191.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.552411079 CEST	1.1.1.1	192.168.2.4	0xe83b	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.552411079 CEST	1.1.1.1	192.168.2.4	0xe83b	No error (0)	image8-v2.pubmnet.com	imagsync-lhrpairbc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.642946959 CEST	1.1.1.1	192.168.2.4	0x1aaf	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.192.178.132	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.207.69.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.226.179.1	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.207.80.229	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.205.197.165	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.225.117.197	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.243.220.226	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.644375086 CEST	1.1.1.1	192.168.2.4	0x4113	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.204.39.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.745897055 CEST	1.1.1.1	192.168.2.4	0x449c	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.746346951 CEST	1.1.1.1	192.168.2.4	0xd19d	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.752243042 CEST	1.1.1.1	192.168.2.4	0x8f7c	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.752243042 CEST	1.1.1.1	192.168.2.4	0x8f7c	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.753726959 CEST	1.1.1.1	192.168.2.4	0x9906	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.862709999 CEST	1.1.1.1	192.168.2.4	0xd348	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.873488903 CEST	1.1.1.1	192.168.2.4	0xc5af	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.873488903 CEST	1.1.1.1	192.168.2.4	0xc5af	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.873488903 CEST	1.1.1.1	192.168.2.4	0xc5af	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:48.873991013 CEST	1.1.1.1	192.168.2.4	0x5870	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:48.873991013 CEST	1.1.1.1	192.168.2.4	0x5870	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:49.030905962 CEST	1.1.1.1	192.168.2.4	0x1e59	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.099283934 CEST	1.1.1.1	192.168.2.4	0x4d34	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.463890076 CEST	1.1.1.1	192.168.2.4	0x7e03	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:49.464837074 CEST	1.1.1.1	192.168.2.4	0x3db0	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:49.464837074 CEST	1.1.1.1	192.168.2.4	0x3db0	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.464837074 CEST	1.1.1.1	192.168.2.4	0x3db0	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.152	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.488012075 CEST	1.1.1.1	192.168.2.4	0x4018	No error (0)	eexsync.com		80.77.87.108	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.638271093 CEST	1.1.1.1	192.168.2.4	0xaeab	No error (0)	ads.creative-serving.com	httplb-gce-nl-clickdistrict.clickdistrict.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:49.638271093 CEST	1.1.1.1	192.168.2.4	0xaeab	No error (0)	httplb-gce-nl-clickdistrict.clickdistrict.iponweb.net		35.214.241.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.639456034 CEST	1.1.1.1	192.168.2.4	0x3e3f	No error (0)	ads.creative-serving.com	httplb-gce-nl-clickdistrict.clickdistrict.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:49.716384888 CEST	1.1.1.1	192.168.2.4	0x5192	No error (0)	s2s.t13.io		34.107.140.113	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.720926046 CEST	1.1.1.1	192.168.2.4	0xe805	No error (0)	exchange.mediavine.com		3.124.241.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.720926046 CEST	1.1.1.1	192.168.2.4	0xe805	No error (0)	exchange.mediavine.com		18.195.28.232	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.720926046 CEST	1.1.1.1	192.168.2.4	0xe805	No error (0)	exchange.mediavine.com		52.28.199.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.720926046 CEST	1.1.1.1	192.168.2.4	0xe805	No error (0)	exchange.mediavine.com		52.57.182.181	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.720926046 CEST	1.1.1.1	192.168.2.4	0xe805	No error (0)	exchange.mediavine.com		3.120.11.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.720926046 CEST	1.1.1.1	192.168.2.4	0xe805	No error (0)	exchange.mediavine.com		3.76.245.226	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.953450918 CEST	1.1.1.1	192.168.2.4	0xfbdf	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:49.953450918 CEST	1.1.1.1	192.168.2.4	0xfbdf	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:50.000859022 CEST	1.1.1.1	192.168.2.4	0x5134	No error (0)	dsp.nrich.ai		51.255.68.171	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:50.765707016 CEST	1.1.1.1	192.168.2.4	0xcd9d	Name error (3)	hb.yahoo.net	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:52.787794113 CEST	1.1.1.1	192.168.2.4	0x2101	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:52.787838936 CEST	1.1.1.1	192.168.2.4	0xd5c8	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:17:52.787838936 CEST	1.1.1.1	192.168.2.4	0xd5c8	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:17:56.604352951 CEST	1.1.1.1	192.168.2.4	0xa06c	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:17:56.604650974 CEST	1.1.1.1	192.168.2.4	0xca48	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:06.828537941 CEST	1.1.1.1	192.168.2.4	0x8006	Name error (3)	hb.yahoo.net	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:17.560866117 CEST	1.1.1.1	192.168.2.4	0x47ac	No error (0)	bidder.criteo.com	in-ftd-65.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:17.560866117 CEST	1.1.1.1	192.168.2.4	0x47ac	No error (0)	in-ftd-65.nl3.vip.prod.criteo.com		178.250.1.56	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:17.561459064 CEST	1.1.1.1	192.168.2.4	0x5154	No error (0)	bidder.criteo.com	in-ftd-65.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.155.119.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.214.155.237	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.208.55.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.194.198.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.229.25.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.207.102	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.31.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.227776051 CEST	1.1.1.1	192.168.2.4	0xc518	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.72.128	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.228202105 CEST	1.1.1.1	192.168.2.4	0xfb8a	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.228202105 CEST	1.1.1.1	192.168.2.4	0xfb8a	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.228202105 CEST	1.1.1.1	192.168.2.4	0xfb8a	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.228202105 CEST	1.1.1.1	192.168.2.4	0xfb8a	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.234538078 CEST	1.1.1.1	192.168.2.4	0x6068	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.234538078 CEST	1.1.1.1	192.168.2.4	0x6068	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.235207081 CEST	1.1.1.1	192.168.2.4	0x2556	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:18:41.239033937 CEST	1.1.1.1	192.168.2.4	0xc4e7	No error (0)	ads.servenobid.com		54.220.49.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.239033937 CEST	1.1.1.1	192.168.2.4	0xc4e7	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.239033937 CEST	1.1.1.1	192.168.2.4	0xc4e7	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.239033937 CEST	1.1.1.1	192.168.2.4	0xc4e7	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.239033937 CEST	1.1.1.1	192.168.2.4	0xc4e7	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.239033937 CEST	1.1.1.1	192.168.2.4	0xc4e7	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.239033937 CEST	1.1.1.1	192.168.2.4	0xc4e7	No error (0)	ads.servenobid.com		52.214.117.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.239033937 CEST	1.1.1.1	192.168.2.4	0xc4e7	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.240811110 CEST	1.1.1.1	192.168.2.4	0x3482	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.240811110 CEST	1.1.1.1	192.168.2.4	0x3482	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.240811110 CEST	1.1.1.1	192.168.2.4	0x3482	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.240811110 CEST	1.1.1.1	192.168.2.4	0x3482	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:41.241601944 CEST	1.1.1.1	192.168.2.4	0xb078	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.268990040 CEST	1.1.1.1	192.168.2.4	0x7d9f	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.268990040 CEST	1.1.1.1	192.168.2.4	0x7d9f	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.268990040 CEST	1.1.1.1	192.168.2.4	0x7d9f	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.269093037 CEST	1.1.1.1	192.168.2.4	0x891a	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.269093037 CEST	1.1.1.1	192.168.2.4	0x891a	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.269093037 CEST	1.1.1.1	192.168.2.4	0x891a	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:41.269093037 CEST	1.1.1.1	192.168.2.4	0x891a	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		13.35.57.188	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.975810051 CEST	1.1.1.1	192.168.2.4	0xe23e	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.978358030 CEST	1.1.1.1	192.168.2.4	0xa37	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:46.978358030 CEST	1.1.1.1	192.168.2.4	0xa37	No error (0)	btlr-eu-central-1.sharethrough.com		18.156.199.224	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:46.978601933 CEST	1.1.1.1	192.168.2.4	0x1cba	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.474237919 CEST	1.1.1.1	192.168.2.4	0x236f	No error (0)	e3.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.474237919 CEST	1.1.1.1	192.168.2.4	0x236f	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.474870920 CEST	1.1.1.1	192.168.2.4	0xec92	No error (0)	e3.adpushup.com	fp31cd.wpc.194b29.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.474870920 CEST	1.1.1.1	192.168.2.4	0xec92	No error (0)	fp31cd.wpc.194b29.thetacdn.net	fp31cd.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.474870920 CEST	1.1.1.1	192.168.2.4	0xec92	No error (0)	fp31cd.wpc.thetacdn.net		152.199.21.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.475455999 CEST	1.1.1.1	192.168.2.4	0x5b1f	No error (0)	1x1.a-mo.net		3.121.102.242	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.475455999 CEST	1.1.1.1	192.168.2.4	0x5b1f	No error (0)	1x1.a-mo.net		3.123.214.38	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.510376930 CEST	1.1.1.1	192.168.2.4	0x4a93	No error (0)	us-east-1.event.prod.bidr.io		54.157.156.92	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.510376930 CEST	1.1.1.1	192.168.2.4	0x4a93	No error (0)	us-east-1.event.prod.bidr.io		54.144.112.72	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.510376930 CEST	1.1.1.1	192.168.2.4	0x4a93	No error (0)	us-east-1.event.prod.bidr.io		54.156.101.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.510376930 CEST	1.1.1.1	192.168.2.4	0x4a93	No error (0)	us-east-1.event.prod.bidr.io		52.7.248.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.510376930 CEST	1.1.1.1	192.168.2.4	0x4a93	No error (0)	us-east-1.event.prod.bidr.io		52.86.25.186	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.510840893 CEST	1.1.1.1	192.168.2.4	0xcc1e	No error (0)	a018.casalemedia.com		75.119.185.41	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.511090994 CEST	1.1.1.1	192.168.2.4	0x8760	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.511090994 CEST	1.1.1.1	192.168.2.4	0x8760	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.252	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.255	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.514017105 CEST	1.1.1.1	192.168.2.4	0x2a8f	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.228	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.518893957 CEST	1.1.1.1	192.168.2.4	0xb8a5	No error (0)	ads.mountain.com		34.209.34.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.518893957 CEST	1.1.1.1	192.168.2.4	0xb8a5	No error (0)	ads.mountain.com		54.213.121.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.518893957 CEST	1.1.1.1	192.168.2.4	0xb8a5	No error (0)	ads.mountain.com		35.81.190.6	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.518893957 CEST	1.1.1.1	192.168.2.4	0xb8a5	No error (0)	ads.mountain.com		54.201.97.250	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.518893957 CEST	1.1.1.1	192.168.2.4	0xb8a5	No error (0)	ads.mountain.com		44.241.242.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.518893957 CEST	1.1.1.1	192.168.2.4	0xb8a5	No error (0)	ads.mountain.com		34.223.162.124	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.518893957 CEST	1.1.1.1	192.168.2.4	0xb8a5	No error (0)	ads.mountain.com		52.35.67.151	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:47.518893957 CEST	1.1.1.1	192.168.2.4	0xb8a5	No error (0)	ads.mountain.com		35.83.6.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668272018 CEST	1.1.1.1	192.168.2.4	0xad2b	No error (0)	gs.mountain.com		35.81.162.201	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668272018 CEST	1.1.1.1	192.168.2.4	0xad2b	No error (0)	gs.mountain.com		52.12.117.226	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668283939 CEST	1.1.1.1	192.168.2.4	0x606e	No error (0)	match.prod.bidr.io		52.214.158.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668283939 CEST	1.1.1.1	192.168.2.4	0x606e	No error (0)	match.prod.bidr.io		52.31.14.209	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668283939 CEST	1.1.1.1	192.168.2.4	0x606e	No error (0)	match.prod.bidr.io		52.212.197.58	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668283939 CEST	1.1.1.1	192.168.2.4	0x606e	No error (0)	match.prod.bidr.io		34.243.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668283939 CEST	1.1.1.1	192.168.2.4	0x606e	No error (0)	match.prod.bidr.io		52.210.91.197	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668283939 CEST	1.1.1.1	192.168.2.4	0x606e	No error (0)	match.prod.bidr.io		52.214.31.35	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.668283939 CEST	1.1.1.1	192.168.2.4	0x606e	No error (0)	match.prod.bidr.io		52.210.237.114	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.673016071 CEST	1.1.1.1	192.168.2.4	0x9366	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.673016071 CEST	1.1.1.1	192.168.2.4	0x9366	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:48.673492908 CEST	1.1.1.1	192.168.2.4	0xcc8e	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:18:49.499744892 CEST	1.1.1.1	192.168.2.4	0x46f6	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.499744892 CEST	1.1.1.1	192.168.2.4	0x46f6	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.499744892 CEST	1.1.1.1	192.168.2.4	0x46f6	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.500509024 CEST	1.1.1.1	192.168.2.4	0x7f91	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.500509024 CEST	1.1.1.1	192.168.2.4	0x7f91	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.500509024 CEST	1.1.1.1	192.168.2.4	0x7f91	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.502418041 CEST	1.1.1.1	192.168.2.4	0x89d8	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.503376961 CEST	1.1.1.1	192.168.2.4	0x6061	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.522095919 CEST	1.1.1.1	192.168.2.4	0xf53a	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.522926092 CEST	1.1.1.1	192.168.2.4	0x1c78	No error (0)	a.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.522926092 CEST	1.1.1.1	192.168.2.4	0x1c78	No error (0)	a.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.524194956 CEST	1.1.1.1	192.168.2.4	0x744a	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Sep 30, 2024 15:18:49.526905060 CEST	1.1.1.1	192.168.2.4	0x4d4a	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.528371096 CEST	1.1.1.1	192.168.2.4	0xb29c	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.529972076 CEST	1.1.1.1	192.168.2.4	0x410d	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.529972076 CEST	1.1.1.1	192.168.2.4	0x410d	No error (0)	cdn.w55c.net		3.73.2.196	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.529972076 CEST	1.1.1.1	192.168.2.4	0x410d	No error (0)	cdn.w55c.net		18.196.242.205	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.529972076 CEST	1.1.1.1	192.168.2.4	0x410d	No error (0)	cdn.w55c.net		3.74.73.187	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.529972076 CEST	1.1.1.1	192.168.2.4	0x410d	No error (0)	cdn.w55c.net		18.198.125.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.530662060 CEST	1.1.1.1	192.168.2.4	0xbdc9	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.533838034 CEST	1.1.1.1	192.168.2.4	0x9c3a	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Sep 30, 2024 15:18:49.534801960 CEST	1.1.1.1	192.168.2.4	0xfd2d	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.534801960 CEST	1.1.1.1	192.168.2.4	0xfd2d	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.801362991 CEST	1.1.1.1	192.168.2.4	0xd472	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802073956 CEST	1.1.1.1	192.168.2.4	0x1350	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802318096 CEST	1.1.1.1	192.168.2.4	0xf2b7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802318096 CEST	1.1.1.1	192.168.2.4	0xf2b7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802318096 CEST	1.1.1.1	192.168.2.4	0xf2b7	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.98.23	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.152.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.150.204	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.26.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.22.163	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.802335024 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		3.254.33.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.827204943 CEST	1.1.1.1	192.168.2.4	0x8df0	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.827204943 CEST	1.1.1.1	192.168.2.4	0x8df0	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.827204943 CEST	1.1.1.1	192.168.2.4	0x8df0	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.827204943 CEST	1.1.1.1	192.168.2.4	0x8df0	No error (0)	load-euw1.exelator.com		34.254.143.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829102993 CEST	1.1.1.1	192.168.2.4	0x4e1	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829102993 CEST	1.1.1.1	192.168.2.4	0x4e1	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829102993 CEST	1.1.1.1	192.168.2.4	0x4e1	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829155922 CEST	1.1.1.1	192.168.2.4	0x7ad	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829155922 CEST	1.1.1.1	192.168.2.4	0x7ad	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		52.58.104.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829155922 CEST	1.1.1.1	192.168.2.4	0x7ad	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.197.252.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829165936 CEST	1.1.1.1	192.168.2.4	0xe867	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.829356909 CEST	1.1.1.1	192.168.2.4	0x2ad2	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.830503941 CEST	1.1.1.1	192.168.2.4	0x2737	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.830503941 CEST	1.1.1.1	192.168.2.4	0x2737	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.211.168.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.0.124.99	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.209.205.140	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.214.213.210	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.206.34.184	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		35.173.107.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.230.141.11	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.831196070 CEST	1.1.1.1	192.168.2.4	0xc1b4	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.218.251.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832103014 CEST	1.1.1.1	192.168.2.4	0xe650	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.832530975 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:49.833734989 CEST	1.1.1.1	192.168.2.4	0xb4ea	No error (0)	sync.adprime.com		8.2.110.13	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.833906889 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	sync.springserve.com		34.249.58.119	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.833906889 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	sync.springserve.com		52.215.191.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.833906889 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	sync.springserve.com		185.48.123.169	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.833906889 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	sync.springserve.com		54.72.189.250	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.833906889 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	sync.springserve.com		108.128.238.116	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:49.833906889 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	sync.springserve.com		52.49.239.42	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.059262991 CEST	1.1.1.1	192.168.2.4	0xf1f3	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:18:50.060666084 CEST	1.1.1.1	192.168.2.4	0x78b1	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.060666084 CEST	1.1.1.1	192.168.2.4	0x78b1	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.099544048 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.099544048 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.099984884 CEST	1.1.1.1	192.168.2.4	0xaff0	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:18:50.639898062 CEST	1.1.1.1	192.168.2.4	0x6547	No error (0)	c.mountain.com	d27cxv6pgoe1ut.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:50.639898062 CEST	1.1.1.1	192.168.2.4	0x6547	No error (0)	d27cxv6pgoe1ut.cloudfront.net		13.225.78.90	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.639898062 CEST	1.1.1.1	192.168.2.4	0x6547	No error (0)	d27cxv6pgoe1ut.cloudfront.net		13.225.78.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.639898062 CEST	1.1.1.1	192.168.2.4	0x6547	No error (0)	d27cxv6pgoe1ut.cloudfront.net		13.225.78.114	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.639898062 CEST	1.1.1.1	192.168.2.4	0x6547	No error (0)	d27cxv6pgoe1ut.cloudfront.net		13.225.78.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:50.640386105 CEST	1.1.1.1	192.168.2.4	0x3b48	No error (0)	c.mountain.com	d27cxv6pgoe1ut.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:50.666850090 CEST	1.1.1.1	192.168.2.4	0xab13	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:50.668229103 CEST	1.1.1.1	192.168.2.4	0x97c8	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:51.136904955 CEST	1.1.1.1	192.168.2.4	0xec88	No error (0)	events.mountain.com		54.69.61.63	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:51.136904955 CEST	1.1.1.1	192.168.2.4	0xec88	No error (0)	events.mountain.com		35.155.199.208	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:51.136904955 CEST	1.1.1.1	192.168.2.4	0xec88	No error (0)	events.mountain.com		54.190.162.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:51.136904955 CEST	1.1.1.1	192.168.2.4	0xec88	No error (0)	events.mountain.com		34.214.62.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:51.136904955 CEST	1.1.1.1	192.168.2.4	0xec88	No error (0)	events.mountain.com		35.164.229.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:51.136904955 CEST	1.1.1.1	192.168.2.4	0xec88	No error (0)	events.mountain.com		54.186.169.146	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:51.957789898 CEST	1.1.1.1	192.168.2.4	0x400c	No error (0)	sync-service.net		204.62.13.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:52.525752068 CEST	1.1.1.1	192.168.2.4	0x30ab	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:52.525752068 CEST	1.1.1.1	192.168.2.4	0x30ab	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:52.525752068 CEST	1.1.1.1	192.168.2.4	0x30ab	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:52.525752068 CEST	1.1.1.1	192.168.2.4	0x30ab	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:53.619492054 CEST	1.1.1.1	192.168.2.4	0x2690	No error (0)	t.mountain.com	d32r6vpe0zgh7p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:53.632695913 CEST	1.1.1.1	192.168.2.4	0xe096	No error (0)	t.mountain.com	d32r6vpe0zgh7p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:53.632695913 CEST	1.1.1.1	192.168.2.4	0xe096	No error (0)	d32r6vpe0zgh7p.cloudfront.net		13.224.189.71	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:53.632695913 CEST	1.1.1.1	192.168.2.4	0xe096	No error (0)	d32r6vpe0zgh7p.cloudfront.net		13.224.189.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:53.632695913 CEST	1.1.1.1	192.168.2.4	0xe096	No error (0)	d32r6vpe0zgh7p.cloudfront.net		13.224.189.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:53.632695913 CEST	1.1.1.1	192.168.2.4	0xe096	No error (0)	d32r6vpe0zgh7p.cloudfront.net		13.224.189.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:54.109153032 CEST	1.1.1.1	192.168.2.4	0x762d	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:54.109153032 CEST	1.1.1.1	192.168.2.4	0x762d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		63.34.243.231	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:54.109153032 CEST	1.1.1.1	192.168.2.4	0x762d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.194.192.48	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:54.109153032 CEST	1.1.1.1	192.168.2.4	0x762d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.77.193.201	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:54.109153032 CEST	1.1.1.1	192.168.2.4	0x762d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		46.51.204.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:54.109994888 CEST	1.1.1.1	192.168.2.4	0xa1d1	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:18:56.084333897 CEST	1.1.1.1	192.168.2.4	0xa50d	No error (0)	cm.g.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:18:56.472677946 CEST	1.1.1.1	192.168.2.4	0x823f	Name error (3)	hb.yahoo.net	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:01.228919029 CEST	1.1.1.1	192.168.2.4	0x836e	No error (0)	ex.ingage.tech		104.18.41.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:01.228919029 CEST	1.1.1.1	192.168.2.4	0x836e	No error (0)	ex.ingage.tech		172.64.146.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:01.229473114 CEST	1.1.1.1	192.168.2.4	0x23bf	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Sep 30, 2024 15:19:05.359919071 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	sync.ipredictive.com		54.152.163.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359919071 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	sync.ipredictive.com		54.157.169.38	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359919071 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	sync.ipredictive.com		52.22.94.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359919071 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	sync.ipredictive.com		54.152.74.168	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359919071 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	sync.ipredictive.com		52.5.188.254	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359919071 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	sync.ipredictive.com		52.4.129.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359919071 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	sync.ipredictive.com		52.70.245.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359919071 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	sync.ipredictive.com		52.54.151.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359981060 CEST	1.1.1.1	192.168.2.4	0xe904	No error (0)	sync.ipredictive.com		52.7.226.103	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359981060 CEST	1.1.1.1	192.168.2.4	0xe904	No error (0)	sync.ipredictive.com		52.73.131.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359981060 CEST	1.1.1.1	192.168.2.4	0xe904	No error (0)	sync.ipredictive.com		54.152.163.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359981060 CEST	1.1.1.1	192.168.2.4	0xe904	No error (0)	sync.ipredictive.com		54.152.74.168	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359981060 CEST	1.1.1.1	192.168.2.4	0xe904	No error (0)	sync.ipredictive.com		54.157.169.38	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359981060 CEST	1.1.1.1	192.168.2.4	0xe904	No error (0)	sync.ipredictive.com		52.54.151.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359981060 CEST	1.1.1.1	192.168.2.4	0xe904	No error (0)	sync.ipredictive.com		52.70.245.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.359981060 CEST	1.1.1.1	192.168.2.4	0xe904	No error (0)	sync.ipredictive.com		52.22.94.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.360836983 CEST	1.1.1.1	192.168.2.4	0x26c9	No error (0)	sync.ipredictive.com		52.70.245.30	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.360836983 CEST	1.1.1.1	192.168.2.4	0x26c9	No error (0)	sync.ipredictive.com		52.54.151.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.360836983 CEST	1.1.1.1	192.168.2.4	0x26c9	No error (0)	sync.ipredictive.com		54.152.163.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.360836983 CEST	1.1.1.1	192.168.2.4	0x26c9	No error (0)	sync.ipredictive.com		52.4.129.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.360836983 CEST	1.1.1.1	192.168.2.4	0x26c9	No error (0)	sync.ipredictive.com		54.157.169.38	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.360836983 CEST	1.1.1.1	192.168.2.4	0x26c9	No error (0)	sync.ipredictive.com		52.73.131.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.360836983 CEST	1.1.1.1	192.168.2.4	0x26c9	No error (0)	sync.ipredictive.com		52.22.94.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:05.360836983 CEST	1.1.1.1	192.168.2.4	0x26c9	No error (0)	sync.ipredictive.com		52.7.226.103	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:07.049849033 CEST	1.1.1.1	192.168.2.4	0xae46	No error (0)	jelly.mdhv.io		216.239.32.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:07.049849033 CEST	1.1.1.1	192.168.2.4	0xae46	No error (0)	jelly.mdhv.io		216.239.38.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:07.049849033 CEST	1.1.1.1	192.168.2.4	0xae46	No error (0)	jelly.mdhv.io		216.239.34.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:07.049849033 CEST	1.1.1.1	192.168.2.4	0xae46	No error (0)	jelly.mdhv.io		216.239.36.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.294253111 CEST	1.1.1.1	192.168.2.4	0x27e7	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.294267893 CEST	1.1.1.1	192.168.2.4	0xc716	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.294267893 CEST	1.1.1.1	192.168.2.4	0xc716	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.294267893 CEST	1.1.1.1	192.168.2.4	0xc716	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.294267893 CEST	1.1.1.1	192.168.2.4	0xc716	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.302803993 CEST	1.1.1.1	192.168.2.4	0x8004	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.302803993 CEST	1.1.1.1	192.168.2.4	0x8004	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.302803993 CEST	1.1.1.1	192.168.2.4	0x8004	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.302803993 CEST	1.1.1.1	192.168.2.4	0x8004	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.302803993 CEST	1.1.1.1	192.168.2.4	0x8004	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.303030014 CEST	1.1.1.1	192.168.2.4	0x1789	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.40.156	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.31.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.141.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.194.198.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.155.119.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.75.137.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.71.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305803061 CEST	1.1.1.1	192.168.2.4	0xab3	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.51.195.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305856943 CEST	1.1.1.1	192.168.2.4	0x6783	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305856943 CEST	1.1.1.1	192.168.2.4	0x6783	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305856943 CEST	1.1.1.1	192.168.2.4	0x6783	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.305856943 CEST	1.1.1.1	192.168.2.4	0x6783	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.319961071 CEST	1.1.1.1	192.168.2.4	0xb318	No error (0)	ads.servenobid.com		54.220.49.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.319961071 CEST	1.1.1.1	192.168.2.4	0xb318	No error (0)	ads.servenobid.com		63.33.110.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.319961071 CEST	1.1.1.1	192.168.2.4	0xb318	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.319961071 CEST	1.1.1.1	192.168.2.4	0xb318	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.319961071 CEST	1.1.1.1	192.168.2.4	0xb318	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.319961071 CEST	1.1.1.1	192.168.2.4	0xb318	No error (0)	ads.servenobid.com		52.214.117.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.319961071 CEST	1.1.1.1	192.168.2.4	0xb318	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.319961071 CEST	1.1.1.1	192.168.2.4	0xb318	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.322994947 CEST	1.1.1.1	192.168.2.4	0x9061	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.322994947 CEST	1.1.1.1	192.168.2.4	0x9061	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.323153973 CEST	1.1.1.1	192.168.2.4	0x5a9d	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:19:41.441600084 CEST	1.1.1.1	192.168.2.4	0xb21e	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.441600084 CEST	1.1.1.1	192.168.2.4	0xb21e	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.441600084 CEST	1.1.1.1	192.168.2.4	0xb21e	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.441600084 CEST	1.1.1.1	192.168.2.4	0xb21e	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.245.52.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:19:41.442192078 CEST	1.1.1.1	192.168.2.4	0xc666	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.442192078 CEST	1.1.1.1	192.168.2.4	0xc666	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:19:41.442192078 CEST	1.1.1.1	192.168.2.4	0xc666	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:20:01.247836113 CEST	1.1.1.1	192.168.2.4	0x41ae	No error (0)	ex.ingage.tech		104.18.41.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:01.247836113 CEST	1.1.1.1	192.168.2.4	0x41ae	No error (0)	ex.ingage.tech		172.64.146.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:01.250268936 CEST	1.1.1.1	192.168.2.4	0x92e3	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.50	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.5	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.231	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.243	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.49	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.239	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.481064081 CEST	1.1.1.1	192.168.2.4	0x2e9f	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:20:02.482605934 CEST	1.1.1.1	192.168.2.4	0xe2f6	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:20:02.482605934 CEST	1.1.1.1	192.168.2.4	0xe2f6	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:20:28.544939995 CEST	1.1.1.1	192.168.2.4	0x7022	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:20:28.546668053 CEST	1.1.1.1	192.168.2.4	0xffe0	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.72.128	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.216.132.103	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.17.26.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.71.39	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.78.188.125	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.40.156	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		108.128.18.152	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.227555037 CEST	1.1.1.1	192.168.2.4	0xfd63	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.194.198.74	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.228930950 CEST	1.1.1.1	192.168.2.4	0xcfc8	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.228930950 CEST	1.1.1.1	192.168.2.4	0xcfc8	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.228930950 CEST	1.1.1.1	192.168.2.4	0xcfc8	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.228930950 CEST	1.1.1.1	192.168.2.4	0xcfc8	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.229118109 CEST	1.1.1.1	192.168.2.4	0x7084	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.232464075 CEST	1.1.1.1	192.168.2.4	0x38a2	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.232464075 CEST	1.1.1.1	192.168.2.4	0x38a2	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.232464075 CEST	1.1.1.1	192.168.2.4	0x38a2	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.232464075 CEST	1.1.1.1	192.168.2.4	0x38a2	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.238626003 CEST	1.1.1.1	192.168.2.4	0xa860	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.238626003 CEST	1.1.1.1	192.168.2.4	0xa860	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.238626003 CEST	1.1.1.1	192.168.2.4	0xa860	No error (0)	ads.servenobid.com		52.214.117.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.238626003 CEST	1.1.1.1	192.168.2.4	0xa860	No error (0)	ads.servenobid.com		63.33.110.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.238626003 CEST	1.1.1.1	192.168.2.4	0xa860	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.238626003 CEST	1.1.1.1	192.168.2.4	0xa860	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.238626003 CEST	1.1.1.1	192.168.2.4	0xa860	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.238626003 CEST	1.1.1.1	192.168.2.4	0xa860	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.272989035 CEST	1.1.1.1	192.168.2.4	0xa998	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.272989035 CEST	1.1.1.1	192.168.2.4	0xa998	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.272989035 CEST	1.1.1.1	192.168.2.4	0xa998	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.272989035 CEST	1.1.1.1	192.168.2.4	0xa998	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.244.15.236	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:01.274873972 CEST	1.1.1.1	192.168.2.4	0xbf7b	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.274873972 CEST	1.1.1.1	192.168.2.4	0xbf7b	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:01.274873972 CEST	1.1.1.1	192.168.2.4	0xbf7b	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.5	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.231	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.223	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.239	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.779232025 CEST	1.1.1.1	192.168.2.4	0x83f7	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:02.792653084 CEST	1.1.1.1	192.168.2.4	0xfcbb	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:02.792653084 CEST	1.1.1.1	192.168.2.4	0xfcbb	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:21.239434004 CEST	1.1.1.1	192.168.2.4	0x7367	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:21.239434004 CEST	1.1.1.1	192.168.2.4	0x7367	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:21.239434004 CEST	1.1.1.1	192.168.2.4	0x7367	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:21.239434004 CEST	1.1.1.1	192.168.2.4	0x7367	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:21.239434004 CEST	1.1.1.1	192.168.2.4	0x7367	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:21.240026951 CEST	1.1.1.1	192.168.2.4	0x7831	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:21:21.244540930 CEST	1.1.1.1	192.168.2.4	0xcd64	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:21:21.245255947 CEST	1.1.1.1	192.168.2.4	0xd0f8	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:21:21.245255947 CEST	1.1.1.1	192.168.2.4	0xd0f8	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		3.233.156.158	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		3.233.156.160	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		3.233.156.156	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		3.233.156.163	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		3.233.156.157	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		3.233.156.162	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		3.233.156.15	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.799648046 CEST	1.1.1.1	192.168.2.4	0x593e	No error (0)	alb-logs-http-shard4-375716607.us-east-1.elb.amazonaws.com		3.233.156.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:02.820621967 CEST	1.1.1.1	192.168.2.4	0xaab1	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:02.820621967 CEST	1.1.1.1	192.168.2.4	0xaab1	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.229018927 CEST	1.1.1.1	192.168.2.4	0x2128	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.229285002 CEST	1.1.1.1	192.168.2.4	0x3ea8	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.229285002 CEST	1.1.1.1	192.168.2.4	0x3ea8	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.229285002 CEST	1.1.1.1	192.168.2.4	0x3ea8	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.229285002 CEST	1.1.1.1	192.168.2.4	0x3ea8	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.78.188.125	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.216.33.27	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.208.55.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.141.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.251.210.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.217.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		108.128.18.152	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.231239080 CEST	1.1.1.1	192.168.2.4	0xa1f9	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.17.26.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.232073069 CEST	1.1.1.1	192.168.2.4	0x777f	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.232073069 CEST	1.1.1.1	192.168.2.4	0x777f	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.232073069 CEST	1.1.1.1	192.168.2.4	0x777f	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.232073069 CEST	1.1.1.1	192.168.2.4	0x777f	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.237806082 CEST	1.1.1.1	192.168.2.4	0xe693	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Sep 30, 2024 15:22:21.238070965 CEST	1.1.1.1	192.168.2.4	0x7149	No error (0)	ex.ingage.tech		104.18.41.106	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.238070965 CEST	1.1.1.1	192.168.2.4	0x7149	No error (0)	ex.ingage.tech		172.64.146.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.240665913 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	ads.servenobid.com		63.33.110.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.240665913 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.240665913 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.240665913 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.240665913 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.240665913 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.240665913 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.240665913 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	ads.servenobid.com		54.220.49.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.289979935 CEST	1.1.1.1	192.168.2.4	0xb118	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.289979935 CEST	1.1.1.1	192.168.2.4	0xb118	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.289979935 CEST	1.1.1.1	192.168.2.4	0xb118	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.289979935 CEST	1.1.1.1	192.168.2.4	0xb118	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.245.52.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:21.295106888 CEST	1.1.1.1	192.168.2.4	0xcc38	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.295106888 CEST	1.1.1.1	192.168.2.4	0xcc38	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:21.295106888 CEST	1.1.1.1	192.168.2.4	0xcc38	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:41.222888947 CEST	1.1.1.1	192.168.2.4	0x858	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:41.222888947 CEST	1.1.1.1	192.168.2.4	0x858	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.222888947 CEST	1.1.1.1	192.168.2.4	0x858	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.222888947 CEST	1.1.1.1	192.168.2.4	0x858	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.222888947 CEST	1.1.1.1	192.168.2.4	0x858	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.224104881 CEST	1.1.1.1	192.168.2.4	0x331c	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:41.231180906 CEST	1.1.1.1	192.168.2.4	0x3885	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.231180906 CEST	1.1.1.1	192.168.2.4	0x3885	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.231190920 CEST	1.1.1.1	192.168.2.4	0xc20e	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:22:41.233603001 CEST	1.1.1.1	192.168.2.4	0x75b2	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:41.233603001 CEST	1.1.1.1	192.168.2.4	0x75b2	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:41.233603001 CEST	1.1.1.1	192.168.2.4	0x75b2	No error (0)	hbopenbid-ams.pubmnet.com		185.64.189.112	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:22:41.234921932 CEST	1.1.1.1	192.168.2.4	0x64cf	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:22:41.234921932 CEST	1.1.1.1	192.168.2.4	0x64cf	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.226480961 CEST	1.1.1.1	192.168.2.4	0xd39e	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.226480961 CEST	1.1.1.1	192.168.2.4	0xd39e	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.226480961 CEST	1.1.1.1	192.168.2.4	0xd39e	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.226480961 CEST	1.1.1.1	192.168.2.4	0xd39e	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.226521969 CEST	1.1.1.1	192.168.2.4	0xaa55	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227505922 CEST	1.1.1.1	192.168.2.4	0x25b8	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227505922 CEST	1.1.1.1	192.168.2.4	0x25b8	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227505922 CEST	1.1.1.1	192.168.2.4	0x25b8	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227505922 CEST	1.1.1.1	192.168.2.4	0x25b8	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.72.128	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.241.206.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.141.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.51.195.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.217.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.215.102.175	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.18.254.145	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.227999926 CEST	1.1.1.1	192.168.2.4	0x9276	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.40.156	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.234110117 CEST	1.1.1.1	192.168.2.4	0x127c	No error (0)	ads.servenobid.com		63.33.110.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.234110117 CEST	1.1.1.1	192.168.2.4	0x127c	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.234110117 CEST	1.1.1.1	192.168.2.4	0x127c	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.234110117 CEST	1.1.1.1	192.168.2.4	0x127c	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.234110117 CEST	1.1.1.1	192.168.2.4	0x127c	No error (0)	ads.servenobid.com		52.214.117.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.234110117 CEST	1.1.1.1	192.168.2.4	0x127c	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.234110117 CEST	1.1.1.1	192.168.2.4	0x127c	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.234110117 CEST	1.1.1.1	192.168.2.4	0x127c	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.275316954 CEST	1.1.1.1	192.168.2.4	0x517b	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.275316954 CEST	1.1.1.1	192.168.2.4	0x517b	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.275316954 CEST	1.1.1.1	192.168.2.4	0x517b	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.275316954 CEST	1.1.1.1	192.168.2.4	0x517b	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.138.8.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:26.275624990 CEST	1.1.1.1	192.168.2.4	0x3d6b	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.275624990 CEST	1.1.1.1	192.168.2.4	0x3d6b	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:26.275624990 CEST	1.1.1.1	192.168.2.4	0x3d6b	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411911964 CEST	1.1.1.1	192.168.2.4	0x23ef	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411911964 CEST	1.1.1.1	192.168.2.4	0x23ef	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard0-194173476.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.192	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.49	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.5	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.239	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:27.411952019 CEST	1.1.1.1	192.168.2.4	0xcc02	No error (0)	alb-logs-http-shard3-1093753826.us-east-1.elb.amazonaws.com		3.233.155.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:46.414308071 CEST	1.1.1.1	192.168.2.4	0x8846	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:23:46.414480925 CEST	1.1.1.1	192.168.2.4	0x2b58	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Sep 30, 2024 15:23:46.414531946 CEST	1.1.1.1	192.168.2.4	0xe64a	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:46.414531946 CEST	1.1.1.1	192.168.2.4	0xe64a	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:46.414973021 CEST	1.1.1.1	192.168.2.4	0x2a23	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:23:46.414973021 CEST	1.1.1.1	192.168.2.4	0x2a23	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:06.289144993 CEST	1.1.1.1	192.168.2.4	0x7c45	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:06.289144993 CEST	1.1.1.1	192.168.2.4	0x7c45	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:06.290946007 CEST	1.1.1.1	192.168.2.4	0xc23	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:06.290946007 CEST	1.1.1.1	192.168.2.4	0xc23	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:06.290946007 CEST	1.1.1.1	192.168.2.4	0xc23	No error (0)	hbopenbid-ams.pubmnet.com		185.64.189.112	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.281769037 CEST	1.1.1.1	192.168.2.4	0xae6	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.281769037 CEST	1.1.1.1	192.168.2.4	0xae6	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.281769037 CEST	1.1.1.1	192.168.2.4	0xae6	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.281769037 CEST	1.1.1.1	192.168.2.4	0xae6	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.283565998 CEST	1.1.1.1	192.168.2.4	0x7bb0	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.284271955 CEST	1.1.1.1	192.168.2.4	0xae38	No error (0)	ads.servenobid.com		54.220.110.217	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.284271955 CEST	1.1.1.1	192.168.2.4	0xae38	No error (0)	ads.servenobid.com		54.154.93.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.284271955 CEST	1.1.1.1	192.168.2.4	0xae38	No error (0)	ads.servenobid.com		34.246.81.179	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.284271955 CEST	1.1.1.1	192.168.2.4	0xae38	No error (0)	ads.servenobid.com		54.220.49.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.284271955 CEST	1.1.1.1	192.168.2.4	0xae38	No error (0)	ads.servenobid.com		63.33.110.144	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.284271955 CEST	1.1.1.1	192.168.2.4	0xae38	No error (0)	ads.servenobid.com		52.213.44.117	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.284271955 CEST	1.1.1.1	192.168.2.4	0xae38	No error (0)	ads.servenobid.com		54.170.214.245	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.284271955 CEST	1.1.1.1	192.168.2.4	0xae38	No error (0)	ads.servenobid.com		34.252.72.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288043022 CEST	1.1.1.1	192.168.2.4	0x98a9	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288043022 CEST	1.1.1.1	192.168.2.4	0x98a9	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288043022 CEST	1.1.1.1	192.168.2.4	0x98a9	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288043022 CEST	1.1.1.1	192.168.2.4	0x98a9	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.209.202.53	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.241.206.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.40.156	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		63.32.134.67	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.74.242.18	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.51.195.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.171.217.149	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.288070917 CEST	1.1.1.1	192.168.2.4	0x9573	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.17.26.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.344120026 CEST	1.1.1.1	192.168.2.4	0x5bf6	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.344120026 CEST	1.1.1.1	192.168.2.4	0x5bf6	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.344120026 CEST	1.1.1.1	192.168.2.4	0x5bf6	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.344120026 CEST	1.1.1.1	192.168.2.4	0x5bf6	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		13.33.173.196	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:26.345004082 CEST	1.1.1.1	192.168.2.4	0x9e07	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.345004082 CEST	1.1.1.1	192.168.2.4	0x9e07	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:26.345004082 CEST	1.1.1.1	192.168.2.4	0x9e07	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.255	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.252	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.250	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.249	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.253	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.243	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.568275928 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	alb-logs-http-shard1-557248136.us-east-1.elb.amazonaws.com		3.233.144.220	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:24:27.600972891 CEST	1.1.1.1	192.168.2.4	0x7304	No error (0)	http-intake.logs.datadoghq.com	http-intake-l7.logs.datadoghq.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:24:27.600972891 CEST	1.1.1.1	192.168.2.4	0x7304	No error (0)	http-intake-l7.logs.datadoghq.com	alb-logs-http-shard2-1771652727.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49742	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:15:41 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-09-30 13:15:41 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-09-30 13:15:41 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 30 Sep 2024 13:14:41 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C533_BAY x-ms-request-id: 28b22aa0-82c3-4a6e-9434-f52622af2790 PPServer: PPV: 30 H: PH1PEPF0001B804 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 30 Sep 2024 13:15:41 GMT Connection: close Content-Length: 1276
2024-09-30 13:15:41 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.4	49744	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:15:42 UTC	446	OUT	POST /ppsecure/deviceaddcredential.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 7642 Host: login.live.com
2024-09-30 13:15:42 UTC	7642	OUT	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 71 75 65 73 74 3e 3c 43 6c 69 65 6e 74 49 6e 66 6f 20 6e 61 6d 65 3d 22 49 44 43 52 4c 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 3c 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 32 34 3c 2f 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 3c 2f 43 6c 69 65 6e 74 49 6e 66 6f 3e 3c 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 75 71 79 71 72 67 61 78 79 61 76 76 78 6f 3c 2f 4d 65 6d 62 65 72 6e 61 6d 65 3e 3c 50 61 73 73 77 6f 72 64 3e 64 29 63 52 2c 32 56 56 45 23 6d 43 6d 32 6c 51 57 28 56 6a 3c 2f 50 61 73 73 77 6f 72 64 3e 3c 2f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4f 6c 64 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 61 6b 71 72 6c 66 67 75 6b 69 6a 65 76 6c 3c 2f 4f 6c 64 4d Data Ascii: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"><BinaryVersion>24</BinaryVersion></ClientInfo><Authentication><Membername>02uqyqrgaxyavvxo</Membername><Password>d)cR,2VVE#mCm2lQW(Vj</Password></Authentication><OldMembername>02akqrlfgukijevl</OldM
2024-09-30 13:15:47 UTC	542	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/xml Expires: Mon, 30 Sep 2024 13:14:43 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C528_BAY x-ms-request-id: fdd9ec42-9c03-4631-82f2-551f7bf0b3a7 PPServer: PPV: 30 H: PH1PEPF0001B6C9 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 30 Sep 2024 13:15:47 GMT Connection: close Content-Length: 17166
2024-09-30 13:15:47 UTC	15842	IN	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 73 70 6f 6e 73 65 20 53 75 63 63 65 73 73 3d 22 74 72 75 65 22 3e 3c 73 75 63 63 65 73 73 3e 74 72 75 65 3c 2f 73 75 63 63 65 73 73 3e 3c 70 75 69 64 3e 30 30 31 38 38 30 31 30 39 42 41 37 43 37 43 38 3c 2f 70 75 69 64 3e 3c 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 33 3c 2f 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 3c 4c 69 63 65 6e 73 65 20 43 6f 6e 74 65 6e 74 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 2d 38 63 63 35 2d 62 32 66 35 33 63 38 33 30 62 37 36 22 20 49 44 3d 22 61 34 38 62 64 35 32 65 2d 35 65 30 32 2d 34 65 35 63 2d 62 33 61 37 2d 65 33 62 34 64 31 37 31 61 37 34 38 22 20 4c 69 63 65 6e 73 65 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 Data Ascii: <DeviceAddResponse Success="true"><success>true</success><puid>001880109BA7C7C8</puid><DeviceTpmKeyState>3</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="a48bd52e-5e02-4e5c-b3a7-e3b4d171a748" LicenseID="3252b20c-d425-4711
2024-09-30 13:15:47 UTC	1324	IN	Data Raw: 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 39 2f 78 6d 6c 64 73 69 67 23 65 6e 76 65 6c 6f 70 65 64 2d 73 69 67 6e 61 74 75 72 65 22 2f 3e 3c 2f 54 72 61 6e 73 66 6f 72 6d 73 3e 3c 44 69 67 65 73 74 4d 65 74 68 6f 64 20 41 6c 67 6f 72 69 74 68 6d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 30 34 2f 78 6d 6c 65 6e 63 23 73 68 61 32 35 36 22 2f 3e 3c 44 69 67 65 73 74 56 61 6c 75 65 3e 67 74 71 77 70 52 35 66 47 44 61 6f 48 73 4d 37 49 57 47 4b 5a 67 61 77 58 61 30 42 50 69 47 61 65 35 62 49 75 6e 2f 52 51 4a 41 3d 3c 2f 44 69 67 65 73 74 56 61 6c 75 65 3e 3c 2f 52 65 66 65 72 65 6e 63 65 3e 3c 2f 53 69 67 6e 65 64 49 6e 66 6f 3e 3c 53 69 67 6e 61 74 75 72 65 56 61 6c 75 65 3e 41 46 38 6f 46 52 2b 47 66 Data Ascii: tp://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>gtqwpR5fGDaoHsM7IWGKZgawXa0BPiGae5bIun/RQJA=</DigestValue></Reference></SignedInfo><SignatureValue>AF8oFR+Gf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:15:46 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vfYU4w9MM+3Pbn4&MD=zhyCpzKr HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-30 13:15:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6dcee1f5-531f-42dc-bfe2-80648a5e0545 MS-RequestId: 8028387e-e18b-46c6-b35e-6b1bb119091e MS-CV: wKHGI2ObQk6hIPgN.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 30 Sep 2024 13:15:46 GMT Connection: close Content-Length: 24490
2024-09-30 13:15:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-30 13:15:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49747	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:15:48 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-09-30 13:15:48 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-09-30 13:15:49 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 30 Sep 2024 13:14:49 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30374.3 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: 93cac285-29e4-487e-835c-42410a507bc4 PPServer: PPV: 30 H: PH1PEPF00011E59 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 30 Sep 2024 13:15:49 GMT Connection: close Content-Length: 11389
2024-09-30 13:15:49 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49748	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:15:50 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-09-30 13:15:50 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-09-30 13:15:50 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 30 Sep 2024 13:14:50 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C533_SN1 x-ms-request-id: ac21ba73-a1a5-4028-b786-f4ac0725024e PPServer: PPV: 30 H: SN1PEPF0002F0B7 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 30 Sep 2024 13:15:49 GMT Connection: close Content-Length: 1918
2024-09-30 13:15:50 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49749	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:15:51 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-09-30 13:15:51 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-09-30 13:15:52 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 30 Sep 2024 13:14:51 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: 72954a81-fee5-44f1-95a7-15542ee6969c PPServer: PPV: 30 H: PH1PEPF000183D1 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 30 Sep 2024 13:15:51 GMT Connection: close Content-Length: 11409
2024-09-30 13:15:52 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49750	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:15:52 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-09-30 13:15:52 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-09-30 13:15:53 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 30 Sep 2024 13:14:53 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30374.3 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: 0322b993-b048-464e-9bed-e29c8ea32fdf PPServer: PPV: 30 H: PH1PEPF00011E59 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 30 Sep 2024 13:15:52 GMT Connection: close Content-Length: 11409
2024-09-30 13:15:53 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49751	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:15:54 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4762 Host: login.live.com
2024-09-30 13:15:54 UTC	4762	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-09-30 13:15:54 UTC	656	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 30 Sep 2024 13:14:54 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=5&213=296123&215=0&315=1&215=0&315=1&214=30&288=16.0.30374.3 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: 505fd53c-e877-4436-bef6-947ee5c30b90 PPServer: PPV: 30 H: PH1PEPF000183BF V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 30 Sep 2024 13:15:53 GMT Connection: close Content-Length: 10197
2024-09-30 13:15:54 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:24 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vfYU4w9MM+3Pbn4&MD=zhyCpzKr HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-30 13:16:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 3332b623-54c5-4b35-9985-139bbd196177 MS-RequestId: 9372e277-acf9-48bd-a023-d72f99f2d5b6 MS-CV: sMzC3Rb81kafOO84.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 30 Sep 2024 13:16:24 GMT Connection: close Content-Length: 30005
2024-09-30 13:16:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-30 13:16:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49755	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:42 UTC	208	OUT	GET /rules/rule170012v12s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:42 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:42 GMT Content-Type: text/xml Content-Length: 1353 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Sat, 25 May 2024 18:28:18 GMT ETag: "0x8DC7CE8734A2850" x-ms-request-id: 6e2d9c6b-a01e-000d-56c1-12d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131642Z-15767c5fc55whfstvfw43u8fp400000006s0000000008x4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:42 UTC	1353	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 37 30 30 31 32 22 20 56 3d 22 31 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 47 72 61 70 68 69 63 73 2e 47 56 69 7a 49 6e 6b 53 74 72 6f 6b 65 22 20 41 54 54 3d 22 63 66 63 66 64 62 39 31 63 36 38 63 34 33 32 39 62 62 38 62 37 63 62 37 62 61 62 62 33 63 66 37 2d 65 30 38 32 63 32 66 32 2d 65 66 31 64 2d 34 32 37 61 2d 61 63 34 64 2d 62 30 62 37 30 30 61 66 65 37 61 37 2d 37 36 35 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="170012" V="12" DC="SM" EN="Office.Graphics.GVizInkStroke" ATT="cfcfdb91c68c4329bb8b7cb7babb3cf7-e082c2f2-ef1d-427a-ac4d-b0b700afe7a7-7655" SP="CriticalBusinessImpact" DCa="PSU" xmlns=""> <S> <UTS T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:42 UTC	206	OUT	GET /rules/rule63067v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:42 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:42 GMT Content-Type: text/xml Content-Length: 2871 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:05 GMT ETag: "0x8DC582BEC5E84E0" x-ms-request-id: d860cee4-b01e-00ab-5f10-13dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131642Z-15767c5fc55xgp8c992y5v5w1800000006q000000000faab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:42 UTC	2871	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 36 33 30 36 37 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 49 64 65 6e 74 69 74 79 2e 53 73 70 69 50 72 6f 6d 70 74 57 69 6e 33 32 22 20 41 54 54 3d 22 35 63 36 35 62 62 63 34 65 64 62 66 34 38 30 64 39 36 33 37 61 63 65 30 34 64 36 32 62 64 39 38 2d 31 32 38 34 34 38 39 33 2d 38 61 62 39 2d 34 64 64 65 2d 62 38 35 30 2d 35 36 31 32 63 62 31 32 65 30 66 32 2d 37 38 32 32 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="63067" V="4" DC="SM" EN="Office.Identity.SspiPromptWin32" ATT="5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <S>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:42 UTC	207	OUT	GET /rules/rule170022v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:42 GMT Content-Type: text/xml Content-Length: 756 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Sat, 27 Jul 2024 15:36:11 GMT ETag: "0x8DCAE51D7B4AB9D" x-ms-request-id: 764ec546-001e-0014-3dc1-125151000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131642Z-15767c5fc55lghvzbxktxfqntw000000069000000000c73p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:42 UTC	756	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 37 30 30 32 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 47 72 61 70 68 69 63 73 2e 47 56 69 73 49 6e 6b 4c 6f 61 64 22 20 41 54 54 3d 22 63 66 63 66 64 62 39 31 63 36 38 63 34 33 32 39 62 62 38 62 37 63 62 37 62 61 62 62 33 63 66 37 2d 65 30 38 32 63 32 66 32 2d 65 66 31 64 2d 34 32 37 61 2d 61 63 34 64 2d 62 30 62 37 30 30 61 66 65 37 61 37 2d 37 36 35 35 22 20 53 3d 22 31 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 38 69 70 6a 22 20 41 3d 22 61 6e 75 69 35 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="170022" V="2" DC="SM" EN="Office.Graphics.GVisInkLoad" ATT="cfcfdb91c68c4329bb8b7cb7babb3cf7-e082c2f2-ef1d-427a-ac4d-b0b700afe7a7-7655" S="1" DCa="PSU" xmlns=""> <S> <UTS T="1" Id="b8ipj" A="anui5"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:42 UTC	207	OUT	GET /rules/rule490016v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:42 GMT Content-Type: text/xml Content-Length: 777 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEC2AAB32" x-ms-request-id: 02242695-901e-0048-63c1-12b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131642Z-15767c5fc559lm6vwp3h1khw8n00000006tg00000000p50w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:42 UTC	777	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 34 39 30 30 31 36 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 46 65 65 64 62 61 63 6b 2e 53 75 72 76 65 79 2e 46 6c 6f 6f 64 67 61 74 65 43 6c 69 65 6e 74 2e 52 6f 61 6d 69 6e 67 53 75 63 63 65 73 73 66 75 6c 52 65 61 64 57 72 69 74 65 22 20 41 54 54 3d 22 64 37 39 65 38 32 34 33 38 36 63 34 34 34 31 63 62 38 63 31 64 34 61 65 31 35 36 39 30 35 32 36 2d 62 64 34 34 33 33 30 39 2d 35 34 39 34 2d 34 34 34 61 2d 61 62 61 39 2d 30 61 66 39 65 65 66 39 39 66 38 34 2d 37 33 36 30 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 20 44 4c 3d 22 4e 22 20 44 43 61 3d 22 50 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="490016" V="3" DC="SM" EN="Office.Feedback.Survey.FloodgateClient.RoamingSuccessfulReadWrite" ATT="d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360" T="Upload-Medium" DL="N" DCa="P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:42 UTC	207	OUT	GET /rules/rule324001v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:42 GMT Content-Type: text/xml Content-Length: 513 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:31 GMT ETag: "0x8DC582BD84BDCC1" x-ms-request-id: 909ffc80-501e-0064-6610-131f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131642Z-15767c5fc55qdcd62bsn50hd6s00000006f0000000001uhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:42 UTC	513	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 31 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 50 72 6f 6a 65 63 74 4c 6f 61 64 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324001" V="4" DC="SM" EN="Office.Extensibility.VbaTelemetryProjectLoad" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DCa="DC PSP PSU" xmlns="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49762	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:43 UTC	207	OUT	GET /rules/rule324006v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:43 GMT Content-Type: text/xml Content-Length: 599 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:44 GMT ETag: "0x8DC582BBC83D642" x-ms-request-id: e7046479-f01e-0020-7210-13956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131643Z-15767c5fc552g4w83buhsr3htc00000006mg00000000bn75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:43 UTC	599	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 36 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 53 68 6f 77 49 64 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324006" V="2" DC="SM" EN="Office.Extensibility.VbaTelemetryShowIde" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DCa="DC PSP PSU" xmlns="">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49758	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:43 UTC	207	OUT	GET /rules/rule324002v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:43 GMT Content-Type: text/xml Content-Length: 833 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:33 GMT ETag: "0x8DC582BD9758B35" x-ms-request-id: 06a8ff02-301e-003f-5210-13266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131643Z-15767c5fc554wklc0x4mc5pq0w000000070g000000000n8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:43 UTC	833	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 32 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 44 65 63 6c 61 72 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324002" V="5" DC="SM" EN="Office.Extensibility.VbaTelemetryDeclare" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" DCa="DC PSP PSU" xmlns=""> <S> <UTS T="1" Id="b0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:43 UTC	207	OUT	GET /rules/rule324005v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:43 GMT Content-Type: text/xml Content-Length: 599 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:51 GMT ETag: "0x8DC582BC0B3C3C8" x-ms-request-id: 06a8ff13-301e-003f-6310-13266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131643Z-15767c5fc55d6fcl6x6bw8cpdc00000006h0000000008hth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:43 UTC	599	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 35 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 43 6f 6d 70 69 6c 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324005" V="2" DC="SM" EN="Office.Extensibility.VbaTelemetryCompile" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DCa="DC PSP PSU" xmlns="">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:43 UTC	207	OUT	GET /rules/rule324004v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:43 GMT Content-Type: text/xml Content-Length: 738 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:34 GMT ETag: "0x8DC582BD9FE7D4B" x-ms-request-id: ed4ea32f-a01e-0084-5d10-139ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131643Z-15767c5fc55qdcd62bsn50hd6s00000006cg00000000bwzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-30 13:16:43 UTC	738	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 34 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 43 6f 6d 4f 62 6a 65 63 74 49 6e 73 74 61 6e 74 69 61 74 65 64 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324004" V="4" DC="SM" EN="Office.Extensibility.VbaTelemetryComObjectInstantiated" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" DCa="DC PSP PSU" xmlns=""> <S> <UT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	13.107.246.60	443	7512	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:43 UTC	207	OUT	GET /rules/rule324003v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-09-30 13:16:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:43 GMT Content-Type: text/xml Content-Length: 716 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:34 GMT ETag: "0x8DC582BD9F5CC0A" x-ms-request-id: bd6d1276-501e-0016-4d10-13181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20240930T131643Z-15767c5fc55tp7hb6tzuygumb800000002q0000000000rqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-30 13:16:43 UTC	716	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 33 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 52 65 66 65 72 65 6e 63 65 64 4c 69 62 72 61 72 79 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324003" V="5" DC="SM" EN="Office.Extensibility.VbaTelemetryReferencedLibrary" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" DCa="DC PSP PSU" xmlns=""> <S> <UTS T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49766	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:48 UTC	754	OUT	GET /c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 HTTP/1.1 Host: www.multitran.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:48 UTC	312	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:48 GMT Connection: close Content-Length: 316
2024-09-30 13:16:48 UTC	316	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e d0 94 d0 be d0 ba d1 83 d0 bc d0 b5 d0 bd d1 82 20 d0 bf d0 b5 d1 80 d0 b5 d0 bc d0 b5 d1 89 d0 b5 d0 bd 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e d0 9e d0 b1 d1 8a d0 b5 d0 ba d1 82 20 d0 bf d0 b5 d1 80 d0 b5 d0 bc d0 b5 d1 89 d0 b5 d0 bd 3c 2f 68 31 3e d0 94 d0 be d0 ba d1 83 d0 bc d0 b5 d0 bd d1 82 20 d1 82 d0 b5 d0 bf d0 b5 d1 80 d1 8c 20 d0 bd d0 b0 d1 85 d0 be d0 b4 d0 b8 d1 82 d1 81 d1 8f 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 61 6d 70 3b 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 Data Ascii: <head><title> </title></head><body><h1> </h1> <a HREF="https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49769	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:49 UTC	755	OUT	GET /c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 HTTP/1.1 Host: www.multitran.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:49 UTC	298	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Vary: User-Agent Server: Microsoft-IIS/10.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: frame-ancestors 'self'; Date: Mon, 30 Sep 2024 13:16:49 GMT Connection: close Content-Length: 18200
2024-09-30 13:16:49 UTC	16086	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 35 2e 30 22 3e 0d 0a 3c 74 69 74 6c 65 3e 44 69 63 74 69 6f 6e 61 72 79 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 Data Ascii: <!doctype html><html lang="en" xmlns="http://www.w3.org/1999/xhtml"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0"><title>Dictionary</title><meta property="og:title" content
2024-09-30 13:16:49 UTC	2114	IN	Data Raw: 62 5f 67 65 6e 65 72 69 63 2e 70 6e 67 27 2f 3e 3c 2f 61 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 3c 2f 74 64 3e 0d 0a 09 09 3c 74 64 20 63 6c 61 73 73 3d 22 68 74 6f 70 22 3e 20 20 20 20 20 20 20 20 20 20 20 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 69 63 22 3e 0d 0a 3c 21 2d 2d 20 42 61 6e 6e 65 72 20 68 6f 6d 65 20 72 69 67 68 74 3a 20 61 64 70 75 73 68 75 70 20 37 20 2d 2d 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 35 63 66 35 30 65 38 2d 37 38 36 62 2d 34 63 37 34 2d 62 65 62 30 2d 63 65 34 38 38 32 35 34 35 36 38 39 22 20 63 6c 61 73 73 3d 22 5f 61 70 5f 61 70 65 78 5f 61 64 22 20 6d 61 78 2d 68 65 69 67 68 74 3d 22 33 36 30 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 64 70 75 73 68 75 Data Ascii: b_generic.png'/></a></td></tr></table></td><td class="htop"> <div class="pic">... Banner home right: adpushup 7 --><div id="c5cf50e8-786b-4c74-beb0-ce4882545689" class="_ap_apex_ad" max-height="360"> <script> var adpushu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:50 UTC	643	OUT	GET /style.css?v=394 HTTP/1.1 Host: www.multitran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:50 UTC	270	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Type: text/css Last-Modified: Wed, 01 May 2024 13:33:25 GMT Accept-Ranges: bytes ETag: "c392d124cc9bda1:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:50 GMT Connection: close Content-Length: 30672
2024-09-30 13:16:50 UTC	16114	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 20 20 3b 0a 7d 0a 0a 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 61 63 63 65 6e 74 2d 6c 69 67 68 74 3a 20 23 34 32 37 44 42 31 3b 0a 20 20 20 20 2d 2d 61 63 63 65 6e 74 2d 64 61 72 6b 3a 20 23 31 39 34 41 37 36 3b 0a 20 20 20 20 2f 2a 20 23 33 42 37 30 39 46 3b 20 2a 2f 0a 7d 0a 0a 62 6f 64 79 2c 0a 74 64 20 7b 0a 20 20 20 20 2f 2a 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 32 25 3b 20 20 2a 2f 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 2c 20 54 69 6d 65 73 2c 20 73 65 72 69 66 3b 0a 7d 0a 0a 6f 70 74 69 6f 6e 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 Data Ascii: body { ;}:root { --accent-light: #427DB1; --accent-dark: #194A76; /* #3B709F; /}body,td { / font-size: 102%; */ color: black; font-family: Times New Roman, Times, serif;}option { width: auto; overflow: hidd
2024-09-30 13:16:50 UTC	14558	IN	Data Raw: 68 74 73 65 6e 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 2e 35 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 2e 33 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 2e 31 65 6d 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6a 75 73 74 69 66 79 3b 0a 7d 0a 0a 2e 62 72 65 61 6b 6c 69 6e 6b 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 30 70 78 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 7d 0a 0a 2e 6e 65 78 74 6c 69 6e 65 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 Data Ascii: htsent { padding-left: .5em; padding-right: .3em; padding-bottom: .1em; vertical-align: top; text-align: justify;}.breaklink { width: 700px; overflow-wrap: break-word;}.nextline { padding-top: 10px; padding-bottom: 10px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49770	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:50 UTC	628	OUT	GET /script.js?v=34 HTTP/1.1 Host: www.multitran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:50 UTC	259	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 30 Sep 2024 11:43:33 GMT Accept-Ranges: bytes ETag: "c48a6efa2d13db1:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:50 GMT Connection: close Content-Length: 40317
2024-09-30 13:16:50 UTC	16125	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4f 4f 44 28 29 7b 74 68 69 73 2e 4f 44 3d 6e 65 77 20 41 72 72 61 79 28 29 3b 7d 4f 4f 44 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 30 51 3d 66 75 6e 63 74 69 6f 6e 28 4f 30 4f 29 7b 74 68 69 73 2e 4f 44 3d 4f 30 4f 3b 7d 3b 4f 4f 44 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 73 74 72 2c 4f 30 4f 2c 51 4f 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 68 69 73 2e 4f 44 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 4f 30 4f 2e 70 75 73 68 28 74 68 69 73 2e 4f 44 5b 69 5d 29 3b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 4f 28 4f 44 2c 44 2c 51 2c 51 4f 29 7b 74 68 69 73 2e 44 3d 44 3b 74 68 69 73 2e 51 3d 51 3b 74 68 69 73 2e 51 2e 6f 6e 62 6c 75 72 3d 74 68 69 73 2e 51 30 3b 74 68 69 73 2e 51 Data Ascii: function OOD(){this.OD=new Array();}OOD.prototype.O0Q=function(O0O){this.OD=O0O;};OOD.prototype.getMatches=function(str,O0O,QO){for(var i=0;i<this.OD.length;i++){O0O.push(this.OD[i]);}};function OO(OD,D,Q,QO){this.D=D;this.Q=Q;this.Q.onblur=this.Q0;this.Q
2024-09-30 13:16:50 UTC	16384	IN	Data Raw: 65 6e 74 49 64 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 20 3d 20 73 65 6c 65 63 74 69 6f 6e 2e 66 6f 63 75 73 4e 6f 64 65 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 68 61 72 43 6f 75 6e 74 20 3d 20 73 65 6c 65 63 74 69 6f 6e 2e 66 6f 63 75 73 4f 66 66 73 65 74 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 6e 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 6f 64 65 2e 69 64 20 3d 3d 3d 20 70 61 72 65 6e 74 49 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 6f 64 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e Data Ascii: entId)) { node = selection.focusNode; charCount = selection.focusOffset; while (node) { if (node.id === parentId) { break; } if (node.previousSiblin
2024-09-30 13:16:50 UTC	7808	IN	Data Raw: 6f 63 28 73 43 6d 64 2c 20 73 56 61 6c 75 65 29 20 7b 0a 20 20 69 66 20 28 76 61 6c 69 64 61 74 65 4d 6f 64 65 28 29 29 20 7b 20 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 65 78 65 63 43 6f 6d 6d 61 6e 64 28 73 43 6d 64 2c 20 66 61 6c 73 65 2c 20 73 56 61 6c 75 65 29 3b 20 6f 44 6f 63 2e 66 6f 63 75 73 28 29 3b 20 0a 20 20 20 7d 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 4d 6f 64 65 28 29 20 7b 0a 20 20 69 66 20 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 46 6f 72 6d 2e 73 77 69 74 63 68 4d 6f 64 65 2e 63 68 65 63 6b 65 64 29 20 7b 20 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 20 0a 20 20 20 20 7d 0a 20 20 61 6c 65 72 74 28 22 55 6e 63 68 65 63 6b 20 5c 22 53 68 6f 77 20 48 54 4d 4c 5c 22 2e 22 29 3b 0a 20 20 6f 44 6f 63 2e 66 6f 63 Data Ascii: oc(sCmd, sValue) { if (validateMode()) { document.execCommand(sCmd, false, sValue); oDoc.focus(); }}function validateMode() { if (!document.compForm.switchMode.checked) { return true; } alert("Uncheck \"Show HTML\"."); oDoc.foc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:50 UTC	687	OUT	GET /gif/logoe.gif HTTP/1.1 Host: www.multitran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:50 UTC	270	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Type: image/gif Last-Modified: Tue, 18 Aug 2015 13:36:17 GMT Accept-Ranges: bytes ETag: "73c34cdcbad9d01:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:50 GMT Connection: close Content-Length: 3833
2024-09-30 13:16:50 UTC	3833	IN	Data Raw: 47 49 46 38 39 61 fc 00 5a 00 f7 00 00 00 00 00 ff ff ff 19 17 18 36 34 35 53 51 52 70 6e 6f f1 f0 f1 d4 d3 d4 b7 b6 b7 9a 99 9a 41 93 d5 55 9e d9 7c b4 e2 00 6d bf 00 6c bd 00 6b bc 07 72 c1 0a 72 c1 11 75 c2 20 7f c7 22 85 ce 23 84 cb 24 81 c8 2e 8c d2 30 8a cc 30 88 cb 30 87 c9 36 8f d3 35 8b cf 39 8d cd 3d 92 d5 40 93 d0 40 92 cf 40 90 ce 40 90 cd 46 96 d6 45 94 d2 48 97 d6 4c 9a d8 4d 98 d1 5d a3 db 60 a5 d9 60 a3 d6 66 a8 dc 6d ad de 70 ad da 77 b3 e0 81 b8 e2 7f b5 de 85 bc e5 81 b7 df 8c be e3 99 c5 e6 9f c7 e6 aa cf eb af d1 eb b2 d4 ed bf db f0 bf da ef c6 df f2 00 75 c6 00 76 c6 00 76 c5 00 74 c4 00 73 c3 00 71 c2 00 70 c1 00 6f c0 01 79 ca 01 73 c4 02 77 c7 03 7a ca 03 79 c9 03 72 c2 04 7a ca 05 7c cc 05 78 c7 06 7d cc 07 7e cd 09 7c ca 0f 7b Data Ascii: GIF89aZ645SQRpnoAU\|mlkrru "#$.000659=@@@@FEHLM]``fmpwuvvtsqpoyswzyrz\|x}~\|{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49773	142.250.185.142	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:50 UTC	736	OUT	GET /intl/en_us/badges/static/images/badges/en_badge_web_generic.png HTTP/1.1 Host: play.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:50 UTC	831	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/play_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/play_google" Report-To: {"group":"uxe-owners-acl/play_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/play_google"}]} Content-Length: 4904 Date: Mon, 30 Sep 2024 13:16:50 GMT Expires: Mon, 30 Sep 2024 13:16:50 GMT Cache-Control: private, max-age=0 Last-Modified: Thu, 04 Aug 2022 06:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:16:50 UTC	559	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 86 00 00 00 fa 08 03 00 00 00 0b 2b 76 d8 00 00 01 dd 50 4c 54 45 47 70 4c 57 57 57 5e 5e 5e 66 66 66 6e 6e 6e 61 61 61 78 78 78 94 94 94 a6 a6 a6 8d 8d 8d 73 73 73 5c 5c 5c 9d 9d 9d 84 84 84 92 92 92 68 68 68 49 49 49 2a 2a 2a 15 15 15 00 00 00 1f 1f 1f 73 73 73 9c 9c 9c 34 34 34 7d 7d 7d 87 87 87 3e 3e 3e 53 53 53 59 59 59 6a 6a 6a 0a 0a 0a 7d 7d 7d 5e 5e 5e 20 20 20 40 40 40 70 70 70 10 10 10 80 80 80 60 60 60 30 30 30 50 50 50 07 15 0a 17 4a 24 1d 5f 2f 27 7e 3e 24 74 39 1a 54 2a 10 35 1a b3 b3 b3 e6 e6 e6 ea ea ea ff ff ff e2 e2 e2 91 91 91 dd dd dd f2 f2 f2 c5 c5 c5 ec ec ec f8 f8 f8 e3 e3 e3 ee ee ee d9 d9 d9 2a 89 44 34 a8 53 31 9e 4e 03 0b 05 d1 d1 d1 f3 f3 f3 9f 9f 9f d5 d5 d5 ef ef ef f7 Data Ascii: PNGIHDR+vPLTEGpLWWW^^^fffnnnaaaxxxsss\\\hhhIII**sss444}}}>>>SSSYYYjjj}}}^^^ @@@ppp```000PPPJ$_/'~>$t9T5*D4S1N
2024-09-30 13:16:50 UTC	1390	IN	Data Raw: e6 ff fd 4e 7d ae 0a 00 00 10 da 49 44 41 54 78 01 ec d8 55 62 eb 40 10 45 c1 91 49 37 31 ca 82 30 ec 7f 93 8f 19 43 e3 af aa 35 9c 81 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f a0 99 cd 17 5f c0 72 d6 94 93 5b ae da fc 04 ce ce d7 e5 84 9a 45 1b f8 83 76 5e 4e 65 be 09 fc 45 3b 2b a7 d0 6c f3 c9 6e 7f e8 ba 63 0f 1f 0c 5d 77 18 a7 7c 72 de 94 ea d6 6d 3e da 77 3d fc e2 e2 32 1f 9d 35 d5 2b dc e4 83 f1 d8 c3 1f 74 57 f9 a0 5d 9f a0 c2 e9 ba 87 bf b8 a9 7f 1f 36 6d 92 69 e8 e1 af ba 29 c9 59 a9 68 ab 42 fe 6b 98 92 9c 97 6a e6 2a e4 09 2e f2 c1 ac 54 d2 6c 92 5c f7 3c 81 ff e1 b6 54 b2 48 32 f6 f0 5f bb 8a d7 61 9b e4 d8 c3 7f 75 f5 ae c3 65 92 7d 0f 4f 70 95 e4 b6 d4 b0 4a d2 f5 f0 04 d7 49 ee 6a bd c9 bb 1e 9e e2 Data Ascii: N}IDATxUb@EI710C5?_r[Ev^NeE;+lnc]w\|rm>w=25+tW]6mi)YhBkj*.Tl\<TH2_aue}OpJIj
2024-09-30 13:16:50 UTC	1390	IN	Data Raw: 2f b3 45 30 54 38 6c 66 de 59 79 2a 64 1a 0c 17 0e 95 0a 17 f9 ad 90 65 30 5c 38 d4 2a 5c 54 c5 42 86 c1 70 e1 50 ad 70 51 97 19 ec 3d 1c 2c 2f f5 72 0e 25 30 bc ec f0 b2 c2 c3 f2 a7 d6 f7 dc 9c bd fb 48 73 1e b7 d6 00 bc 88 b3 02 90 08 9c 63 25 98 00 93 7b 6d 4f 9c 73 b6 89 9f 74 ec f0 e7 9c c3 56 9d 2a 7d a4 0e a4 c3 2a ea 79 0a 25 7e 13 bb bb a1 fc 0a 81 3a 40 f5 c1 5f 25 66 ab e9 b4 b3 31 44 87 bc 42 3e f7 ae 7b f1 46 e5 e4 77 32 74 74 1b a2 e0 e4 c5 e5 31 5c ac 2b b6 53 1b 43 c6 a1 44 21 e6 cf 74 8d 34 c1 f3 89 b7 01 62 e3 cf 12 e8 3a f1 7c d2 60 f9 76 cd c6 90 73 88 0a 25 f9 03 2d 8d 1a 7c 39 41 d5 ce b0 98 68 37 86 62 87 a8 f0 28 0e db e4 f7 25 b5 b5 33 2c 67 74 1b 43 91 43 54 28 cd a2 4b 88 7a f0 87 92 75 fd 0c 4b b1 1b 43 b1 43 54 28 c8 4f 96 28 Data Ascii: /E0T8lfYyde0\8\TBpPpQ=,/r%0Hsc%{mOstV}y%~:@_%f1DB>{Fw2tt1\+SCD!t4b:\|`vs%-\|9Ah7b(%3,gtCCT(KzuKCCT(O(
2024-09-30 13:16:50 UTC	1390	IN	Data Raw: 65 28 51 08 0e 6f 74 c6 70 bb e4 4d 83 b7 1f 10 95 8a 76 0c 4c 9c 68 37 d0 b5 76 e5 fe 63 28 30 34 30 4d 35 51 72 2a a8 68 a8 64 da d9 e4 4b 99 f6 eb e3 f4 1f 23 55 ca 10 14 ca 73 ff 01 dd 20 b0 86 90 b7 8d 44 5a 70 a1 27 23 1c 0e d8 25 24 53 9e 19 98 03 0c bb 26 7b 08 d4 7a ad c4 b0 f7 e5 cc 2a 87 dd 64 30 30 d5 32 5c ae f0 e1 23 ba 61 a2 7c 42 dd a3 af 32 43 a8 8a d9 c7 d0 ec 32 34 72 86 17 f8 a2 9f 24 58 82 ac c0 d0 f8 3d 99 75 ff 79 32 35 d6 95 32 5c ae f0 f1 13 12 46 30 2a 8f 62 b1 f6 16 31 f4 4c cd ed 8a 0c 1b 2f 60 a8 50 de 00 26 6b 64 b8 5c e1 d3 67 74 f3 e8 c4 97 09 96 79 79 7d ac 41 39 2f 1b 94 99 65 c9 da 0c 03 dc fd d9 0d 9b 76 9c 32 84 56 2d 90 74 55 32 5c ae f0 fe 73 5a 23 f0 81 3a 99 d7 81 56 5d a2 74 44 b6 dc 21 67 21 c3 0c ba d6 63 e8 d8 Data Ascii: e(QotpMvLh7vc(040M5QrhdK#Us DZp'#%$S&{zd002\#a\|B2C24r$X=uy252\F0*b1L/`P&kd\gtyy}A9/ev2V-tU2\sZ#:V]tD!g!c
2024-09-30 13:16:50 UTC	175	IN	Data Raw: 92 4c 43 ff 45 70 91 67 e6 a5 9a ed 57 f7 10 86 29 c9 aa d4 33 6b bf b2 87 d0 4d 49 ce 4b 4d eb 4d 92 e9 ba ff 02 f4 c2 9c cf 4a fd 3d cc 78 ec 3f 01 ba ab 3c d3 ae 4b 65 eb 36 cf ed bb 1e 3e 70 71 99 fa bf f0 a5 d9 36 2f ec f6 87 ae 3b f6 f0 cc d0 75 87 71 ca 0b ab 59 39 85 c5 26 f0 19 ed bc 9c c8 6c d9 06 3e a1 5d 94 53 6a ce da c0 7b ce 57 eb 72 72 b3 f9 62 09 af 34 f3 59 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 de 7a 0a d6 5a ca ea 55 65 24 cc 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: LCEpgW)3kMIKMMJ=x?<Ke6>pq6/;uqY9&l>]Sj{Wrrb4YzZUe$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49776	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:51 UTC	354	OUT	GET /gif/logoe.gif HTTP/1.1 Host: www.multitran.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:51 UTC	270	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Type: image/gif Last-Modified: Tue, 18 Aug 2015 13:36:17 GMT Accept-Ranges: bytes ETag: "73c34cdcbad9d01:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:51 GMT Connection: close Content-Length: 3833
2024-09-30 13:16:51 UTC	3833	IN	Data Raw: 47 49 46 38 39 61 fc 00 5a 00 f7 00 00 00 00 00 ff ff ff 19 17 18 36 34 35 53 51 52 70 6e 6f f1 f0 f1 d4 d3 d4 b7 b6 b7 9a 99 9a 41 93 d5 55 9e d9 7c b4 e2 00 6d bf 00 6c bd 00 6b bc 07 72 c1 0a 72 c1 11 75 c2 20 7f c7 22 85 ce 23 84 cb 24 81 c8 2e 8c d2 30 8a cc 30 88 cb 30 87 c9 36 8f d3 35 8b cf 39 8d cd 3d 92 d5 40 93 d0 40 92 cf 40 90 ce 40 90 cd 46 96 d6 45 94 d2 48 97 d6 4c 9a d8 4d 98 d1 5d a3 db 60 a5 d9 60 a3 d6 66 a8 dc 6d ad de 70 ad da 77 b3 e0 81 b8 e2 7f b5 de 85 bc e5 81 b7 df 8c be e3 99 c5 e6 9f c7 e6 aa cf eb af d1 eb b2 d4 ed bf db f0 bf da ef c6 df f2 00 75 c6 00 76 c6 00 76 c5 00 74 c4 00 73 c3 00 71 c2 00 70 c1 00 6f c0 01 79 ca 01 73 c4 02 77 c7 03 7a ca 03 79 c9 03 72 c2 04 7a ca 05 7c cc 05 78 c7 06 7d cc 07 7e cd 09 7c ca 0f 7b Data Ascii: GIF89aZ645SQRpnoAU\|mlkrru "#$.000659=@@@@FEHLM]``fmpwuvvtsqpoyswzyrz\|x}~\|{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49775	216.58.212.142	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:51 UTC	499	OUT	GET /intl/en_us/badges/static/images/badges/en_badge_web_generic.png HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:51 UTC	831	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/play_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/play_google" Report-To: {"group":"uxe-owners-acl/play_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/play_google"}]} Content-Length: 4904 Date: Mon, 30 Sep 2024 13:16:51 GMT Expires: Mon, 30 Sep 2024 13:16:51 GMT Cache-Control: private, max-age=0 Last-Modified: Thu, 04 Aug 2022 06:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:16:51 UTC	559	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 86 00 00 00 fa 08 03 00 00 00 0b 2b 76 d8 00 00 01 dd 50 4c 54 45 47 70 4c 57 57 57 5e 5e 5e 66 66 66 6e 6e 6e 61 61 61 78 78 78 94 94 94 a6 a6 a6 8d 8d 8d 73 73 73 5c 5c 5c 9d 9d 9d 84 84 84 92 92 92 68 68 68 49 49 49 2a 2a 2a 15 15 15 00 00 00 1f 1f 1f 73 73 73 9c 9c 9c 34 34 34 7d 7d 7d 87 87 87 3e 3e 3e 53 53 53 59 59 59 6a 6a 6a 0a 0a 0a 7d 7d 7d 5e 5e 5e 20 20 20 40 40 40 70 70 70 10 10 10 80 80 80 60 60 60 30 30 30 50 50 50 07 15 0a 17 4a 24 1d 5f 2f 27 7e 3e 24 74 39 1a 54 2a 10 35 1a b3 b3 b3 e6 e6 e6 ea ea ea ff ff ff e2 e2 e2 91 91 91 dd dd dd f2 f2 f2 c5 c5 c5 ec ec ec f8 f8 f8 e3 e3 e3 ee ee ee d9 d9 d9 2a 89 44 34 a8 53 31 9e 4e 03 0b 05 d1 d1 d1 f3 f3 f3 9f 9f 9f d5 d5 d5 ef ef ef f7 Data Ascii: PNGIHDR+vPLTEGpLWWW^^^fffnnnaaaxxxsss\\\hhhIII**sss444}}}>>>SSSYYYjjj}}}^^^ @@@ppp```000PPPJ$_/'~>$t9T5*D4S1N
2024-09-30 13:16:51 UTC	1390	IN	Data Raw: e6 ff fd 4e 7d ae 0a 00 00 10 da 49 44 41 54 78 01 ec d8 55 62 eb 40 10 45 c1 91 49 37 31 ca 82 30 ec 7f 93 8f 19 43 e3 af aa 35 9c 81 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f a0 99 cd 17 5f c0 72 d6 94 93 5b ae da fc 04 ce ce d7 e5 84 9a 45 1b f8 83 76 5e 4e 65 be 09 fc 45 3b 2b a7 d0 6c f3 c9 6e 7f e8 ba 63 0f 1f 0c 5d 77 18 a7 7c 72 de 94 ea d6 6d 3e da 77 3d fc e2 e2 32 1f 9d 35 d5 2b dc e4 83 f1 d8 c3 1f 74 57 f9 a0 5d 9f a0 c2 e9 ba 87 bf b8 a9 7f 1f 36 6d 92 69 e8 e1 af ba 29 c9 59 a9 68 ab 42 fe 6b 98 92 9c 97 6a e6 2a e4 09 2e f2 c1 ac 54 d2 6c 92 5c f7 3c 81 ff e1 b6 54 b2 48 32 f6 f0 5f bb 8a d7 61 9b e4 d8 c3 7f 75 f5 ae c3 65 92 7d 0f 4f 70 95 e4 b6 d4 b0 4a d2 f5 f0 04 d7 49 ee 6a bd c9 bb 1e 9e e2 Data Ascii: N}IDATxUb@EI710C5?_r[Ev^NeE;+lnc]w\|rm>w=25+tW]6mi)YhBkj*.Tl\<TH2_aue}OpJIj
2024-09-30 13:16:51 UTC	1390	IN	Data Raw: 2f b3 45 30 54 38 6c 66 de 59 79 2a 64 1a 0c 17 0e 95 0a 17 f9 ad 90 65 30 5c 38 d4 2a 5c 54 c5 42 86 c1 70 e1 50 ad 70 51 97 19 ec 3d 1c 2c 2f f5 72 0e 25 30 bc ec f0 b2 c2 c3 f2 a7 d6 f7 dc 9c bd fb 48 73 1e b7 d6 00 bc 88 b3 02 90 08 9c 63 25 98 00 93 7b 6d 4f 9c 73 b6 89 9f 74 ec f0 e7 9c c3 56 9d 2a 7d a4 0e a4 c3 2a ea 79 0a 25 7e 13 bb bb a1 fc 0a 81 3a 40 f5 c1 5f 25 66 ab e9 b4 b3 31 44 87 bc 42 3e f7 ae 7b f1 46 e5 e4 77 32 74 74 1b a2 e0 e4 c5 e5 31 5c ac 2b b6 53 1b 43 c6 a1 44 21 e6 cf 74 8d 34 c1 f3 89 b7 01 62 e3 cf 12 e8 3a f1 7c d2 60 f9 76 cd c6 90 73 88 0a 25 f9 03 2d 8d 1a 7c 39 41 d5 ce b0 98 68 37 86 62 87 a8 f0 28 0e db e4 f7 25 b5 b5 33 2c 67 74 1b 43 91 43 54 28 cd a2 4b 88 7a f0 87 92 75 fd 0c 4b b1 1b 43 b1 43 54 28 c8 4f 96 28 Data Ascii: /E0T8lfYyde0\8\TBpPpQ=,/r%0Hsc%{mOstV}y%~:@_%f1DB>{Fw2tt1\+SCD!t4b:\|`vs%-\|9Ah7b(%3,gtCCT(KzuKCCT(O(
2024-09-30 13:16:51 UTC	1390	IN	Data Raw: 65 28 51 08 0e 6f 74 c6 70 bb e4 4d 83 b7 1f 10 95 8a 76 0c 4c 9c 68 37 d0 b5 76 e5 fe 63 28 30 34 30 4d 35 51 72 2a a8 68 a8 64 da d9 e4 4b 99 f6 eb e3 f4 1f 23 55 ca 10 14 ca 73 ff 01 dd 20 b0 86 90 b7 8d 44 5a 70 a1 27 23 1c 0e d8 25 24 53 9e 19 98 03 0c bb 26 7b 08 d4 7a ad c4 b0 f7 e5 cc 2a 87 dd 64 30 30 d5 32 5c ae f0 e1 23 ba 61 a2 7c 42 dd a3 af 32 43 a8 8a d9 c7 d0 ec 32 34 72 86 17 f8 a2 9f 24 58 82 ac c0 d0 f8 3d 99 75 ff 79 32 35 d6 95 32 5c ae f0 f1 13 12 46 30 2a 8f 62 b1 f6 16 31 f4 4c cd ed 8a 0c 1b 2f 60 a8 50 de 00 26 6b 64 b8 5c e1 d3 67 74 f3 e8 c4 97 09 96 79 79 7d ac 41 39 2f 1b 94 99 65 c9 da 0c 03 dc fd d9 0d 9b 76 9c 32 84 56 2d 90 74 55 32 5c ae f0 fe 73 5a 23 f0 81 3a 99 d7 81 56 5d a2 74 44 b6 dc 21 67 21 c3 0c ba d6 63 e8 d8 Data Ascii: e(QotpMvLh7vc(040M5QrhdK#Us DZp'#%$S&{zd002\#a\|B2C24r$X=uy252\F0*b1L/`P&kd\gtyy}A9/ev2V-tU2\sZ#:V]tD!g!c
2024-09-30 13:16:51 UTC	175	IN	Data Raw: 92 4c 43 ff 45 70 91 67 e6 a5 9a ed 57 f7 10 86 29 c9 aa d4 33 6b bf b2 87 d0 4d 49 ce 4b 4d eb 4d 92 e9 ba ff 02 f4 c2 9c cf 4a fd 3d cc 78 ec 3f 01 ba ab 3c d3 ae 4b 65 eb 36 cf ed bb 1e 3e 70 71 99 fa bf f0 a5 d9 36 2f ec f6 87 ae 3b f6 f0 cc d0 75 87 71 ca 0b ab 59 39 85 c5 26 f0 19 ed bc 9c c8 6c d9 06 3e a1 5d 94 53 6a ce da c0 7b ce 57 eb 72 72 b3 f9 62 09 af 34 f3 59 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 de 7a 0a d6 5a ca ea 55 65 24 cc 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: LCEpgW)3kMIKMMJ=x?<Ke6>pq6/;uqY9&l>]Sj{Wrrb4YzZUe$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49778	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:51 UTC	355	OUT	GET /script.js?v=34 HTTP/1.1 Host: www.multitran.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:51 UTC	259	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 30 Sep 2024 11:43:33 GMT Accept-Ranges: bytes ETag: "c48a6efa2d13db1:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:51 GMT Connection: close Content-Length: 40317
2024-09-30 13:16:51 UTC	16125	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4f 4f 44 28 29 7b 74 68 69 73 2e 4f 44 3d 6e 65 77 20 41 72 72 61 79 28 29 3b 7d 4f 4f 44 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 30 51 3d 66 75 6e 63 74 69 6f 6e 28 4f 30 4f 29 7b 74 68 69 73 2e 4f 44 3d 4f 30 4f 3b 7d 3b 4f 4f 44 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 73 74 72 2c 4f 30 4f 2c 51 4f 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 68 69 73 2e 4f 44 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 4f 30 4f 2e 70 75 73 68 28 74 68 69 73 2e 4f 44 5b 69 5d 29 3b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 4f 28 4f 44 2c 44 2c 51 2c 51 4f 29 7b 74 68 69 73 2e 44 3d 44 3b 74 68 69 73 2e 51 3d 51 3b 74 68 69 73 2e 51 2e 6f 6e 62 6c 75 72 3d 74 68 69 73 2e 51 30 3b 74 68 69 73 2e 51 Data Ascii: function OOD(){this.OD=new Array();}OOD.prototype.O0Q=function(O0O){this.OD=O0O;};OOD.prototype.getMatches=function(str,O0O,QO){for(var i=0;i<this.OD.length;i++){O0O.push(this.OD[i]);}};function OO(OD,D,Q,QO){this.D=D;this.Q=Q;this.Q.onblur=this.Q0;this.Q
2024-09-30 13:16:51 UTC	16384	IN	Data Raw: 65 6e 74 49 64 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 20 3d 20 73 65 6c 65 63 74 69 6f 6e 2e 66 6f 63 75 73 4e 6f 64 65 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 68 61 72 43 6f 75 6e 74 20 3d 20 73 65 6c 65 63 74 69 6f 6e 2e 66 6f 63 75 73 4f 66 66 73 65 74 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 6e 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 6f 64 65 2e 69 64 20 3d 3d 3d 20 70 61 72 65 6e 74 49 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 6f 64 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e Data Ascii: entId)) { node = selection.focusNode; charCount = selection.focusOffset; while (node) { if (node.id === parentId) { break; } if (node.previousSiblin
2024-09-30 13:16:51 UTC	7808	IN	Data Raw: 6f 63 28 73 43 6d 64 2c 20 73 56 61 6c 75 65 29 20 7b 0a 20 20 69 66 20 28 76 61 6c 69 64 61 74 65 4d 6f 64 65 28 29 29 20 7b 20 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 65 78 65 63 43 6f 6d 6d 61 6e 64 28 73 43 6d 64 2c 20 66 61 6c 73 65 2c 20 73 56 61 6c 75 65 29 3b 20 6f 44 6f 63 2e 66 6f 63 75 73 28 29 3b 20 0a 20 20 20 7d 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 4d 6f 64 65 28 29 20 7b 0a 20 20 69 66 20 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 46 6f 72 6d 2e 73 77 69 74 63 68 4d 6f 64 65 2e 63 68 65 63 6b 65 64 29 20 7b 20 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 20 0a 20 20 20 20 7d 0a 20 20 61 6c 65 72 74 28 22 55 6e 63 68 65 63 6b 20 5c 22 53 68 6f 77 20 48 54 4d 4c 5c 22 2e 22 29 3b 0a 20 20 6f 44 6f 63 2e 66 6f 63 Data Ascii: oc(sCmd, sValue) { if (validateMode()) { document.execCommand(sCmd, false, sValue); oDoc.focus(); }}function validateMode() { if (!document.compForm.switchMode.checked) { return true; } alert("Uncheck \"Show HTML\"."); oDoc.foc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49784	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:51 UTC	698	OUT	GET /gif/Appstore/ios_eng.svg HTTP/1.1 Host: www.multitran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:51 UTC	249	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Wed, 29 Apr 2020 11:41:56 GMT Accept-Ranges: bytes ETag: "0da442f1b1ed61:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:51 GMT Connection: close Content-Length: 10804
2024-09-30 13:16:51 UTC	10804	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 6c 69 76 65 74 79 70 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 5f 6f 6e 5f 74 68 65 5f 41 70 70 5f 53 74 6f 72 65 5f 42 61 64 67 65 5f 55 53 2d 55 4b 5f 52 47 42 5f 62 6c 6b 5f 34 53 56 47 5f 30 39 32 39 31 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 30 2e 31 33 34 37 37 2c 30 48 39 2e 35 33 34 36 38 63 2d 2e 33 36 36 37 Data Ascii: <svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40"> <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title> <g> <g> <g> <path d="M110.13477,0H9.53468c-.3667

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49785	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:51 UTC	684	OUT	GET /gif/bg.gif HTTP/1.1 Host: www.multitran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:51 UTC	270	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Type: image/gif Last-Modified: Mon, 23 Mar 2015 18:05:45 GMT Accept-Ranges: bytes ETag: "798b34fc9365d01:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:51 GMT Connection: close Content-Length: 2432
2024-09-30 13:16:51 UTC	2432	IN	Data Raw: 47 49 46 38 39 61 27 00 2b 00 f7 00 00 ea e3 e3 eb e5 e5 ec e6 e6 ef e7 e9 eb e9 e9 eb eb eb ed e8 e9 ee e8 e9 ed e9 ea ef ea ea ec ec ec ed ed ed ef ed ec ee ee ee ef ee ee ef ef ef f0 e9 e9 f0 e9 ea f1 eb ea f3 eb ea f3 eb eb f3 ec eb f1 eb ec f2 eb ec f1 ec ed f3 ed ed f1 ee ed f3 ee ed f1 ed ee f2 ed ee f1 ee ee f0 ef ee f1 ee ef f0 ef ef f1 ef ef f2 ee ee f2 ef ee f2 ee ef f2 ef ef f3 ef ef f4 ec ed f5 ee ed f4 ed ee f5 ef ee f6 ef ee f5 f0 ef f6 f0 ef f3 ef f0 f0 f0 f0 f1 f0 f0 f1 f1 f1 f2 f0 f0 f3 f0 f0 f3 f1 f0 f3 f0 f1 f2 f1 f1 f3 f1 f1 f3 f1 f2 f2 f2 f2 f3 f2 f2 f3 f3 f3 f4 f0 f0 f5 f0 f0 f4 f1 f0 f5 f1 f0 f4 f0 f1 f5 f0 f1 f4 f1 f1 f5 f1 f1 f6 f1 f0 f7 f1 f0 f6 f1 f1 f7 f1 f1 f4 f2 f1 f6 f2 f1 f5 f1 f2 f7 f1 f2 f4 f2 f2 f5 f2 f2 f5 f2 f3 f4 f3 Data Ascii: GIF89a'+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49787	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:51 UTC	541	OUT	GET /44090/adRecover.js HTTP/1.1 Host: delivery.adrecover.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:51 UTC	438	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 13104 Cache-Control: max-age=3600 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:51 GMT Expires: Mon, 30 Sep 2024 14:16:51 GMT Last-Modified: Mon, 30 Sep 2024 09:23:26 GMT Server: ECAcc (lhc/7904) Vary: Accept-Encoding X-AP-Device: DESKTOP X-AP-Geo: US X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 41240 Connection: close
2024-09-30 13:16:51 UTC	16383	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 35 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 76 65 72 3a 31 2c 66 65 65 64 62 61 63 6b 55 72 6c 3a 22 2f 2f 66 65 65 64 62 61 63 6b 2e 61 64 72 65 63 6f 76 65 72 2e 63 6f 6d 2f 41 52 57 65 62 53 65 72 76 69 63 65 2f 66 65 65 64 62 61 63 6b 22 2c 68 62 46 65 65 64 62 61 63 6b 55 72 6c 3a 22 2f 2f 66 65 65 64 62 61 63 6b 2e 61 64 72 65 63 6f 76 65 72 2e 63 6f 6d 2f 41 72 48 62 57 65 62 53 65 72 76 69 63 65 2f 66 65 65 64 62 61 63 6b 22 2c 66 72 61 6d 65 44 6f 6d 61 69 6e 3a 22 2f 2f 64 65 6c 69 76 65 72 79 2e 61 64 72 65 63 6f 76 65 72 2e 63 6f 6d 22 2c 72 65 6e 64 65 72 65 72 49 66 72 61 6d 65 55 72 6c 3a 22 2f 72 65 63 6f 76 65 72 2e 68 74 6d 6c 22 2c 61 75 63 74 69 6f 6e 49 66 72 61 6d 65 55 72 6c 3a 22 Data Ascii: (()=>{var e={955:e=>{e.exports={ver:1,feedbackUrl:"//feedback.adrecover.com/ARWebService/feedback",hbFeedbackUrl:"//feedback.adrecover.com/ArHbWebService/feedback",frameDomain:"//delivery.adrecover.com",rendererIframeUrl:"/recover.html",auctionIframeUrl:"
2024-09-30 13:16:51 UTC	16383	IN	Data Raw: 74 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 3d 22 77 65 62 6b 69 74 22 3a 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 3d 22 6d 6f 7a 22 3a 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 3d 22 6d 73 22 3a 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 68 61 73 46 6f 63 75 73 3f 6e 2e 74 79 70 65 3d 22 62 6c 75 72 22 3a 28 6e 2e 74 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 75 70 70 6f 72 74 65 64 3d 21 31 29 2c 6e 2e 76 65 6e 64 6f 72 50 72 65 66 69 78 3d 74 2c 6e 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 4b 65 79 3d 74 3f 74 2b 22 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 3a 22 76 Data Ascii: t.webkitVisibilityState?t="webkit":void 0!==document.mozVisibilityState?t="moz":void 0!==document.msVisibilityState?t="ms":void 0!==document.hasFocus?n.type="blur":(n.type=null,n.supported=!1),n.vendorPrefix=t,n.visibilityStateKey=t?t+"VisibilityState":"v
2024-09-30 13:16:51 UTC	8474	IN	Data Raw: 22 6e 65 74 77 6f 72 6b 49 64 22 3a 22 39 39 36 39 22 2c 22 73 69 74 65 49 64 22 3a 22 32 30 30 31 34 30 30 22 2c 22 75 6e 69 74 49 64 22 3a 22 31 31 38 30 34 22 2c 22 75 6e 69 74 4e 61 6d 65 22 3a 22 63 6e 73 6d 62 6c 2d 61 75 64 69 6f 2d 33 30 30 78 32 35 30 2d 73 6c 69 64 65 72 22 7d 2c 22 63 72 69 74 65 6f 22 3a 7b 22 6e 61 6d 65 22 3a 22 63 72 69 74 65 6f 22 2c 22 7a 6f 6e 65 49 64 22 3a 22 31 34 31 36 35 32 36 22 7d 2c 22 66 6c 6f 6f 72 50 72 69 63 65 22 3a 22 22 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 78 22 3a 7b 22 6e 61 6d 65 22 3a 22 69 78 22 2c 22 73 69 74 65 49 64 22 3a 22 39 33 37 30 34 31 22 7d 2c 22 6e 61 6d 65 22 3a 22 68 65 61 64 65 72 42 69 64 64 69 6e 67 22 2c 22 6e 6f 62 69 64 22 3a 7b 22 6e 61 6d 65 22 3a 22 6e 6f Data Ascii: "networkId":"9969","siteId":"2001400","unitId":"11804","unitName":"cnsmbl-audio-300x250-slider"},"criteo":{"name":"criteo","zoneId":"1416526"},"floorPrice":"","isEnabled":true,"ix":{"name":"ix","siteId":"937041"},"name":"headerBidding","nobid":{"name":"no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49788	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:51 UTC	566	OUT	GET /42845/adpushup.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.multitran.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:51 UTC	440	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 437896 Cache-Control: max-age=3600 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:51 GMT Expires: Mon, 30 Sep 2024 14:16:51 GMT Last-Modified: Wed, 25 Sep 2024 10:52:22 GMT Server: ECAcc (lhc/7955) Vary: Accept-Encoding X-AP-Device: DESKTOP X-AP-Geo: US X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 868321 Connection: close
2024-09-30 13:16:51 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 72 5b 65 5d 29 72 65 74 75 72 6e 20 72 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 72 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6e 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 69 2e 72 3d 66 75 6e Data Ascii: !function(n){var r={};function i(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.m=n,i.c=r,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=fun
2024-09-30 13:16:51 UTC	1	IN	Data Raw: 3d Data Ascii: =
2024-09-30 13:16:51 UTC	16383	IN	Data Raw: 70 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 61 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 66 29 3a 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 66 2c 6f 28 65 2c 69 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 68 29 2c 65 7d 2c 61 2e 61 77 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 5f 5f 61 77 61 69 74 3a 65 7d 7d 2c 45 28 6d 2e 70 72 6f 74 6f 74 79 70 65 29 2c Data Ascii: p\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},a.mark=function(e){return Object.setPrototypeOf?Object.setPrototypeOf(e,f):(e.__proto__=f,o(e,i,"GeneratorFunction")),e.prototype=Object.create(h),e},a.awrap=function(e){return{__await:e}},E(m.prototype),
2024-09-30 13:16:51 UTC	16383	IN	Data Raw: 6f 70 65 72 74 69 65 73 28 72 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 69 29 29 3a 6f 28 4f 62 6a 65 63 74 28 69 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 69 2c 65 29 29 7d 29 7d 72 65 74 75 72 6e 20 72 7d 76 61 72 20 6e 3d 6e 28 31 32 29 2c 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 73 69 74 65 49 64 22 3a 34 32 38 34 35 2c 22 70 72 65 62 69 64 42 75 6e 64 6c 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 64 70 75 73 68 75 70 2e 63 6f 6d 2f 70 72 65 62 69 64 2f 70 62 2e 34 32 38 Data Ascii: operties(r,Object.getOwnPropertyDescriptors(i)):o(Object(i)).forEach(function(e){Object.defineProperty(r,e,Object.getOwnPropertyDescriptor(i,e))})}return r}var n=n(12),i=JSON.parse('{"siteId":42845,"prebidBundleUrl":"https://cdn.adpushup.com/prebid/pb.428
2024-09-30 13:16:51 UTC	16383	IN	Data Raw: 22 74 72 69 67 67 65 72 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 6f 75 6e 74 72 79 22 2c 22 6f 70 65 72 61 74 6f 72 22 3a 22 63 6f 6e 74 61 69 6e 22 2c 22 76 61 6c 75 65 22 3a 5b 22 4c 59 22 2c 22 5a 4d 22 2c 22 4e 49 22 2c 22 56 45 22 2c 22 43 4d 22 2c 22 5a 57 22 2c 22 4d 4d 22 2c 22 4d 47 22 2c 22 4a 4d 22 2c 22 4c 41 22 2c 22 4e 50 22 2c 22 4d 4f 22 2c 22 47 55 22 2c 22 41 46 22 2c 22 42 57 22 2c 22 4a 45 22 2c 22 4d 52 22 2c 22 4c 4b 22 2c 22 54 44 22 2c 22 47 4e 22 2c 22 42 5a 22 2c 22 53 4e 22 2c 22 47 59 22 2c 22 53 4d 22 2c 22 42 49 22 5d 7d 2c 7b 22 6b 65 79 22 3a 22 64 65 76 69 63 65 22 2c 22 6f 70 65 72 61 74 6f 72 22 3a 22 63 6f 6e 74 61 69 6e 22 2c 22 76 61 6c 75 65 22 3a 5b 22 64 65 73 6b 74 6f 70 22 5d 7d 5d 2c 22 69 73 41 75 74 6f 22 3a 74 Data Ascii: "triggers":[{"key":"country","operator":"contain","value":["LY","ZM","NI","VE","CM","ZW","MM","MG","JM","LA","NP","MO","GU","AF","BW","JE","MR","LK","TD","GN","BZ","SN","GY","SM","BI"]},{"key":"device","operator":"contain","value":["desktop"]}],"isAuto":t
2024-09-30 13:16:51 UTC	16383	IN	Data Raw: 5a 57 52 42 5a 46 4e 6c 62 47 56 6a 64 47 56 6b 49 69 78 6c 4b 53 78 6b 4b 48 51 70 66 57 4e 68 64 47 4e 6f 4b 47 55 70 65 32 51 6f 49 6d 4e 6f 59 57 6c 75 5a 57 51 74 63 32 56 30 64 58 41 74 5a 58 4a 79 62 33 49 69 4c 47 55 75 62 57 56 7a 63 32 46 6e 5a 53 6b 73 64 32 6c 75 5a 47 39 33 4c 6d 46 6b 63 48 56 7a 61 48 56 77 4c 6e 56 30 61 57 78 7a 4c 6d 78 76 5a 79 67 69 51 30 68 42 53 55 35 46 52 43 31 45 54 30 4e 4c 52 55 51 74 51 55 52 54 4c 55 56 53 55 6b 39 53 49 69 78 6c 4b 58 31 39 4b 43 6b 37 22 2c 22 63 6d 70 41 76 61 69 6c 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 64 67 54 65 73 74 46 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 41 75 74 6f 41 64 70 75 73 68 75 70 4c 61 62 65 6c 22 3a 66 61 6c 73 65 2c 22 65 Data Ascii: ZWRBZFNlbGVjdGVkIixlKSxkKHQpfWNhdGNoKGUpe2QoImNoYWluZWQtc2V0dXAtZXJyb3IiLGUubWVzc2FnZSksd2luZG93LmFkcHVzaHVwLnV0aWxzLmxvZygiQ0hBSU5FRC1ET0NLRUQtQURTLUVSUk9SIixlKX19KCk7","cmpAvailable":false,"dgTestFeedbackEnabled":true,"disableAutoAdpushupLabel":false,"e
2024-09-30 13:16:51 UTC	16383	IN	Data Raw: 37 31 31 34 22 2c 22 35 33 36 36 32 35 37 31 31 37 22 2c 22 35 33 36 36 32 35 37 31 32 30 22 2c 22 35 33 36 36 32 35 37 31 32 33 22 2c 22 35 33 36 36 32 35 37 31 32 36 22 2c 22 35 33 36 36 32 35 37 31 32 39 22 2c 22 35 33 36 36 32 35 37 31 33 32 22 2c 22 35 33 36 36 32 35 37 31 33 35 22 2c 22 35 33 36 36 32 35 37 31 33 38 22 2c 22 35 33 36 36 32 35 37 31 34 31 22 2c 22 35 33 36 36 32 35 37 31 34 34 22 2c 22 35 33 36 36 32 35 37 31 34 37 22 2c 22 35 33 36 36 32 35 37 31 35 30 22 2c 22 35 33 36 36 32 35 37 38 38 35 22 2c 22 35 33 36 36 32 35 37 38 39 37 22 2c 22 35 33 36 36 32 35 37 39 30 33 22 2c 22 35 33 36 36 32 35 37 39 30 39 22 2c 22 35 33 36 36 32 35 37 39 31 35 22 2c 22 35 33 36 36 32 35 38 30 34 31 22 2c 22 35 33 36 36 32 35 38 30 35 30 22 2c 22 35 Data Ascii: 7114","5366257117","5366257120","5366257123","5366257126","5366257129","5366257132","5366257135","5366257138","5366257141","5366257144","5366257147","5366257150","5366257885","5366257897","5366257903","5366257909","5366257915","5366258041","5366258050","5
2024-09-30 13:16:51 UTC	5	IN	Data Raw: 34 22 2c 22 36 Data Ascii: 4","6
2024-09-30 13:16:52 UTC	16383	IN	Data Raw: 30 31 33 33 30 39 35 38 37 22 2c 22 36 30 31 33 33 30 39 35 39 30 22 2c 22 36 30 31 33 33 30 39 35 39 33 22 2c 22 36 30 31 33 33 30 39 35 39 36 22 2c 22 36 30 31 33 33 30 39 36 32 39 22 2c 22 36 30 31 33 33 30 39 36 33 32 22 2c 22 36 30 31 33 33 30 39 36 33 35 22 2c 22 36 30 31 33 33 30 39 36 33 38 22 2c 22 36 30 31 33 33 30 39 36 34 31 22 2c 22 36 30 31 33 33 30 39 36 34 34 22 2c 22 36 30 31 33 33 30 39 36 36 35 22 2c 22 36 30 31 33 33 30 39 36 36 38 22 2c 22 36 30 31 33 33 30 39 36 37 31 22 2c 22 36 30 31 33 33 30 39 36 37 34 22 2c 22 36 30 31 33 33 30 39 38 33 30 22 2c 22 36 30 31 33 33 30 39 38 33 33 22 2c 22 36 30 31 33 33 30 39 38 36 39 22 2c 22 36 30 31 33 33 30 39 38 37 32 22 2c 22 36 30 31 33 33 30 39 38 37 35 22 2c 22 36 30 31 33 33 30 39 38 37 Data Ascii: 013309587","6013309590","6013309593","6013309596","6013309629","6013309632","6013309635","6013309638","6013309641","6013309644","6013309665","6013309668","6013309671","6013309674","6013309830","6013309833","6013309869","6013309872","6013309875","601330987
2024-09-30 13:16:52 UTC	16383	IN	Data Raw: 37 30 34 36 37 35 22 2c 22 36 33 37 33 37 30 34 36 37 38 22 2c 22 36 33 37 33 37 30 34 36 38 31 22 2c 22 36 33 37 33 37 30 34 36 38 34 22 2c 22 36 33 37 33 37 30 34 36 38 37 22 2c 22 36 33 37 33 37 30 34 36 39 30 22 2c 22 36 33 37 33 37 30 34 36 39 33 22 2c 22 36 33 37 33 37 30 34 36 39 36 22 2c 22 36 33 37 33 37 30 34 36 39 39 22 2c 22 36 33 37 33 37 30 34 37 30 32 22 2c 22 36 33 37 33 37 30 34 37 30 35 22 2c 22 36 33 37 33 37 30 34 37 30 38 22 2c 22 36 33 37 33 37 30 34 37 31 31 22 2c 22 36 33 37 33 37 30 34 37 31 34 22 2c 22 36 33 37 33 37 30 34 37 31 37 22 2c 22 36 33 37 33 37 30 34 38 34 30 22 2c 22 36 33 37 33 37 30 34 38 34 33 22 2c 22 36 33 37 33 37 30 34 38 34 36 22 2c 22 36 33 37 33 37 30 34 38 34 39 22 2c 22 36 33 37 33 37 30 34 38 35 32 22 2c Data Ascii: 704675","6373704678","6373704681","6373704684","6373704687","6373704690","6373704693","6373704696","6373704699","6373704702","6373704705","6373704708","6373704711","6373704714","6373704717","6373704840","6373704843","6373704846","6373704849","6373704852",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49793	151.101.194.137	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:52 UTC	535	OUT	GET /jquery-2.2.2.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:52 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 85656 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-14e98" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1740440 Date: Mon, 30 Sep 2024 13:16:52 GMT X-Served-By: cache-lga21979-LGA, cache-ewr-kewr1740061-EWR X-Cache: HIT, HIT X-Cache-Hits: 96, 0 X-Timer: S1727702212.377628,VS0,VE1 Vary: Accept-Encoding
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 32 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e Data Ascii: /! jQuery v2.2.2 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a documen
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 7c 7c 28 67 3d 7b 7d 29 2c 68 3d 3d 3d 69 26 26 28 67 3d 74 68 69 73 2c 68 2d 2d 29 3b 69 3e 68 3b 68 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 61 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 66 6f 72 28 62 20 69 6e 20 61 29 63 3d 67 5b 62 5d 2c 64 3d 61 5b 62 5d 2c 67 21 3d 3d 64 26 26 28 6a 26 26 64 26 26 28 6e 2e 69 73 50 6c 61 Data Ascii: ,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|n.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(a=arguments[h]))for(b in a)c=g[b],d=a[b],g!==d&&(j&&d&&(n.isPla
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 2d 22 29 2e 72 65 70 6c 61 63 65 28 71 2c 72 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 73 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e Data Ascii: -").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(s(a)){for(c=a.length;c>d;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 3d 6e 2e 74 79 70 65 28 61 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 63 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 21 31 3a 22 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 7d 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 67 61 28 29 2c 7a 3d 67 61 28 29 2c 41 3d 67 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d Data Ascii: =n.type(a);return"function"===c\|\|n.isWindow(a)?!1:"array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ga(),z=ga(),A=ga(),B=function(a,b){return a===
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 4b 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4c 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4c 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 58 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 59 3d 2f 5e 68 5c 64 24 2f 69 2c 5a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 24 3d 2f 5e 28 3f 3a 23 28 Data Ascii: i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+L+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+L+"((?:-\\d)?\\d)"+L+"\$\|)(?=[^-]\|$)","i")},X=/^(?:input\|select\|textarea\|button)$/i,Y=/^h\d$/i,Z=/^[^{]+\{\s*\[native \w/,$=/^(?:#(
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 61 61 2c 22 5c 5c 24 26 22 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 6b 3d 75 29 2c 72 3d 67 28 61 29 2c 68 3d 72 2e 6c 65 6e 67 74 68 2c 6c 3d 56 2e 74 65 73 74 28 6b 29 3f 22 23 22 2b 6b 3a 22 5b 69 64 3d 27 22 2b 6b 2b 22 27 5d 22 3b 77 68 69 6c 65 28 68 2d 2d 29 72 5b 68 5d 3d 6c 2b 22 20 22 2b 71 61 28 72 5b 68 5d 29 3b 73 3d 72 2e 6a 6f 69 6e 28 22 2c 22 29 2c 77 3d 5f 2e 74 65 73 74 28 61 29 26 26 6f 61 28 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 62 7d 69 66 28 73 29 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 77 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 Data Ascii: Case()){(k=b.getAttribute("id"))?k=k.replace(aa,"\\$&"):b.setAttribute("id",k=u),r=g(a),h=r.length,l=V.test(k)?"#"+k:"[id='"+k+"']";while(h--)r[h]=l+" "+qa(r[h]);s=r.join(","),w=_.test(a)&&oa(b.parentNode)\|\|b}if(s)try{return H.apply(d,w.querySelectorAll(s
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 3f 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 3a 21 31 7d 2c 6d 3d 66 61 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 65 2c 67 3d 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 76 3b 72 65 74 75 72 6e 20 67 21 3d 3d 6e 26 26 39 3d 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 6e 3d 67 2c 6f 3d 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 6e 29 2c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 65 2e 74 6f 70 21 3d 3d 65 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: ).documentElement;return b?"HTML"!==b.nodeName:!1},m=fa.setDocument=function(a){var b,e,g=a?a.ownerDocument\|\|a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=n.documentElement,p=!f(n),(e=n.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventL
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 6e 20 66 7d 2c 64 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 70 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 3a 76 6f 69 64 20 30 7d 2c 72 3d 5b 5d 2c 71 3d 5b 5d 2c 28 63 2e 71 73 61 3d 5a 2e 74 65 73 74 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 75 2b 22 27 3e 3c 2f 61 Data Ascii: n f},d.find.CLASS=c.getElementsByClassName&&function(a,b){return"undefined"!=typeof b.getElementsByClassName&&p?b.getElementsByClassName(a):void 0},r=[],q=[],(c.qsa=Z.test(n.querySelectorAll))&&(ia(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 6d 65 6e 74 3a 61 2c 64 3d 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 64 7c 7c 21 28 21 64 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 63 2e 63 6f 6e 74 61 69 6e 73 3f 63 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 64 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 77 68 69 6c 65 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 Data Ascii: ment:a,d=b&&b.parentNode;return a===d\|\|!(!d\|\|1!==d.nodeType\|\|!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!
2024-09-30 13:16:52 UTC	1378	IN	Data Raw: 72 48 61 6e 64 6c 65 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 66 3d 65 26 26 44 2e 63 61 6c 6c 28 64 2e 61 74 74 72 48 61 6e 64 6c 65 2c 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 65 28 61 2c 62 2c 21 70 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 66 3f 66 3a 63 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 21 70 3f 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 29 3a 28 66 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 62 29 29 26 26 66 2e 73 70 65 63 69 66 69 65 64 3f 66 2e 76 61 6c 75 65 3a 6e 75 6c 6c 7d 2c 66 61 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 Data Ascii: rHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCase())?e(a,b,!p):void 0;return void 0!==f?f:c.attributes\|\|!p?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},fa.error=function(a){throw new Error("Syntax error, unrecognize

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49792	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:52 UTC	365	OUT	GET /gif/Appstore/ios_eng.svg HTTP/1.1 Host: www.multitran.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:52 UTC	249	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Wed, 29 Apr 2020 11:41:56 GMT Accept-Ranges: bytes ETag: "0da442f1b1ed61:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:52 GMT Connection: close Content-Length: 10804
2024-09-30 13:16:52 UTC	10804	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 6c 69 76 65 74 79 70 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 5f 6f 6e 5f 74 68 65 5f 41 70 70 5f 53 74 6f 72 65 5f 42 61 64 67 65 5f 55 53 2d 55 4b 5f 52 47 42 5f 62 6c 6b 5f 34 53 56 47 5f 30 39 32 39 31 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 30 2e 31 33 34 37 37 2c 30 48 39 2e 35 33 34 36 38 63 2d 2e 33 36 36 37 Data Ascii: <svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40"> <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title> <g> <g> <g> <path d="M110.13477,0H9.53468c-.3667

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49791	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:52 UTC	351	OUT	GET /gif/bg.gif HTTP/1.1 Host: www.multitran.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:52 UTC	270	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Type: image/gif Last-Modified: Mon, 23 Mar 2015 18:05:45 GMT Accept-Ranges: bytes ETag: "798b34fc9365d01:0" Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:52 GMT Connection: close Content-Length: 2432
2024-09-30 13:16:52 UTC	2432	IN	Data Raw: 47 49 46 38 39 61 27 00 2b 00 f7 00 00 ea e3 e3 eb e5 e5 ec e6 e6 ef e7 e9 eb e9 e9 eb eb eb ed e8 e9 ee e8 e9 ed e9 ea ef ea ea ec ec ec ed ed ed ef ed ec ee ee ee ef ee ee ef ef ef f0 e9 e9 f0 e9 ea f1 eb ea f3 eb ea f3 eb eb f3 ec eb f1 eb ec f2 eb ec f1 ec ed f3 ed ed f1 ee ed f3 ee ed f1 ed ee f2 ed ee f1 ee ee f0 ef ee f1 ee ef f0 ef ef f1 ef ef f2 ee ee f2 ef ee f2 ee ef f2 ef ef f3 ef ef f4 ec ed f5 ee ed f4 ed ee f5 ef ee f6 ef ee f5 f0 ef f6 f0 ef f3 ef f0 f0 f0 f0 f1 f0 f0 f1 f1 f1 f2 f0 f0 f3 f0 f0 f3 f1 f0 f3 f0 f1 f2 f1 f1 f3 f1 f1 f3 f1 f2 f2 f2 f2 f3 f2 f2 f3 f3 f3 f4 f0 f0 f5 f0 f0 f4 f1 f0 f5 f1 f0 f4 f0 f1 f5 f0 f1 f4 f1 f1 f5 f1 f1 f6 f1 f0 f7 f1 f0 f6 f1 f1 f7 f1 f1 f4 f2 f1 f6 f2 f1 f5 f1 f2 f7 f1 f2 f4 f2 f2 f5 f2 f2 f5 f2 f3 f4 f3 Data Ascii: GIF89a'+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49794	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:52 UTC	364	OUT	GET /44090/adRecover.js HTTP/1.1 Host: delivery.adrecover.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:52 UTC	438	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 13105 Cache-Control: max-age=3600 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:52 GMT Expires: Mon, 30 Sep 2024 14:16:52 GMT Last-Modified: Mon, 30 Sep 2024 09:23:26 GMT Server: ECAcc (lhc/7904) Vary: Accept-Encoding X-AP-Device: DESKTOP X-AP-Geo: US X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 41240 Connection: close
2024-09-30 13:16:52 UTC	16383	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 35 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 76 65 72 3a 31 2c 66 65 65 64 62 61 63 6b 55 72 6c 3a 22 2f 2f 66 65 65 64 62 61 63 6b 2e 61 64 72 65 63 6f 76 65 72 2e 63 6f 6d 2f 41 52 57 65 62 53 65 72 76 69 63 65 2f 66 65 65 64 62 61 63 6b 22 2c 68 62 46 65 65 64 62 61 63 6b 55 72 6c 3a 22 2f 2f 66 65 65 64 62 61 63 6b 2e 61 64 72 65 63 6f 76 65 72 2e 63 6f 6d 2f 41 72 48 62 57 65 62 53 65 72 76 69 63 65 2f 66 65 65 64 62 61 63 6b 22 2c 66 72 61 6d 65 44 6f 6d 61 69 6e 3a 22 2f 2f 64 65 6c 69 76 65 72 79 2e 61 64 72 65 63 6f 76 65 72 2e 63 6f 6d 22 2c 72 65 6e 64 65 72 65 72 49 66 72 61 6d 65 55 72 6c 3a 22 2f 72 65 63 6f 76 65 72 2e 68 74 6d 6c 22 2c 61 75 63 74 69 6f 6e 49 66 72 61 6d 65 55 72 6c 3a 22 Data Ascii: (()=>{var e={955:e=>{e.exports={ver:1,feedbackUrl:"//feedback.adrecover.com/ARWebService/feedback",hbFeedbackUrl:"//feedback.adrecover.com/ArHbWebService/feedback",frameDomain:"//delivery.adrecover.com",rendererIframeUrl:"/recover.html",auctionIframeUrl:"
2024-09-30 13:16:53 UTC	16383	IN	Data Raw: 74 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 3d 22 77 65 62 6b 69 74 22 3a 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 3d 22 6d 6f 7a 22 3a 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 3d 22 6d 73 22 3a 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 68 61 73 46 6f 63 75 73 3f 6e 2e 74 79 70 65 3d 22 62 6c 75 72 22 3a 28 6e 2e 74 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 75 70 70 6f 72 74 65 64 3d 21 31 29 2c 6e 2e 76 65 6e 64 6f 72 50 72 65 66 69 78 3d 74 2c 6e 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 4b 65 79 3d 74 3f 74 2b 22 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 3a 22 76 Data Ascii: t.webkitVisibilityState?t="webkit":void 0!==document.mozVisibilityState?t="moz":void 0!==document.msVisibilityState?t="ms":void 0!==document.hasFocus?n.type="blur":(n.type=null,n.supported=!1),n.vendorPrefix=t,n.visibilityStateKey=t?t+"VisibilityState":"v
2024-09-30 13:16:53 UTC	8474	IN	Data Raw: 22 6e 65 74 77 6f 72 6b 49 64 22 3a 22 39 39 36 39 22 2c 22 73 69 74 65 49 64 22 3a 22 32 30 30 31 34 30 30 22 2c 22 75 6e 69 74 49 64 22 3a 22 31 31 38 30 34 22 2c 22 75 6e 69 74 4e 61 6d 65 22 3a 22 63 6e 73 6d 62 6c 2d 61 75 64 69 6f 2d 33 30 30 78 32 35 30 2d 73 6c 69 64 65 72 22 7d 2c 22 63 72 69 74 65 6f 22 3a 7b 22 6e 61 6d 65 22 3a 22 63 72 69 74 65 6f 22 2c 22 7a 6f 6e 65 49 64 22 3a 22 31 34 31 36 35 32 36 22 7d 2c 22 66 6c 6f 6f 72 50 72 69 63 65 22 3a 22 22 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 78 22 3a 7b 22 6e 61 6d 65 22 3a 22 69 78 22 2c 22 73 69 74 65 49 64 22 3a 22 39 33 37 30 34 31 22 7d 2c 22 6e 61 6d 65 22 3a 22 68 65 61 64 65 72 42 69 64 64 69 6e 67 22 2c 22 6e 6f 62 69 64 22 3a 7b 22 6e 61 6d 65 22 3a 22 6e 6f Data Ascii: "networkId":"9969","siteId":"2001400","unitId":"11804","unitName":"cnsmbl-audio-300x250-slider"},"criteo":{"name":"criteo","zoneId":"1416526"},"floorPrice":"","isEnabled":true,"ix":{"name":"ix","siteId":"937041"},"name":"headerBidding","nobid":{"name":"no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49800	151.101.194.137	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:52 UTC	535	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:53 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:16:53 GMT Age: 3893996 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 75 X-Timer: S1727702213.002303,VS0,VE0 Vary: Accept-Encoding
2024-09-30 13:16:53 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-09-30 13:16:53 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-09-30 13:16:53 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-09-30 13:16:53 UTC	15850	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-09-30 13:16:53 UTC	16384	IN	Data Raw: 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 6e 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 74 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 74 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d Data Ascii: ,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},tt=E.createElement("input"),nt=E.createElement("select").appendChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=
2024-09-30 13:16:53 UTC	8115	IN	Data Raw: 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 28 65 29 2e 6e 6f 74 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c Data Ascii: rap:function(e){return this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49802	151.101.194.137	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:53 UTC	358	OUT	GET /jquery-2.2.2.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:53 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 85656 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-14e98" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:16:53 GMT Age: 1740441 X-Served-By: cache-lga21979-LGA, cache-ewr-kewr1740050-EWR X-Cache: HIT, HIT X-Cache-Hits: 96, 1 X-Timer: S1727702213.175128,VS0,VE1 Vary: Accept-Encoding
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 32 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e Data Ascii: /! jQuery v2.2.2 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a documen
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 7c 7c 28 67 3d 7b 7d 29 2c 68 3d 3d 3d 69 26 26 28 67 3d 74 68 69 73 2c 68 2d 2d 29 3b 69 3e 68 3b 68 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 61 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 66 6f 72 28 62 20 69 6e 20 61 29 63 3d 67 5b 62 5d 2c 64 3d 61 5b 62 5d 2c 67 21 3d 3d 64 26 26 28 6a 26 26 64 26 26 28 6e 2e 69 73 50 6c 61 Data Ascii: ,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|n.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(a=arguments[h]))for(b in a)c=g[b],d=a[b],g!==d&&(j&&d&&(n.isPla
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 2d 22 29 2e 72 65 70 6c 61 63 65 28 71 2c 72 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 73 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e Data Ascii: -").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(s(a)){for(c=a.length;c>d;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 3d 6e 2e 74 79 70 65 28 61 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 63 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 21 31 3a 22 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 7d 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 67 61 28 29 2c 7a 3d 67 61 28 29 2c 41 3d 67 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d Data Ascii: =n.type(a);return"function"===c\|\|n.isWindow(a)?!1:"array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ga(),z=ga(),A=ga(),B=function(a,b){return a===
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 4b 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4c 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4c 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 58 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 59 3d 2f 5e 68 5c 64 24 2f 69 2c 5a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 24 3d 2f 5e 28 3f 3a 23 28 Data Ascii: i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+L+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+L+"((?:-\\d)?\\d)"+L+"\$\|)(?=[^-]\|$)","i")},X=/^(?:input\|select\|textarea\|button)$/i,Y=/^h\d$/i,Z=/^[^{]+\{\s*\[native \w/,$=/^(?:#(
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 61 61 2c 22 5c 5c 24 26 22 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 6b 3d 75 29 2c 72 3d 67 28 61 29 2c 68 3d 72 2e 6c 65 6e 67 74 68 2c 6c 3d 56 2e 74 65 73 74 28 6b 29 3f 22 23 22 2b 6b 3a 22 5b 69 64 3d 27 22 2b 6b 2b 22 27 5d 22 3b 77 68 69 6c 65 28 68 2d 2d 29 72 5b 68 5d 3d 6c 2b 22 20 22 2b 71 61 28 72 5b 68 5d 29 3b 73 3d 72 2e 6a 6f 69 6e 28 22 2c 22 29 2c 77 3d 5f 2e 74 65 73 74 28 61 29 26 26 6f 61 28 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 62 7d 69 66 28 73 29 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 77 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 Data Ascii: Case()){(k=b.getAttribute("id"))?k=k.replace(aa,"\\$&"):b.setAttribute("id",k=u),r=g(a),h=r.length,l=V.test(k)?"#"+k:"[id='"+k+"']";while(h--)r[h]=l+" "+qa(r[h]);s=r.join(","),w=_.test(a)&&oa(b.parentNode)\|\|b}if(s)try{return H.apply(d,w.querySelectorAll(s
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 3f 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 3a 21 31 7d 2c 6d 3d 66 61 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 65 2c 67 3d 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 76 3b 72 65 74 75 72 6e 20 67 21 3d 3d 6e 26 26 39 3d 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 6e 3d 67 2c 6f 3d 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 6e 29 2c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 65 2e 74 6f 70 21 3d 3d 65 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: ).documentElement;return b?"HTML"!==b.nodeName:!1},m=fa.setDocument=function(a){var b,e,g=a?a.ownerDocument\|\|a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=n.documentElement,p=!f(n),(e=n.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventL
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 6e 20 66 7d 2c 64 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 70 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 3a 76 6f 69 64 20 30 7d 2c 72 3d 5b 5d 2c 71 3d 5b 5d 2c 28 63 2e 71 73 61 3d 5a 2e 74 65 73 74 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 75 2b 22 27 3e 3c 2f 61 Data Ascii: n f},d.find.CLASS=c.getElementsByClassName&&function(a,b){return"undefined"!=typeof b.getElementsByClassName&&p?b.getElementsByClassName(a):void 0},r=[],q=[],(c.qsa=Z.test(n.querySelectorAll))&&(ia(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 6d 65 6e 74 3a 61 2c 64 3d 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 64 7c 7c 21 28 21 64 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 63 2e 63 6f 6e 74 61 69 6e 73 3f 63 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 64 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 77 68 69 6c 65 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 Data Ascii: ment:a,d=b&&b.parentNode;return a===d\|\|!(!d\|\|1!==d.nodeType\|\|!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!
2024-09-30 13:16:53 UTC	1378	IN	Data Raw: 72 48 61 6e 64 6c 65 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 66 3d 65 26 26 44 2e 63 61 6c 6c 28 64 2e 61 74 74 72 48 61 6e 64 6c 65 2c 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 65 28 61 2c 62 2c 21 70 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 66 3f 66 3a 63 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 21 70 3f 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 29 3a 28 66 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 62 29 29 26 26 66 2e 73 70 65 63 69 66 69 65 64 3f 66 2e 76 61 6c 75 65 3a 6e 75 6c 6c 7d 2c 66 61 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 Data Ascii: rHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCase())?e(a,b,!p):void 0;return void 0!==f?f:c.attributes\|\|!p?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},fa.error=function(a){throw new Error("Syntax error, unrecognize

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49799	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:53 UTC	357	OUT	GET /42845/adpushup.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:53 UTC	440	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 437898 Cache-Control: max-age=3600 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:53 GMT Expires: Mon, 30 Sep 2024 14:16:53 GMT Last-Modified: Wed, 25 Sep 2024 10:52:22 GMT Server: ECAcc (lhc/7955) Vary: Accept-Encoding X-AP-Device: DESKTOP X-AP-Geo: US X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 868321 Connection: close
2024-09-30 13:16:53 UTC	15962	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 72 5b 65 5d 29 72 65 74 75 72 6e 20 72 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 72 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6e 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 69 2e 72 3d 66 75 6e Data Ascii: !function(n){var r={};function i(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.m=n,i.c=r,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=fun
2024-09-30 13:16:53 UTC	16383	IN	Data Raw: 66 20 74 2e 6e 65 78 74 29 72 65 74 75 72 6e 20 74 3b 69 66 28 21 69 73 4e 61 4e 28 74 2e 6c 65 6e 67 74 68 29 29 72 65 74 75 72 6e 20 6e 3d 2d 31 2c 28 65 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 2b 2b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 29 69 66 28 63 2e 63 61 6c 6c 28 74 2c 6e 29 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 3d 74 5b 6e 5d 2c 65 2e 64 6f 6e 65 3d 21 31 2c 65 3b 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 3d 76 6f 69 64 20 30 2c 65 2e 64 6f 6e 65 3d 21 30 2c 65 7d 29 2e 6e 65 78 74 3d 65 7d 72 65 74 75 72 6e 7b 6e 65 78 74 3a 53 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 20 6f 28 68 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: f t.next)return t;if(!isNaN(t.length))return n=-1,(e=function e(){for(;++n<t.length;)if(c.call(t,n))return e.value=t[n],e.done=!1,e;return e.value=void 0,e.done=!0,e}).next=e}return{next:S}}function S(){return{value:void 0,done:!0}}return o(h,"constructor
2024-09-30 13:16:53 UTC	423	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 2c 65 26 26 28 6e 3d 6e 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6e 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 6f 28 4f 62 6a 65 63 74 28 69 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: wnPropertySymbols(t),e&&(n=n.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),r.push.apply(r,n)),r}function r(r){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{};e%2?o(Object(i),!0).forEach(function(
2024-09-30 13:16:53 UTC	16383	IN	Data Raw: 70 65 72 74 69 65 73 28 72 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 69 29 29 3a 6f 28 4f 62 6a 65 63 74 28 69 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 69 2c 65 29 29 7d 29 7d 72 65 74 75 72 6e 20 72 7d 76 61 72 20 6e 3d 6e 28 31 32 29 2c 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 73 69 74 65 49 64 22 3a 34 32 38 34 35 2c 22 70 72 65 62 69 64 42 75 6e 64 6c 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 64 70 75 73 68 75 70 2e 63 6f 6d 2f 70 72 65 62 69 64 2f 70 62 2e 34 32 38 34 Data Ascii: perties(r,Object.getOwnPropertyDescriptors(i)):o(Object(i)).forEach(function(e){Object.defineProperty(r,e,Object.getOwnPropertyDescriptor(i,e))})}return r}var n=n(12),i=JSON.parse('{"siteId":42845,"prebidBundleUrl":"https://cdn.adpushup.com/prebid/pb.4284
2024-09-30 13:16:53 UTC	16383	IN	Data Raw: 74 72 69 67 67 65 72 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 6f 75 6e 74 72 79 22 2c 22 6f 70 65 72 61 74 6f 72 22 3a 22 63 6f 6e 74 61 69 6e 22 2c 22 76 61 6c 75 65 22 3a 5b 22 4c 59 22 2c 22 5a 4d 22 2c 22 4e 49 22 2c 22 56 45 22 2c 22 43 4d 22 2c 22 5a 57 22 2c 22 4d 4d 22 2c 22 4d 47 22 2c 22 4a 4d 22 2c 22 4c 41 22 2c 22 4e 50 22 2c 22 4d 4f 22 2c 22 47 55 22 2c 22 41 46 22 2c 22 42 57 22 2c 22 4a 45 22 2c 22 4d 52 22 2c 22 4c 4b 22 2c 22 54 44 22 2c 22 47 4e 22 2c 22 42 5a 22 2c 22 53 4e 22 2c 22 47 59 22 2c 22 53 4d 22 2c 22 42 49 22 5d 7d 2c 7b 22 6b 65 79 22 3a 22 64 65 76 69 63 65 22 2c 22 6f 70 65 72 61 74 6f 72 22 3a 22 63 6f 6e 74 61 69 6e 22 2c 22 76 61 6c 75 65 22 3a 5b 22 64 65 73 6b 74 6f 70 22 5d 7d 5d 2c 22 69 73 41 75 74 6f 22 3a 74 72 Data Ascii: triggers":[{"key":"country","operator":"contain","value":["LY","ZM","NI","VE","CM","ZW","MM","MG","JM","LA","NP","MO","GU","AF","BW","JE","MR","LK","TD","GN","BZ","SN","GY","SM","BI"]},{"key":"device","operator":"contain","value":["desktop"]}],"isAuto":tr
2024-09-30 13:16:53 UTC	16383	IN	Data Raw: 57 52 42 5a 46 4e 6c 62 47 56 6a 64 47 56 6b 49 69 78 6c 4b 53 78 6b 4b 48 51 70 66 57 4e 68 64 47 4e 6f 4b 47 55 70 65 32 51 6f 49 6d 4e 6f 59 57 6c 75 5a 57 51 74 63 32 56 30 64 58 41 74 5a 58 4a 79 62 33 49 69 4c 47 55 75 62 57 56 7a 63 32 46 6e 5a 53 6b 73 64 32 6c 75 5a 47 39 33 4c 6d 46 6b 63 48 56 7a 61 48 56 77 4c 6e 56 30 61 57 78 7a 4c 6d 78 76 5a 79 67 69 51 30 68 42 53 55 35 46 52 43 31 45 54 30 4e 4c 52 55 51 74 51 55 52 54 4c 55 56 53 55 6b 39 53 49 69 78 6c 4b 58 31 39 4b 43 6b 37 22 2c 22 63 6d 70 41 76 61 69 6c 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 64 67 54 65 73 74 46 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 41 75 74 6f 41 64 70 75 73 68 75 70 4c 61 62 65 6c 22 3a 66 61 6c 73 65 2c 22 65 6e Data Ascii: WRBZFNlbGVjdGVkIixlKSxkKHQpfWNhdGNoKGUpe2QoImNoYWluZWQtc2V0dXAtZXJyb3IiLGUubWVzc2FnZSksd2luZG93LmFkcHVzaHVwLnV0aWxzLmxvZygiQ0hBSU5FRC1ET0NLRUQtQURTLUVSUk9SIixlKX19KCk7","cmpAvailable":false,"dgTestFeedbackEnabled":true,"disableAutoAdpushupLabel":false,"en
2024-09-30 13:16:53 UTC	16383	IN	Data Raw: 31 31 34 22 2c 22 35 33 36 36 32 35 37 31 31 37 22 2c 22 35 33 36 36 32 35 37 31 32 30 22 2c 22 35 33 36 36 32 35 37 31 32 33 22 2c 22 35 33 36 36 32 35 37 31 32 36 22 2c 22 35 33 36 36 32 35 37 31 32 39 22 2c 22 35 33 36 36 32 35 37 31 33 32 22 2c 22 35 33 36 36 32 35 37 31 33 35 22 2c 22 35 33 36 36 32 35 37 31 33 38 22 2c 22 35 33 36 36 32 35 37 31 34 31 22 2c 22 35 33 36 36 32 35 37 31 34 34 22 2c 22 35 33 36 36 32 35 37 31 34 37 22 2c 22 35 33 36 36 32 35 37 31 35 30 22 2c 22 35 33 36 36 32 35 37 38 38 35 22 2c 22 35 33 36 36 32 35 37 38 39 37 22 2c 22 35 33 36 36 32 35 37 39 30 33 22 2c 22 35 33 36 36 32 35 37 39 30 39 22 2c 22 35 33 36 36 32 35 37 39 31 35 22 2c 22 35 33 36 36 32 35 38 30 34 31 22 2c 22 35 33 36 36 32 35 38 30 35 30 22 2c 22 35 33 Data Ascii: 114","5366257117","5366257120","5366257123","5366257126","5366257129","5366257132","5366257135","5366257138","5366257141","5366257144","5366257147","5366257150","5366257885","5366257897","5366257903","5366257909","5366257915","5366258041","5366258050","53
2024-09-30 13:16:53 UTC	16383	IN	Data Raw: 22 2c 22 36 30 31 33 33 30 39 35 38 37 22 2c 22 36 30 31 33 33 30 39 35 39 30 22 2c 22 36 30 31 33 33 30 39 35 39 33 22 2c 22 36 30 31 33 33 30 39 35 39 36 22 2c 22 36 30 31 33 33 30 39 36 32 39 22 2c 22 36 30 31 33 33 30 39 36 33 32 22 2c 22 36 30 31 33 33 30 39 36 33 35 22 2c 22 36 30 31 33 33 30 39 36 33 38 22 2c 22 36 30 31 33 33 30 39 36 34 31 22 2c 22 36 30 31 33 33 30 39 36 34 34 22 2c 22 36 30 31 33 33 30 39 36 36 35 22 2c 22 36 30 31 33 33 30 39 36 36 38 22 2c 22 36 30 31 33 33 30 39 36 37 31 22 2c 22 36 30 31 33 33 30 39 36 37 34 22 2c 22 36 30 31 33 33 30 39 38 33 30 22 2c 22 36 30 31 33 33 30 39 38 33 33 22 2c 22 36 30 31 33 33 30 39 38 36 39 22 2c 22 36 30 31 33 33 30 39 38 37 32 22 2c 22 36 30 31 33 33 30 39 38 37 35 22 2c 22 36 30 31 33 33 Data Ascii: ","6013309587","6013309590","6013309593","6013309596","6013309629","6013309632","6013309635","6013309638","6013309641","6013309644","6013309665","6013309668","6013309671","6013309674","6013309830","6013309833","6013309869","6013309872","6013309875","60133
2024-09-30 13:16:53 UTC	5	IN	Data Raw: 36 33 37 33 37 Data Ascii: 63737
2024-09-30 13:16:53 UTC	16383	IN	Data Raw: 30 34 36 37 35 22 2c 22 36 33 37 33 37 30 34 36 37 38 22 2c 22 36 33 37 33 37 30 34 36 38 31 22 2c 22 36 33 37 33 37 30 34 36 38 34 22 2c 22 36 33 37 33 37 30 34 36 38 37 22 2c 22 36 33 37 33 37 30 34 36 39 30 22 2c 22 36 33 37 33 37 30 34 36 39 33 22 2c 22 36 33 37 33 37 30 34 36 39 36 22 2c 22 36 33 37 33 37 30 34 36 39 39 22 2c 22 36 33 37 33 37 30 34 37 30 32 22 2c 22 36 33 37 33 37 30 34 37 30 35 22 2c 22 36 33 37 33 37 30 34 37 30 38 22 2c 22 36 33 37 33 37 30 34 37 31 31 22 2c 22 36 33 37 33 37 30 34 37 31 34 22 2c 22 36 33 37 33 37 30 34 37 31 37 22 2c 22 36 33 37 33 37 30 34 38 34 30 22 2c 22 36 33 37 33 37 30 34 38 34 33 22 2c 22 36 33 37 33 37 30 34 38 34 36 22 2c 22 36 33 37 33 37 30 34 38 34 39 22 2c 22 36 33 37 33 37 30 34 38 35 32 22 2c 22 Data Ascii: 04675","6373704678","6373704681","6373704684","6373704687","6373704690","6373704693","6373704696","6373704699","6373704702","6373704705","6373704708","6373704711","6373704714","6373704717","6373704840","6373704843","6373704846","6373704849","6373704852","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49801	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:53 UTC	609	OUT	GET /block.jpg?ts=1727702211930 HTTP/1.1 Host: delivery.adrecover.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:53 UTC	416	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 16449120 Cache-Control: max-age=31536000 Content-Type: image/jpeg Date: Mon, 30 Sep 2024 13:16:53 GMT Etag: "60d2d6c2-277" Expires: Tue, 30 Sep 2025 13:16:53 GMT Last-Modified: Wed, 23 Jun 2021 06:37:54 GMT Server: ECAcc (lhc/793D) X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 631 Connection: close
2024-09-30 13:16:53 UTC	631	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49804	34.149.66.130	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:53 UTC	719	OUT	POST /api/v2/logs?dd-api-key=7854699c55cf56127736e336b120a38b&ddsource=nodejs&service=adpushup.js HTTP/1.1 Host: http-intake.logs.us5.datadoghq.com Connection: keep-alive Content-Length: 365 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:53 UTC	365	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 50 41 47 45 5f 56 49 45 57 22 2c 22 64 61 74 61 22 3a 7b 22 73 69 74 65 49 64 22 3a 34 32 38 34 35 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6f 72 69 67 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 63 2f 6d 2e 65 78 65 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 Data Ascii: {"event":"PAGE_VIEW","data":{"siteId":42845,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","origin":"https://www.multitran.com","pathname":"/c/m.exe","country":"US","version":"
2024-09-30 13:16:54 UTC	450	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 2 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Mon, 30 Sep 2024 13:16:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:16:54 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49803	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:54 UTC	549	OUT	GET /prebid/pb.42845.1722547367473.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:54 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 3197599 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:54 GMT Etag: W/"66abfc8c-71d97" Expires: Tue, 30 Sep 2025 13:16:54 GMT Last-Modified: Thu, 01 Aug 2024 21:22:20 GMT Server: ECAcc (lhc/78B5) Vary: Accept-Encoding X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 466327 Connection: close
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 32 37 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 34 2d 30 38 2d 30 31 0a 4d 6f 64 75 6c 65 73 3a 20 63 75 72 72 65 6e 63 79 2c 20 73 63 68 61 69 6e 2c 20 75 73 65 72 49 64 2c 20 69 64 35 49 64 53 79 73 74 65 6d 2c 20 69 64 35 41 6e 61 6c 79 74 69 63 73 41 64 61 70 74 65 72 2c 20 6c 69 76 65 49 6e 74 65 6e 74 49 64 53 79 73 74 65 6d 2c 20 75 6e 69 66 69 65 64 49 64 53 79 73 74 65 6d 2c 20 63 72 69 74 65 6f 49 64 53 79 73 74 65 6d 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 55 73 70 2c 20 73 68 61 72 65 64 49 64 53 79 73 74 65 6d 2c 20 71 75 61 6e 74 63 61 73 74 49 64 53 79 73 74 65 6d 2c 20 69 64 65 6e 74 69 74 79 4c 69 6e 6b 49 64 53 79 Data Ascii: /* prebid.js v8.27.0Updated: 2024-08-01Modules: currency, schain, userId, id5IdSystem, id5AnalyticsAdapter, liveIntentIdSystem, unifiedIdSystem, criteoIdSystem, consentManagement, consentManagementUsp, sharedIdSystem, quantcastIdSystem, identityLinkIdSy
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 5b 6e 2c 65 5d 2e 63 6f 6e 63 61 74 28 28 30 2c 72 2e 5a 29 28 69 29 2c 5b 74 5d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 53 65 74 3b 4a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 21 65 2e 68 61 73 28 6e 29 3b 29 65 2e 61 64 64 28 6e 29 2c 6e 3d 4a 5b 6e 5d 3b 72 65 74 75 72 6e 20 6e 7d 7a 2e 6d 61 6b 65 42 69 64 52 65 71 75 65 73 74 73 3d 28 30 2c 6c 2e 7a 33 29 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 35 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 35 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 35 5d 3a 7b 7d 2c 75 Data Ascii: .apply(void 0,[n,e].concat((0,r.Z)(i),[t]))}}function cn(n){for(var e=new Set;J.hasOwnProperty(n)&&!e.has(n);)e.add(n),n=J[n];return n}z.makeBidRequests=(0,l.z3)("sync",(function(n,e,t,r,i){var o=arguments.length>5&&void 0!==arguments[5]?arguments[5]:{},u
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 29 2c 73 2e 74 61 67 3b 76 61 72 20 64 3d 6f 2e 67 65 74 28 75 29 7c 7c 7b 7d 2c 66 3d 7b 6c 6f 61 64 65 64 3a 21 31 2c 74 61 67 3a 6e 75 6c 6c 2c 63 61 6c 6c 62 61 63 6b 73 3a 5b 5d 7d 3b 72 65 74 75 72 6e 20 64 5b 6e 5d 3d 66 2c 6f 2e 73 65 74 28 75 2c 64 29 2c 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 66 2e 63 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 74 29 2c 28 30 2c 69 2e 79 4e 29 28 22 6d 6f 64 75 6c 65 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 69 73 20 6c 6f 61 64 69 6e 67 20 65 78 74 65 72 6e 61 6c 20 4a 61 76 61 53 63 72 69 70 74 22 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 72 7c 7c 28 72 3d 64 6f 63 75 6d 65 6e 74 29 3b 76 61 72 20 61 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 Data Ascii: ),s.tag;var d=o.get(u)\|\|{},f={loaded:!1,tag:null,callbacks:[]};return d[n]=f,o.set(u,d),t&&"function"==typeof t&&f.callbacks.push(t),(0,i.yN)("module ".concat(e," is loading external JavaScript")),function(e,t,r,o){r\|\|(r=document);var a=r.createElement("s
2024-09-30 13:16:54 UTC	3	IN	Data Raw: 22 29 3a Data Ascii: "):
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 22 22 7d 29 29 2c 24 28 6e 2e 43 52 49 44 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 69 76 65 49 64 3f 6e 2e 63 72 65 61 74 69 76 65 49 64 3a 22 22 7d 29 29 5d 7d 28 29 29 2c 22 76 69 64 65 6f 22 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 72 5b 6b 2e 6b 32 2e 78 6e 5d 2e 73 6c 69 63 65 28 29 3b 69 66 28 72 5b 6b 2e 6b 32 2e 78 6e 5d 3d 69 2c 5b 74 2e 55 55 49 44 2c 74 2e 43 41 43 48 45 5f 49 44 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 28 30 2c 6d 2e 73 45 29 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6b 65 79 3d 3d 3d 6e 7d 29 29 26 26 69 2e 70 75 73 68 28 24 28 6e 2c 22 76 69 64 65 6f 43 61 63 68 65 4b 65 79 22 29 29 7d 29 29 2c 66 2e Data Ascii: ""})),$(n.CRID,(function(n){return n.creativeId?n.creativeId:""}))]}()),"video"===n){var i=r[k.k2.xn].slice();if(r[k.k2.xn]=i,[t.UUID,t.CACHE_ID].forEach((function(n){void 0===(0,m.sE)(i,(function(e){return e.key===n}))&&i.push($(n,"videoCacheKey"))})),f.
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 20 6f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 6e 2c 65 2c 74 29 7b 69 66 28 21 65 2e 68 61 73 28 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 67 65 74 20 70 72 69 76 61 74 65 20 66 69 65 6c 64 20 6f 6e 20 6e 6f 6e 2d 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 43 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 7d 29 2c 54 3d 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 7d 29 2c 6e 65 77 20 57 65 61 6b 4d 61 70 29 2c 6b 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 4f 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 45 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 49 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 42 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 6a 3d 6e 65 77 20 57 Data Ascii: object")}function A(n,e,t){if(!e.has(n))throw new TypeError("attempted to get private field on non-instance");return t}var C=Object.freeze({}),T=(Object.freeze({}),new WeakMap),k=new WeakMap,O=new WeakMap,E=new WeakMap,I=new WeakMap,B=new WeakMap,j=new W
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 75 69 72 65 64 3a 30 2c 69 64 3a 35 2c 69 6d 67 3a 7b 74 79 70 65 3a 31 2c 77 6d 69 6e 3a 32 30 2c 68 6d 69 6e 3a 32 30 7d 7d 5d 7d 2c 69 6d 61 67 65 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 74 69 74 6c 65 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 73 70 6f 6e 73 6f 72 65 64 42 79 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 63 6c 69 63 6b 55 72 6c 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 62 6f 64 79 3a 7b 72 65 71 75 69 72 65 64 3a 21 31 7d 2c 69 63 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 31 7d 7d 7d 2c 62 3d 64 2e 73 24 2c 77 3d 64 2e 6f 46 2c 41 3d 64 2e 56 31 2c 43 3d 64 2e 7a 41 2c 54 3d 64 2e 46 59 2c 6b 3d 4a 28 41 29 2c 4f 3d 4a 28 62 29 2c 45 3d 7b 69 6d 67 3a 31 2c 6a 73 3a 32 2c 31 3a 22 69 6d 67 22 2c 32 3a 22 6a 73 22 7d 2c 49 3d Data Ascii: uired:0,id:5,img:{type:1,wmin:20,hmin:20}}]},image:{required:!0},title:{required:!0},sponsoredBy:{required:!0},clickUrl:{required:!0},body:{required:!1},icon:{required:!1}}},b=d.s$,w=d.oF,A=d.V1,C=d.zA,T=d.FY,k=J(A),O=J(b),E={img:1,js:2,1:"img",2:"js"},I=
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 6f 64 65 3d 3d 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 65 29 7b 69 66 28 21 30 3d 3d 3d 54 2e 76 63 2e 67 65 74 43 6f 6e 66 69 67 28 22 74 61 72 67 65 74 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 61 6c 77 61 79 73 49 6e 63 6c 75 64 65 44 65 61 6c 73 22 29 29 7b 76 61 72 20 74 3d 57 2e 63 6f 6e 63 61 74 28 66 2e 78 63 29 3b 72 65 74 75 72 6e 20 4a 28 65 2c 71 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 64 65 61 6c 49 64 26 26 72 28 65 2c 6e 29 29 72 65 74 75 72 6e 28 30 2c 6f 2e 5a 29 28 7b 7d 2c 65 2e 61 64 55 6e 69 74 43 6f 64 65 2c 45 28 65 2c 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 61 64 73 65 72 76 65 72 54 61 72 67 65 74 69 6e 67 5b 6e 5d Data Ascii: ode===e)}function i(n,e){if(!0===T.vc.getConfig("targetingControls.alwaysIncludeDeals")){var t=W.concat(f.xc);return J(e,q).map((function(e){if(e.dealId&&r(e,n))return(0,o.Z)({},e.adUnitCode,E(e,t.filter((function(n){return void 0!==e.adserverTargeting[n]
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 2e 48 29 28 22 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 6f 6e 20 74 68 65 20 70 61 67 65 22 29 7d 2c 6c 6e 2e 73 65 74 54 61 72 67 65 74 69 6e 67 46 6f 72 41 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 28 30 2c 75 2e 50 4e 29 28 22 49 6e 76 6f 6b 69 6e 67 20 5f 61 70 50 62 4a 73 2e 73 65 74 54 61 72 67 65 74 69 6e 67 46 6f 72 41 6e 22 2c 61 72 67 75 6d 65 6e 74 73 29 2c 47 2e 69 73 41 70 6e 74 61 67 44 65 66 69 6e 65 64 28 29 3f 28 47 2e 73 65 74 54 61 72 67 65 74 69 6e 67 46 6f 72 41 73 74 28 6e 29 2c 64 2e 6a 38 28 79 6e 2c 47 2e 67 65 74 41 6c 6c 54 61 72 67 65 74 69 6e 67 28 29 29 29 3a 28 30 2c 75 2e 48 29 28 22 77 69 6e 64 6f 77 2e 61 70 6e 74 61 67 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 Data Ascii: .H)("window.googletag is not defined on the page")},ln.setTargetingForAst=function(n){(0,u.PN)("Invoking _apPbJs.setTargetingForAn",arguments),G.isApntagDefined()?(G.setTargetingForAst(n),d.j8(yn,G.getAllTargeting())):(0,u.H)("window.apntag is not defined
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 70 2e 66 69 6c 74 65 72 53 65 74 74 69 6e 67 73 7c 7c 21 6d 28 6e 2c 65 29 7d 2c 65 7d 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 7b 63 6f 6e 66 69 67 3a 61 2e 76 63 2e 67 65 74 43 6f 6e 66 69 67 28 22 75 73 65 72 53 79 6e 63 22 29 2c 69 73 41 6c 6c 6f 77 65 64 3a 73 2e 78 44 2c 72 65 67 52 75 6c 65 3a 73 2e 6f 42 7d 2c 7b 62 72 6f 77 73 65 72 53 75 70 70 6f 72 74 73 43 6f 6f 6b 69 65 73 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 28 30 2c 6f 2e 66 72 29 28 29 26 26 76 2e 63 6f 6f 6b 69 65 73 41 72 65 45 6e 61 62 6c 65 64 28 29 7d 7d 7d 29 29 7d 2c 34 33 35 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b Data Ascii: =function(n,e){return!p.filterSettings\|\|!m(n,e)},e}(Object.defineProperties({config:a.vc.getConfig("userSync"),isAllowed:s.xD,regRule:s.oB},{browserSupportsCookies:{get:function(){return!(0,o.fr)()&&v.cookiesAreEnabled()}}}))},4358:function(n,e,t){t.d(e,{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49808	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:54 UTC	1160	OUT	GET /AdPushupFeedbackWebService/feedback/testmode?data=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%3D%3D&c_b=6179.100000000006 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:54 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:54 GMT Expires: Tue, 30 Sep 2025 13:16:54 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:54 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49807	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:54 UTC	612	OUT	GET /AdPushupFeedbackWebService/user/sync HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:54 UTC	488	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Ap-Cookie-Status: cookies ap_uid and ap_usid not set due to GDPR Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:54 GMT Expires: Tue, 30 Sep 2025 13:16:54 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:54 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49805	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:54 UTC	545	OUT	GET /pbuseridscripts/quantcast.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:54 UTC	430	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 4792816 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:54 GMT Etag: W/"60d94cdb-1c2" Expires: Tue, 30 Sep 2025 13:16:54 GMT Last-Modified: Mon, 28 Jun 2021 04:15:23 GMT Server: ECAcc (lhc/7904) Vary: Accept-Encoding X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 450 Connection: close
2024-09-30 13:16:54 UTC	450	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 71 65 76 65 6e 74 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 71 65 76 65 6e 74 73 20 7c 7c 20 5b 5d 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 65 6c 65 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 65 6c 65 6d 2e 73 72 63 20 3d 20 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 3d 3d 20 22 68 74 74 70 73 3a 22 20 3f 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 22 20 3a 20 22 68 74 74 70 3a 2f 2f 65 64 67 65 22 29 20 2b 20 22 2e 71 75 61 6e 74 73 65 72 76 65 2e 63 6f 6d 2f 71 75 61 6e 74 2e 6a 73 22 3b 0a 65 6c 65 6d 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 65 6c 65 6d 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a Data Ascii: window._qevents = window._qevents \|\| [];(function() {var elem = document.createElement('script');elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";elem.async = true;elem.type = "text/j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49806	13.224.186.120	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:54 UTC	536	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:54 UTC	650	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 331650 Connection: close Date: Mon, 30 Sep 2024 13:09:34 GMT Last-Modified: Wed, 28 Aug 2024 22:46:36 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront), 1.1 24c299c0a6423c6f96984a85fb014108.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 ETag: "907cbdd883935369790d45cc9bd9e8b7" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: rXwlNrVjFhKihU76zLW2R9z_lwi1D0ntIMnCMjQPJYoYDpqJP5szRA== Age: 441
2024-09-30 13:16:54 UTC	16384	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 38 32 37 2e 31 35 35 32 20 2d 20 32 30 32 34 2d 30 38 2d 32 37 20 31 35 3a 35 32 3a 34 34 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.827.1552 - 2024-08-27 15:52:44 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-09-30 13:16:54 UTC	1514	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 29 7d 29 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 67 70 70 53 74 72 69 6e 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6e 3d 72 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 22 45 3a 70 69 6e 67 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 7d 72 65 74 75 72 6e 5b 6e 2c 6f 5d 7d 28 65 29 2c 32 29 2c 74 3d 64 5b 30 5d 2c 61 3d 64 5b 31 5d 2c 75 3d 22 70 69 6e 67 22 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6c 3d 63 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6f 3b 74 72 79 7b 76 61 72 20 72 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 Data Ascii: "object"==typeof t&&(n=t)}));void 0===n&&(null!==(e=null==r?void 0:r.gppString)&&void 0!==e?e:"").length>0&&(n=r)}catch(t){o="E:ping: ".concat(t)}return[n,o]}(e),2),t=d[0],a=d[1],u="ping","object"!=typeof t&&(l=c(function(t){var e,o;try{var r=t.globalCont
2024-09-30 13:16:54 UTC	16384	IN	Data Raw: 6f 3a 65 7d 29 29 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6f 3f 5b 32 2c 77 2e 63 6f 6d 70 6c 65 74 65 64 5d 3a 5b 32 2c 7b 73 74 61 74 75 73 3a 77 2e 63 6f 6d 70 6c 65 74 65 64 2c 61 6e 61 6c 79 74 69 63 73 3a 54 28 65 2c 6f 29 7d 5d 7d 29 29 7d 29 29 7d 5d 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 71 28 74 2c 65 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 75 73 74 20 62 65 20 61 6e 20 61 72 72 61 79 22 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 75 73 74 20 62 65 20 61 20 62 6f 6f 6c 65 61 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 Data Ascii: o:e})),"object"!=typeof o?[2,w.completed]:[2,{status:w.completed,analytics:T(e,o)}]}))}))}]]);function q(t,e){if(!Array.isArray(t))throw new Error("must be an array")}function z(t,e){if("boolean"!=typeof t)throw new Error("must be a boolean")}function F(t
2024-09-30 13:16:54 UTC	10463	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 53 74 6f 72 65 49 74 65 6d 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 65 3d 28 6e 65 77 20 65 74 29 2e 72 65 61 64 28 74 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 30 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 6f 2c 72 29 7b 76 61 72 20 69 3b 69 66 28 21 28 65 20 69 6e 20 49 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4c 69 73 74 65 6e 65 72 20 72 65 74 75 72 6e 65 64 20 69 6e 76 61 6c 69 64 20 73 74 61 74 75 73 3a 20 22 2e 63 6f 6e 63 61 74 28 74 2e 74 79 70 65 2c 22 20 72 65 74 75 72 6e 65 64 20 22 29 2e 63 6f 6e 63 61 74 Data Ascii: rototype.readStoreItemCount=function(t){var e;return null!==(e=(new et).read(t))&&void 0!==e?e:0},t.prototype.handleEventSuccess=function(t,e,n,o,r){var i;if(!(e in I))throw new Error("Listener returned invalid status: ".concat(t.type," returned ").concat
2024-09-30 13:16:54 UTC	16384	IN	Data Raw: 65 2e 73 75 62 73 63 72 69 62 65 22 29 5d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 75 62 73 63 72 69 62 65 22 2c 6e 75 6c 6c 29 2c 6f 28 5b 6e 74 28 22 48 41 53 48 23 43 6f 72 65 2e 6c 69 62 72 61 72 79 2e 55 73 65 72 53 70 61 63 65 2e 65 71 75 69 70 22 29 5d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 71 75 69 70 22 2c 6e 75 6c 6c 29 2c 6f 28 5b 6e 74 28 22 48 41 53 48 23 43 6f 72 65 2e 6c 69 62 72 61 72 79 2e 55 73 65 72 53 70 61 63 65 2e 64 69 73 70 61 74 63 68 22 29 5d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 69 73 70 61 74 63 68 22 2c 6e 75 6c 6c 29 2c 6f 28 5b 6e 74 28 22 48 41 53 48 23 43 6f 72 65 2e 6c 69 62 72 61 72 79 2e 55 73 65 72 53 70 61 63 65 2e 70 6f 70 75 6c 61 74 65 22 29 5d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 70 6f 70 75 Data Ascii: e.subscribe")],t.prototype,"subscribe",null),o([nt("HASH#Core.library.UserSpace.equip")],t.prototype,"equip",null),o([nt("HASH#Core.library.UserSpace.dispatch")],t.prototype,"dispatch",null),o([nt("HASH#Core.library.UserSpace.populate")],t.prototype,"popu
2024-09-30 13:16:54 UTC	16384	IN	Data Raw: 65 73 74 61 6d 70 7d 72 65 74 75 72 6e 20 6f 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7b 69 64 3a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2c 6e 65 77 47 65 6e 3a 72 65 2e 6e 6f 54 69 6d 65 73 74 61 6d 70 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 77 65 3d 22 6c 6f 74 61 6d 65 22 2c 45 65 3d 6e 65 77 20 56 28 7b 73 63 6f 70 65 3a 22 63 78 6d 22 2c 6f 62 6a 65 63 74 3a 22 6c 6f 74 61 6d 65 22 2c 61 63 74 69 6f 6e 3a 22 67 65 74 22 2c 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: estamp}return o}catch(e){return{id:decodeURIComponent(t),newGen:re.noTimestamp}}return null},we="lotame",Ee=new V({scope:"cxm",object:"lotame",action:"get",handler:function(t){var e=t.account;return t.customEvent,r(void 0,void 0,void 0,(function(){return
2024-09-30 13:16:54 UTC	16384	IN	Data Raw: 3a 22 6e 61 6d 65 22 2c 63 61 74 74 61 78 3a 31 2c 63 61 74 3a 5b 22 31 22 5d 2c 64 6f 6d 61 69 6e 3a 22 64 6f 6d 61 69 6e 22 2c 65 78 74 3a 7b 7d 7d 2c 63 6f 6e 74 65 6e 74 3a 7b 69 64 3a 22 69 64 22 2c 65 70 69 73 6f 64 65 3a 31 2c 74 69 74 6c 65 3a 22 74 69 74 6c 65 22 2c 73 65 72 69 65 73 3a 22 73 65 72 69 65 73 22 2c 73 65 61 73 6f 6e 3a 22 73 65 61 73 6f 6e 22 2c 61 72 74 69 73 74 3a 22 61 72 74 69 73 74 22 2c 67 65 6e 72 65 3a 22 67 65 6e 72 65 22 2c 61 6c 62 75 6d 3a 22 61 6c 62 75 6d 22 2c 69 73 72 63 3a 22 69 73 72 63 22 2c 70 72 6f 64 75 63 65 72 3a 7b 69 64 3a 22 69 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 63 61 74 74 61 78 3a 31 2c 63 61 74 3a 5b 22 31 22 5d 2c 64 6f 6d 61 69 6e 3a 22 64 6f 6d 61 69 6e 22 2c 65 78 74 3a 7b 7d 7d 2c 75 72 Data Ascii: :"name",cattax:1,cat:["1"],domain:"domain",ext:{}},content:{id:"id",episode:1,title:"title",series:"series",season:"season",artist:"artist",genre:"genre",album:"album",isrc:"isrc",producer:{id:"id",name:"name",cattax:1,cat:["1"],domain:"domain",ext:{}},ur
2024-09-30 13:16:54 UTC	4542	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 2c 61 2c 63 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 61 70 73 74 61 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 5f 61 74 73 61 61 69 6f 64 29 3f 5b 32 2c 7b 73 74 61 74 75 73 3a 77 2e 77 61 69 74 69 6e 67 7d 5d 3a 28 65 2e 75 70 64 61 74 65 28 74 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 28 7b 7d 2c 6e 6f 29 29 7d 29 2c 7b 70 65 72 73 69 73 74 3a 21 30 7d 29 2c 74 3d 7b 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d Data Ascii: unction(){var t,r,a,c;return i(this,(function(i){return void 0===(null===(r=e.globalContext.apstag)\|\|void 0===r?void 0:r._atsaaiod)?[2,{status:w.waiting}]:(e.update(to,(function(){return JSON.stringify(n({},no))}),{persist:!0}),t={metadata:null===(a=null=
2024-09-30 13:16:54 UTC	16384	IN	Data Raw: 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 26 26 28 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 3d 5b 5d 29 2c 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 2e 70 75 73 68 28 7b 6e 65 74 77 6f 72 6b 43 6f 64 65 3a 22 61 6d 61 7a 6f 6e 2e 63 6f 6d 22 2c 63 6f 6c 6c 65 63 74 6f 72 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 77 69 74 Data Ascii: cureSignalProviders&&(e.globalContext.googletag.secureSignalProviders=[]),e.globalContext.googletag.secureSignalProviders.push({networkCode:"amazon.com",collectorFunction:function(){return r(void 0,void 0,void 0,(function(){return i(this,(function(t){swit
2024-09-30 13:16:54 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 29 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 70 61 72 73 Data Ascii: nction r(t){return(r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function o(t){try{var e=pars

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49810	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:54 UTC	542	OUT	GET /42845/apInstreamBundle.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:54 UTC	458	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 438 Cache-Control: max-age=900 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:54 GMT Expires: Mon, 30 Sep 2024 13:31:54 GMT Last-Modified: Mon, 30 Sep 2024 11:32:36 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-AP-Device: DESKTOP X-AP-Geo: US X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 899658 Connection: close
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 69 64 65 6f 42 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 32 35 30 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 38 30 31 35 29 7d 2c 35 35 39 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 35 31 36 29 2c 69 3d 6e 28 37 35 32 32 29 2c 6f 3d 6e 28 33 39 34 38 29 2c 61 3d 6e 28 39 31 30 36 29 2c 73 3d 6e 28 39 36 31 35 29 2c 63 3d 6e 28 32 30 31 32 29 2c 75 3d 6e 28 34 32 30 32 29 2c 6c 3d 6e 28 34 38 39 36 29 2c 64 3d 6e 28 35 38 34 35 29 2c 66 3d 6e 28 38 35 36 33 29 2c 70 3d 6e 28 35 36 35 Data Ascii: /! For license information please see videoBundle.js.LICENSE.txt /(()=>{var e={2505:(e,t,n)=>{e.exports=n(8015)},5592:(e,t,n)=>{"use strict";var r=n(9516),i=n(7522),o=n(3948),a=n(9106),s=n(9615),c=n(2012),u=n(4202),l=n(4896),d=n(5845),f=n(8563),p=n(565
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 69 28 22 6f 70 74 69 6f 6e 73 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 2c 69 2e 45 52 52 5f 42 41 44 5f 4f 50 54 49 4f 4e 5f 56 41 4c 55 45 29 3b 66 6f 72 28 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 6f 3d 72 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 20 3e 30 3b 29 7b 76 61 72 20 61 3d 72 5b 6f 5d 2c 73 3d 74 5b 61 5d 3b 69 66 28 73 29 7b 76 61 72 20 63 3d 65 5b 61 5d 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 73 28 63 2c 61 2c 65 29 3b 69 66 28 21 30 21 3d 3d 75 29 74 68 72 6f 77 20 6e 65 77 20 69 28 22 6f 70 74 69 6f 6e 20 22 2b 61 2b 22 20 6d 75 73 74 20 62 65 20 22 2b 75 2c 69 2e 45 52 52 5f 42 41 44 5f 4f 50 54 49 4f 4e 5f 56 41 4c 55 45 29 7d 65 6c 73 65 20 69 66 28 21 30 21 3d 3d 6e 29 Data Ascii: )throw new i("options must be an object",i.ERR_BAD_OPTION_VALUE);for(var r=Object.keys(e),o=r.length;o-- >0;){var a=r[o],s=t[a];if(s){var c=e[a],u=void 0===c\|\|s(c,a,e);if(!0!==u)throw new i("option "+a+" must be "+u,i.ERR_BAD_OPTION_VALUE)}else if(!0!==n)
2024-09-30 13:16:54 UTC	2	IN	Data Raw: 2e 6c Data Ascii: .l
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 6f 67 3d 63 2e 52 6d 7d 2c 28 74 3d 5b 7b 6b 65 79 3a 22 69 6e 69 74 69 61 6c 69 73 65 4f 76 65 72 6c 61 79 41 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 5d 29 26 26 4a 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 3b 76 61 72 20 65 2c 74 7d 28 29 3b 63 6f 6e 73 74 20 5a 3d 51 3b 76 61 72 20 65 65 3d 6e 28 32 37 34 37 29 2c 74 65 3d 6e 28 34 32 38 39 29 2c 6e 65 3d 6e 28 34 37 32 34 29 3b 66 75 6e 63 74 69 6f 6e 20 72 65 28 65 29 7b 72 65 74 75 72 6e 20 72 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 Data Ascii: og=c.Rm},(t=[{key:"initialiseOverlayAd",value:function(){}}])&&J(e.prototype,t),Object.defineProperty(e,"prototype",{writable:!1}),e;var e,t}();const Z=Q;var ee=n(2747),te=n(4289),ne=n(4724);function re(e){return re="function"==typeof Symbol&&"symbol"==ty
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 2e 66 6c 61 67 73 2e 61 64 78 4f 6e 6c 79 43 72 69 74 65 72 69 61 3d 21 21 65 2c 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 29 7b 76 61 72 20 65 3d 28 30 2c 72 2e 68 71 29 28 29 3b 72 65 74 75 72 6e 21 21 28 71 74 2e 6f 67 2e 69 6e 64 65 78 4f 66 28 77 69 6e 64 6f 77 2e 61 70 50 6c 61 79 65 72 2e 63 6f 75 6e 74 72 79 29 3e 2d 31 7c 7c 65 2e 72 65 71 75 65 73 74 53 74 72 75 63 74 75 72 65 44 61 74 61 2e 63 6f 75 6e 74 72 79 57 69 73 65 52 65 71 75 65 73 74 42 6c 6f 63 6b 69 6e 67 26 26 65 2e 72 65 71 75 65 73 74 53 74 72 75 63 74 75 72 65 44 61 74 61 2e 63 6f 75 6e 74 72 79 57 69 73 65 52 65 71 75 65 73 74 42 6c 6f 63 6b 69 6e 67 2e 65 6e 61 62 6c 65 64 26 26 65 2e 72 65 71 75 65 73 74 53 74 72 75 63 74 75 72 65 44 61 74 61 2e 63 6f 75 6e 74 72 79 57 Data Ascii: .flags.adxOnlyCriteria=!!e,!!e}function Kt(){var e=(0,r.hq)();return!!(qt.og.indexOf(window.apPlayer.country)>-1\|\|e.requestStructureData.countryWiseRequestBlocking&&e.requestStructureData.countryWiseRequestBlocking.enabled&&e.requestStructureData.countryW
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 73 28 65 29 7c 7c 4a 72 28 22 50 72 65 62 69 64 20 57 61 72 6e 69 6e 67 3a 20 73 65 74 50 72 69 63 65 47 72 61 6e 75 6c 61 72 69 74 79 20 77 61 73 20 63 61 6c 6c 65 64 20 77 69 74 68 20 69 6e 76 61 6c 69 64 20 73 65 74 74 69 6e 67 2c 20 75 73 69 6e 67 20 60 6d 65 64 69 75 6d 60 20 61 73 20 64 65 66 61 75 6c 74 2e 22 29 3b 65 6c 73 65 20 69 66 28 75 69 28 65 29 26 26 21 52 6e 28 65 29 29 72 65 74 75 72 6e 20 58 72 28 22 49 6e 76 61 6c 69 64 20 63 75 73 74 6f 6d 20 70 72 69 63 65 20 76 61 6c 75 65 20 70 61 73 73 65 64 20 74 6f 20 60 73 65 74 50 72 69 63 65 47 72 61 6e 75 6c 61 72 69 74 79 28 29 60 22 29 2c 21 31 3b 72 65 74 75 72 6e 21 30 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 Data Ascii: ring"==typeof e)s(e)\|\|Jr("Prebid Warning: setPriceGranularity was called with invalid setting, using `medium` as default.");else if(ui(e)&&!Rn(e))return Xr("Invalid custom price value passed to `setPriceGranularity()`"),!1;return!0}Object.defineProperties
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 28 6f 3d 72 28 6f 5e 6f 3e 3e 3e 31 36 2c 32 32 34 36 38 32 32 35 30 37 29 5e 72 28 69 5e 69 3e 3e 3e 31 33 2c 33 32 36 36 34 38 39 39 30 39 29 29 29 2b 28 69 3e 3e 3e 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 48 69 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 6e 3d 6e 65 77 20 4d 61 70 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 6e 2e 68 61 73 28 72 29 7c 7c 6e 2e 73 65 74 28 72 2c 65 2e 61 70 70 6c 79 28 Data Ascii: (o=r(o^o>>>16,2246822507)^r(i^i>>>13,3266489909)))+(i>>>0)).toString()}function Hi(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:function(e){return e},n=new Map,r=function(){var r=t.apply(this,arguments);return n.has(r)\|\|n.set(r,e.apply(
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 29 7b 72 65 74 75 72 6e 7b 73 72 63 3a 74 68 69 73 2e 73 6f 75 72 63 65 2c 62 69 64 64 65 72 3a 74 68 69 73 2e 62 69 64 64 65 72 43 6f 64 65 2c 62 69 64 49 64 3a 74 68 69 73 2e 72 65 71 75 65 73 74 49 64 2c 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 3a 74 68 69 73 2e 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 2c 61 64 55 6e 69 74 49 64 3a 74 68 69 73 2e 61 64 55 6e 69 74 49 64 2c 61 75 63 74 69 6f 6e 49 64 3a 74 68 69 73 2e 61 75 63 74 69 6f 6e 49 64 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 61 28 65 2c 74 29 7d 76 61 72 20 64 61 3d 22 6f 75 74 73 74 72 65 61 6d 22 2c 66 61 3d 22 69 6e 73 74 72 65 61 6d 22 2c 70 61 3d 4e 6f 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b Data Ascii: ){return{src:this.source,bidder:this.bidderCode,bidId:this.requestId,transactionId:this.transactionId,adUnitId:this.adUnitId,auctionId:this.auctionId}}}function la(e,t){return new ua(e,t)}var da="outstream",fa="instream",pa=No("sync",(function(e,t,n,r,i){
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 77 3d 73 7c 7c 64 3f 74 3a 6e 75 6c 6c 2c 45 3d 72 72 2e 67 65 74 43 6f 6e 66 69 67 28 22 70 61 67 65 55 72 6c 22 29 7c 7c 6e 7c 7c 6e 75 6c 6c 2c 53 3d 72 72 2e 67 65 74 43 6f 6e 66 69 67 28 22 70 61 67 65 55 72 6c 22 29 7c 7c 77 7c 7c 48 61 28 45 2c 4a 61 29 3b 72 65 74 75 72 6e 20 77 26 26 77 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3e 2d 31 26 26 2d 31 3d 3d 3d 53 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 26 26 28 53 3d 22 22 2e 63 6f 6e 63 61 74 28 53 29 2e 63 6f 6e 63 61 74 28 77 2e 73 75 62 73 74 72 69 6e 67 28 77 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 29 29 2c 7b 72 65 61 63 68 65 64 54 6f 70 3a 73 2c 69 73 41 6d 70 3a 75 2c 6e 75 6d 49 66 72 Data Ascii: top.document.referrer}catch(e){}var w=s\|\|d?t:null,E=rr.getConfig("pageUrl")\|\|n\|\|null,S=rr.getConfig("pageUrl")\|\|w\|\|Ha(E,Ja);return w&&w.indexOf("?")>-1&&-1===S.indexOf("?")&&(S="".concat(S).concat(w.substring(w.indexOf("?")))),{reachedTop:s,isAmp:u,numIfr
2024-09-30 13:16:54 UTC	16383	IN	Data Raw: 43 6f 6e 73 65 6e 74 44 61 74 61 28 29 26 26 28 65 2e 75 73 70 43 6f 6e 73 65 6e 74 3d 5f 73 2e 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 28 29 29 2c 49 73 2e 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 28 29 26 26 28 65 2e 67 70 70 43 6f 6e 73 65 6e 74 3d 49 73 2e 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 28 29 29 7d 29 29 2c 64 7d 29 2c 22 6d 61 6b 65 42 69 64 52 65 71 75 65 73 74 73 22 29 2c 47 73 2e 63 61 6c 6c 42 69 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 37 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 37 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 37 5d 3a 7b 7d 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 68 6e 28 74 Data Ascii: ConsentData()&&(e.uspConsent=_s.getConsentData()),Is.getConsentData()&&(e.gppConsent=Is.getConsentData())})),d}),"makeBidRequests"),Gs.callBids=function(e,t,n,r,i,o,a){var s=arguments.length>7&&void 0!==arguments[7]?arguments[7]:{};if(t.length){var c=hn(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49811	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:54 UTC	1411	OUT	GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6229.100000000006 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:54 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:54 GMT Expires: Tue, 30 Sep 2025 13:16:54 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:54 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49812	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:54 UTC	627	OUT	GET /urlutmmapping/42845/UrlMapping/ca477594da315e4b53f6ea52b8abd56c50a329fa.json HTTP/1.1 Host: keymap.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:54 UTC	558	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 23511 Cache-Control: max-age=31536000 Content-Type: application/json Date: Mon, 30 Sep 2024 13:16:54 GMT Etag: 0x8DCE1186B323158 Expires: Tue, 30 Sep 2025 13:16:54 GMT Last-Modified: Mon, 30 Sep 2024 06:23:37 GMT Server: ECAcc (lhc/7937) X-Cache: HIT x-client-device: desktop x-client-geo: US x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e48aa575-801e-0044-0804-1332fb000000 x-ms-version: 2009-09-19 Content-Length: 60 Connection: close
2024-09-30 13:16:54 UTC	60	IN	Data Raw: 7b 22 75 72 6c 5f 6b 65 79 5f 6d 61 70 70 69 6e 67 5f 30 22 3a 22 30 35 62 39 33 31 64 32 2d 63 66 64 38 2d 31 31 65 61 2d 39 34 35 30 2d 36 38 30 37 31 35 32 30 30 35 62 62 22 7d Data Ascii: {"url_key_mapping_0":"05b931d2-cfd8-11ea-9450-6807152005bb"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49817	142.250.181.226	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	842	OUT	GET /pagead/html/r20240925/r20190131/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	639	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9031 X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 04:38:16 GMT Expires: Mon, 14 Oct 2024 04:38:16 GMT Cache-Control: public, max-age=1209600 Age: 31119 ETag: 13108003645644964576 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:16:55 UTC	751	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6c 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6d 2c 6e 3b 61 3a 7b 66 6f 72 28 76 61 72 20 61 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 76 3d 6c 2c 7a 3d 30 3b 7a 3c 61 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 76 3d 76 5b 61 61 5b 7a 5d 5d 2c 76 3d 3d 6e 75 6c 6c 29 7b 6e 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6e 3d 76 Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v
2024-09-30 13:16:55 UTC	1390	IN	Data Raw: 20 47 28 61 29 7b 47 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 47 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 66 61 3d 63 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 43 28 22 45 64 67 65 22 29 3b 21 43 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 46 28 29 3b 46 28 29 3b 43 28 22 53 61 66 61 72 69 22 29 26 26 28 46 28 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 45 64 67 65 22 29 29 7c 7c 28 45 28 29 3f 42 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 43 28 22 45 64 67 2f 22 29 29 7c 7c 45 28 29 26 26 42 28 22 4f 70 65 72 Data Ascii: G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B("Oper
2024-09-30 13:16:55 UTC	1390	IN	Data Raw: 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 70 61 28 6c 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6c 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c 65 74 20 4a 3d 6e 75 6c 6c 3b 76 61 72 20 72 61 3d 28 29 3d 3e 7b 69 66 28 21 4a 29 62 3a 7b 76 61 72 20 61 3d 6e 61 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 49 28 63 29 29 7b 4a 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4a 3d 6e 75 6c 6c 7d 28 61 3d 4a 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c 28 62 Data Ascii: _requests=[]);const b=pa(l.document);b.src=a;l.google_image_requests.push(b)};let J=null;var ra=()=>{if(!J)b:{var a=na();for(var b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&I(c)){J=c;break b}}catch(c){}J=null}(a=J)?((b=a.esf_propArray)\|\|(b
2024-09-30 13:16:55 UTC	1390	IN	Data Raw: 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 4f 3d 6c 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 46 61 3d 21 21 28 4f 26 26 4f 2e 6d 61 72 6b 26 26 4f 2e 6d 65 61 73 75 72 65 26 26 4f 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 46 61 29 7b 76 61 72 20 62 3b 69 66 28 4d 3d 3d 3d 6e 75 6c 6c 29 7b 4d 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6c 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 6c 2e 6c 6f 63 61 74 69 6f Data Ascii: queId=Math.random()}};const O=l.performance,Fa=!!(O&&O.mark&&O.measure&&O.clearMarks),P=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Fa){var b;if(M===null){M="";try{a="";try{a=l.top.location.hash}catch(c){a=l.locatio
2024-09-30 13:16:55 UTC	1390	IN	Data Raw: 63 2c 64 2b 31 2c 66 29 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 66 7c 7c 28 66 3d 30 29 2c 66 3c 32 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 49 61 28 61 2c 62 2c 63 2c 64 2c 66 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 63 2e 6c 65 6e 67 74 68 3e 62 26 26 28 62 3d 63 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 69 2e 6c 65 6e 67 74 68 2d 31 7d 0a 66 75 Data Ascii: c,d+1,f));return e.join(c[d])}}else if(typeof a==="object")return f\|\|(f=0),f<2?encodeURIComponent(Ia(a,b,c,d,f+1)):"...";return encodeURIComponent(String(a))}function Ka(a){let b=1;for(const c in a.h)c.length>b&&(b=c.length);return 3997-b-a.i.length-1}fu
2024-09-30 13:16:55 UTC	1390	IN	Data Raw: 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 26 26 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3d 3d 6b 2e 6c 65 6e 67 74 68 2d 31 29 66 6f 72 28 71 3d 31 3b 71 3c 6b 2e 6c 65 6e 67 74 68 3b 2b 2b 71 29 7b 76 61 72 20 78 3d 6b 5b 71 5d 3b 78 2e 75 72 6c 7c 7c 28 78 2e 75 72 6c 3d 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 71 2d 31 5d 7c 7c 22 22 2c 78 2e 6c 3d 21 30 29 7d 76 61 72 20 74 3d 6b 3b 6c 65 74 20 4e 3d 6e 65 77 20 42 61 28 6c 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 3b 67 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 58 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 78 3d 58 3b 78 3e 3d 30 3b 2d 2d 78 29 7b 76 61 72 20 75 3d 74 5b 78 5d 3b Data Ascii: on.ancestorOrigins&&g.location.ancestorOrigins.length==k.length-1)for(q=1;q<k.length;++q){var x=k[q];x.url\|\|(x.url=g.location.ancestorOrigins[q-1]\|\|"",x.l=!0)}var t=k;let N=new Ba(l.location.href,!1);g=null;const X=t.length-1;for(x=X;x>=0;--x){var u=t[x];
2024-09-30 13:16:55 UTC	1330	IN	Data Raw: 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 51 61 28 29 3a 55 2e 67 26 26 68 61 28 28 29 3d 3e 7b 51 61 28 29 7d 29 7d 29 28 29 3b 76 61 72 20 52 61 3d 61 3d 3e 7b 54 2e 67 3d 62 3d 3e 7b 65 61 28 61 2c 63 3d 3e 7b 63 28 62 29 7d 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 61 28 61 29 7b 61 3d 61 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 61 3d 3d 3d 76 6f 69 64 20 30 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 48 3d 3d 3d 76 6f 69 64 20 30 26 26 28 48 3d 6a 61 28 29 29 3b 76 61 72 20 62 3d 48 3b 72 65 74 75 72 6e 20 6e 65 77 20 6b 61 28 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 29 7d 3b 76 61 72 20 54 61 3b 69 66 28 54 61 3d 66 61 29 7b 76 61 72 20 56 3d 22 49 46 52 41 4d 45 22 2c 56 61 3d 64 6f 63 75 6d Data Ascii: nt.readyState=="complete"?Qa():U.g&&ha(()=>{Qa()})})();var Ra=a=>{T.g=b=>{ea(a,c=>{c(b)})}};function Sa(a){a=a===null?"null":a===void 0?"undefined":a;H===void 0&&(H=ja());var b=H;return new ka(b?b.createHTML(a):a)};var Ta;if(Ta=fa){var V="IFRAME",Va=docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49816	142.250.181.226	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	2367	OUT	GET /pagead/ads?client=ca-pub-1428290592401732&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1727702213&plaf=1%3A2%2C2%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C8%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1727702211461&bpp=5&bdt=2725&idt=2090&shv=r20240925&mjsv=m202409250101&ptt=9&sald [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	759	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 30 Sep 2024 13:16:55 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 30-Sep-2024 13:31:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 30 Sep 2024 13:16:55 GMT Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:55 UTC	631	IN	Data Raw: 39 35 33 0d 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 61 70 63 6e 66 20 3d 20 27 7b 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 61 70 63 6e 66 22 2c 22 63 6f 6e 66 69 67 22 3a 22 5b 5b 5b 5b 6e 75 6c 6c 2c 33 2c 6e 75 6c 6c 2c 5b 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 22 44 49 56 23 73 74 61 72 74 5c 5c 5c 5c 75 30 30 33 65 44 49 56 5c 5c 5c 5c 75 30 30 33 65 54 41 42 4c 45 5c 5c 5c 5c 75 30 30 33 65 54 42 4f 44 59 5c 5c 5c 5c 75 30 30 33 65 54 52 5c 5c 5c 5c 75 30 30 33 65 54 44 2e 68 74 6f 70 5c 5c 5c 22 5d 2c 32 2c 5b 5c 5c 5c 22 31 30 70 78 5c 5c 5c 22 2c 5c 5c 5c 22 31 30 70 78 5c 5c 5c 22 2c 74 72 75 65 5d 2c 5b 30 5d 2c 6e 75 6c 6c 2c 5b 5d 2c 5b 5d 2c 31 2c 5b 5d 2c 5b 5d 2c 5b 5d 5d 2c 5b 5b 6e 75 6c 6c 2c 33 2c 6e 75 6c 6c 2c 5b 5d 2c 6e 75 Data Ascii: 953<script>var apcnf = '{"googMsgType":"apcnf","config":"[[[[null,3,null,[],null,null,\\\"DIV#start\\\\u003eDIV\\\\u003eTABLE\\\\u003eTBODY\\\\u003eTR\\\\u003eTD.htop\\\"],2,[\\\"10px\\\",\\\"10px\\\",true],[0],null,[],[],1,[],[],[]],[[null,3,null,[],nu
2024-09-30 13:16:55 UTC	1390	IN	Data Raw: 2c 5b 5d 2c 5b 5d 2c 5b 5d 5d 2c 5b 5b 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 5b 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 22 44 49 56 2e 73 65 63 6f 6e 64 69 6e 64 65 6e 74 5c 5c 5c 22 5d 2c 31 2c 5b 5c 5c 5c 22 31 30 70 78 5c 5c 5c 22 2c 5c 5c 5c 22 31 30 70 78 5c 5c 5c 22 2c 74 72 75 65 5d 2c 5b 30 5d 2c 6e 75 6c 6c 2c 5b 5d 2c 5b 5d 2c 31 2c 5b 5d 2c 5b 5d 2c 5b 5d 5d 2c 5b 5b 6e 75 6c 6c 2c 32 2c 6e 75 6c 6c 2c 5b 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 22 44 49 56 23 73 74 61 72 74 5c 5c 5c 5c 75 30 30 33 65 44 49 56 5c 5c 5c 5c 75 30 30 33 65 54 41 42 4c 45 5c 5c 5c 5c 75 30 30 33 65 54 42 4f 44 59 5c 5c 5c 5c 75 30 30 33 65 54 52 5c 5c 5c 5c 75 30 30 33 65 54 44 2e 68 74 6f 70 5c 5c 5c 22 5d 2c 32 2c 5b 5c 5c 5c 22 31 30 70 78 5c 5c 5c 22 2c Data Ascii: ,[],[],[]],[[null,0,null,[],null,null,\\\"DIV.secondindent\\\"],1,[\\\"10px\\\",\\\"10px\\\",true],[0],null,[],[],1,[],[],[]],[[null,2,null,[],null,null,\\\"DIV#start\\\\u003eDIV\\\\u003eTABLE\\\\u003eTBODY\\\\u003eTR\\\\u003eTD.htop\\\"],2,[\\\"10px\\\",
2024-09-30 13:16:55 UTC	373	IN	Data Raw: 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 72 75 65 2c 74 72 75 65 2c 74 72 75 65 2c 6e 75 6c 6c 2c 32 2e 31 38 38 39 39 39 39 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 6e 75 6c 6c 2c 31 2c 5b 5d 5d 2c 6e 75 6c 6c 2c 5b 31 39 32 36 30 30 33 39 33 35 5d 2c 6e 75 6c 6c 2c 5b 5c 5c 5c 22 65 6e 5c 5c 5c 22 5d 2c 5b 31 37 32 37 35 32 32 31 37 34 33 35 34 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5c 5c 5c 22 54 6f 67 67 6c 65 20 74 6f 6f 6c 62 61 72 20 65 78 70 61 6e 73 69 6f 6e 5c 5c 5c 22 2c 5c 5c 5c 22 54 6f 67 67 6c 65 20 70 72 69 76 61 63 79 20 61 6e 64 20 6c 65 67 61 6c 20 73 65 74 74 69 6e 67 73 20 Data Ascii: ull,null,null,[null,null,null,true,true,true,null,2.1889999],null,null,[1,null,1,[]],null,[1926003935],null,[\\\"en\\\"],[1727522174354],null,null,null,null,null,null,null,null,null,[[\\\"Toggle toolbar expansion\\\",\\\"Toggle privacy and legal settings
2024-09-30 13:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49818	142.250.181.226	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	2016	OUT	GET /pagead/ads?client=ca-pub-3245380208650914&output=html&h=90&slotname=1384673200&adk=1626116373&adf=4281662534&pi=t.ma~as.1384673200&w=728&abgtt=6&lmt=1727702213&format=728x90&url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1727702212707&bpp=2&bdt=3971&idt=903&shv=r20240925&mjsv=m202409250101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=5953568511378&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=255&ady=2&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087428%2C31087437%2C44795921%2C31087523%2C95339679&oid=2&pvsid=1458590452093353&tmod=16504 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	728	IN	HTTP/1.1 400 Bad Request P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 30 Sep 2024 13:16:55 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 30-Sep-2024 13:31:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:55 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-09-30 13:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49815	142.250.181.226	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	2024	OUT	GET /pagead/ads?client=ca-pub-3245380208650914&output=html&h=600&slotname=2373948248&adk=1250989643&adf=1556737774&pi=t.ma~as.2373948248&w=160&abgtt=6&lmt=1727702213&format=160x600&url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1727702212711&bpp=3&bdt=3975&idt=944&shv=r20240925&mjsv=m202409250101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C728x90&nras=1&correlator=5953568511378&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=100&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087428%2C31087437%2C44795921%2C31087523%2C95339679&oid=2&pvsid=1458590452093353 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	728	IN	HTTP/1.1 400 Bad Request P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 30 Sep 2024 13:16:55 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 30-Sep-2024 13:31:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:55 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-09-30 13:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49814	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	1152	OUT	GET /AdPushupFeedbackWebService/feedback?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMTI3MTQsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZUlkIjo0Mjg0NSwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwidXJsIjoiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlP3Q9NTQyODg3N18xXzImczE9JUVEJUUwJUYzJUY3JUVEJUVFLSVFOCVGMSVGMSVFQiVFNSVFNCVFRSVFMiVFMCVGMiVFNSVFQiVGQyVGMSVFQSVFOCVFOSIsIm1vZGUiOjIsImVycm9yQ29kZSI6MiwicmVmZXJyZXIiOiIiLCJwbGF0Zm9ybSI6IkRFU0tUT1AiLCJpc0dlbmllZSI6ZmFsc2UsInNlY3Rpb25zIjpudWxsLCJjb3VudHJ5IjoiVVMifQ%3D%3D&c_b=6313.8000000000175 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:55 GMT Expires: Tue, 30 Sep 2025 13:16:55 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:55 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49819	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	1160	OUT	GET /AdPushupFeedbackWebService/feedback/testmode?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMTI2MjIsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZUlkIjo0Mjg0NSwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwidXJsIjoiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlP3Q9NTQyODg3N18xXzImczE9JUVEJUUwJUYzJUY3JUVEJUVFLSVFOCVGMSVGMSVFQiVFNSVFNCVFRSVFMiVFMCVGMiVFNSVFQiVGQyVGMSVFQSVFOCVFOSIsIm1vZGUiOjUsImVycm9yQ29kZSI6MSwicmVmZXJyZXIiOiIiLCJwbGF0Zm9ybSI6IkRFU0tUT1AiLCJpc0dlbmllZSI6ZmFsc2UsInNlY3Rpb25zIjpudWxsLCJjb3VudHJ5IjoiVVMifQ%3D%3D&c_b=6337.399999999994 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:55 GMT Expires: Tue, 30 Sep 2025 13:16:55 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:55 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49820	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	1474	OUT	GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6345 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:55 GMT Expires: Tue, 30 Sep 2025 13:16:55 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:55 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49822	151.101.194.137	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1653186 Date: Mon, 30 Sep 2024 13:16:55 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740056-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 0 X-Timer: S1727702216.580561,VS0,VE1 Vary: Accept-Encoding
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-09-30 13:16:55 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49821	91.228.74.159	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	530	OUT	GET /quant.js HTTP/1.1 Host: secure.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:55 UTC	295	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:55 GMT Content-Type: application/javascript Content-Length: 23930 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=604800 Etag: "HP/dXILNCv8vRT01LqWQOg==" Expires: Mon, 07 Oct 2024 13:16:55 GMT Vary: Accept-Encoding
2024-09-30 13:16:55 UTC	16089	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 33 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 63 61 73 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 71 63 53 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 72 28 29 3b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 28 65 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 3b Data Ascii: /* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;
2024-09-30 13:16:55 UTC	7841	IN	Data Raw: 29 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 5b 5d 3b 69 66 28 21 28 6a 65 3e 30 29 29 7b 66 6f 72 28 65 20 69 6e 20 54 28 29 2c 44 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 44 65 2c 65 29 26 26 44 65 5b 65 5d 26 26 28 74 3d 44 65 5b 65 5d 2c 6e 2e 70 75 73 68 28 74 29 2c 64 65 6c 65 74 65 20 44 65 5b 65 5d 29 3b 69 66 28 31 3d 3d 6e 2e 6c 65 6e 67 74 68 26 26 77 28 6e 5b 30 5d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 77 28 6e 5b 65 5d 29 7d 7d 2c 65 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 5b 5d 3b 66 6f 72 28 6e 3d 4f 65 2e 73 6c 69 63 65 28 30 29 Data Ascii: )},K=function(){var e,t,n=[];if(!(je>0)){for(e in T(),De)Object.prototype.hasOwnProperty.call(De,e)&&De[e]&&(t=De[e],n.push(t),delete De[e]);if(1==n.length&&w(n[0]),n.length>1)for(e=0;e<n.length;e++)w(n[e])}},ee=function(){var e,t,n,r=[];for(n=Oe.slice(0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49825	13.224.186.120	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	580	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Mon, 30 Sep 2024 13:09:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 cb33a7a4640adbb55df3e0d143601558.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: Ew7oxs_ZpF1jnhglvHTi1RDGv4dOWEke7qsh9JUeXwPurOumdE0C4A== Age: 440
2024-09-30 13:16:56 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49824	13.224.186.120	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	653	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.multitran.com&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	506	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 3078 Connection: close Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Mon, 30 Sep 2024 13:09:33 GMT Server: Server X-Cache: Hit from cloudfront Via: 1.1 f7bf326347bdd7f275a38a22b5b83724.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: n_Vi7roV-xvLjy9XFtmR7KZI5E_RIcEXIT2bjhBr9IgfNxb1dW5ETw== Age: 443
2024-09-30 13:16:56 UTC	3078	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 62 63 69 64 2e 6d 69 6e 2e 6a 73 27 3b 5c 6e 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 29 3b 5c 6e 7d 3b 76 61 72 20 6c 6f 74 61 Data Ascii: {"3pvendor":"if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lota

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49826	18.245.31.123	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	575	OUT	GET /configs/2e7e1587-d92f-46dd-8721-80b53eccb87e HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	389	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 563 Connection: close Server: CloudFront Date: Mon, 30 Sep 2024 13:09:36 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 2146d75cb402f16f98928cb19acf5ff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: XtyVcbpVdgsMgj7yus7yGYnvRN7dCGt8Xoq_7vAvCIPo5kDZMtu4FA== Age: 440
2024-09-30 13:16:56 UTC	563	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 32 65 37 65 31 35 38 37 2d 64 39 32 66 2d 34 36 64 64 2d 38 37 32 31 2d 38 30 62 35 33 65 63 63 62 38 37 65 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "2e7e1587-d92f-46dd-8721-80b53eccb87e";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49833	142.250.185.98	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:55 UTC	464	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	786	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Mon, 30 Sep 2024 13:16:56 GMT Expires: Mon, 30 Sep 2024 13:16:56 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 49 / 19996 / m202409240101 / config-hash: 15736610854803110838 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 107354 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:16:56 UTC	604	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=type
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 66 61 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 66 61 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 2c 77 3d 66 75 6e 63 Data Ascii: &c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=func
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 76 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 61 2c 61 29 7d 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: function(){return ha(aa(this))}})}return a},"es6");var ha=function(a){a={next:a};a[v(t.Symbol,"iterator")]=function(){return this};return a},ja=function(a){return ia(a,a)},ia=function(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 7a 62 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 75 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.zb=b.prototype},ua=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 2e 67 29 3f 64 65 6c 65 74 65 20 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 66 7d 2c 22 65 73 36 22 29 3b 77 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 76 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 78 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c Data Ascii: .g)?delete g[d][this.g]:!1};return f},"es6");w("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!v(a.prototype,"entries")\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(x([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 76 28 74 68 69 73 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 71 3b 21 28 71 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 71 3d 71 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 71 5b 31 5d 2c 71 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 Data Ascii: turn e(this,function(h){return h.key})};c.prototype.values=function(){return e(this,function(h){return h.value})};c.prototype.forEach=function(h,k){for(var l=v(this,"entries").call(this),q;!(q=l.next()).done;)q=q.value,h.call(k,q[1],q[0],this)};c.prototyp
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 29 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 3d 3d 3d 30 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 63 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 Data Ascii: ).done;)this.add(d.value)}this.size=this.g.size};b.prototype.add=function(c){c=c===0?0:c;this.g.set(c,c);this.size=this.g.size;return this};b.prototype.delete=function(c){c=this.g.delete(c);this.size=this.g.size;return c};b.prototype.clear=function(){this
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 76 61 28 74 68 69 73 2c 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 21 3d 3d 2d 31 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 Data Ascii: ular expression");return a+""};w("String.prototype.includes",function(a){return a?a:function(b,c){return va(this,b,"includes").indexOf(b,c\|\|0)!==-1}},"es6");w("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var e=[],f
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 76 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 Data Ascii: turn!1;return g>=f}},"es6");var wa=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[v(t.Symbol,"iterator")]=function(){return e};r
2024-09-30 13:16:56 UTC	1390	IN	Data Raw: 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 7a 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 78 61 28 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 29 3b 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 61 3a 62 7d 2c 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 7a 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e Data Ascii: sure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var z=this\|\|self,ya=function(a,b){var c=xa("CLOSURE_FLAGS");a=c&&c[a];return a!=null?a:b},xa=function(a){a=a.split(".");for(var b=z,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49832	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	375	OUT	GET /AdPushupFeedbackWebService/user/sync HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	488	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Ap-Cookie-Status: cookies ap_uid and ap_usid not set due to GDPR Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:56 GMT Expires: Tue, 30 Sep 2025 13:16:56 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:56 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49828	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	372	OUT	GET /block.jpg?ts=1727702211930 HTTP/1.1 Host: delivery.adrecover.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	416	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 16449123 Cache-Control: max-age=31536000 Content-Type: image/jpeg Date: Mon, 30 Sep 2024 13:16:56 GMT Etag: "60d2d6c2-277" Expires: Tue, 30 Sep 2025 13:16:56 GMT Last-Modified: Wed, 23 Jun 2021 06:37:54 GMT Server: ECAcc (lhc/793D) X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 631 Connection: close
2024-09-30 13:16:56 UTC	631	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49834	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	419	OUT	GET /urlutmmapping/42845/UrlMapping/ca477594da315e4b53f6ea52b8abd56c50a329fa.json HTTP/1.1 Host: keymap.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	558	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 23513 Cache-Control: max-age=31536000 Content-Type: application/json Date: Mon, 30 Sep 2024 13:16:56 GMT Etag: 0x8DCE1186B323158 Expires: Tue, 30 Sep 2025 13:16:56 GMT Last-Modified: Mon, 30 Sep 2024 06:23:37 GMT Server: ECAcc (lhc/7937) X-Cache: HIT x-client-device: desktop x-client-geo: US x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e48aa575-801e-0044-0804-1332fb000000 x-ms-version: 2009-09-19 Content-Length: 60 Connection: close
2024-09-30 13:16:56 UTC	60	IN	Data Raw: 7b 22 75 72 6c 5f 6b 65 79 5f 6d 61 70 70 69 6e 67 5f 30 22 3a 22 30 35 62 39 33 31 64 32 2d 63 66 64 38 2d 31 31 65 61 2d 39 34 35 30 2d 36 38 30 37 31 35 32 30 30 35 62 62 22 7d Data Ascii: {"url_key_mapping_0":"05b931d2-cfd8-11ea-9450-6807152005bb"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49829	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	368	OUT	GET /pbuseridscripts/quantcast.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	430	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 4792818 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:56 GMT Etag: W/"60d94cdb-1c2" Expires: Tue, 30 Sep 2025 13:16:56 GMT Last-Modified: Mon, 28 Jun 2021 04:15:23 GMT Server: ECAcc (lhc/7904) Vary: Accept-Encoding X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 450 Connection: close
2024-09-30 13:16:56 UTC	450	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 71 65 76 65 6e 74 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 71 65 76 65 6e 74 73 20 7c 7c 20 5b 5d 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 65 6c 65 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 65 6c 65 6d 2e 73 72 63 20 3d 20 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 3d 3d 20 22 68 74 74 70 73 3a 22 20 3f 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 22 20 3a 20 22 68 74 74 70 3a 2f 2f 65 64 67 65 22 29 20 2b 20 22 2e 71 75 61 6e 74 73 65 72 76 65 2e 63 6f 6d 2f 71 75 61 6e 74 2e 6a 73 22 3b 0a 65 6c 65 6d 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 65 6c 65 6d 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a Data Ascii: window._qevents = window._qevents \|\| [];(function() {var elem = document.createElement('script');elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";elem.async = true;elem.type = "text/j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49830	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	1174	OUT	GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6229.100000000006 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:56 GMT Expires: Tue, 30 Sep 2025 13:16:56 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:56 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49831	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	923	OUT	GET /AdPushupFeedbackWebService/feedback/testmode?data=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%3D%3D&c_b=6179.100000000006 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:56 GMT Expires: Tue, 30 Sep 2025 13:16:56 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:56 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49837	13.224.186.120	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	359	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	650	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 331650 Connection: close Date: Mon, 30 Sep 2024 13:09:34 GMT Last-Modified: Wed, 28 Aug 2024 22:46:36 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront), 1.1 f7bf326347bdd7f275a38a22b5b83724.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 ETag: "907cbdd883935369790d45cc9bd9e8b7" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: ryKVrmBJjBuEhI5jHynjpx5Guh1xhhvBSOII7jk7OXSroD2tIbi4cw== Age: 443
2024-09-30 13:16:56 UTC	15734	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 38 32 37 2e 31 35 35 32 20 2d 20 32 30 32 34 2d 30 38 2d 32 37 20 31 35 3a 35 32 3a 34 34 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.827.1552 - 2024-08-27 15:52:44 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 66 72 6f 6d 41 64 64 45 76 65 6e 74 7d 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 72 2e 73 65 6e 74 28 29 2c 5b 32 2c 77 2e 63 6f 6d 70 6c 65 74 65 64 5d 7d 7d 29 29 7d 29 29 7d 5d 2c 5b 4d 2e 63 6f 6e 73 65 6e 74 5f 67 70 70 61 70 69 5f 73 79 6e 63 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6f 3d 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 3b 72 65 74 75 72 6e 20 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 2c 61 2c 75 2c 73 2c 64 2c 6c 2c 76 2c 66 2c 70 2c 67 2c 68 2c 6d 2c 79 2c 62 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 Data Ascii: l)\|\|void 0===o?void 0:o.fromAddEvent})];case 1:return r.sent(),[2,w.completed]}}))}))}],[M.consent_gppapi_syncData,function(t){var e=t.account,o=t.customEvent;return r(void 0,void 0,void 0,(function(){var t,r,a,u,s,d,l,v,f,p,g,h,m,y,b;return i(this,(funct
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 3a 63 2e 68 6f 73 74 6e 61 6d 65 73 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 73 26 26 63 74 28 73 29 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 63 6f 72 64 45 72 72 6f 72 45 76 65 6e 74 28 7b 69 64 3a 22 68 6f 73 74 6e 61 6d 65 73 22 2c 65 72 72 6f 72 3a 6e 65 77 20 45 72 72 6f 72 28 74 29 7d 29 2c 21 31 7d 72 65 74 75 72 6e 21 31 7d 28 65 2c 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 6f 2c 72 2c 69 2c 61 2c 63 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 72 65 73 74 72 69 63 74 69 6f 6e 73 29 7c 7c Data Ascii: :c.hostnames;if(void 0!==s&&ct(s))return!0}catch(t){return e.recordErrorEvent({id:"hostnames",error:new Error(t)}),!1}return!1}(e,t)\|\|function(t){var e,n,o,r,i,a,c=null===(o=null===(n=null===(e=null==t?void 0:t.detail)\|\|void 0===e?void 0:e.restrictions)\|\|
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 20 30 3a 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 74 6f 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 74 29 7b 7d 74 72 79 7b 69 66 28 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 74 6f 70 21 3d 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 73 65 6c 66 29 72 65 74 75 72 6e 20 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 7d 28 74 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 Data Ascii: 0:e.location.href))return null===(n=t.globalContext.top)\|\|void 0===n?void 0:n.location.href}catch(t){}try{if(t.globalContext.top!==t.globalContext.self)return t.globalContext.document.referrer}catch(t){}return}(t);if(void 0!==n)return encodeURIComponent(
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 64 65 62 75 67 5f 65 76 65 6e 74 73 5f 73 68 6f 77 3a 22 64 65 62 75 67 2f 65 76 65 6e 74 73 2f 73 68 6f 77 22 2c 64 65 62 75 67 5f 70 72 65 70 65 6e 64 5f 61 64 64 3a 22 64 65 62 75 67 2f 70 72 65 70 65 6e 64 2f 61 64 64 22 2c 64 65 62 75 67 5f 70 72 65 70 65 6e 64 5f 63 6c 65 61 72 3a 22 64 65 62 75 67 2f 70 72 65 70 65 6e 64 2f 63 6c 65 61 72 22 2c 64 65 62 75 67 5f 70 72 65 70 65 6e 64 5f 72 65 6d 6f 76 65 3a 22 64 65 62 75 67 2f 70 72 65 70 65 6e 64 2f 72 65 6d 6f 76 65 22 2c 64 65 62 75 67 5f 73 74 6f 72 65 5f 73 68 6f 77 3a 22 64 65 62 75 67 2f 73 74 6f 72 65 2f 73 68 6f 77 22 2c 61 64 5f 64 65 62 75 67 53 65 73 73 69 6f 6e 5f 73 74 61 72 74 3a 22 61 64 2f 64 65 62 75 67 53 65 73 73 69 6f 6e 2f 73 74 61 72 74 22 2c 64 65 62 75 67 5f 6c 69 73 74 65 Data Ascii: debug_events_show:"debug/events/show",debug_prepend_add:"debug/prepend/add",debug_prepend_clear:"debug/prepend/clear",debug_prepend_remove:"debug/prepend/remove",debug_store_show:"debug/store/show",ad_debugSession_start:"ad/debugSession/start",debug_liste
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 21 30 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 64 65 61 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 64 3d 3d 3d 62 6e 2e 65 71 75 69 6e 6f 78 57 69 64 67 65 74 7d 29 29 29 7d 28 74 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b Data Ascii: return t.some((function(t){return function(t){var e;return!0===(null===(e=t.deal)\|\|void 0===e?void 0:e.some((function(t){return t.id===bn.equinoxWidget})))}(t)}))}function On(t,e,n){return r(this,void 0,void 0,(function(){var o;return i(this,(function(r){
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 4f 4c 67 22 2c 6b 65 79 5f 6f 70 73 3a 5b 22 65 6e 63 72 79 70 74 22 5d 2c 6b 74 79 3a 22 6f 63 74 22 7d 2c 22 41 45 53 2d 43 54 52 22 2c 21 30 2c 5b 22 65 6e 63 72 79 70 74 22 5d 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 3d 69 2e 73 65 6e 74 28 29 2c 6e 3d 28 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 2e 65 6e 63 6f 64 65 28 74 29 2c 72 3d 55 69 6e 74 38 41 72 72 61 79 2e 62 69 6e 64 2c 5b 34 2c 63 72 79 70 74 6f 2e 73 75 62 74 6c 65 2e 65 6e 63 72 79 70 74 28 7b 6e 61 6d 65 3a 22 41 45 53 2d 43 54 52 22 2c 63 6f 75 6e 74 65 72 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 2c 6c 65 6e 67 74 68 3a 31 32 38 7d 2c 65 2c 6e 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6f 3d 6e 65 77 28 72 2e 61 70 70 6c 79 28 55 69 6e 74 38 Data Ascii: OLg",key_ops:["encrypt"],kty:"oct"},"AES-CTR",!0,["encrypt"])];case 1:return e=i.sent(),n=(new TextEncoder).encode(t),r=Uint8Array.bind,[4,crypto.subtle.encrypt({name:"AES-CTR",counter:new Uint8Array(16),length:128},e,n)];case 2:return o=new(r.apply(Uint8
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c Data Ascii: =t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{val
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 63 68 28 77 29 2c 30 3c 67 2e 6c 65 6e 67 74 68 26 26 76 28 29 29 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 63 2e 62 29 28 74 2c 22 73 65 6e 64 50 69 78 65 6c 73 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 29 7b 76 61 72 20 6e 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 77 28 7b 70 61 79 6c 6f 61 64 3a 7b 5f 74 79 70 65 3a 22 6f 75 74 73 74 72 65 61 6d 52 65 6e 64 65 72 22 2c 62 69 3a 65 2c 6c 6f 63 3a 74 2c 6c 74 3a 6e 7d 7d 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 63 2e 62 29 28 74 2c 22 6f 75 74 73 74 72 65 61 6d 50 69 78 65 6c 22 29 2c 21 Data Ascii: ch(w),0<g.length&&v())}catch(t){Object(c.b)(t,"sendPixels")}}function D(t,e){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:0;try{return w({payload:{_type:"outstreamRender",bi:e,loc:t,lt:n}})}catch(t){return Object(c.b)(t,"outstreamPixel"),!
2024-09-30 13:16:56 UTC	16384	IN	Data Raw: 21 31 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 76 61 72 20 74 2c 65 3d 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 6e 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 3b 74 72 79 7b 41 28 65 3f 22 63 6f 6e 73 6f 6c 65 5f 76 32 22 3a 22 63 6f 6e 73 6f 6c 65 22 2c 21 30 29 2c 6d 7c 7c 28 74 3d 7b 75 72 6c 3a 65 3f 72 2e 61 2e 67 65 74 53 74 61 74 65 28 29 2e 63 66 67 2e 44 45 42 55 47 5f 41 50 50 5f 48 54 4d 4c 5f 56 32 3a 72 2e 61 2e 67 65 74 53 74 61 74 65 28 29 2e 63 66 67 2e 44 45 42 55 47 5f 41 50 50 5f 48 54 4d 4c 2c 6f 6e 6c 6f 61 64 3a 68 2c 6f 6e 65 72 72 6f Data Ascii: !1;function g(){var t,e=0<arguments.length&&void 0!==arguments[0]&&arguments[0],n=1<arguments.length?arguments[1]:void 0;try{A(e?"console_v2":"console",!0),m\|\|(t={url:e?r.a.getState().cfg.DEBUG_APP_HTML_V2:r.a.getState().cfg.DEBUG_APP_HTML,onload:h,onerro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49835	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	372	OUT	GET /prebid/pb.42845.1722547367473.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 3197601 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:56 GMT Etag: W/"66abfc8c-71d97" Expires: Tue, 30 Sep 2025 13:16:56 GMT Last-Modified: Thu, 01 Aug 2024 21:22:20 GMT Server: ECAcc (lhc/78B5) Vary: Accept-Encoding X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 466327 Connection: close
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 32 37 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 34 2d 30 38 2d 30 31 0a 4d 6f 64 75 6c 65 73 3a 20 63 75 72 72 65 6e 63 79 2c 20 73 63 68 61 69 6e 2c 20 75 73 65 72 49 64 2c 20 69 64 35 49 64 53 79 73 74 65 6d 2c 20 69 64 35 41 6e 61 6c 79 74 69 63 73 41 64 61 70 74 65 72 2c 20 6c 69 76 65 49 6e 74 65 6e 74 49 64 53 79 73 74 65 6d 2c 20 75 6e 69 66 69 65 64 49 64 53 79 73 74 65 6d 2c 20 63 72 69 74 65 6f 49 64 53 79 73 74 65 6d 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 55 73 70 2c 20 73 68 61 72 65 64 49 64 53 79 73 74 65 6d 2c 20 71 75 61 6e 74 63 61 73 74 49 64 53 79 73 74 65 6d 2c 20 69 64 65 6e 74 69 74 79 4c 69 6e 6b 49 64 53 79 Data Ascii: /* prebid.js v8.27.0Updated: 2024-08-01Modules: currency, schain, userId, id5IdSystem, id5AnalyticsAdapter, liveIntentIdSystem, unifiedIdSystem, criteoIdSystem, consentManagement, consentManagementUsp, sharedIdSystem, quantcastIdSystem, identityLinkIdSy
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 5b 6e 2c 65 5d 2e 63 6f 6e 63 61 74 28 28 30 2c 72 2e 5a 29 28 69 29 2c 5b 74 5d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 53 65 74 3b 4a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 21 65 2e 68 61 73 28 6e 29 3b 29 65 2e 61 64 64 28 6e 29 2c 6e 3d 4a 5b 6e 5d 3b 72 65 74 75 72 6e 20 6e 7d 7a 2e 6d 61 6b 65 42 69 64 52 65 71 75 65 73 74 73 3d 28 30 2c 6c 2e 7a 33 29 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 35 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 35 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 35 5d 3a 7b 7d 2c 75 Data Ascii: .apply(void 0,[n,e].concat((0,r.Z)(i),[t]))}}function cn(n){for(var e=new Set;J.hasOwnProperty(n)&&!e.has(n);)e.add(n),n=J[n];return n}z.makeBidRequests=(0,l.z3)("sync",(function(n,e,t,r,i){var o=arguments.length>5&&void 0!==arguments[5]?arguments[5]:{},u
2024-09-30 13:16:56 UTC	2	IN	Data Raw: 29 2c Data Ascii: ),
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 73 2e 74 61 67 3b 76 61 72 20 64 3d 6f 2e 67 65 74 28 75 29 7c 7c 7b 7d 2c 66 3d 7b 6c 6f 61 64 65 64 3a 21 31 2c 74 61 67 3a 6e 75 6c 6c 2c 63 61 6c 6c 62 61 63 6b 73 3a 5b 5d 7d 3b 72 65 74 75 72 6e 20 64 5b 6e 5d 3d 66 2c 6f 2e 73 65 74 28 75 2c 64 29 2c 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 66 2e 63 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 74 29 2c 28 30 2c 69 2e 79 4e 29 28 22 6d 6f 64 75 6c 65 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 69 73 20 6c 6f 61 64 69 6e 67 20 65 78 74 65 72 6e 61 6c 20 4a 61 76 61 53 63 72 69 70 74 22 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 72 7c 7c 28 72 3d 64 6f 63 75 6d 65 6e 74 29 3b 76 61 72 20 61 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 Data Ascii: s.tag;var d=o.get(u)\|\|{},f={loaded:!1,tag:null,callbacks:[]};return d[n]=f,o.set(u,d),t&&"function"==typeof t&&f.callbacks.push(t),(0,i.yN)("module ".concat(e," is loading external JavaScript")),function(e,t,r,o){r\|\|(r=document);var a=r.createElement("scr
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 3a 22 22 7d 29 29 2c 24 28 6e 2e 43 52 49 44 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 69 76 65 49 64 3f 6e 2e 63 72 65 61 74 69 76 65 49 64 3a 22 22 7d 29 29 5d 7d 28 29 29 2c 22 76 69 64 65 6f 22 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 72 5b 6b 2e 6b 32 2e 78 6e 5d 2e 73 6c 69 63 65 28 29 3b 69 66 28 72 5b 6b 2e 6b 32 2e 78 6e 5d 3d 69 2c 5b 74 2e 55 55 49 44 2c 74 2e 43 41 43 48 45 5f 49 44 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 28 30 2c 6d 2e 73 45 29 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6b 65 79 3d 3d 3d 6e 7d 29 29 26 26 69 2e 70 75 73 68 28 24 28 6e 2c 22 76 69 64 65 6f 43 61 63 68 65 4b 65 79 22 29 29 7d 29 29 2c 66 Data Ascii: :""})),$(n.CRID,(function(n){return n.creativeId?n.creativeId:""}))]}()),"video"===n){var i=r[k.k2.xn].slice();if(r[k.k2.xn]=i,[t.UUID,t.CACHE_ID].forEach((function(n){void 0===(0,m.sE)(i,(function(e){return e.key===n}))&&i.push($(n,"videoCacheKey"))})),f
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 6e 20 6f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 6e 2c 65 2c 74 29 7b 69 66 28 21 65 2e 68 61 73 28 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 67 65 74 20 70 72 69 76 61 74 65 20 66 69 65 6c 64 20 6f 6e 20 6e 6f 6e 2d 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 43 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 7d 29 2c 54 3d 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 7d 29 2c 6e 65 77 20 57 65 61 6b 4d 61 70 29 2c 6b 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 4f 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 45 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 49 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 42 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 6a 3d 6e 65 77 20 Data Ascii: n object")}function A(n,e,t){if(!e.has(n))throw new TypeError("attempted to get private field on non-instance");return t}var C=Object.freeze({}),T=(Object.freeze({}),new WeakMap),k=new WeakMap,O=new WeakMap,E=new WeakMap,I=new WeakMap,B=new WeakMap,j=new
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 71 75 69 72 65 64 3a 30 2c 69 64 3a 35 2c 69 6d 67 3a 7b 74 79 70 65 3a 31 2c 77 6d 69 6e 3a 32 30 2c 68 6d 69 6e 3a 32 30 7d 7d 5d 7d 2c 69 6d 61 67 65 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 74 69 74 6c 65 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 73 70 6f 6e 73 6f 72 65 64 42 79 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 63 6c 69 63 6b 55 72 6c 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 62 6f 64 79 3a 7b 72 65 71 75 69 72 65 64 3a 21 31 7d 2c 69 63 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 31 7d 7d 7d 2c 62 3d 64 2e 73 24 2c 77 3d 64 2e 6f 46 2c 41 3d 64 2e 56 31 2c 43 3d 64 2e 7a 41 2c 54 3d 64 2e 46 59 2c 6b 3d 4a 28 41 29 2c 4f 3d 4a 28 62 29 2c 45 3d 7b 69 6d 67 3a 31 2c 6a 73 3a 32 2c 31 3a 22 69 6d 67 22 2c 32 3a 22 6a 73 22 7d 2c 49 Data Ascii: quired:0,id:5,img:{type:1,wmin:20,hmin:20}}]},image:{required:!0},title:{required:!0},sponsoredBy:{required:!0},clickUrl:{required:!0},body:{required:!1},icon:{required:!1}}},b=d.s$,w=d.oF,A=d.V1,C=d.zA,T=d.FY,k=J(A),O=J(b),E={img:1,js:2,1:"img",2:"js"},I
2024-09-30 13:16:56 UTC	4	IN	Data Raw: 43 6f 64 65 Data Ascii: Code
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 3d 3d 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 65 29 7b 69 66 28 21 30 3d 3d 3d 54 2e 76 63 2e 67 65 74 43 6f 6e 66 69 67 28 22 74 61 72 67 65 74 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 61 6c 77 61 79 73 49 6e 63 6c 75 64 65 44 65 61 6c 73 22 29 29 7b 76 61 72 20 74 3d 57 2e 63 6f 6e 63 61 74 28 66 2e 78 63 29 3b 72 65 74 75 72 6e 20 4a 28 65 2c 71 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 64 65 61 6c 49 64 26 26 72 28 65 2c 6e 29 29 72 65 74 75 72 6e 28 30 2c 6f 2e 5a 29 28 7b 7d 2c 65 2e 61 64 55 6e 69 74 43 6f 64 65 2c 45 28 65 2c 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 61 64 73 65 72 76 65 72 54 61 72 67 65 74 69 6e 67 5b 6e 5d 7d 29 29 Data Ascii: ===e)}function i(n,e){if(!0===T.vc.getConfig("targetingControls.alwaysIncludeDeals")){var t=W.concat(f.xc);return J(e,q).map((function(e){if(e.dealId&&r(e,n))return(0,o.Z)({},e.adUnitCode,E(e,t.filter((function(n){return void 0!==e.adserverTargeting[n]}))
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 28 22 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 6f 6e 20 74 68 65 20 70 61 67 65 22 29 7d 2c 6c 6e 2e 73 65 74 54 61 72 67 65 74 69 6e 67 46 6f 72 41 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 28 30 2c 75 2e 50 4e 29 28 22 49 6e 76 6f 6b 69 6e 67 20 5f 61 70 50 62 4a 73 2e 73 65 74 54 61 72 67 65 74 69 6e 67 46 6f 72 41 6e 22 2c 61 72 67 75 6d 65 6e 74 73 29 2c 47 2e 69 73 41 70 6e 74 61 67 44 65 66 69 6e 65 64 28 29 3f 28 47 2e 73 65 74 54 61 72 67 65 74 69 6e 67 46 6f 72 41 73 74 28 6e 29 2c 64 2e 6a 38 28 79 6e 2c 47 2e 67 65 74 41 6c 6c 54 61 72 67 65 74 69 6e 67 28 29 29 29 3a 28 30 2c 75 2e 48 29 28 22 77 69 6e 64 6f 77 2e 61 70 6e 74 61 67 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 6f 6e Data Ascii: ("window.googletag is not defined on the page")},ln.setTargetingForAst=function(n){(0,u.PN)("Invoking _apPbJs.setTargetingForAn",arguments),G.isApntagDefined()?(G.setTargetingForAst(n),d.j8(yn,G.getAllTargeting())):(0,u.H)("window.apntag is not defined on

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49836	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	365	OUT	GET /42845/apInstreamBundle.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	458	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 440 Cache-Control: max-age=900 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:56 GMT Expires: Mon, 30 Sep 2024 13:31:56 GMT Last-Modified: Mon, 30 Sep 2024 11:32:36 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-AP-Device: DESKTOP X-AP-Geo: US X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 899658 Connection: close
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 69 64 65 6f 42 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 32 35 30 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 38 30 31 35 29 7d 2c 35 35 39 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 35 31 36 29 2c 69 3d 6e 28 37 35 32 32 29 2c 6f 3d 6e 28 33 39 34 38 29 2c 61 3d 6e 28 39 31 30 36 29 2c 73 3d 6e 28 39 36 31 35 29 2c 63 3d 6e 28 32 30 31 32 29 2c 75 3d 6e 28 34 32 30 32 29 2c 6c 3d 6e 28 34 38 39 36 29 2c 64 3d 6e 28 35 38 34 35 29 2c 66 3d 6e 28 38 35 36 33 29 2c 70 3d 6e 28 35 36 35 Data Ascii: /! For license information please see videoBundle.js.LICENSE.txt /(()=>{var e={2505:(e,t,n)=>{e.exports=n(8015)},5592:(e,t,n)=>{"use strict";var r=n(9516),i=n(7522),o=n(3948),a=n(9106),s=n(9615),c=n(2012),u=n(4202),l=n(4896),d=n(5845),f=n(8563),p=n(565
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 69 28 22 6f 70 74 69 6f 6e 73 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 2c 69 2e 45 52 52 5f 42 41 44 5f 4f 50 54 49 4f 4e 5f 56 41 4c 55 45 29 3b 66 6f 72 28 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 6f 3d 72 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 20 3e 30 3b 29 7b 76 61 72 20 61 3d 72 5b 6f 5d 2c 73 3d 74 5b 61 5d 3b 69 66 28 73 29 7b 76 61 72 20 63 3d 65 5b 61 5d 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 73 28 63 2c 61 2c 65 29 3b 69 66 28 21 30 21 3d 3d 75 29 74 68 72 6f 77 20 6e 65 77 20 69 28 22 6f 70 74 69 6f 6e 20 22 2b 61 2b 22 20 6d 75 73 74 20 62 65 20 22 2b 75 2c 69 2e 45 52 52 5f 42 41 44 5f 4f 50 54 49 4f 4e 5f 56 41 4c 55 45 29 7d 65 6c 73 65 20 69 66 28 21 30 21 3d 3d 6e 29 Data Ascii: )throw new i("options must be an object",i.ERR_BAD_OPTION_VALUE);for(var r=Object.keys(e),o=r.length;o-- >0;){var a=r[o],s=t[a];if(s){var c=e[a],u=void 0===c\|\|s(c,a,e);if(!0!==u)throw new i("option "+a+" must be "+u,i.ERR_BAD_OPTION_VALUE)}else if(!0!==n)
2024-09-30 13:16:56 UTC	2	IN	Data Raw: 2e 6c Data Ascii: .l
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 6f 67 3d 63 2e 52 6d 7d 2c 28 74 3d 5b 7b 6b 65 79 3a 22 69 6e 69 74 69 61 6c 69 73 65 4f 76 65 72 6c 61 79 41 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 5d 29 26 26 4a 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 3b 76 61 72 20 65 2c 74 7d 28 29 3b 63 6f 6e 73 74 20 5a 3d 51 3b 76 61 72 20 65 65 3d 6e 28 32 37 34 37 29 2c 74 65 3d 6e 28 34 32 38 39 29 2c 6e 65 3d 6e 28 34 37 32 34 29 3b 66 75 6e 63 74 69 6f 6e 20 72 65 28 65 29 7b 72 65 74 75 72 6e 20 72 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 Data Ascii: og=c.Rm},(t=[{key:"initialiseOverlayAd",value:function(){}}])&&J(e.prototype,t),Object.defineProperty(e,"prototype",{writable:!1}),e;var e,t}();const Z=Q;var ee=n(2747),te=n(4289),ne=n(4724);function re(e){return re="function"==typeof Symbol&&"symbol"==ty
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 2e 66 6c 61 67 73 2e 61 64 78 4f 6e 6c 79 43 72 69 74 65 72 69 61 3d 21 21 65 2c 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 29 7b 76 61 72 20 65 3d 28 30 2c 72 2e 68 71 29 28 29 3b 72 65 74 75 72 6e 21 21 28 71 74 2e 6f 67 2e 69 6e 64 65 78 4f 66 28 77 69 6e 64 6f 77 2e 61 70 50 6c 61 79 65 72 2e 63 6f 75 6e 74 72 79 29 3e 2d 31 7c 7c 65 2e 72 65 71 75 65 73 74 53 74 72 75 63 74 75 72 65 44 61 74 61 2e 63 6f 75 6e 74 72 79 57 69 73 65 52 65 71 75 65 73 74 42 6c 6f 63 6b 69 6e 67 26 26 65 2e 72 65 71 75 65 73 74 53 74 72 75 63 74 75 72 65 44 61 74 61 2e 63 6f 75 6e 74 72 79 57 69 73 65 52 65 71 75 65 73 74 42 6c 6f 63 6b 69 6e 67 2e 65 6e 61 62 6c 65 64 26 26 65 2e 72 65 71 75 65 73 74 53 74 72 75 63 74 75 72 65 44 61 74 61 2e 63 6f 75 6e 74 72 79 57 Data Ascii: .flags.adxOnlyCriteria=!!e,!!e}function Kt(){var e=(0,r.hq)();return!!(qt.og.indexOf(window.apPlayer.country)>-1\|\|e.requestStructureData.countryWiseRequestBlocking&&e.requestStructureData.countryWiseRequestBlocking.enabled&&e.requestStructureData.countryW
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 73 28 65 29 7c 7c 4a 72 28 22 50 72 65 62 69 64 20 57 61 72 6e 69 6e 67 3a 20 73 65 74 50 72 69 63 65 47 72 61 6e 75 6c 61 72 69 74 79 20 77 61 73 20 63 61 6c 6c 65 64 20 77 69 74 68 20 69 6e 76 61 6c 69 64 20 73 65 74 74 69 6e 67 2c 20 75 73 69 6e 67 20 60 6d 65 64 69 75 6d 60 20 61 73 20 64 65 66 61 75 6c 74 2e 22 29 3b 65 6c 73 65 20 69 66 28 75 69 28 65 29 26 26 21 52 6e 28 65 29 29 72 65 74 75 72 6e 20 58 72 28 22 49 6e 76 61 6c 69 64 20 63 75 73 74 6f 6d 20 70 72 69 63 65 20 76 61 6c 75 65 20 70 61 73 73 65 64 20 74 6f 20 60 73 65 74 50 72 69 63 65 47 72 61 6e 75 6c 61 72 69 74 79 28 29 60 22 29 2c 21 31 3b 72 65 74 75 72 6e 21 30 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 Data Ascii: ring"==typeof e)s(e)\|\|Jr("Prebid Warning: setPriceGranularity was called with invalid setting, using `medium` as default.");else if(ui(e)&&!Rn(e))return Xr("Invalid custom price value passed to `setPriceGranularity()`"),!1;return!0}Object.defineProperties
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 28 6f 3d 72 28 6f 5e 6f 3e 3e 3e 31 36 2c 32 32 34 36 38 32 32 35 30 37 29 5e 72 28 69 5e 69 3e 3e 3e 31 33 2c 33 32 36 36 34 38 39 39 30 39 29 29 29 2b 28 69 3e 3e 3e 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 48 69 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 6e 3d 6e 65 77 20 4d 61 70 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 6e 2e 68 61 73 28 72 29 7c 7c 6e 2e 73 65 74 28 72 2c 65 2e 61 70 70 6c 79 28 Data Ascii: (o=r(o^o>>>16,2246822507)^r(i^i>>>13,3266489909)))+(i>>>0)).toString()}function Hi(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:function(e){return e},n=new Map,r=function(){var r=t.apply(this,arguments);return n.has(r)\|\|n.set(r,e.apply(
2024-09-30 13:16:56 UTC	4	IN	Data Raw: 29 7b 72 65 Data Ascii: ){re
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 74 75 72 6e 7b 73 72 63 3a 74 68 69 73 2e 73 6f 75 72 63 65 2c 62 69 64 64 65 72 3a 74 68 69 73 2e 62 69 64 64 65 72 43 6f 64 65 2c 62 69 64 49 64 3a 74 68 69 73 2e 72 65 71 75 65 73 74 49 64 2c 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 3a 74 68 69 73 2e 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 2c 61 64 55 6e 69 74 49 64 3a 74 68 69 73 2e 61 64 55 6e 69 74 49 64 2c 61 75 63 74 69 6f 6e 49 64 3a 74 68 69 73 2e 61 75 63 74 69 6f 6e 49 64 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 61 28 65 2c 74 29 7d 76 61 72 20 64 61 3d 22 6f 75 74 73 74 72 65 61 6d 22 2c 66 61 3d 22 69 6e 73 74 72 65 61 6d 22 2c 70 61 3d 4e 6f 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 Data Ascii: turn{src:this.source,bidder:this.bidderCode,bidId:this.requestId,transactionId:this.transactionId,adUnitId:this.adUnitId,auctionId:this.auctionId}}}function la(e,t){return new ua(e,t)}var da="outstream",fa="instream",pa=No("sync",(function(e,t,n,r,i){retu
2024-09-30 13:16:56 UTC	16383	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 77 3d 73 7c 7c 64 3f 74 3a 6e 75 6c 6c 2c 45 3d 72 72 2e 67 65 74 43 6f 6e 66 69 67 28 22 70 61 67 65 55 72 6c 22 29 7c 7c 6e 7c 7c 6e 75 6c 6c 2c 53 3d 72 72 2e 67 65 74 43 6f 6e 66 69 67 28 22 70 61 67 65 55 72 6c 22 29 7c 7c 77 7c 7c 48 61 28 45 2c 4a 61 29 3b 72 65 74 75 72 6e 20 77 26 26 77 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3e 2d 31 26 26 2d 31 3d 3d 3d 53 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 26 26 28 53 3d 22 22 2e 63 6f 6e 63 61 74 28 53 29 2e 63 6f 6e 63 61 74 28 77 2e 73 75 62 73 74 72 69 6e 67 28 77 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 29 29 2c 7b 72 65 61 63 68 65 64 54 6f 70 3a 73 2c 69 73 41 6d 70 3a 75 2c 6e 75 6d 49 66 72 61 6d 65 73 Data Ascii: document.referrer}catch(e){}var w=s\|\|d?t:null,E=rr.getConfig("pageUrl")\|\|n\|\|null,S=rr.getConfig("pageUrl")\|\|w\|\|Ha(E,Ja);return w&&w.indexOf("?")>-1&&-1===S.indexOf("?")&&(S="".concat(S).concat(w.substring(w.indexOf("?")))),{reachedTop:s,isAmp:u,numIframes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49841	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	915	OUT	GET /AdPushupFeedbackWebService/feedback?data=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%3D%3D&c_b=6313.8000000000175 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:56 GMT Expires: Tue, 30 Sep 2025 13:16:56 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:56 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49839	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	1237	OUT	GET /AdPushupFeedbackWebService/feedback?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMTI3NDUsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZUlkIjo0Mjg0NSwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwidXJsIjoiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlP3Q9NTQyODg3N18xXzImczE9JUVEJUUwJUYzJUY3JUVEJUVFLSVFOCVGMSVGMSVFQiVFNSVFNCVFRSVFMiVFMCVGMiVFNSVFQiVGQyVGMSVFQSVFOCVFOSIsIm1vZGUiOjEsImVycm9yQ29kZSI6MSwicmVmZXJyZXIiOiIiLCJwbGF0Zm9ybSI6IkRFU0tUT1AiLCJpc0dlbmllZSI6ZmFsc2UsInNlY3Rpb25zIjpbeyJzZWN0aW9uSWQiOiJiZjZhZmNlOS0zNDUzLTQ2MzEtYjAzYS0xYmQ0NDNmMGQ0NGMiLCJzZWN0aW9uTmFtZSI6IkFQX0lfRF8zMzZYMjgwX2JmNmFmIiwic3RhdHVzIjoxLCJuZXR3b3JrIjoiYWRwVGFncyIsIm5ldHdvcmtBZFVuaXRJZCI6IkFEUF80Mjg0NV8zMzZYMjgwX2JmNmFmY2U5LTM0NTMtNDYzMS1iMDNhLTFiZDQ0M2YwZDQ0YyIsInNlcnZpY2VzIjpbNSwzXSwiYWRVbml0VHlwZSI6OCwiYWRTZXJ2ZXJDb2RlIjoiMTAzNTEyNjk4In1dLCJjb3VudHJ5IjoiVVMifQ%3D%3D&c_b=6345 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:56 GMT Expires: Tue, 30 Sep 2025 13:16:56 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:56 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49840	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	923	OUT	GET /AdPushupFeedbackWebService/feedback/testmode?data=eyJjcmVhdGVkVFMiOjE3Mjc3MDIyMTI2MjIsInBhY2tldElkIjoiMDAwMEE3NUQtMzc1YTM2NmYtYTk0Ny00OTc0LThlMmUtYjE4YWRhZWI2NGJjIiwic2l0ZUlkIjo0Mjg0NSwic2l0ZURvbWFpbiI6Imh0dHBzOi8vd3d3Lm11bHRpdHJhbi5jb20vIiwidXJsIjoiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlP3Q9NTQyODg3N18xXzImczE9JUVEJUUwJUYzJUY3JUVEJUVFLSVFOCVGMSVGMSVFQiVFNSVFNCVFRSVFMiVFMCVGMiVFNSVFQiVGQyVGMSVFQSVFOCVFOSIsIm1vZGUiOjUsImVycm9yQ29kZSI6MSwicmVmZXJyZXIiOiIiLCJwbGF0Zm9ybSI6IkRFU0tUT1AiLCJpc0dlbmllZSI6ZmFsc2UsInNlY3Rpb25zIjpudWxsLCJjb3VudHJ5IjoiVVMifQ%3D%3D&c_b=6337.399999999994 HTTP/1.1 Host: e3.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	422	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Content-Type: image/png Date: Mon, 30 Sep 2024 13:16:56 GMT Expires: Tue, 30 Sep 2025 13:16:56 GMT Pragma: no-cache Server: nginx/1.18.0 (Ubuntu) x-client-device: desktop x-client-geo: US X-Robots-Tag: noindex Content-Length: 70 Connection: close
2024-09-30 13:16:56 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 da 63 60 60 f8 cf 00 00 02 03 01 00 f7 b6 ee 7d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc``}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49850	104.22.53.173	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	747	OUT	GET /hadron.js?url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ref=&_it=amazon&partner_id=777 HTTP/1.1 Host: cdn.hadronid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:56 UTC	549	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:56 GMT Content-Type: application/javascript Content-Length: 56888 Connection: close Cf-Bgj: minify ETag: "1e77f38a1df1490d4175e3c4878bd150" Last-Modified: Tue, 04 Jun 2024 15:30:02 GMT x-amz-id-2: FNS8Lc8R9Qji432eQyZbGDDgvyWHvIXmOzDykwh9qe1J2fX8u6aO0aANuFN3vxu6aVi9rB6lRRQ= x-amz-request-id: 4GNMNHQXA94JVW78 CF-Cache-Status: HIT Age: 162 Expires: Sat, 05 Oct 2024 13:16:56 GMT Cache-Control: public, max-age=432000 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb47d8688b5c413-EWR
2024-09-30 13:16:56 UTC	820	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 49 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 4a 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 49 5b 65 5d 2e 63 61 6c 6c 28 4a 2e 65 78 70 6f 72 74 73 2c 4a 2c 4a 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 4a 2e 6c 3d 21 30 2c 4a 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 49 2c 6e 2e 63 3d 69 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 65 29 7b 6e 2e 6f 28 49 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 49 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=fun
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 69 29 2c 69 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 49 2c 69 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 69 29 3b 63 6f 6e 73 74 20 65 3d 28 49 2c 69 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 64 61 74 61 3a 5b 5d 2c 61 64 64 44 61 74 61 3a 28 49 2c 69 29 3d 3e 7b 65 2e 64 61 74 61 2e 70 75 73 68 28 7b 6b 65 79 3a 49 2c 76 61 6c 75 65 3a 69 7d 29 2c 65 2e 61 64 64 65 64 5b 49 5d 3d 21 30 7d 2c 61 64 64 65 64 3a 7b 7d 7d 3b 6c 65 74 20 4a 3d 2d 31 3b 63 6f 6e 73 74 20 73 3d 6a 3d 3e 7b 69 Data Ascii: i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e.data.push({key:I,value:i}),e.added[I]=!0},added:{}};let J=-1;const s=j=>{i
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 75 64 65 73 28 22 61 64 2e 67 74 22 29 7c 7c 4f 2e 69 6e 63 6c 75 64 65 73 28 22 68 61 64 72 6f 6e 69 64 2e 6e 65 74 22 29 3f 49 3a 28 6e 3d 4f 29 2e 73 75 62 73 74 72 28 30 2c 38 2b 6e 2e 73 75 62 73 74 72 28 38 29 2e 69 6e 64 65 78 4f 66 28 22 2f 22 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 3d 49 7d 7d 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 69 2b 49 7d 63 6f 6e 73 74 20 43 3d 5b 22 30 31 22 2c 22 31 34 22 2c 22 32 37 22 2c 22 33 61 22 2c 22 34 64 22 2c 22 35 67 22 2c 22 36 6a 22 2c 22 37 6d 22 2c 22 38 70 22 2c 22 39 73 22 2c 22 61 76 22 2c 22 62 79 22 2c 22 63 31 22 2c 22 64 34 22 2c 22 65 37 22 2c 22 66 61 22 2c 22 67 64 22 2c 22 68 67 22 2c 22 69 6a 22 2c 22 6a 6d 22 2c 22 6b 70 22 2c 22 6c 73 22 2c 22 6d 76 22 2c 22 6e 79 22 2c 22 6f 31 22 2c 22 70 34 Data Ascii: udes("ad.gt")\|\|O.includes("hadronid.net")?I:(n=O).substr(0,8+n.substr(8).indexOf("/"))}catch(n){i=I}}var n;return i+I}const C=["01","14","27","3a","4d","5g","6j","7m","8p","9s","av","by","c1","d4","e7","fa","gd","hg","ij","jm","kp","ls","mv","ny","o1","p4
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a 6d 45 69 66 58 31 39 66 58 31 39 66 58 31 39 4c 43 49 78 49 6a 70 37 49 6d 63 69 4f 6e 73 69 61 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 62 79 49 36 65 79 4a 31 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 4a 35 49 6e 31 39 66 58 31 39 4c 43 4a 70 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 70 74 49 6e 31 39 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 64 47 63 69 66 53 77 69 65 43 49 36 65 79 4a 76 49 6a 70 37 Data Ascii: DAiOnt9LCJtZXRhIjoiZmEifX19fX19fX19LCIxIjp7ImciOnsiaSI6eyJnIjp7InoiOnsibyI6eyJ1Ijp7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImJ5In19fX19LCJpIjp7Im8iOnsidCI6eyJrIjp7InkiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImptIn19fX19fSwidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoidGcifSwieCI6eyJvIjp7
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 31 5a 79 4a 39 66 58 31 39 66 53 77 69 65 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a 32 51 69 4c 43 4a 72 49 6a 70 37 49 6d 34 69 4f 6e 73 69 64 53 49 36 65 79 49 77 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 52 6b 49 6e 31 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 70 49 6a 70 37 49 6d 34 69 4f 6e 73 69 61 79 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 31 5a 79 4a 39 66 58 31 39 4c 43 4a 72 49 6a 70 37 49 Data Ascii: p7Ilx1MDAwMCI6e30sIm1ldGEiOiI1ZyJ9fX19fSwieCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiZ2QiLCJrIjp7Im4iOnsidSI6eyIwIjp7InkiOnsibyI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6IjRkIn19fX19fX19fSwieiI6eyJpIjp7Im4iOnsiayI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiI1ZyJ9fX19LCJrIjp7I
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 6c 71 49 6e 31 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 35 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 63 69 49 36 65 79 4a 76 49 6a 70 37 49 6e 51 69 4f 6e 73 69 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 62 79 49 36 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 73 63 79 4a 39 66 58 31 39 66 58 31 39 4c 43 49 30 49 6a 70 37 49 6e 55 69 4f 6e 73 69 4d 43 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 Data Ascii: wMDAwIjp7fSwibWV0YSI6ImlqIn19fX0sIngiOnsiayI6eyJ5Ijp7InoiOnsiciI6eyJvIjp7InQiOnsibSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwibyI6eyJ6Ijp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJscyJ9fX19fX19LCI0Ijp7InUiOnsiMCI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibW
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 61 79 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 78 4e 79 4a 39 66 58 31 39 66 58 30 73 49 6e 55 69 4f 6e 73 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 4c 43 4a 6e 49 6a 70 37 49 6d 6f 69 4f 6e 73 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d 6f 69 4f 6e 73 69 4d 43 49 36 65 79 4a 79 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 58 48 55 Data Ascii: eyJ6Ijp7Im8iOnsiayI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJxNyJ9fX19fX0sInUiOnsidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQiLCJnIjp7ImoiOnsiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQifX19fX19fX19fX19fX0sImoiOnsiMCI6eyJyIjp7InoiOnsiXHU
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 6a 70 37 49 6e 67 69 4f 6e 73 69 62 53 49 36 65 79 4a 76 49 6a 70 37 49 6d 73 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 61 6d 30 69 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 64 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 62 79 49 36 65 79 49 78 49 6a 70 37 49 6d 73 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 4d 69 4f 6e 73 69 4d 43 49 36 65 79 4a 35 49 6a 70 37 49 6d 73 69 4f 6e 73 69 63 79 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 Data Ascii: jp7IngiOnsibSI6eyJvIjp7ImsiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiam0ifX19fX19fSwieiI6eyJrIjp7IngiOnsidCI6eyJnIjp7InoiOnsibyI6eyIxIjp7ImsiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fX19fX19fX0sInMiOnsiMCI6eyJ5Ijp7ImsiOnsicyI6eyJrIjp7InQiOnsieiI6eyJcdTAwMDAiOnt9LCJt
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 47 51 69 66 58 31 39 66 58 31 39 66 58 31 39 4c 43 4a 34 49 6a 70 37 49 6d 73 69 4f 6e 73 69 64 43 49 36 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 61 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 62 69 49 36 65 79 4a 76 49 6a 70 37 49 6e 59 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 32 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 63 69 4f 6e 73 69 4d 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 67 69 4f 6e 73 69 62 79 49 36 65 79 49 77 49 6a 70 37 49 6e 4d 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a Data Ascii: JcdTAwMDAiOnt9LCJtZXRhIjoiNGQifX19fX19fX19LCJ4Ijp7ImsiOnsidCI6eyJ6Ijp7Im8iOnsiaSI6eyJrIjp7InkiOnsibiI6eyJvIjp7InYiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoic2QifX19fX19fX19fX19fX0sInciOnsiMCI6eyJnIjp7IngiOnsibyI6eyIwIjp7InMiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiZ
2024-09-30 13:16:56 UTC	1369	IN	Data Raw: 30 59 53 49 36 49 6e 45 33 49 69 77 69 61 79 49 36 65 79 4a 36 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 54 63 69 66 58 31 39 66 58 31 39 66 58 31 39 4c 43 4a 78 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 32 61 69 4a 39 66 53 77 69 61 69 49 36 65 79 4a 7a 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 36 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 63 53 49 36 65 79 4a 76 49 6a 70 37 49 6e 51 69 4f 6e 73 69 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 Data Ascii: 0YSI6InE3IiwiayI6eyJ6Ijp7InoiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoicTcifX19fX19fX19LCJxIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiI2aiJ9fSwiaiI6eyJzIjp7Im8iOnsidCI6eyJ6Ijp7InUiOnsidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwicSI6eyJvIjp7InQiOnsibSI6eyJcdTAwMDAiOnt9LC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49846	18.66.102.57	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	545	OUT	GET /rules-p-54Nt-1NAaEEe0.js HTTP/1.1 Host: rules.quantcount.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	666	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 160 Connection: close Last-Modified: Thu, 13 Oct 2022 15:29:19 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Cross-Origin-Resource-Policy: cross-origin access-control-allow-origin: * access-control-allow-methods: GET Date: Mon, 30 Sep 2024 13:16:58 GMT Cache-Control: max-age=3600 ETag: "05b131079c67d484167fd1b1f6c79577" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 50c53efe331c3da25a4faf191817af8c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: ab8I5jaE9vsRNGEFw_ftBE6cHL6yw37q0tfE4Lup6dT5PvCwCA3qpQ==
2024-09-30 13:16:57 UTC	160	IN	Data Raw: 2f 2a 0a 20 51 75 61 6e 74 63 61 73 74 20 6d 65 61 73 75 72 65 6d 65 6e 74 20 74 61 67 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 32 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 5f 5f 71 63 28 22 72 75 6c 65 73 22 2c 5b 61 5d 29 7d 29 28 22 70 2d 35 34 4e 74 2d 31 4e 41 61 45 45 65 30 22 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b Data Ascii: /* Quantcast measurement tag Copyright (c) 2008-2022, Quantcast Corp.*/'use strict';(function(a,b,c){__qc("rules",[a])})("p-54Nt-1NAaEEe0",window,document);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49849	142.250.185.78	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	711	OUT	GET /i/ca-pub-1428290592401732?href=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe&ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	1957	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:16:56 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-XVF31ri2fPyigKOaQ08gBQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmII1pBiOHHrNtMFID7vdIfpOhBLfH3JpAbETukzWAOAuPXmOdbJQJz07zxrARC7a11k9QdiQ4VLrPZA7Fh0idUTiFV7LrEaA_H9dZdYnwPx3o-XWI8C8dL7l1nXAnGRxBXWBiAW4uE4cfLVdjaBDTMWXGdW0kjKL4xPzs8rKcpMKi3JL0pLTkstTi0qSy2KNzIwMjGwNDLTMzCNLzAAAOPWSv8" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 36 66 31 33 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 6f13if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 66 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 Data Ascii: fa(ba(this))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.r=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6c 61 28 68 2c 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 3d 66 75 6e 63 Data Ascii: (typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.la(h,g):this.A(g)};e.prototype.u=func
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 63 74 69 6f 6e 20 77 28 42 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 71 5b 42 5d 3d 4a 3b 79 2d 2d 3b 79 3d 3d 30 26 26 6d 28 71 29 7d 7d 76 61 72 20 71 3d 5b 5d 2c 79 3d 30 3b 64 6f 20 71 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 79 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6d 62 28 77 28 71 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: ction w(B){return function(J){q[B]=J;y--;y==0&&m(q)}}var q=[],y=0;do q.push(void 0),y++,c(k.value).mb(w(q.length-1),n),k=h.next();while(!k.done)})};return e});var ra=function(a,b,c){if(a==null)throw new TypeError("k`"+c);if(b instanceof RegExp)throw new
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 72 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6e 2e 76 61 6c 75 65 5b 31 Data Ascii: otype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(_.r([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),n=m.next();if(n.done\|\|n.value[0]!=h\|\|n.value[1
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6d 29 7d 3b 6d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 70 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 Data Ascii: t,{done:!1,value:k(m)};m=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});p("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;t
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e Data Ascii: of Symbol!="undefined"&&Symbol.iterator&&b[Symbol.iterator];if(typeof f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});p("Object.entries",function
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 0a 70 28 22 55 69 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 46 6c 6f 61 74 33 32 41 72 Data Ascii: nt8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fill",ta);p("Int16Array.prototype.fill",ta);p("Uint16Array.prototype.fill",ta);p("Int32Array.prototype.fill",ta);p("Uint32Array.prototype.fill",ta);p("Float32Ar
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 3b 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 45 61 3f 21 21 5f 2e 46 61 26 26 5f 2e 46 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 0a 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 29 3f 48 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 75 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 75 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 49 61 28 29 3f 30 3a 5f 2e 75 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 75 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f Data Ascii: ;Ia=function(){return _.Ea?!!_.Fa&&_.Fa.brands.length>0:!1};Ja=function(){return Ia()?Ha("Chromium"):(_.u("Chrome")\|\|_.u("CriOS"))&&!(Ia()?0:_.u("Edge"))\|\|_.u("Silk")};_.Ma=function(a){return Ka&&a!=null&&a instanceof Uint8Array};Oa=function(){var a=Erro
2024-09-30 13:16:57 UTC	1957	IN	Data Raw: 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 3f 61 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 3b 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 77 62 3d 3d 3d 76 6f 69 64 20 30 29 7b 76 61 72 20 62 3d 6e 65 77 20 78 62 28 5b 5d 2c 7b 7d 29 3b 77 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 63 61 6c 6c 28 5b 5d 2c 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 7d 77 62 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 26 26 28 61 5b 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 Data Ascii: String().indexOf("[native code]")!==-1?a:null}catch(b){return null}};yb=function(a){if(wb===void 0){var b=new xb([],{});wb=Array.prototype.concat.call([],b).length===1}wb&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49845	13.224.186.120	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	445	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.multitran.com&pubid=2e7e1587-d92f-46dd-8721-80b53eccb87e HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	410	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 3078 Connection: close Cache-Control: max-age=21550, s-maxage=21600 Date: Mon, 30 Sep 2024 13:09:34 GMT Server: Server X-Cache: Hit from cloudfront Via: 1.1 eb83e7e264681d87a86c9b6a2159e502.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: s4uNANudrLUUx7v8kB1Dplz_nmwu5ISMW9FaYeuH0FfISJM9DEjgCQ== Age: 442
2024-09-30 13:16:57 UTC	3078	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 62 63 69 64 2e 6d 69 6e 2e 6a 73 27 3b 5c 6e 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 29 3b 5c 6e 7d 3b 76 61 72 20 6c 6f 74 61 Data Ascii: {"3pvendor":"if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lota

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49852	18.245.31.65	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	398	OUT	GET /configs/2e7e1587-d92f-46dd-8721-80b53eccb87e HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	389	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 563 Connection: close Server: CloudFront Date: Mon, 30 Sep 2024 13:09:36 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 085a99da24636ecdd172026920429788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: LOcgYtPWVScPbY3z2XnIECvYjOFuyOdNdGMRTQ7nvx6Pn3DEYLZCOQ== Age: 441
2024-09-30 13:16:57 UTC	563	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 32 65 37 65 31 35 38 37 2d 64 39 32 66 2d 34 36 64 64 2d 38 37 32 31 2d 38 30 62 35 33 65 63 63 62 38 37 65 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "2e7e1587-d92f-46dd-8721-80b53eccb87e";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49851	65.9.66.104	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	541	OUT	GET /lt/c/16576/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	562	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 43601 Connection: close Date: Mon, 30 Sep 2024 13:09:37 GMT Last-Modified: Tue, 20 Aug 2024 18:47:23 GMT ETag: "ad78eaf46246cac6849005eb8b50ae6f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e39402e2cf62b31f7774452c905f38f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: 41olyJS-4cbQjnFi67JFvbgk3OYNWjM_-n-poXD2sii-lMl9jihYZQ== Age: 441
2024-09-30 13:16:57 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-09-30 13:16:57 UTC	16384	IN	Data Raw: 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 Data Ascii: (b=!1,sync16576_.error("tagInput.data.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16576_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16576_.error("tagInput.data.thirdParty.value is not defined"));a.namespace
2024-09-30 13:16:57 UTC	10833	IN	Data Raw: 2b 63 29 7d 72 65 74 75 72 6e 21 31 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 37 36 5f 4d 61 28 61 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 6c 6f 74 61 6d 65 49 66 72 61 6d 65 54 63 66 41 70 69 26 26 28 73 79 6e 63 31 36 35 37 36 5f 2e 64 65 62 75 67 28 22 49 6e 69 74 69 61 6c 69 7a 69 6e 67 20 54 43 46 20 73 75 70 70 6f 72 74 20 69 6e 20 61 6e 20 69 66 72 61 6d 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 6c 6f 74 61 6d 65 49 66 72 61 6d 65 54 63 66 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 66 29 7b 76 61 72 20 68 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 3b 62 3d 7b 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 62 2c 70 61 72 61 6d 65 74 65 72 3a 66 Data Ascii: +c)}return!1} function sync16576_Ma(a){"undefined"===typeof window.__lotameIframeTcfApi&&(sync16576_.debug("Initializing TCF support in an iframe"),window.__lotameIframeTcfApi=function(b,c,d,f){var h=Math.random()+"";b={__tcfapiCall:{command:b,parameter:f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49844	13.224.186.120	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	372	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	621	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Sep 2024 06:38:18 GMT Cache-Control: public, max-age=86400 ETag: "a4d296427fc806b21335359e398c025c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9568a708c8ab21597698ebe7dce6c42e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: OUD-8M_LYfIEuktyMJj0oCEYjUY6P0bxg3HIpOELSyFDWUfkYJVCaw== Age: 39677
2024-09-30 13:16:57 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49842	91.228.74.244	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	353	OUT	GET /quant.js HTTP/1.1 Host: secure.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	295	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:57 GMT Content-Type: application/javascript Content-Length: 23930 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=604800 Etag: "HP/dXILNCv8vRT01LqWQOg==" Expires: Mon, 07 Oct 2024 13:16:57 GMT Vary: Accept-Encoding
2024-09-30 13:16:57 UTC	16089	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 33 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 63 61 73 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 71 63 53 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 72 28 29 3b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 28 65 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 3b Data Ascii: /* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;
2024-09-30 13:16:57 UTC	7841	IN	Data Raw: 29 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 5b 5d 3b 69 66 28 21 28 6a 65 3e 30 29 29 7b 66 6f 72 28 65 20 69 6e 20 54 28 29 2c 44 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 44 65 2c 65 29 26 26 44 65 5b 65 5d 26 26 28 74 3d 44 65 5b 65 5d 2c 6e 2e 70 75 73 68 28 74 29 2c 64 65 6c 65 74 65 20 44 65 5b 65 5d 29 3b 69 66 28 31 3d 3d 6e 2e 6c 65 6e 67 74 68 26 26 77 28 6e 5b 30 5d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 77 28 6e 5b 65 5d 29 7d 7d 2c 65 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 5b 5d 3b 66 6f 72 28 6e 3d 4f 65 2e 73 6c 69 63 65 28 30 29 Data Ascii: )},K=function(){var e,t,n=[];if(!(je>0)){for(e in T(),De)Object.prototype.hasOwnProperty.call(De,e)&&De[e]&&(t=De[e],n.push(t),delete De[e]);if(1==n.length&&w(n[0]),n.length>1)for(e=0;e<n.length;e++)w(n[e])}},ee=function(){var e,t,n,r=[];for(n=Oe.slice(0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49843	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:56 UTC	562	OUT	GET /instream/videoUtils-22e089ff-1721378485014.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 6299838 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:57 GMT Etag: W/"669a26af-dc9b1" Expires: Tue, 30 Sep 2025 13:16:57 GMT Last-Modified: Fri, 19 Jul 2024 08:41:19 GMT Server: ECAcc (lhc/7889) Vary: Accept-Encoding X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 903601 Connection: close
2024-09-30 13:16:57 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 69 64 65 6f 55 74 69 6c 73 2d 32 32 65 30 38 39 66 66 2d 31 37 32 31 33 37 38 34 38 35 30 31 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 39 35 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 69 28 38 34 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 31 29 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 72 2c 73 29 7b 69 66 28 69 29 65 28 69 29 3b 65 6c 73 65 20 69 66 28 72 2e 73 74 61 74 75 73 43 6f 64 65 3e 3d 34 30 30 26 26 72 2e 73 74 61 74 75 73 Data Ascii: /! For license information please see videoUtils-22e089ff-1721378485014.js.LICENSE.txt /(()=>{var e={495:(e,t,i)=>{"use strict";var n=i(840);e.exports=function(e,t){return void 0===t&&(t=!1),function(i,r,s){if(i)e(i);else if(r.statusCode>=400&&r.status
2024-09-30 13:16:57 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-09-30 13:16:57 UTC	16383	IN	Data Raw: 6e 20 74 2e 70 75 73 68 28 22 26 22 2c 65 2e 6e 6f 64 65 4e 61 6d 65 2c 22 3b 22 29 3b 64 65 66 61 75 6c 74 3a 74 2e 70 75 73 68 28 22 3f 3f 22 2c 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 3b 73 77 69 74 63 68 28 74 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 68 3a 28 6e 3d 74 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 31 29 29 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 65 3b 63 61 73 65 20 5f 3a 62 72 65 61 6b 3b 63 61 73 65 20 70 3a 69 3d 21 30 7d 69 66 28 6e 7c 7c 28 6e 3d 74 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 31 29 29 2c 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 65 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 6e 75 6c 6c 2c 69 29 66 6f 72 28 76 61 72 20 72 3d 74 2e 66 69 72 73 74 Data Ascii: n t.push("&",e.nodeName,";");default:t.push("??",e.nodeName)}}function me(e,t,i){var n;switch(t.nodeType){case h:(n=t.cloneNode(!1)).ownerDocument=e;case _:break;case p:i=!0}if(n\|\|(n=t.cloneNode(!1)),n.ownerDocument=e,n.parentNode=null,i)for(var r=t.first
2024-09-30 13:16:57 UTC	16383	IN	Data Raw: 22 2c 64 72 63 6f 72 6e 3a 22 e2 8c 9f 22 2c 64 72 63 72 6f 70 3a 22 e2 8c 8c 22 2c 44 73 63 72 3a 22 f0 9d 92 9f 22 2c 64 73 63 72 3a 22 f0 9d 92 b9 22 2c 44 53 63 79 3a 22 d0 85 22 2c 64 73 63 79 3a 22 d1 95 22 2c 64 73 6f 6c 3a 22 e2 a7 b6 22 2c 44 73 74 72 6f 6b 3a 22 c4 90 22 2c 64 73 74 72 6f 6b 3a 22 c4 91 22 2c 64 74 64 6f 74 3a 22 e2 8b b1 22 2c 64 74 72 69 3a 22 e2 96 bf 22 2c 64 74 72 69 66 3a 22 e2 96 be 22 2c 64 75 61 72 72 3a 22 e2 87 b5 22 2c 64 75 68 61 72 3a 22 e2 a5 af 22 2c 64 77 61 6e 67 6c 65 3a 22 e2 a6 a6 22 2c 44 5a 63 79 3a 22 d0 8f 22 2c 64 7a 63 79 3a 22 d1 9f 22 2c 64 7a 69 67 72 61 72 72 3a 22 e2 9f bf 22 2c 45 61 63 75 74 65 3a 22 c3 89 22 2c 65 61 63 75 74 65 3a 22 c3 a9 22 2c 65 61 73 74 65 72 3a 22 e2 a9 ae 22 2c 45 63 61 Data Ascii: ",drcorn:"",drcrop:"",Dscr:"",dscr:"",DScy:"",dscy:"",dsol:"",Dstrok:"",dstrok:"",dtdot:"",dtri:"",dtrif:"",duarr:"",duhar:"",dwangle:"",DZcy:"",dzcy:"",dzigrarr:"",Eacute:"",eacute:"",easter:"",Eca
2024-09-30 13:16:57 UTC	2	IN	Data Raw: 6e 45 Data Ascii: nE
2024-09-30 13:16:57 UTC	16383	IN	Data Raw: 3a 22 e2 aa b6 22 2c 73 63 6e 73 69 6d 3a 22 e2 8b a9 22 2c 73 63 70 6f 6c 69 6e 74 3a 22 e2 a8 93 22 2c 73 63 73 69 6d 3a 22 e2 89 bf 22 2c 53 63 79 3a 22 d0 a1 22 2c 73 63 79 3a 22 d1 81 22 2c 73 64 6f 74 3a 22 e2 8b 85 22 2c 73 64 6f 74 62 3a 22 e2 8a a1 22 2c 73 64 6f 74 65 3a 22 e2 a9 a6 22 2c 73 65 61 72 68 6b 3a 22 e2 a4 a5 22 2c 73 65 41 72 72 3a 22 e2 87 98 22 2c 73 65 61 72 72 3a 22 e2 86 98 22 2c 73 65 61 72 72 6f 77 3a 22 e2 86 98 22 2c 73 65 63 74 3a 22 c2 a7 22 2c 73 65 6d 69 3a 22 3b 22 2c 73 65 73 77 61 72 3a 22 e2 a4 a9 22 2c 73 65 74 6d 69 6e 75 73 3a 22 e2 88 96 22 2c 73 65 74 6d 6e 3a 22 e2 88 96 22 2c 73 65 78 74 3a 22 e2 9c b6 22 2c 53 66 72 3a 22 f0 9d 94 96 22 2c 73 66 72 3a 22 f0 9d 94 b0 22 2c 73 66 72 6f 77 6e 3a 22 e2 8c a2 22 Data Ascii: :"",scnsim:"",scpolint:"",scsim:"",Scy:"",scy:"",sdot:"",sdotb:"",sdote:"",searhk:"",seArr:"",searr:"",searrow:"",sect:"",semi:";",seswar:"",setminus:"",setmn:"",sext:"",Sfr:"",sfr:"",sfrown:""
2024-09-30 13:16:57 UTC	16383	IN	Data Raw: 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 6d 75 74 65 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 5c 66 31 30 37 22 7d 2e 76 6a 73 2d 69 63 6f 6e 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 65 6e 74 65 72 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 69 64 65 6f 4a 53 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 76 6a 73 2d 69 63 6f 6e 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 65 6e 74 65 72 3a 62 65 66 6f 72 65 2c 2e 76 69 64 65 6f Data Ascii: ,.video-js .vjs-mute-control .vjs-icon-placeholder:before{content:"\\f107"}.vjs-icon-fullscreen-enter,.video-js .vjs-fullscreen-control .vjs-icon-placeholder{font-family:VideoJS;font-weight:normal;font-style:normal}.vjs-icon-fullscreen-enter:before,.video
2024-09-30 13:16:57 UTC	2	IN	Data Raw: 6a 73 Data Ascii: js
2024-09-30 13:16:57 UTC	16383	IN	Data Raw: 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 6d 6f 75 73 65 2d 64 69 73 70 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 76 6a 73 2d 6e 6f 2d 66 6c 65 78 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 6d 6f 75 73 65 2d 64 69 73 70 6c 61 79 7b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 20 2e 76 6a 73 2d 6d 6f 75 73 65 2d 64 69 73 70 6c 61 79 7b 64 69 73 70 6c 61 79 Data Ascii: .vjs-progress-control .vjs-mouse-display{display:none;position:absolute;width:1px;height:100%;background-color:#000;z-index:1}.vjs-no-flex .vjs-progress-control .vjs-mouse-display{z-index:0}.video-js .vjs-progress-control:hover .vjs-mouse-display{display
2024-09-30 13:16:57 UTC	1	IN	Data Raw: 73 Data Ascii: s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49853	142.250.185.78	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:57 UTC	648	OUT	GET /i/103512698?ers=3 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	1948	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:16:57 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-LbYrj3CrJBuTs-cFifSX_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjKtDikmJw05BiOO90h-k6EEt8fcmkBsRO6TNYA4C49eY51slAnPTvPGsBELtrXWT1B2JDhUus9kDsWHSJ1ROIVXsusRoD8f11l1ifA_Hej5dYjwLx0vuXWdcCcZHEFdYGIBbi4Th58tV2NoEPsx9NZlLSSMovjE_OzyspykwqLckvSktOSy1OLSpLLYo3MjAyMbA0MtMzMI0vMAAAmnNGJQ" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 36 66 31 33 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 6f13if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 66 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 Data Ascii: ){return fa(ba(this))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.r=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")re
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 61 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6c 61 28 68 2c 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 3b Data Ascii: a(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.la(h,g):this.A(g)};
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6d 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 77 28 42 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 71 5b 42 5d 3d 4a 3b 79 2d 2d 3b 79 3d 3d 30 26 26 6d 28 71 29 7d 7d 76 61 72 20 71 3d 5b 5d 2c 79 3d 30 3b 64 6f 20 71 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 79 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6d 62 28 77 28 71 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 69 66 28 62 20 69 Data Ascii: []):new e(function(m,n){function w(B){return function(J){q[B]=J;y--;y==0&&m(q)}}var q=[],y=0;do q.push(void 0),y++,c(k.value).mb(w(q.length-1),n),k=h.next();while(!k.done)})};return e});var ra=function(a,b,c){if(a==null)throw new TypeError("k`"+c);if(b i
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 72 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 Data Ascii: if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(_.r([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),n=m.next()
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 3b 29 6d 3d 6d 2e 71 61 3b 66 6f 72 28 3b 6d 2e 6e 65 78 74 21 3d 6d 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6d 3d 0a 6d 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6d 29 7d 3b 6d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 70 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 Data Ascii: ;)m=m.qa;for(;m.next!=m.head;)return m=m.next,{done:!1,value:k(m)};m=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});p("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entri
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 Data Ascii: c,d){c=c!=null?c:function(h){return h};var e=[],f=typeof Symbol!="undefined"&&Symbol.iterator&&b[Symbol.iterator];if(typeof f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.c
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 68 69 73 7d 7d 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f Data Ascii: his}});var ta=function(a){return a?a:Array.prototype.fill};p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fill",ta);p("Int16Array.prototype.fill",ta);p("Uint16Array.prototype.fill",ta);p("Int32Array.proto
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 3b 5f 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 44 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 45 61 3f 21 21 5f 2e 46 61 26 26 5f 2e 46 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 0a 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 29 3f 48 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 75 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 75 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 49 61 28 29 3f 30 3a 5f 2e 75 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 75 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: &b.indexOf(a)!=-1}):!1:!1};_.u=function(a){return _.Da().indexOf(a)!=-1};Ia=function(){return _.Ea?!!_.Fa&&_.Fa.brands.length>0:!1};Ja=function(){return Ia()?Ha("Chromium"):(_.u("Chrome")\|\|_.u("CriOS"))&&!(Ia()?0:_.u("Edge"))\|\|_.u("Silk")};_.Ma=function(
2024-09-30 13:16:57 UTC	1948	IN	Data Raw: 57 65 61 6b 4d 61 70 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 75 62 28 57 65 61 6b 4d 61 70 29 3a 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 72 62 7d 3b 0a 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 3f 61 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 3b 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 77 62 3d 3d 3d 76 6f 69 64 20 30 29 7b 76 61 72 20 62 3d 6e 65 77 20 78 62 28 5b 5d 2c 7b 7d 29 3b 77 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 63 61 6c 6c 28 5b 5d 2c 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 7d 77 62 26 26 74 79 Data Ascii: WeakMap==="function"?ub(WeakMap):null);return rb};ub=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};yb=function(a){if(wb===void 0){var b=new xb([],{});wb=Array.prototype.concat.call([],b).length===1}wb&&ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49854	142.250.185.98	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:57 UTC	541	OUT	GET /pagead/managed/js/gpt/m202409240101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-09-30 13:16:57 UTC	747	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 489606 X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 15:51:16 GMT Expires: Mon, 29 Sep 2025 15:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Age: 77141 ETag: 11534241471022370290 Content-Type: text/javascript; charset=ISO-8859-1 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:16:57 UTC	643	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 4d 61 74 68 2e 75 75 69 64 2e 6a 73 20 28 76 31 2e 34 29 20 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 6d 61 69 6c 74 6f 3a 72 6f 62 65 72 74 40 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 43 6f 70 79 72 69 67 68 74 Data Ascii: RANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. / / Math.uuid.js (v1.4) http://www.broofa.com mailto:robert@broofa.com Copyright
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 72 6f 2c 74 6f 2c 77 6f 2c 79 6f 2c 7a 6f 2c 41 6f 2c 42 6f 2c 44 6f 2c 46 6f 2c 47 6f 2c 49 6f 2c 4a 6f 2c 4b 6f 2c 4c 6f 2c 4d 6f 2c 4f 6f 2c 54 6f 2c 56 6f 2c 64 70 2c 66 70 2c 68 70 2c 6b 70 2c 6a 70 2c 69 70 2c 77 70 2c 7a 70 2c 48 70 2c 49 70 2c 4b 70 2c 4c 70 2c 4d 70 2c 4f 70 2c 50 70 2c 52 70 2c 53 70 2c 54 70 2c 56 70 2c 57 70 2c 59 70 2c 58 70 2c 24 70 2c 63 71 2c 62 71 2c 64 71 2c 66 71 2c 67 71 2c 6a 71 2c 6b 71 2c 6c 71 2c 6f 71 2c 72 71 2c 71 71 2c 74 71 2c 75 71 2c 76 71 2c 42 71 2c 43 71 2c 45 71 2c 47 71 2c 48 71 2c 4a 71 2c 49 71 2c 4d 71 2c 50 71 2c 52 71 2c 55 71 2c 57 71 2c 62 72 2c 65 72 2c 66 72 2c 6e 72 2c 72 72 2c 75 72 2c 73 72 2c 74 72 2c 79 72 2c 7a 72 2c 42 72 2c 43 72 2c 44 72 2c 45 72 2c 48 72 2c 49 72 2c 4a 72 2c 4b 72 2c Data Ascii: ro,to,wo,yo,zo,Ao,Bo,Do,Fo,Go,Io,Jo,Ko,Lo,Mo,Oo,To,Vo,dp,fp,hp,kp,jp,ip,wp,zp,Hp,Ip,Kp,Lp,Mp,Op,Pp,Rp,Sp,Tp,Vp,Wp,Yp,Xp,$p,cq,bq,dq,fq,gq,jq,kq,lq,oq,rq,qq,tq,uq,vq,Bq,Cq,Eq,Gq,Hq,Jq,Iq,Mq,Pq,Rq,Uq,Wq,br,er,fr,nr,rr,ur,sr,tr,yr,zr,Br,Cr,Dr,Er,Hr,Ir,Jr,Kr,
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 61 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 6a 61 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 5f 2e 6d 61 28 29 3f 30 3a 5f 2e 6a 61 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 6a 61 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6a 61 28 22 41 6e 64 72 6f 69 64 22 29 26 26 21 28 5f 2e 71 61 28 29 7c 7c 5f 2e 70 61 28 29 7c 7c 5f 2e 6e 61 28 29 7c 7c 5f 2e 6a 61 28 22 53 69 6c 6b 22 29 29 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: a("Chrome")\|\|_.ja("CriOS"))&&!(_.ma()?0:_.ja("Edge"))\|\|_.ja("Silk")};_.sa=function(){return _.ja("Android")&&!(_.qa()\|\|_.pa()\|\|_.na()\|\|_.ja("Silk"))};va=function(){ua===void 0&&(ua=null);return ua};xa=function(a){var b=va();return new _.wa(b?b.createScrip
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 6e 6f 6e 63 65 22 2c 62 29 7d 3b 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 72 63 3d 5f 2e 79 61 28 62 29 3b 53 61 28 61 29 7d 3b 5f 2e 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 55 61 29 72 65 74 75 72 6e 20 61 2e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 57 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 62 3e 3d 30 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 59 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3e 30 29 7b 66 6f 72 28 76 61 72 20 63 Data Ascii: nonce",b)};Ta=function(a,b){a.src=_.ya(b);Sa(a)};_.Va=function(a){if(a instanceof _.Ua)return a.g;throw Error("");};Xa=function(a,b){b=_.Wa(a,b);var c;(c=b>=0)&&Array.prototype.splice.call(a,b,1);return c};_.Ya=function(a){var b=a.length;if(b>0){for(var c
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 7d 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 7d 3b 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 62 2e 77 69 6e 6e 65 72 5f 71 69 64 3d 61 2e 67 65 74 45 73 63 61 70 65 64 51 65 6d 51 75 65 72 79 49 64 28 29 3b 62 2e 63 69 64 3d 5f 2e 74 28 61 2c 31 39 29 3b 62 2e 65 63 72 73 3d 5f 2e 74 28 61 2c 31 31 29 3b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f Data Ascii: b.push(d)}return b};ob=function(a){a=a(function(b){b.stack=Error().stack});a.prototype=Object.create(Error.prototype);a.prototype.constructor=a};pb=function(a){var b={};b.winner_qid=a.getEscapedQemQueryId();b.cid=_.t(a,19);b.ecrs=_.t(a,11);return"https:/
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 3b 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 7a 62 5b 61 5d 7c 7c 22 22 7d 3b 43 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 42 62 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 45 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 21 3d 3d 44 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 6c 6c 65 67 61 6c 20 65 78 74 65 72 6e Data Ascii: rCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)};Ab=function(a){return zb[a]\|\|""};Cb=function(a){return Bb&&a!=null&&a instanceof Uint8Array};Eb=function(a){if(a!==Db)throw Error("illegal extern
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 7d 3b 5f 2e 67 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 26 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 7d 3b 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 63 3b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 28 29 3a 62 29 7c 7c 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 6b 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 55 71 3d 21 30 3b 72 65 74 75 72 6e 20 61 7d 3b 6c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 63 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 30 7d 29 7d 3b 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6d 63 3b 72 65 74 75 72 6e 20 6b 63 28 66 75 6e 63 74 69 6f Data Ascii: };_.gc=function(a){if(a&2)throw Error();};ic=function(a){var b=_.hc;if(!a)throw Error((typeof b==="function"?b():b)\|\|String(a));};kc=function(a){a.Uq=!0;return a};lc=function(){return kc(function(a){return a===0})};nc=function(){var a=mc;return kc(functio
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 39 36 3e 3e 3e 30 7d 3b 4b 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3c 30 29 7b 49 63 28 2d 61 29 3b 76 61 72 20 62 3d 5f 2e 79 28 4a 63 28 47 63 2c 48 63 29 29 3b 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 47 63 3d 61 3e 3e 3e 30 3b 48 63 3d 62 3e 3e 3e 30 7d 65 6c 73 65 20 49 63 28 61 29 7d 3b 4d 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3e 3e 3e 3d 30 3b 61 3e 3e 3e 3d 30 3b 69 66 28 62 3c 3d 32 30 39 37 31 35 31 29 76 61 72 20 63 3d 22 22 2b 28 34 32 39 34 39 36 37 32 39 36 2a 62 2b 61 29 3b 65 6c 73 65 20 4d 62 28 29 3f 63 3d 22 22 2b 28 42 69 67 49 6e 74 28 62 29 3c 3c 42 69 67 49 6e 74 28 33 32 29 7c 42 69 67 49 6e 74 28 61 29 29 3a 28 63 3d 28 61 3e 3e 3e 32 34 7c 62 Data Ascii: 96>>>0};Kc=function(a){if(a<0){Ic(-a);var b=_.y(Jc(Gc,Hc));a=b.next().value;b=b.next().value;Gc=a>>>0;Hc=b>>>0}else Ic(a)};Mc=function(a,b){b>>>=0;a>>>=0;if(b<=2097151)var c=""+(4294967296*b+a);else Mb()?c=""+(BigInt(b)<<BigInt(32)\|BigInt(a)):(c=(a>>>24\|b
2024-09-30 13:16:57 UTC	1390	IN	Data Raw: 72 28 61 29 7d 3b 53 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 22 2b 52 63 28 61 29 2b 22 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 54 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 61 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 21 21 61 7d 3b 56 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 73 77 69 74 63 68 28 62 29 7b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 Data Ascii: r(a)};Sc=function(a){if(typeof a!=="boolean")throw Error("Expected boolean but got "+Rc(a)+": "+a);return a};Tc=function(a){if(a==null\|\|typeof a==="boolean")return a;if(typeof a==="number")return!!a};Vc=function(a){var b=typeof a;switch(b){case "bigint":r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49856	104.22.52.173	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:57 UTC	570	OUT	GET /hadron.js?url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ref=&_it=amazon&partner_id=777 HTTP/1.1 Host: cdn.hadronid.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:57 UTC	549	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:57 GMT Content-Type: application/javascript Content-Length: 56888 Connection: close Cf-Bgj: minify ETag: "1e77f38a1df1490d4175e3c4878bd150" Last-Modified: Tue, 04 Jun 2024 15:30:02 GMT x-amz-id-2: FNS8Lc8R9Qji432eQyZbGDDgvyWHvIXmOzDykwh9qe1J2fX8u6aO0aANuFN3vxu6aVi9rB6lRRQ= x-amz-request-id: 4GNMNHQXA94JVW78 CF-Cache-Status: HIT Age: 774 Expires: Sat, 05 Oct 2024 13:16:57 GMT Cache-Control: public, max-age=432000 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb47d8c6dd70c9e-EWR
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 49 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 4a 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 49 5b 65 5d 2e 63 61 6c 6c 28 4a 2e 65 78 70 6f 72 74 73 2c 4a 2c 4a 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 4a 2e 6c 3d 21 30 2c 4a 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 49 2c 6e 2e 63 3d 69 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 65 29 7b 6e 2e 6f 28 49 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 49 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=fun
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 49 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 64 64 65 64 5b 79 2e 6b 65 79 5d 26 26 65 2e 61 64 64 44 61 74 61 28 79 2e 6b 65 79 2c 53 74 72 69 6e 67 28 49 29 29 2c 73 28 21 31 29 7d 7d 3b 73 28 21 31 29 7d 2c 4a 3d 28 29 3d 3e 7b 7d 2c 73 3d 28 49 2c 69 2c 6e 3d 4a 29 3d 3e 7b 69 66 28 28 28 29 3d 3e 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 49 3d 22 73 61 66 65 4c 6f 63 61 6c 53 74 6f 72 61 67 65 54 65 73 74 22 3b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 Data Ascii: I){void 0===e.added[y.key]&&e.addData(y.key,String(I)),s(!1)}};s(!1)},J=()=>{},s=(I,i,n=J)=>{if((()=>{if("object"!=typeof window.localStorage\|\|"function"!=typeof window.localStorage.setItem)return!1;const I="safeLocalStorageTest";try{return window.localSt
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 72 72 6f 72 28 22 30 78 63 66 64 22 29 3b 63 6f 6e 73 74 20 4a 3d 5b 5d 2c 73 3d 5b 7b 64 61 74 61 3a 74 68 69 73 2e 72 74 74 2c 64 70 74 3a 30 2c 6d 6d 3a 22 22 7d 5d 2c 6a 3d 49 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 73 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 79 3d 73 2e 73 68 69 66 74 28 29 3b 69 66 28 79 2e 64 70 74 3e 3d 6a 29 7b 69 66 28 79 2e 64 61 74 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 5c 30 22 29 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 79 2e 6d 6d 3b 79 2e 64 61 74 61 2e 6d 65 74 61 3f 4a 2e 70 75 73 68 28 79 2e 64 61 74 61 2e 6d 65 74 61 29 3a 4a 2e 70 75 73 68 28 79 2e 6d 6d 29 7d 69 66 28 21 6e 29 63 6f 6e 74 69 6e 75 65 7d 63 6f 6e 73 74 20 77 3d 6e 26 26 79 2e 64 70 74 3e 3d 6a 2c 4f 3d 49 5b 79 2e 64 70 74 5d 3b Data Ascii: rror("0xcfd");const J=[],s=[{data:this.rtt,dpt:0,mm:""}],j=I.length;for(;s.length;){const y=s.shift();if(y.dpt>=j){if(y.data.hasOwnProperty("\0")){if(e)return y.mm;y.data.meta?J.push(y.data.meta):J.push(y.mm)}if(!n)continue}const w=n&&y.dpt>=j,O=I[y.dpt];
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 49 36 65 79 4a 36 49 6a 70 37 49 6a 41 69 4f 6e 73 69 65 43 49 36 65 79 4a 72 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 32 61 69 4a 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 63 69 4f 6e 73 69 65 43 49 36 65 79 49 30 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6b 4e 43 4a 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d 38 69 4f 6e 73 69 61 69 49 36 65 79 4a 72 49 6a 70 37 49 6e 55 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 45 30 49 69 77 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 Data Ascii: I6eyJ6Ijp7IjAiOnsieCI6eyJrIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiI2aiJ9fX19fSwieiI6eyJrIjp7IngiOnsibyI6eyJ0Ijp7ImciOnsieCI6eyI0Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJkNCJ9fX19fX19fX0sIm8iOnsiaiI6eyJrIjp7InUiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjE0IiwieSI6eyJcdTAwMDAiOnt9LCJtZXRhI
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 6e 5a 43 4a 39 66 58 31 39 66 53 77 69 61 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 47 51 69 66 53 77 69 61 69 49 36 65 79 4a 71 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 78 4e 79 4a 39 66 58 31 39 66 53 77 69 62 79 49 36 65 79 4a 74 49 6a 70 37 49 6d 34 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 58 59 69 4c 43 4a 79 49 6a 70 37 49 6d 38 69 4f 6e 73 69 62 43 49 36 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 Data Ascii: nZCJ9fX19fSwiaCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiNGQifSwiaiI6eyJqIjp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJxNyJ9fX19fSwibyI6eyJtIjp7Im4iOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibXYiLCJyIjp7Im8iOnsibCI6eyJ6Ijp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOi
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 66 53 77 69 62 53 49 36 65 79 4a 7a 49 6a 70 37 49 6d 73 69 4f 6e 73 69 64 43 49 36 65 79 4a 36 49 6a 70 37 49 6d 73 69 4f 6e 73 69 61 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 47 51 69 66 58 31 39 66 58 31 39 66 53 77 69 65 53 49 36 65 79 4a 36 49 6a 70 37 49 6e 67 69 4f 6e 73 69 5a 79 49 36 65 79 4a 79 49 6a 70 37 49 6d 38 69 4f 6e 73 69 5a 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 6a 63 69 4c 43 4a 30 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 33 62 53 4a 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 31 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 Data Ascii: fSwibSI6eyJzIjp7ImsiOnsidCI6eyJ6Ijp7ImsiOnsiaiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiNGQifX19fX19fSwieSI6eyJ6Ijp7IngiOnsiZyI6eyJyIjp7Im8iOnsiZyI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMjciLCJ0Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiI3bSJ9fX19fX19fSwieiI6eyJ1Ijp7Ilx1MDAwMCI6e30sIm1ldGE
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 6a 70 37 49 6e 6f 69 4f 6e 73 69 65 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 62 79 49 36 65 79 4a 31 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 5a 71 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 53 77 69 64 53 49 36 65 79 4a 32 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 62 79 49 36 65 79 4a 31 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6e 41 30 49 69 77 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a 44 51 69 66 58 31 39 66 58 31 39 66 58 30 73 49 6d 77 69 4f 6e 73 69 65 43 49 36 65 79 4a 76 49 6a 70 37 49 6d 6b 69 4f 6e 73 69 5a 79 49 36 65 79 4a 63 Data Ascii: jp7InoiOnsieCI6eyJnIjp7InoiOnsibyI6eyJ1Ijp7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjZqIn19fX19fX19fX19fSwidSI6eyJ2Ijp7InoiOnsibyI6eyJ1Ijp7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6InA0IiwieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiZDQifX19fX19fX0sImwiOnsieCI6eyJvIjp7ImkiOnsiZyI6eyJc
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6b 4e 43 4a 39 66 53 77 69 65 69 49 36 65 79 4a 76 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 32 45 69 66 58 31 39 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 76 49 6a 70 37 49 6a 45 69 4f 6e 73 69 61 79 49 36 65 79 4a 34 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 5a 79 49 36 65 79 4a 34 49 6a 70 37 49 6a 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6e 45 33 49 6e 31 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 76 49 6a 70 37 49 6a 45 69 4f 6e 73 69 62 79 49 36 65 79 4a 34 49 6a 70 37 49 6a 41 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c Data Ascii: 0sIm1ldGEiOiJkNCJ9fSwieiI6eyJvIjp7InUiOnsidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiM2EifX19fX19fSwidCI6eyJvIjp7IjEiOnsiayI6eyJ4Ijp7InkiOnsiZyI6eyJ4Ijp7IjQiOnsiXHUwMDAwIjp7fSwibWV0YSI6InE3In19fX19fX19fSwieiI6eyJvIjp7IjEiOnsibyI6eyJ4Ijp7IjAiOnsieSI6eyJcdTAwMDAiOnt9L
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 36 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 79 59 53 4a 39 66 58 31 39 66 58 31 39 4c 43 4a 76 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 65 69 49 36 65 79 4a 6e 49 6a 70 37 49 6e 51 69 4f 6e 73 69 61 53 49 36 65 79 4a 72 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6d 59 53 4a 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 34 49 6a 70 37 49 6e 55 69 4f 6e 73 69 63 69 49 36 65 79 4a 31 49 6a 70 37 49 6d 30 69 4f 6e 73 69 4e 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 59 58 59 69 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 31 49 6a 70 37 49 6e 4d 69 4f 6e 73 69 4e 43 49 36 65 79 4a 63 64 54 41 77 4d 44 Data Ascii: 6Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJyYSJ9fX19fX19LCJvIjp7InkiOnsieiI6eyJnIjp7InQiOnsiaSI6eyJrIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJmYSJ9fX19fX19fSwieiI6eyJ4Ijp7InUiOnsiciI6eyJ1Ijp7Im0iOnsiNCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiYXYifX19fSwidCI6eyJ1Ijp7InMiOnsiNCI6eyJcdTAwMD
2024-09-30 13:16:57 UTC	1369	IN	Data Raw: 4e 79 4a 39 66 53 77 69 65 53 49 36 65 79 4a 72 49 6a 70 37 49 6d 67 69 4f 6e 73 69 5a 79 49 36 65 79 4a 79 49 6a 70 37 49 6e 49 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 6e 31 39 66 58 31 39 4c 43 4a 78 49 6a 70 37 49 6d 73 69 4f 6e 73 69 65 69 49 36 65 79 4a 6f 49 6a 70 37 49 6d 63 69 4f 6e 73 69 63 69 49 36 65 79 4a 79 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 33 62 53 4a 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 75 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 31 5a 79 4a 39 66 58 30 73 49 6d 73 69 4f 6e 73 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 5a 79 49 Data Ascii: NyJ9fSwieSI6eyJrIjp7ImgiOnsiZyI6eyJyIjp7InIiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIn19fX19LCJxIjp7ImsiOnsieiI6eyJoIjp7ImciOnsiciI6eyJyIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiI3bSJ9fX19fX19fSwieiI6eyJuIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiI1ZyJ9fX0sImsiOnsiMSI6eyJrIjp7IngiOnsiZyI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49863	142.250.185.78	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:58 UTC	1019	OUT	GET /f/AGSKWxUwCuxFQSj1QkSnwRGA9Te0Ipr33f9TmT7sKEDr8iYNRg8fMx22-JPtMTqi0BTs5_V2Kd9XbQQnYYzMqzvxubl7A6f6RgaxBxetmqehYYo59LeT0vGrSd3Q5gu94Fgcoy1pukTfMQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI3NzAyMjE2LDgwNjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlIixudWxsLFtbOCwiR0VoX0h2V3lkNlEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:58 UTC	1912	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:16:58 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-o-00p9sJedfOK8m15YnXSA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorGlobalRouterHttp/web-reports?context=eJzjKtDikmII0pBiOO90h-k6EEt8fcmkBsRO6TNYA4C49eY51slAnPTvPGsBELtrXWT1B2JDhUus9kDsWHSJ1ROIVXsusRoD8f11l1ifA_Hej5dYjwLx0vuXWdcCcZHEFdYGIBbi4Th18tV2NoEFW75fYFTSSMovjE_OzyspykwqLckvSktOSy1OLSpLLYo3MjAyMbA0MtMzMI0vMAAApihGTA" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:58 UTC	1912	IN	Data Raw: 32 38 33 35 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 63 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 5f 2e 75 Data Ascii: 2835if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var cp=function(a){if(!a)return null;a=_.u
2024-09-30 13:16:58 UTC	1912	IN	Data Raw: 6f 63 75 6d 65 6e 74 29 29 26 26 5f 2e 75 66 28 61 2c 32 29 21 3d 6e 75 6c 6c 3f 5f 2e 4c 28 61 2c 32 29 3a 6e 75 6c 6c 29 26 26 0a 61 3d 3d 3d 31 26 26 5f 2e 50 6e 28 63 2c 31 30 2c 21 30 29 3b 62 28 63 29 7d 3b 76 61 72 20 74 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 3d 5b 5d 7d 3b 74 70 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 62 5d 2e 63 6f 6e 63 61 74 28 5f 2e 68 61 28 5f 2e 4a 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 29 7d 3b 74 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 Data Ascii: ocument))&&_.uf(a,2)!=null?_.L(a,2):null)&&a===1&&_.Pn(c,10,!0);b(c)};var tp=function(){this.i=[]};tp.prototype.addEventListener=function(a,b){this.i.push(function(){a.call.apply(a,[b].concat(_.ha(_.Jc.apply(0,arguments))))})};tp.prototype.g=function(){f
2024-09-30 13:16:58 UTC	1912	IN	Data Raw: 70 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6a 2e 69 2e 70 75 73 68 28 62 29 3b 58 70 28 61 2e 6a 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 44 70 28 61 2c 31 29 3b 66 70 28 62 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 44 70 28 61 2c 30 29 3b 66 70 28 62 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 44 70 28 61 2c 32 29 7d 29 7d 3b 0a 76 61 72 20 5a 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 2e 6f 3b 62 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 62 2e Data Ascii: p(b,function(){a.j.i.push(b);Xp(a.j,function(){Dp(a,1);fp(b)},function(){Dp(a,0);fp(b)})},function(){Dp(a,2)})};var Zp=function(a){var b=document.createElement("div");b.className=a.o;b.style.width="1px";b.style.height="1px";b.style.position="absolute";b.
2024-09-30 13:16:58 UTC	1912	IN	Data Raw: 3b 76 61 72 20 62 3d 21 30 7d 65 6c 73 65 20 62 3d 21 31 3b 65 6c 73 65 20 72 70 28 74 68 69 73 2e 69 29 2c 62 3d 21 30 3b 62 7c 7c 28 6b 71 28 74 68 69 73 29 2c 6e 71 28 74 68 69 73 2e 6f 2c 74 68 69 73 2e 6a 29 2c 6f 71 28 74 68 69 73 2c 61 29 29 7d 3b 76 61 72 20 6f 71 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 73 70 28 61 2e 44 2c 61 2e 41 2c 61 2e 43 2c 61 2e 42 29 3b 55 70 28 61 2e 75 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 73 74 61 72 74 28 65 2c 62 29 7d 29 3b 76 61 72 20 64 3d 6d 71 28 61 29 3b 54 70 28 61 2e 75 2c 64 2e 69 63 29 3b 64 2e 4b 63 28 29 7d 3b 76 61 72 20 70 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 7a 28 70 71 2c 5f 2e 49 29 3b 76 61 72 20 71 71 Data Ascii: ;var b=!0}else b=!1;else rp(this.i),b=!0;b\|\|(kq(this),nq(this.o,this.j),oq(this,a))};var oq=function(a,b){var c=new sp(a.D,a.A,a.C,a.B);Up(a.u,function(e){c.start(e,b)});var d=mq(a);Tp(a.u,d.ic);d.Kc()};var pq=function(a){this.l=_.v(a)};_.z(pq,_.I);var qq
2024-09-30 13:16:58 UTC	1912	IN	Data Raw: 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 33 2c 5c 78 32 32 57 31 73 69 61 48 52 30 63 48 4d 36 4c 79 39 6d 64 57 35 6b 61 57 35 6e 59 32 68 76 61 57 4e 6c 63 32 31 6c 63 33 4e 68 5a 32 56 7a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 69 58 53 78 62 49 6d 4e 76 62 6e 52 68 61 57 35 6c 63 69 31 68 5a 47 52 7a 49 47 46 6b 54 47 39 6a 59 58 52 70 62 32 34 67 62 57 30 74 59 57 51 74 62 58 42 31 49 46 4a 48 51 57 52 43 62 33 68 4e 59 57 6c 75 52 47 6c 32 49 48 64 70 5a 47 64 6c 64 46 39 68 5a 48 5a 6c 63 6e 52 70 63 32 31 6c 62 6e 51 69 4c 46 74 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 77 59 57 64 6c 59 57 51 79 4c 6d 64 76 62 32 64 73 5a 58 4e 35 62 6d 52 70 59 32 46 30 Data Ascii: Manager.run('\x5b\x5b\x5b3,\x22W1siaHR0cHM6Ly9mdW5kaW5nY2hvaWNlc21lc3NhZ2VzLmdvb2dsZS5jb20iXSxbImNvbnRhaW5lci1hZGRzIGFkTG9jYXRpb24gbW0tYWQtbXB1IFJHQWRCb3hNYWluRGl2IHdpZGdldF9hZHZlcnRpc21lbnQiLFtudWxsLG51bGwsbnVsbCwiaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0
2024-09-30 13:16:58 UTC	741	IN	Data Raw: 5a 46 78 31 4d 44 41 7a 5a 43 4a 64 4c 46 74 75 64 57 78 73 4c 46 73 33 58 56 30 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 49 78 4e 6a 59 34 4d 7a 68 6b 5a 6d 4e 6d 4f 57 4d 77 4f 44 55 77 49 69 78 75 64 57 78 73 4c 46 74 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 6d 64 57 35 6b 61 57 35 6e 59 32 68 76 61 57 4e 6c 63 32 31 6c 63 33 4e 68 5a 32 56 7a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 76 58 79 39 44 62 32 35 30 63 6d 6c 69 64 58 52 76 63 6c 4e 6c 63 6e 5a 70 62 6d 64 58 5a 57 4a 54 64 32 6c 30 59 32 68 69 62 32 46 79 5a 45 68 30 64 48 41 76 61 6e 4e 6c 63 6e 4a 76 63 69 4a 64 58 56 30 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c Data Ascii: ZFx1MDAzZCJdLFtudWxsLFs3XV0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLCIxNjY4MzhkZmNmOWMwODUwIixudWxsLFtudWxsLG51bGwsbnVsbCwiaHR0cHM6Ly9mdW5kaW5nY2hvaWNlc21lc3NhZ2VzLmdvb2dsZS5jb20vXy9Db250cmlidXRvclNlcnZpbmdXZWJTd2l0Y2hib2FyZEh0dHAvanNlcnJvciJdXV0\\u003d\x22\x5d\
2024-09-30 13:16:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49860	52.19.187.77	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:58 UTC	616	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:58 UTC	439	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 35 37 36 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 5d 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16576,"src":"SYNCJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"117"}],"fullVersionList":[{"brand":"Google Chrome","version":"117.0.5938.132"}
2024-09-30 13:16:58 UTC	650	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:58 GMT Content-Type: application/json;charset=utf-8 Content-Length: 235 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.25.160 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Fri, 27-Jun-2025 13:06:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=31a817ca3356fa6382689ba223379509;Path=/;Domain=crwdcntrl.net;Expires=Fri, 27-Jun-2025 13:06:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.multitran.com Server: Jetty(9.4.38.v20210224)
2024-09-30 13:16:58 UTC	235	IN	Data Raw: 7b 22 70 69 64 22 3a 22 33 31 61 38 31 37 63 61 33 33 35 36 66 61 36 33 38 32 36 38 39 62 61 32 32 33 33 37 39 35 30 39 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 33 31 61 38 31 37 63 61 33 33 35 36 66 61 36 33 38 32 36 38 39 62 61 32 32 33 33 37 39 35 30 39 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 69 22 3a 22 62 66 37 35 38 34 35 61 36 62 34 61 39 36 37 30 39 30 63 34 63 32 38 32 63 62 64 34 31 36 64 35 33 39 33 38 30 62 64 63 62 64 62 30 31 34 32 30 36 61 65 36 66 63 32 39 61 34 38 34 64 31 63 35 22 2c 22 74 22 3a 22 69 22 2c 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 32 38 33 30 37 30 31 38 35 31 30 22 7d 5d 7d Data Ascii: {"pid":"31a817ca3356fa6382689ba223379509","c":[{"k":"_cc_id","v":"31a817ca3356fa6382689ba223379509","e":23328000}],"ids":[{"i":"bf75845a6b4a967090c4c282cbd416d539380bdcbdb014206ae6fc29a484d1c5","t":"i","c":"core","e":"1728307018510"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49861	65.9.66.68	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:58 UTC	364	OUT	GET /lt/c/16576/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:58 UTC	562	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 43601 Connection: close Date: Mon, 30 Sep 2024 13:09:37 GMT Last-Modified: Tue, 20 Aug 2024 18:47:23 GMT ETag: "ad78eaf46246cac6849005eb8b50ae6f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 36d9e1bd4f00d39c57a56679dc44e264.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: ByNhlZrSBAoIXLgUqH6ORD5tSdhNxpvf52PL87dnJeJtoOKnFANtsQ== Age: 442
2024-09-30 13:16:58 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-09-30 13:16:58 UTC	16384	IN	Data Raw: 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 Data Ascii: (b=!1,sync16576_.error("tagInput.data.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16576_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16576_.error("tagInput.data.thirdParty.value is not defined"));a.namespace
2024-09-30 13:16:58 UTC	8806	IN	Data Raw: 2b 63 29 7d 72 65 74 75 72 6e 21 31 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 37 36 5f 4d 61 28 61 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 6c 6f 74 61 6d 65 49 66 72 61 6d 65 54 63 66 41 70 69 26 26 28 73 79 6e 63 31 36 35 37 36 5f 2e 64 65 62 75 67 28 22 49 6e 69 74 69 61 6c 69 7a 69 6e 67 20 54 43 46 20 73 75 70 70 6f 72 74 20 69 6e 20 61 6e 20 69 66 72 61 6d 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 6c 6f 74 61 6d 65 49 66 72 61 6d 65 54 63 66 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 66 29 7b 76 61 72 20 68 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 3b 62 3d 7b 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 62 2c 70 61 72 61 6d 65 74 65 72 3a 66 Data Ascii: +c)}return!1} function sync16576_Ma(a){"undefined"===typeof window.__lotameIframeTcfApi&&(sync16576_.debug("Initializing TCF support in an iframe"),window.__lotameIframeTcfApi=function(b,c,d,f){var h=Math.random()+"";b={__tcfapiCall:{command:b,parameter:f
2024-09-30 13:16:58 UTC	2027	IN	Data Raw: 67 65 74 50 61 6e 6f 72 61 6d 61 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 6f 72 61 67 65 2e 41 28 29 7d 3b 62 2e 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 73 79 6e 63 31 36 35 37 36 5f 24 28 61 2e 73 2c 22 73 79 6e 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 79 6e 63 28 63 29 7d 29 7d 3b 62 2e 73 65 74 49 64 65 6e 74 69 74 79 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 73 79 6e 63 31 36 35 37 36 5f 24 28 61 2e 73 2c 22 73 65 74 49 64 65 6e 74 69 74 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 79 6e 63 31 36 35 37 36 5f 34 61 28 61 2c 63 29 7d 29 7d 3b 62 2e 67 65 74 49 6e 74 65 72 6e 61 6c 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 73 Data Ascii: getPanoramaId=function(){return a.storage.A()};b.sync=function(c){return sync16576_$(a.s,"sync",function(){a.sync(c)})};b.setIdentity=function(c){return sync16576_$(a.s,"setIdentity",function(){sync16576_4a(a,c)})};b.getInternalState=function(){return a.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49866	142.250.185.174	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:58 UTC	534	OUT	GET /i/ca-pub-1428290592401732?href=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe&ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:58 UTC	1956	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:16:58 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-NbQtES7FCKfz6YwtgfMu6w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmLw0ZBiOHnrNtNFID7vdIfpOhBLfH3JpAHETukzWIOAuPXmOdapQJz07zxrERC7a11k9QdiQ4VLrI4gXHSJ1ROIVXsusZoC8f11l1ifA_Hej5dYjwLx0vuXWdcCcZHEFdYmIBbi4Th18tV2NoGOLzO_MyppJOUXxifn55UUZSaVluQXpSWnpRanFpWlFsUbGRiZGFgamekZmMYXGAAA9D9LVQ" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 36 66 31 33 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 6f13if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 20 66 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 Data Ascii: fa(ba(this))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.r=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{nex
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6c 61 28 68 2c 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 3d 66 75 Data Ascii: ch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.la(h,g):this.A(g)};e.prototype.u=fu
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 77 28 42 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 71 5b 42 5d 3d 4a 3b 79 2d 2d 3b 79 3d 3d 30 26 26 6d 28 71 29 7d 7d 76 61 72 20 71 3d 5b 5d 2c 79 3d 30 3b 64 6f 20 71 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 79 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6d 62 28 77 28 71 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e Data Ascii: function w(B){return function(J){q[B]=J;y--;y==0&&m(q)}}var q=[],y=0;do q.push(void 0),y++,c(k.value).mb(w(q.length-1),n),k=h.next();while(!k.done)})};return e});var ra=function(a,b,c){if(a==null)throw new TypeError("k`"+c);if(b instanceof RegExp)throw n
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 72 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6e 2e 76 61 6c Data Ascii: prototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(_.r([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),n=m.next();if(n.done\|\|n.value[0]!=h\|\|n.val
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 6d 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6d 29 7d 3b 6d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 70 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 Data Ascii: m.next,{done:!1,value:k(m)};m=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});p("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")retur
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 66 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 Data Ascii: f=typeof Symbol!="undefined"&&Symbol.iterator&&b[Symbol.iterator];if(typeof f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});p("Object.entries",fu
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 0a 70 28 22 55 69 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 46 6c Data Ascii: l};p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fill",ta);p("Int16Array.prototype.fill",ta);p("Uint16Array.prototype.fill",ta);p("Int32Array.prototype.fill",ta);p("Uint32Array.prototype.fill",ta);p("Fl
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 28 61 29 21 3d 2d 31 7d 3b 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 45 61 3f 21 21 5f 2e 46 61 26 26 5f 2e 46 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 0a 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 29 3f 48 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 75 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 75 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 49 61 28 29 3f 30 3a 5f 2e 75 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 75 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 Data Ascii: (a)!=-1};Ia=function(){return _.Ea?!!_.Fa&&_.Fa.brands.length>0:!1};Ja=function(){return Ia()?Ha("Chromium"):(_.u("Chrome")\|\|_.u("CriOS"))&&!(Ia()?0:_.u("Edge"))\|\|_.u("Silk")};_.Ma=function(a){return Ka&&a!=null&&a instanceof Uint8Array};Oa=function(){va
2024-09-30 13:16:58 UTC	1956	IN	Data Raw: 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 3f 61 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 3b 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 77 62 3d 3d 3d 76 6f 69 64 20 30 29 7b 76 61 72 20 62 3d 6e 65 77 20 78 62 28 5b 5d 2c 7b 7d 29 3b 77 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 63 61 6c 6c 28 5b 5d 2c 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 7d 77 62 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 26 26 28 61 5b 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 Data Ascii: turn a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};yb=function(a){if(wb===void 0){var b=new xb([],{});wb=Array.prototype.concat.call([],b).length===1}wb&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49865	18.66.102.57	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:58 UTC	368	OUT	GET /rules-p-54Nt-1NAaEEe0.js HTTP/1.1 Host: rules.quantcount.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:58 UTC	667	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 160 Connection: close Last-Modified: Thu, 13 Oct 2022 15:29:19 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Cross-Origin-Resource-Policy: cross-origin access-control-allow-origin: * access-control-allow-methods: GET Date: Mon, 30 Sep 2024 13:16:58 GMT Cache-Control: max-age=3600 ETag: "05b131079c67d484167fd1b1f6c79577" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 367a4718be97a49df7ac0500a986437a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: Ew0cQU7H4H2GTUVncD6myxgy4pfYjeHvz9Ae10Ij158QpE2pHTHcwA== Age: 1
2024-09-30 13:16:58 UTC	160	IN	Data Raw: 2f 2a 0a 20 51 75 61 6e 74 63 61 73 74 20 6d 65 61 73 75 72 65 6d 65 6e 74 20 74 61 67 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 32 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 5f 5f 71 63 28 22 72 75 6c 65 73 22 2c 5b 61 5d 29 7d 29 28 22 70 2d 35 34 4e 74 2d 31 4e 41 61 45 45 65 30 22 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b Data Ascii: /* Quantcast measurement tag Copyright (c) 2008-2022, Quantcast Corp.*/'use strict';(function(a,b,c){__qc("rules",[a])})("p-54Nt-1NAaEEe0",window,document);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49864	91.228.74.244	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:58 UTC	1137	OUT	GET /pixel;r=643403303;rf=0;a=p-54Nt-1NAaEEe0;url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9;ns=0;ce=1;qjs=1;qv=fd657345-20240925114642;ref=;d=multitran.com;dst=1;et=1727702216830;tzo=240;ogl=title.Dictionary;ses=c8fd7b8a-05c5-4947-9572-57e12d1bdadf;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-219187005-1727702215188;pbc=;cm=undefined;gdpr=0;us_privacy=1---;gpp_sid=-1;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:58 UTC	592	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:58 GMT Content-Type: image/gif Content-Length: 35 Connection: close Attribution-Reporting-Register-Trigger: {"event_trigger_data":[{"filters":[],"trigger_data":"1"}]} Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: mc=66faa4ca-b24a8-e86ee-8a585; expires=Fri, 31-Oct-2025 13:16:58 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400
2024-09-30 13:16:58 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49867	142.250.186.98	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:58 UTC	862	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-09-30 13:16:59 UTC	709	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 105773 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:12:56 GMT Expires: Mon, 30 Sep 2024 14:02:56 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Age: 243 Last-Modified: Mon, 23 Sep 2024 19:43:02 GMT Content-Type: text/html Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:16:59 UTC	681	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 Data Ascii: if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b)
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 65 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 Data Ascii: ray Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=ea[b[c]];typeof d==="function"&&typeof d.prototype[a]!="function"&&ca(d.prototype,a,{configurable:!0,w
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 7b 76 61 72 20 73 61 3d 7b 61 3a 21 30 7d 2c 74 61 3d 7b 7d 3b 74 72 79 7b 74 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 73 61 3b 72 61 3d 74 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 72 61 3d 21 31 7d 71 61 3d 72 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 75 61 3d 71 61 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 70 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 Data Ascii: {var sa={a:!0},ta={};try{ta.__proto__=sa;ra=ta.a;break a}catch(a){}ra=!1}qa=ra?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var ua=qa,z=function(a,b){a.prototype=pa(b.prototype);a.prototype.cons
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 61 2e 67 2e 46 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 67 3d 76 6f 69 64 20 30 2c 78 61 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 46 3d 21 31 3b 69 66 28 61 2e 67 2e 6c 29 7b 62 3d 61 2e 67 2e 6c 3b 61 2e 67 2e 6c 3d 6e 75 6c 6c 3b 69 66 28 62 2e 45 61 29 74 68 72 6f 77 20 62 2e 6d 61 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 44 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 77 61 28 61 2e 67 29 3b 61 2e 67 2e 69 3f 62 3d 41 61 28 61 2c 61 2e 67 2e 69 2e 6e 65 78 74 2c 62 2c 61 Data Ascii: a.g.F=!1,{value:b.value,done:!1}}catch(c){a.g.g=void 0,xa(a.g,c)}a.g.F=!1;if(a.g.l){b=a.g.l;a.g.l=null;if(b.Ea)throw b.ma;return{value:b.return,done:!0}}return{value:void 0,done:!0}},Da=function(a){this.next=function(b){wa(a.g);a.g.i?b=Aa(a,a.g.i.next,b,a
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 66 3b 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 67 3d 5b 5d 3b 74 68 69 73 2e 55 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 66 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: l)}}}this.g=null};b.prototype.l=function(f){this.i(function(){throw f;})};var e=function(f){this.h=0;this.i=void 0;this.g=[];this.U=!1;var h=this.l();try{f(h.resolve,h.reject)}catch(k){h.reject(k)}};e.prototype.l=function(){function f(l){return function(n
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 66 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 66 29 29 3b 66 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 66 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6b 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 67 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 67 2e 68 28 74 68 69 73 2e 67 5b 66 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b Data Ascii: ent("CustomEvent"),f.initCustomEvent("unhandledrejection",!1,!0,f));f.promise=this;f.reason=this.i;return k(f)};e.prototype.sa=function(){if(this.g!=null){for(var f=0;f<this.g.length;++f)g.h(this.g[f]);this.g=null}};var g=new b;e.prototype.xa=function(f){
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 6f 66 20 66 3b 72 65 74 75 72 6e 20 68 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 66 21 3d 3d 6e 75 6c 6c 7c 7c 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6b 3d 6e 65 77 20 61 28 5b 5b 66 2c 32 5d 2c 5b 68 2c 33 5d 5d 29 3b 69 66 28 6b 2e 67 65 74 28 66 29 21 3d 32 7c 7c 6b 2e 67 65 74 28 68 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6b 2e 64 65 6c 65 74 65 28 66 29 3b 6b 2e 73 65 74 28 68 2c 34 29 3b 72 65 74 75 72 6e 21 6b 2e 68 61 73 28 66 29 26 26 6b 2e 67 65 74 28 68 29 3d 3d 34 7d 63 61 74 63 68 Data Ascii: of f;return h==="object"&&f!==null\|\|h==="function"}if(function(){if(!a\|\|!Object.seal)return!1;try{var f=Object.seal({}),h=Object.seal({}),k=new a([[f,2],[h,3]]);if(k.get(f)!=2\|\|k.get(h)!=3)return!1;k.delete(f);k.set(h,4);return!k.has(f)&&k.get(h)==4}catch
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 68 69 73 5b 31 5d 3d 67 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 6c 61 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 68 3d 3d 3d 30 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 41 3f 6c 2e 41 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 41 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 48 3a 74 68 69 73 5b 31 5d 2e 48 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a Data Ascii: his[1]=g();this.size=0;if(h){h=la(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}};c.prototype.set=function(h,k){h=h===0?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.A?l.A.value=k:(l.A={next:this[1],H:this[1].H,head:this[1],key:
2024-09-30 13:16:59 UTC	1390	IN	Data Raw: 6e 64 65 78 3a 2d 31 2c 41 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 68 5b 31 5d 3b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 29 7b 66 6f 72 28 3b 6c 2e 68 65 61 64 21 3d 68 5b 31 5d 3b 29 6c 3d 6c 2e 48 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 48 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 66 3d 30 3b 72 65 74 75 72 6e Data Ascii: ndex:-1,A:void 0}},e=function(h,k){var l=h[1];return ia(function(){if(l){for(;l.head!=h[1];)l=l.H;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},g=function(){var h={};return h.H=h.next=h.head=h},f=0;return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49869	3.233.146.93	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	719	OUT	POST /api/v2/logs?dd-api-key=pub6b45632781dd758b20e9d8357c39efab&ddsource=nodejs&service=adpushup.js HTTP/1.1 Host: http-intake.logs.datadoghq.com Connection: keep-alive Content-Length: 1605 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:59 UTC	1605	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 41 44 50 5f 45 52 52 4f 52 22 2c 22 64 61 74 61 22 3a 7b 22 6c 6f 67 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 41 70 55 6e 63 61 75 67 68 74 45 72 72 6f 72 22 2c 22 73 74 61 63 6b 22 3a 22 54 79 70 65 45 72 72 6f 72 3a 20 65 2e 67 65 74 42 69 64 52 65 73 70 6f 6e 73 65 73 46 6f 72 41 64 55 6e 69 74 43 6f 64 65 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 5c 6e 20 20 20 20 61 74 20 4f 62 6a 65 63 74 2e 67 65 74 48 69 67 68 65 73 74 41 6c 69 76 65 42 69 64 20 28 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 64 70 75 73 68 75 70 2e 63 6f 6d 2f 34 32 38 34 35 2f 61 64 70 75 73 68 75 70 2e 6a 73 3a 31 3a 33 31 35 31 39 33 29 5c 6e 20 20 20 20 61 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 64 70 75 73 68 75 70 2e 63 6f 6d 2f 34 32 Data Ascii: {"event":"ADP_ERROR","data":{"logs":[{"name":"ApUncaughtError","stack":"TypeError: e.getBidResponsesForAdUnitCode is not a function\n at Object.getHighestAliveBid (https://cdn.adpushup.com/42845/adpushup.js:1:315193)\n at https://cdn.adpushup.com/42
2024-09-30 13:16:59 UTC	376	IN	HTTP/1.1 202 Accepted Date: Mon, 30 Sep 2024 13:16:59 GMT Content-Type: application/json Content-Length: 2 Connection: close cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-09-30 13:16:59 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49868	65.109.102.246	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	827	OUT	GET /c/[object%20Module] HTTP/1.1 Host: www.multitran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: h=1024; w=1280; w1=1280; h1=907; _ga_8BNQ9L4TKJ=GS1.1.1727702211.1.0.1727702211.0.0.0; _ga=GA1.1.655009769.1727702211; __AP_SESSION__=e4a23296-7541-469f-b752-06081ba1c4d2
2024-09-30 13:16:59 UTC	173	IN	HTTP/1.1 500 URL Rewrite Module Error. Content-Type: text/html Server: Microsoft-IIS/10.0 Date: Mon, 30 Sep 2024 13:16:59 GMT Connection: close Content-Length: 1201
2024-09-30 13:16:59 UTC	1201	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 c2 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"/><title>500 -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49870	212.102.56.178	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	592	OUT	GET /instream/content/reading/resoomer/hls.m3u8 HTTP/1.1 Host: video.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:59 UTC	619	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:59 GMT Content-Type: application/vnd.apple.mpegurl Content-Length: 779 Connection: close Last-Modified: Wed, 11 Jan 2023 07:26:22 GMT ETag: "63be649e-30b" X-Robots-Tag: : noindex, nofollow X-77-NZT: EggB1GY4sQFBDAElE8I0AbdXJQAA X-77-NZT-Ray: 1cb09c0e40f731becba4fa66b6c44f16 X-Accel-Expires: @1728729460 X-Accel-Date: 1727692660 X-Accel-Date-Max: 1704882773 X-77-Cache: HIT X-77-Age: 9559 Vary: Accept-Encoding, Origin Server: CDN77-Turbo Access-Control-Allow-Origin: https://www.multitran.com X-Cache: MISS X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-30 13:16:59 UTC	779	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 49 4e 44 45 50 45 4e 44 45 4e 54 2d 53 45 47 4d 45 4e 54 53 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 22 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 67 22 2c 4e 41 4d 45 3d 22 45 6e 67 6c 69 73 68 22 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 55 52 49 3d 22 68 6c 73 2f 65 6e 67 2f 6d 61 69 6e 2e 6d 33 75 38 22 0a 23 45 58 54 2d 58 2d 53 54 52 45 41 4d 2d 49 4e 46 3a 42 41 4e 44 57 49 44 54 48 3d 37 31 35 33 32 38 2c 41 56 45 52 41 47 45 2d 42 41 4e 44 57 49 44 54 48 3d 34 33 39 32 39 30 2c 43 4f 44 45 43 53 3d 22 61 76 63 31 2e 36 34 30 30 31 65 2c Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-INDEPENDENT-SEGMENTS#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio",LANGUAGE="eng",NAME="English",AUTOSELECT=YES,DEFAULT=YES,URI="hls/eng/main.m3u8"#EXT-X-STREAM-INF:BANDWIDTH=715328,AVERAGE-BANDWIDTH=439290,CODECS="avc1.64001e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49872	142.250.185.174	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	471	OUT	GET /i/103512698?ers=3 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:59 UTC	1922	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:16:59 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-P74fLAIaA96uqON0mtWeCw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjKtDikmLw0pBiOO90h-k6EEt8fcmkAcRO6TNYg4C49eY51qlAnPTvPGsRELtrXWT1B2JDhUusjiBcdInVE4hVey6xmgLx_XWXWJ8D8d6Pl1iPAvHS-5dZ1wJxkcQV1iYgFuLhOH3y1XY2gQffjv5hVNJIyi-MT87PKynKTCotyS9KS05LLU4tKkstijcyMDIxsDQy0zMwjS8wAAC950bP" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 36 39 62 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 70 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 Data Ascii: 69bc(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)r
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 7d 0a 76 61 72 20 69 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6a 61 3d 4f 62 6a Data Ascii: e or ArrayLike");}function ha(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c}var ia=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},ja;if(typeof Object.setPrototypeOf=="function")ja=Obj
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 28 67 29 7b 69 66 28 21 76 28 67 2c 6d 29 29 7b 76 61 72 20 68 3d 6e 65 77 20 63 3b 70 28 67 2c 6d 2c 7b 76 61 6c 75 65 3a 68 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 67 29 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 5b 67 5d 3b 68 26 26 28 4f 62 6a 65 63 74 5b 67 5d 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6c 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6c 29 26 26 65 28 6c 29 3b 72 65 74 75 72 6e 20 68 28 6c 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 68 3d 4f 62 6a 65 Data Ascii: nction e(g){if(!v(g,m)){var h=new c;p(g,m,{value:h})}}function k(g){var h=Object[g];h&&(Object[g]=function(l){if(l instanceof c)return l;Object.isExtensible(l)&&e(l);return h(l)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var g=Object.seal({}),h=Obje
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 22 7c 7c 21 68 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 6b 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 66 3d 66 3d 3d 3d 30 3f 30 3a 66 3b 76 61 72 20 68 3d 64 28 74 68 69 73 2c 66 29 3b 68 2e 6c 69 73 74 7c 7c 28 68 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 3d 5b 5d 29 3b 68 2e 69 3f 68 2e 69 2e 76 61 6c 75 65 3d 67 3a 28 68 2e 69 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 6c 3a 74 68 69 73 5b 31 5d 2e 6c 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 66 2c 76 61 6c 75 65 3a 67 7d 2c 68 2e 6c 69 73 74 2e 70 75 73 68 28 68 2e 69 Data Ascii: "\|\|!h.next().done?!1:!0}catch(n){return!1}}())return a;var k=new WeakMap;e.prototype.set=function(f,g){f=f===0?0:f;var h=d(this,f);h.list\|\|(h.list=this[0][h.id]=[]);h.i?h.i.value=g:(h.i={next:this[1],l:this[1].l,head:this[1],key:f,value:g},h.list.push(h.i
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 62 65 72 28 62 29 3b 69 66 28 69 73 4e 61 4e 28 62 29 7c 7c 62 3d 3d 3d 49 6e 66 69 6e 69 74 79 7c 7c 62 3d 3d 3d 2d 49 6e 66 69 6e 69 74 79 7c 7c 62 3d 3d 3d 30 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 62 29 29 3b 72 65 74 75 72 6e 20 62 3c 30 3f 2d 63 3a 63 7d 7d 29 3b 71 28 22 4e 75 6d 62 65 72 2e 69 73 4e 61 4e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 69 73 4e 61 4e 28 62 29 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a Data Ascii: ber(b);if(isNaN(b)\|\|b===Infinity\|\|b===-Infinity\|\|b===0)return b;var c=Math.floor(Math.abs(b));return b<0?-c:c}});q("Number.isNaN",function(a){return a?a:function(b){return typeof b==="number"&&isNaN(b)}});q("Array.prototype.values",function(a){return a?a:
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 69 6f 6e 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 61 28 61 29 7b 61 2e 48 3d 21 30 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 4b 61 3d 4a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 7d 29 2c 4c 61 3d 4a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 29 2c 4d 61 3d 4a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 7d 29 3b 76 61 72 20 4f 61 3d 74 79 70 65 6f 66 20 77 2e 42 69 67 49 6e 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 77 2e 42 69 67 49 6e 74 28 30 29 3d 3d 3d 22 62 69 67 69 6e 74 22 3b 66 75 6e 63 Data Ascii: ion"};function Ja(a){a.H=!0;return a};var Ka=Ja(function(a){return typeof a==="number"}),La=Ja(function(a){return typeof a==="string"}),Ma=Ja(function(a){return typeof a==="boolean"});var Oa=typeof w.BigInt==="function"&&typeof w.BigInt(0)==="bigint";func
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 7d 29 7d 2c 62 62 3d 47 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 5b 48 5d 26 3d 7e 62 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 21 3d 3d 76 6f 69 64 20 30 26 26 28 61 2e 6a 26 3d 7e 62 29 7d 2c 49 3d 47 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 48 5d 7c 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 7c 30 7d 2c 63 62 3d 47 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 48 5d 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 7d 2c 4a 3d 47 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 5b 48 5d 3d 62 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 6a 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: })},bb=G?function(a,b){a[H]&=~b}:function(a,b){a.j!==void 0&&(a.j&=~b)},I=G?function(a){return a[H]\|0}:function(a){return a.j\|0},cb=G?function(a){return a[H]}:function(a){return a.j},J=G?function(a,b){a[H]=b}:function(a,b){a.j!==void 0?a.j=b:Object.define
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 39 3f 21 30 3a 61 2e 6c 65 6e 67 74 68 3d 3d 3d 31 39 26 26 4e 75 6d 62 65 72 28 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 36 29 29 3c 39 32 32 33 33 37 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 62 28 61 29 7b 69 66 28 73 62 28 61 29 29 72 65 74 75 72 6e 20 61 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3c 31 36 29 57 61 28 4e 75 6d 62 65 72 28 61 29 29 3b 65 6c 73 65 20 69 66 28 49 61 28 29 29 61 3d 42 69 67 49 6e 74 28 61 29 2c 45 3d 4e 75 6d 62 65 72 28 61 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3e 3e 3e 30 2c 46 3d 4e 75 6d 62 65 72 28 61 3e 3e 42 69 67 49 6e 74 28 33 32 29 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3b 65 6c 73 65 7b 76 61 72 20 62 3d 2b 28 61 5b 30 5d 3d 3d 3d 22 2d 22 29 3b 46 3d 45 3d 30 3b 66 6f 72 28 76 61 Data Ascii: 9?!0:a.length===19&&Number(a.substring(0,6))<922337}function tb(a){if(sb(a))return a;if(a.length<16)Wa(Number(a));else if(Ia())a=BigInt(a),E=Number(a&BigInt(4294967295))>>>0,F=Number(a>>BigInt(32)&BigInt(4294967295));else{var b=+(a[0]==="-");F=E=0;for(va
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 3d 6e 75 6c 6c 26 26 62 2e 68 61 73 28 61 29 26 26 28 62 3d 61 2e 68 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 63 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d 31 26 26 69 62 28 64 29 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 65 29 29 7b 76 61 72 20 6b 3d 64 5b 65 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6b 29 26 26 46 62 28 6b 2c 61 29 7d 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 26 26 46 62 28 64 2c 61 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 62 28 29 7b 6e 62 28 29 7d 76 61 72 20 4d 3d 76 6f 69 64 20 30 3b 66 Data Ascii: =null&&b.has(a)&&(b=a.h))for(var c=0;c<b.length;c++){var d=b[c];if(c===b.length-1&&ib(d))for(var e in d){if(Object.prototype.hasOwnProperty.call(d,e)){var k=d[e];Array.isArray(k)&&Fb(k,a)}}else Array.isArray(d)&&Fb(d,a)}}function Ib(){nb()}var M=void 0;f
2024-09-30 13:16:59 UTC	1922	IN	Data Raw: 3b 62 72 65 61 6b 20 61 7d 7d 69 66 28 62 29 7b 62 3d 4d 61 74 68 2e 6d 61 78 28 62 2c 65 2d 28 2b 21 21 28 64 26 35 31 32 29 2d 31 29 29 3b 69 66 28 62 3e 31 30 32 34 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 73 70 76 74 22 29 3b 64 3d 64 26 2d 33 33 35 32 31 36 36 35 7c 28 62 26 31 30 32 33 29 3c 3c 0a 31 35 7d 7d 7d 4a 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 62 28 61 2c 62 2c 63 29 7b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 62 26 32 35 36 3f 61 5b 64 2d 31 5d 3a 76 6f 69 64 20 30 3b 64 2b 3d 65 3f 2d 31 3a 30 3b 66 6f 72 28 62 3d 62 26 35 31 32 3f 31 3a 30 3b 62 3c 64 3b 62 2b 2b 29 61 5b 62 5d 3d 63 28 61 5b Data Ascii: ;break a}}if(b){b=Math.max(b,e-(+!!(d&512)-1));if(b>1024)throw Error("spvt");d=d&-33521665\|(b&1023)<<15}}}J(a,d);return a};function Rb(a,b,c){a=Array.prototype.slice.call(a);var d=a.length,e=b&256?a[d-1]:void 0;d+=e?-1:0;for(b=b&512?1:0;b<d;b++)a[b]=c(a[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49875	142.250.185.174	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	842	OUT	GET /f/AGSKWxUwCuxFQSj1QkSnwRGA9Te0Ipr33f9TmT7sKEDr8iYNRg8fMx22-JPtMTqi0BTs5_V2Kd9XbQQnYYzMqzvxubl7A6f6RgaxBxetmqehYYo59LeT0vGrSd3Q5gu94Fgcoy1pukTfMQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI3NzAyMjE2LDgwNjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cubXVsdGl0cmFuLmNvbS9jL20uZXhlIixudWxsLFtbOCwiR0VoX0h2V3lkNlEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:59 UTC	1910	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:16:59 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-9Pbn1nf3VyZSbJGPxNPvbA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorGlobalRouterHttp/web-reports?context=eJzjKtDikmJw1ZBiOO90h-k6EEt8fcmkAcRO6TNYg4C49eY51qlAnPTvPGsRELtrXWT1B2JDhUusjiBcdInVE4hVey6xmgLx_XWXWJ8D8d6Pl1iPAvHS-5dZ1wJxkcQV1iYgFuLhOH3y1XY2gQ9z5r1nUtJIyi-MT87PKynKTCotyS9KS05LLU4tKkstijcyMDIxsDQy0zMwjS8wAACki0ZN" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:16:59 UTC	1910	IN	Data Raw: 32 38 33 36 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 63 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 5f 2e 75 Data Ascii: 2836if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var cp=function(a){if(!a)return null;a=_.u
2024-09-30 13:16:59 UTC	1910	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 29 29 26 26 5f 2e 75 66 28 61 2c 32 29 21 3d 6e 75 6c 6c 3f 5f 2e 4c 28 61 2c 32 29 3a 6e 75 6c 6c 29 26 26 0a 61 3d 3d 3d 31 26 26 5f 2e 50 6e 28 63 2c 31 30 2c 21 30 29 3b 62 28 63 29 7d 3b 76 61 72 20 74 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 3d 5b 5d 7d 3b 74 70 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 62 5d 2e 63 6f 6e 63 61 74 28 5f 2e 68 61 28 5f 2e 4a 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 29 7d 3b 74 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: .document))&&_.uf(a,2)!=null?_.L(a,2):null)&&a===1&&_.Pn(c,10,!0);b(c)};var tp=function(){this.i=[]};tp.prototype.addEventListener=function(a,b){this.i.push(function(){a.call.apply(a,[b].concat(_.ha(_.Jc.apply(0,arguments))))})};tp.prototype.g=function()
2024-09-30 13:16:59 UTC	1910	IN	Data Raw: 73 29 3b 67 70 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6a 2e 69 2e 70 75 73 68 28 62 29 3b 58 70 28 61 2e 6a 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 44 70 28 61 2c 31 29 3b 66 70 28 62 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 44 70 28 61 2c 30 29 3b 66 70 28 62 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 44 70 28 61 2c 32 29 7d 29 7d 3b 0a 76 61 72 20 5a 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 2e 6f 3b 62 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 Data Ascii: s);gp(b,function(){a.j.i.push(b);Xp(a.j,function(){Dp(a,1);fp(b)},function(){Dp(a,0);fp(b)})},function(){Dp(a,2)})};var Zp=function(a){var b=document.createElement("div");b.className=a.o;b.style.width="1px";b.style.height="1px";b.style.position="absolute
2024-09-30 13:16:59 UTC	1910	IN	Data Raw: 68 69 73 2e 69 29 3b 76 61 72 20 62 3d 21 30 7d 65 6c 73 65 20 62 3d 21 31 3b 65 6c 73 65 20 72 70 28 74 68 69 73 2e 69 29 2c 62 3d 21 30 3b 62 7c 7c 28 6b 71 28 74 68 69 73 29 2c 6e 71 28 74 68 69 73 2e 6f 2c 74 68 69 73 2e 6a 29 2c 6f 71 28 74 68 69 73 2c 61 29 29 7d 3b 76 61 72 20 6f 71 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 73 70 28 61 2e 44 2c 61 2e 41 2c 61 2e 43 2c 61 2e 42 29 3b 55 70 28 61 2e 75 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 73 74 61 72 74 28 65 2c 62 29 7d 29 3b 76 61 72 20 64 3d 6d 71 28 61 29 3b 54 70 28 61 2e 75 2c 64 2e 69 63 29 3b 64 2e 4b 63 28 29 7d 3b 76 61 72 20 70 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 7a 28 70 71 2c 5f 2e 49 29 3b Data Ascii: his.i);var b=!0}else b=!1;else rp(this.i),b=!0;b\|\|(kq(this),nq(this.o,this.j),oq(this,a))};var oq=function(a,b){var c=new sp(a.D,a.A,a.C,a.B);Up(a.u,function(e){c.start(e,b)});var d=mq(a);Tp(a.u,d.ic);d.Kc()};var pq=function(a){this.l=_.v(a)};_.z(pq,_.I);
2024-09-30 13:16:59 UTC	1910	IN	Data Raw: 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 33 2c 5c 78 32 32 57 31 73 69 61 48 52 30 63 48 4d 36 4c 79 39 6d 64 57 35 6b 61 57 35 6e 59 32 68 76 61 57 4e 6c 63 32 31 6c 63 33 4e 68 5a 32 56 7a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 69 58 53 78 62 49 6d 46 6b 58 32 4e 76 5a 47 55 67 63 32 6c 74 63 47 78 6c 59 57 52 7a 4c 57 6c 30 5a 57 30 67 62 33 5a 42 5a 46 4e 72 65 53 42 75 59 58 52 70 64 6d 56 42 5a 43 31 7a 63 47 39 75 63 32 39 79 4c 58 42 76 63 32 6c 30 61 57 39 75 49 47 46 6b 59 6d 78 76 59 32 73 74 61 47 56 68 5a 47 56 79 4d 53 49 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 5a 32 56 68 5a 44 49 75 5a 32 39 76 5a 32 78 6c Data Ascii: fcKernelManager.run('\x5b\x5b\x5b3,\x22W1siaHR0cHM6Ly9mdW5kaW5nY2hvaWNlc21lc3NhZ2VzLmdvb2dsZS5jb20iXSxbImFkX2NvZGUgc2ltcGxlYWRzLWl0ZW0gb3ZBZFNreSBuYXRpdmVBZC1zcG9uc29yLXBvc2l0aW9uIGFkYmxvY2staGVhZGVyMSIsW251bGwsbnVsbCxudWxsLCJodHRwczovL3BhZ2VhZDIuZ29vZ2xl
2024-09-30 13:16:59 UTC	752	IN	Data Raw: 77 4d 44 4e 6b 58 48 55 77 4d 44 4e 6b 49 6c 30 73 57 32 35 31 62 47 77 73 57 7a 64 64 58 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6a 45 32 4e 6a 67 7a 4f 47 52 6d 59 32 59 35 59 7a 41 34 4e 54 41 69 4c 47 35 31 62 47 77 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 4d 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 66 4c 30 4e 76 62 6e 52 79 61 57 4a 31 64 47 39 79 55 32 56 79 64 6d 6c 75 5a 31 64 6c 59 6c 4e 33 61 58 52 6a 61 47 4a 76 59 58 4a 6b 53 48 52 30 63 43 39 71 63 32 56 79 63 6d 39 79 49 6c 31 64 58 51 5c 5c 75 30 30 33 64 5c 5c 75 30 30 Data Ascii: wMDNkXHUwMDNkIl0sW251bGwsWzddXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsIjE2NjgzOGRmY2Y5YzA4NTAiLG51bGwsW251bGwsbnVsbCxudWxsLCJodHRwczovL2Z1bmRpbmdjaG9pY2VzbWVzc2FnZXMuZ29vZ2xlLmNvbS9fL0NvbnRyaWJ1dG9yU2VydmluZ1dlYlN3aXRjaGJvYXJkSHR0cC9qc2Vycm9yIl1dXQ\\u003d\\u00
2024-09-30 13:16:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49873	152.199.21.70	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	385	OUT	GET /instream/videoUtils-22e089ff-1721378485014.js HTTP/1.1 Host: cdn.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:59 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 6299840 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Mon, 30 Sep 2024 13:16:59 GMT Etag: W/"669a26af-dc9b1" Expires: Tue, 30 Sep 2025 13:16:59 GMT Last-Modified: Fri, 19 Jul 2024 08:41:19 GMT Server: ECAcc (lhc/7889) Vary: Accept-Encoding X-Cache: HIT x-client-device: desktop x-client-geo: US Content-Length: 903601 Connection: close
2024-09-30 13:16:59 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 69 64 65 6f 55 74 69 6c 73 2d 32 32 65 30 38 39 66 66 2d 31 37 32 31 33 37 38 34 38 35 30 31 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 39 35 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 69 28 38 34 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 31 29 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 72 2c 73 29 7b 69 66 28 69 29 65 28 69 29 3b 65 6c 73 65 20 69 66 28 72 2e 73 74 61 74 75 73 43 6f 64 65 3e 3d 34 30 30 26 26 72 2e 73 74 61 74 75 73 Data Ascii: /! For license information please see videoUtils-22e089ff-1721378485014.js.LICENSE.txt /(()=>{var e={495:(e,t,i)=>{"use strict";var n=i(840);e.exports=function(e,t){return void 0===t&&(t=!1),function(i,r,s){if(i)e(i);else if(r.statusCode>=400&&r.status
2024-09-30 13:17:00 UTC	16383	IN	Data Raw: 72 6e 20 74 2e 70 75 73 68 28 22 26 22 2c 65 2e 6e 6f 64 65 4e 61 6d 65 2c 22 3b 22 29 3b 64 65 66 61 75 6c 74 3a 74 2e 70 75 73 68 28 22 3f 3f 22 2c 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 3b 73 77 69 74 63 68 28 74 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 68 3a 28 6e 3d 74 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 31 29 29 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 65 3b 63 61 73 65 20 5f 3a 62 72 65 61 6b 3b 63 61 73 65 20 70 3a 69 3d 21 30 7d 69 66 28 6e 7c 7c 28 6e 3d 74 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 31 29 29 2c 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 65 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 6e 75 6c 6c 2c 69 29 66 6f 72 28 76 61 72 20 72 3d 74 2e 66 69 72 73 Data Ascii: rn t.push("&",e.nodeName,";");default:t.push("??",e.nodeName)}}function me(e,t,i){var n;switch(t.nodeType){case h:(n=t.cloneNode(!1)).ownerDocument=e;case _:break;case p:i=!0}if(n\|\|(n=t.cloneNode(!1)),n.ownerDocument=e,n.parentNode=null,i)for(var r=t.firs
2024-09-30 13:17:00 UTC	16383	IN	Data Raw: 90 22 2c 64 72 63 6f 72 6e 3a 22 e2 8c 9f 22 2c 64 72 63 72 6f 70 3a 22 e2 8c 8c 22 2c 44 73 63 72 3a 22 f0 9d 92 9f 22 2c 64 73 63 72 3a 22 f0 9d 92 b9 22 2c 44 53 63 79 3a 22 d0 85 22 2c 64 73 63 79 3a 22 d1 95 22 2c 64 73 6f 6c 3a 22 e2 a7 b6 22 2c 44 73 74 72 6f 6b 3a 22 c4 90 22 2c 64 73 74 72 6f 6b 3a 22 c4 91 22 2c 64 74 64 6f 74 3a 22 e2 8b b1 22 2c 64 74 72 69 3a 22 e2 96 bf 22 2c 64 74 72 69 66 3a 22 e2 96 be 22 2c 64 75 61 72 72 3a 22 e2 87 b5 22 2c 64 75 68 61 72 3a 22 e2 a5 af 22 2c 64 77 61 6e 67 6c 65 3a 22 e2 a6 a6 22 2c 44 5a 63 79 3a 22 d0 8f 22 2c 64 7a 63 79 3a 22 d1 9f 22 2c 64 7a 69 67 72 61 72 72 3a 22 e2 9f bf 22 2c 45 61 63 75 74 65 3a 22 c3 89 22 2c 65 61 63 75 74 65 3a 22 c3 a9 22 2c 65 61 73 74 65 72 3a 22 e2 a9 ae 22 2c 45 63 Data Ascii: ",drcorn:"",drcrop:"",Dscr:"",dscr:"",DScy:"",dscy:"",dsol:"",Dstrok:"",dstrok:"",dtdot:"",dtri:"",dtrif:"",duarr:"",duhar:"",dwangle:"",DZcy:"",dzcy:"",dzigrarr:"",Eacute:"",eacute:"",easter:"",Ec
2024-09-30 13:17:00 UTC	3	IN	Data Raw: 63 6e 45 Data Ascii: cnE
2024-09-30 13:17:00 UTC	16383	IN	Data Raw: 3a 22 e2 aa b6 22 2c 73 63 6e 73 69 6d 3a 22 e2 8b a9 22 2c 73 63 70 6f 6c 69 6e 74 3a 22 e2 a8 93 22 2c 73 63 73 69 6d 3a 22 e2 89 bf 22 2c 53 63 79 3a 22 d0 a1 22 2c 73 63 79 3a 22 d1 81 22 2c 73 64 6f 74 3a 22 e2 8b 85 22 2c 73 64 6f 74 62 3a 22 e2 8a a1 22 2c 73 64 6f 74 65 3a 22 e2 a9 a6 22 2c 73 65 61 72 68 6b 3a 22 e2 a4 a5 22 2c 73 65 41 72 72 3a 22 e2 87 98 22 2c 73 65 61 72 72 3a 22 e2 86 98 22 2c 73 65 61 72 72 6f 77 3a 22 e2 86 98 22 2c 73 65 63 74 3a 22 c2 a7 22 2c 73 65 6d 69 3a 22 3b 22 2c 73 65 73 77 61 72 3a 22 e2 a4 a9 22 2c 73 65 74 6d 69 6e 75 73 3a 22 e2 88 96 22 2c 73 65 74 6d 6e 3a 22 e2 88 96 22 2c 73 65 78 74 3a 22 e2 9c b6 22 2c 53 66 72 3a 22 f0 9d 94 96 22 2c 73 66 72 3a 22 f0 9d 94 b0 22 2c 73 66 72 6f 77 6e 3a 22 e2 8c a2 22 Data Ascii: :"",scnsim:"",scpolint:"",scsim:"",Scy:"",scy:"",sdot:"",sdotb:"",sdote:"",searhk:"",seArr:"",searr:"",searrow:"",sect:"",semi:";",seswar:"",setminus:"",setmn:"",sext:"",Sfr:"",sfr:"",sfrown:""
2024-09-30 13:17:00 UTC	16383	IN	Data Raw: 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 6d 75 74 65 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 5c 66 31 30 37 22 7d 2e 76 6a 73 2d 69 63 6f 6e 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 65 6e 74 65 72 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 69 64 65 6f 4a 53 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 76 6a 73 2d 69 63 6f 6e 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 65 6e 74 65 72 3a 62 65 66 6f 72 65 2c 2e 76 69 64 65 6f Data Ascii: ,.video-js .vjs-mute-control .vjs-icon-placeholder:before{content:"\\f107"}.vjs-icon-fullscreen-enter,.video-js .vjs-fullscreen-control .vjs-icon-placeholder{font-family:VideoJS;font-weight:normal;font-style:normal}.vjs-icon-fullscreen-enter:before,.video
2024-09-30 13:17:00 UTC	16383	IN	Data Raw: 6a 73 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 6d 6f 75 73 65 2d 64 69 73 70 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 76 6a 73 2d 6e 6f 2d 66 6c 65 78 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 6d 6f 75 73 65 2d 64 69 73 70 6c 61 79 7b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 20 2e 76 6a 73 2d 6d 6f 75 73 65 2d 64 69 73 70 6c 61 79 7b 64 69 73 70 6c Data Ascii: js .vjs-progress-control .vjs-mouse-display{display:none;position:absolute;width:1px;height:100%;background-color:#000;z-index:1}.vjs-no-flex .vjs-progress-control .vjs-mouse-display{z-index:0}.video-js .vjs-progress-control:hover .vjs-mouse-display{displ
2024-09-30 13:17:00 UTC	16383	IN	Data Raw: 76 6a 73 2d 74 72 61 63 6b 2d 73 65 74 74 69 6e 67 73 2d 63 6f 6e 74 72 6f 6c 73 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 34 33 2c 35 31 2c 36 33 2c 2e 37 35 29 7d 2e 76 6a 73 2d 74 72 61 63 6b 2d 73 65 74 74 69 6e 67 73 2d 63 6f 6e 74 72 6f 6c 73 20 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 2d 31 38 30 64 65 67 2c 20 23 66 66 66 20 38 38 25 2c 20 23 37 33 38 35 39 66 20 31 30 30 25 29 3b 63 6f 6c 6f 72 3a 23 32 62 33 33 33 66 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 2e 76 6a 73 2d 74 72 61 63 6b 2d 73 65 74 74 69 6e 67 Data Ascii: vjs-track-settings-controls button:hover{color:rgba(43,51,63,.75)}.vjs-track-settings-controls button{background-color:#fff;background-image:linear-gradient(-180deg, #fff 88%, #73859f 100%);color:#2b333f;cursor:pointer;border-radius:2px}.vjs-track-setting
2024-09-30 13:17:00 UTC	16383	IN	Data Raw: 76 69 64 65 6f 2d 6a 73 2e 6e 6f 74 2d 68 6f 76 65 72 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 2e 76 6a 73 2d 70 6c 61 79 69 6e 67 2e 76 6a 73 2d 75 73 65 72 2d 61 63 74 69 76 65 20 2e 76 6a 73 2d 62 61 63 6b 77 61 72 64 2d 73 6b 69 70 2d 63 6f 6e 74 72 6f 6c 2c 2e 76 69 64 65 6f 2d 6a 73 2e 6e 6f 74 2d 68 6f 76 65 72 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 2e 76 6a 73 2d 70 6c 61 79 69 6e 67 2e 76 6a 73 2d 75 73 65 72 2d 69 6e 61 63 74 69 76 65 20 2e 76 6a 73 2d 62 61 63 6b 77 61 72 64 2d 73 6b 69 70 2d 63 6f 6e 74 72 6f 6c 2c 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 2e 76 6a 73 2d 70 6c 61 79 69 6e 67 2e 76 6a 73 2d 75 73 65 72 2d 69 6e 61 63 74 69 76 65 20 2e 76 6a 73 2d 62 61 63 6b 77 61 72 64 2d 73 6b Data Ascii: video-js.not-hover.vjs-has-started.vjs-playing.vjs-user-active .vjs-backward-skip-control,.video-js.not-hover.vjs-has-started.vjs-playing.vjs-user-inactive .vjs-backward-skip-control,.video-js.vjs-has-started.vjs-playing.vjs-user-inactive .vjs-backward-sk
2024-09-30 13:17:00 UTC	5	IN	Data Raw: 41 41 2c 6b 42 Data Ascii: AA,kB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49878	91.228.74.166	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	939	OUT	GET /pixel;r=643403303;rf=0;a=p-54Nt-1NAaEEe0;url=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9;ns=0;ce=1;qjs=1;qv=fd657345-20240925114642;ref=;d=multitran.com;dst=1;et=1727702216830;tzo=240;ogl=title.Dictionary;ses=c8fd7b8a-05c5-4947-9572-57e12d1bdadf;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-219187005-1727702215188;pbc=;cm=undefined;gdpr=0;us_privacy=1---;gpp_sid=-1;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=66faa4ca-b24a8-e86ee-8a585
2024-09-30 13:16:59 UTC	454	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:16:59 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Attribution-Reporting-Register-Trigger: {"event_trigger_data":[{"filters":[],"trigger_data":"1"}]} Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-09-30 13:16:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49877	54.78.53.108	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	405	OUT	GET /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=31a817ca3356fa6382689ba223379509
2024-09-30 13:16:59 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 30 Sep 2024 13:16:59 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 484 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2024-09-30 13:16:59 UTC	484	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 6d 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 30 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/map</td></tr><tr><th>STATUS:</th><td>40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49879	142.250.185.78	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:16:59 UTC	857	OUT	POST /el/AGSKWxXnSE66mO87Xh0td5veDs0zBoJVxrZrwQN3xkDqvf0ujG6yW9x6L5GvSQ5ThReyKpeoE1An56R07N7XCAYumF9hZ5o4BiS7Ekb2ZNJg566-4CPrkZW75LhWaV--v90pu8dNVvs70g== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.multitran.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:16:59 UTC	155	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 37 37 30 32 32 31 38 35 37 38 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1727702218578,null,null,[[1,1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-09-30 13:17:00 UTC	1876	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:17:00 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-K7H3u2QRKcbMDn_XpE0S8g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmLw0ZBicEqfwRoCxO5aF1n9gXjvx0usR4F46f3LrGuBWIib48zJV9vZBG48bLVXcknKL4xPzs8rSc0r0U1MKdYFsYsyk0pL8otQ2KllIBU5-enpmXnp8UYGRiYGlkZmegbm8QUGAK2vLyk" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49881	142.250.184.238	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:00 UTC	623	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:00 UTC	2191	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Mon, 30 Sep 2024 13:17:00 GMT Date: Mon, 30 Sep 2024 13:17:00 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script' Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=e8TX874Mp4Q; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=F3dUgsHKV8o; Domain=.youtube.com; Expires=Sat, 29-Mar-2025 13:17:00 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUA%3D%3D; Domain=.youtube.com; Expires=Sat, 29-Mar-2025 13:17:00 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:17:00 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 62 30 35 35 37 63 65 33 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2024-09-30 13:17:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49880	212.102.56.178	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:00 UTC	602	OUT	GET /instream/content/reading/resoomer/hls/360p/main.m3u8 HTTP/1.1 Host: video.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:00 UTC	622	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:00 GMT Content-Type: application/vnd.apple.mpegurl Content-Length: 1969 Connection: close Last-Modified: Wed, 11 Jan 2023 07:26:22 GMT ETag: "63be649e-7b1" X-Robots-Tag: : noindex, nofollow X-77-NZT: EggB1GY4sQFBDAGckiEfAbeqNggA X-77-NZT-Ray: 1cb09c0ecefa05efcca4fa6618093614 X-Accel-Expires: @1728200738 X-Accel-Date: 1727163938 X-Accel-Date-Max: 1701243845 X-77-Cache: HIT X-77-Age: 538282 Vary: Accept-Encoding, Origin Server: CDN77-Turbo Access-Control-Allow-Origin: https://www.multitran.com X-Cache: MISS X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-30 13:17:00 UTC	1969	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 31 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 31 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 32 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 33 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 34 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 35 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-TARGETDURATION:4#EXT-X-MEDIA-SEQUENCE:1#EXT-X-PLAYLIST-TYPE:VOD#EXTINF:4.000,main_00001.ts#EXTINF:4.000,main_00002.ts#EXTINF:4.000,main_00003.ts#EXTINF:4.000,main_00004.ts#EXTINF:4.000,main_00005.ts#EXTINF:4.00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49883	169.150.255.181	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:00 UTC	384	OUT	GET /instream/content/reading/resoomer/hls.m3u8 HTTP/1.1 Host: video.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:00 UTC	555	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:00 GMT Content-Type: application/vnd.apple.mpegurl Content-Length: 779 Connection: close Last-Modified: Wed, 11 Jan 2023 07:26:22 GMT ETag: "63be649e-30b" X-Robots-Tag: : noindex, nofollow X-77-NZT: EggBqZb/swFBDAElE8I0AbdYJQAA X-77-NZT-Ray: f88df72ebd12c412cca4fa66eae09614 X-Accel-Expires: @1728729460 X-Accel-Date: 1727692660 X-Accel-Date-Max: 1704882773 X-77-Cache: HIT X-77-Age: 9560 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-30 13:17:00 UTC	779	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 49 4e 44 45 50 45 4e 44 45 4e 54 2d 53 45 47 4d 45 4e 54 53 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 22 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 67 22 2c 4e 41 4d 45 3d 22 45 6e 67 6c 69 73 68 22 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 55 52 49 3d 22 68 6c 73 2f 65 6e 67 2f 6d 61 69 6e 2e 6d 33 75 38 22 0a 23 45 58 54 2d 58 2d 53 54 52 45 41 4d 2d 49 4e 46 3a 42 41 4e 44 57 49 44 54 48 3d 37 31 35 33 32 38 2c 41 56 45 52 41 47 45 2d 42 41 4e 44 57 49 44 54 48 3d 34 33 39 32 39 30 2c 43 4f 44 45 43 53 3d 22 61 76 63 31 2e 36 34 30 30 31 65 2c Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-INDEPENDENT-SEGMENTS#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio",LANGUAGE="eng",NAME="English",AUTOSELECT=YES,DEFAULT=YES,URI="hls/eng/main.m3u8"#EXT-X-STREAM-INF:BANDWIDTH=715328,AVERAGE-BANDWIDTH=439290,CODECS="avc1.64001e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49889	3.233.146.93	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:00 UTC	715	OUT	POST /api/v2/logs?dd-api-key=450db60c9e5108400bd9a6539552f87a&ddsource=nodejs&service=instream HTTP/1.1 Host: http-intake.logs.datadoghq.com Connection: keep-alive Content-Length: 725 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:00 UTC	725	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 49 4e 53 54 52 45 41 4d 5f 41 50 5f 45 4e 47 49 4e 45 5f 49 4e 49 54 49 41 54 45 44 22 2c 22 64 61 74 61 22 3a 7b 22 70 76 69 64 22 3a 35 39 36 38 31 37 34 36 36 34 36 35 34 36 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 44 45 53 4b 54 4f 50 22 2c 22 73 69 74 65 49 64 22 3a 34 32 38 34 35 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 39 22 2c 22 72 65 71 75 65 73 74 4e 75 6d 62 65 72 22 3a 30 2c 22 68 65 61 72 74 42 65 61 74 43 6f 75 6e 74 65 72 22 3a 30 2c 22 61 64 50 6c 61 79 43 6f 75 6e 74 65 72 22 3a 30 2c 22 61 64 45 72 72 6f 72 43 6f 75 6e 74 65 72 22 3a 30 2c 22 62 61 63 6b 67 72 6f 75 6e 64 52 65 71 75 65 73 74 22 3a 66 61 6c 73 65 2c 22 69 73 50 6c 61 79 65 72 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 Data Ascii: {"event":"INSTREAM_AP_ENGINE_INITIATED","data":{"pvid":59681746646546,"platform":"DESKTOP","siteId":42845,"version":"3.0.9","requestNumber":0,"heartBeatCounter":0,"adPlayCounter":0,"adErrorCounter":0,"backgroundRequest":false,"isPlayerVisible":true,"count
2024-09-30 13:17:01 UTC	376	IN	HTTP/1.1 202 Accepted Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/json Content-Length: 2 Connection: close cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-09-30 13:17:01 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49890	3.233.146.93	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:00 UTC	715	OUT	POST /api/v2/logs?dd-api-key=450db60c9e5108400bd9a6539552f87a&ddsource=nodejs&service=instream HTTP/1.1 Host: http-intake.logs.datadoghq.com Connection: keep-alive Content-Length: 705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:00 UTC	705	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 49 4e 53 54 52 45 41 4d 5f 41 50 5f 50 4c 41 59 45 52 5f 49 4e 49 54 49 41 54 45 44 22 2c 22 64 61 74 61 22 3a 7b 22 70 76 69 64 22 3a 35 39 36 38 31 37 34 36 36 34 36 35 34 36 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 44 45 53 4b 54 4f 50 22 2c 22 73 69 74 65 49 64 22 3a 34 32 38 34 35 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 39 22 2c 22 72 65 71 75 65 73 74 4e 75 6d 62 65 72 22 3a 30 2c 22 68 65 61 72 74 42 65 61 74 43 6f 75 6e 74 65 72 22 3a 30 2c 22 61 64 50 6c 61 79 43 6f 75 6e 74 65 72 22 3a 30 2c 22 61 64 45 72 72 6f 72 43 6f 75 6e 74 65 72 22 3a 30 2c 22 62 61 63 6b 67 72 6f 75 6e 64 52 65 71 75 65 73 74 22 3a 66 61 6c 73 65 2c 22 69 73 50 6c 61 79 65 72 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 Data Ascii: {"event":"INSTREAM_AP_PLAYER_INITIATED","data":{"pvid":59681746646546,"platform":"DESKTOP","siteId":42845,"version":"3.0.9","requestNumber":0,"heartBeatCounter":0,"adPlayCounter":0,"adErrorCounter":0,"backgroundRequest":false,"isPlayerVisible":true,"count
2024-09-30 13:17:01 UTC	376	IN	HTTP/1.1 202 Accepted Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/json Content-Length: 2 Connection: close cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-09-30 13:17:01 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49888	3.233.146.93	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:00 UTC	715	OUT	POST /api/v2/logs?dd-api-key=450db60c9e5108400bd9a6539552f87a&ddsource=nodejs&service=instream HTTP/1.1 Host: http-intake.logs.datadoghq.com Connection: keep-alive Content-Length: 850 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:00 UTC	850	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 49 4e 53 54 52 45 41 4d 5f 41 50 5f 50 4c 41 59 45 52 5f 44 49 56 5f 4c 4f 41 44 45 44 22 2c 22 64 61 74 61 22 3a 7b 22 70 76 69 64 22 3a 35 39 36 38 31 37 34 36 36 34 36 35 34 36 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 44 45 53 4b 54 4f 50 22 2c 22 73 69 74 65 49 64 22 3a 34 32 38 34 35 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 39 22 2c 22 72 65 71 75 65 73 74 4e 75 6d 62 65 72 22 3a 30 2c 22 68 65 61 72 74 42 65 61 74 43 6f 75 6e 74 65 72 22 3a 30 2c 22 61 64 50 6c 61 79 43 6f 75 6e 74 65 72 22 3a 30 2c 22 61 64 45 72 72 6f 72 43 6f 75 6e 74 65 72 22 3a 30 2c 22 62 61 63 6b 67 72 6f 75 6e 64 52 65 71 75 65 73 74 22 3a 66 61 6c 73 65 2c 22 69 73 50 6c 61 79 65 72 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 63 6f 75 6e Data Ascii: {"event":"INSTREAM_AP_PLAYER_DIV_LOADED","data":{"pvid":59681746646546,"platform":"DESKTOP","siteId":42845,"version":"3.0.9","requestNumber":0,"heartBeatCounter":0,"adPlayCounter":0,"adErrorCounter":0,"backgroundRequest":false,"isPlayerVisible":true,"coun
2024-09-30 13:17:01 UTC	376	IN	HTTP/1.1 202 Accepted Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/json Content-Length: 2 Connection: close cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-09-30 13:17:01 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49885	142.250.185.78	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:00 UTC	878	OUT	GET /f/AGSKWxXFqCEi660SmhLNDaznrmn_K_vf3ONLw-fZWG54w-GaF18Z8jQFmo6T4kVsQFLz9WT8MBQNhBbwdhU87czheYwaeyGr5z9gR03SEhZ4I42iFg_m5Nctp5ISCm9gs4u1hNFuwdODyqLfkPPzw1O5lcMP0sCcg-al3X-3Pb0VnwUc-AIsfNovOoVDT7E7/_/websie-ads3./cgi/ad_/ad/empty./site_ads.-panel-ad. HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1886	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:17:01 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-bPssCv3E3XXDKEv6rXqsfQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorGlobalRouterHttp/web-reports?context=eJzjKtDikmLw05BiOO90h-k6EEt8fcmkBsRO6TNYA4C49eY51slAnPTvPGsBELtrXWT1B2JDhUus9kDsWHSJ1ROIVXsusRoD8f11l1ifA_Hej5dYjwLx0vuXWdcCcZHEFdYGIBbi5jh78tV2NoEFK34HK2kk5RfGJ-fnlRRlJpWW5BelJaelFqcWlaUWxRsZGJkYWBqZ6RmYxhcYAABVfEXE" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:17:01 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 39 61 66 36 37 33 61 30 2d 30 37 34 66 2d 34 35 62 33 2d 62 30 61 38 2d 38 32 30 34 30 36 66 31 34 31 62 61 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['9af673a0-074f-45b3-b0a8-820406f141ba'] = true;
2024-09-30 13:17:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49894	169.150.255.181	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	394	OUT	GET /instream/content/reading/resoomer/hls/360p/main.m3u8 HTTP/1.1 Host: video.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	558	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/vnd.apple.mpegurl Content-Length: 1969 Connection: close Last-Modified: Wed, 11 Jan 2023 07:26:22 GMT ETag: "63be649e-7b1" X-Robots-Tag: : noindex, nofollow X-77-NZT: EggBqZb/swFBDAGckiEfAberNggA X-77-NZT-Ray: f88df72eac023a3ecda4fa66a7c1f510 X-Accel-Expires: @1728200738 X-Accel-Date: 1727163938 X-Accel-Date-Max: 1701243845 X-77-Cache: HIT X-77-Age: 538283 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-30 13:17:01 UTC	1969	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 31 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 31 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 32 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 33 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 34 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 30 2c 0a 6d 61 69 6e 5f 30 30 30 30 35 2e 74 73 0a 23 45 58 54 49 4e 46 3a 34 2e 30 30 Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-TARGETDURATION:4#EXT-X-MEDIA-SEQUENCE:1#EXT-X-PLAYLIST-TYPE:VOD#EXTINF:4.000,main_00001.ts#EXTINF:4.000,main_00002.ts#EXTINF:4.000,main_00003.ts#EXTINF:4.000,main_00004.ts#EXTINF:4.000,main_00005.ts#EXTINF:4.00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49892	212.102.56.178	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	601	OUT	GET /instream/content/reading/resoomer/hls/eng/main.m3u8 HTTP/1.1 Host: video.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	621	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/vnd.apple.mpegurl Content-Length: 2033 Connection: close Last-Modified: Wed, 11 Jan 2023 07:26:23 GMT ETag: "63be649f-7f1" X-Robots-Tag: : noindex, nofollow X-77-NZT: EggB1GY4sQFBDAHDta8GAbcehAEA X-77-NZT-Ray: 1cb09c0e63f12b1ccda4fa66c696aa10 X-Accel-Expires: @1728639663 X-Accel-Date: 1727602863 X-Accel-Date-Max: 1726566053 X-77-Cache: HIT X-77-Age: 99358 Vary: Accept-Encoding, Origin Server: CDN77-Turbo Access-Control-Allow-Origin: https://www.multitran.com X-Cache: MISS X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-30 13:17:01 UTC	2033	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 35 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 31 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 49 4e 46 3a 34 2e 30 35 33 2c 0a 6d 61 69 6e 5f 30 30 30 30 31 2e 61 61 63 0a 23 45 58 54 49 4e 46 3a 33 2e 39 38 39 2c 0a 6d 61 69 6e 5f 30 30 30 30 32 2e 61 61 63 0a 23 45 58 54 49 4e 46 3a 34 2e 30 31 31 2c 0a 6d 61 69 6e 5f 30 30 30 30 33 2e 61 61 63 0a 23 45 58 54 49 4e 46 3a 33 2e 39 38 39 2c 0a 6d 61 69 6e 5f 30 30 30 30 34 2e 61 61 63 0a 23 45 58 54 49 4e 46 3a 34 2e 30 31 31 2c 0a 6d 61 69 6e 5f 30 30 30 30 35 2e 61 61 63 0a 23 45 58 54 49 4e 46 Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-TARGETDURATION:5#EXT-X-MEDIA-SEQUENCE:1#EXT-X-PLAYLIST-TYPE:VOD#EXTINF:4.053,main_00001.aac#EXTINF:3.989,main_00002.aac#EXTINF:4.011,main_00003.aac#EXTINF:3.989,main_00004.aac#EXTINF:4.011,main_00005.aac#EXTINF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49893	212.102.56.178	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	606	OUT	GET /instream/content/reading/resoomer/hls/360p/main_00001.ts HTTP/1.1 Host: video.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	608	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: video/mp2t Content-Length: 257372 Connection: close Last-Modified: Wed, 11 Jan 2023 07:26:22 GMT ETag: "63be649e-3ed5c" X-Robots-Tag: : noindex, nofollow X-77-NZT: EgwB1GY4sQH3jIMBAAwBisclxAH3oBIIAA X-77-NZT-Ray: 1cb09c0ebd09f01ccda4fa661b9ab511 X-Accel-Expires: @1728639657 X-Accel-Date: 1727603009 X-77-Cache: HIT X-77-Age: 99212 Server: CDN77-Turbo Access-Control-Allow-Origin: https://www.multitran.com Vary: Origin X-Accel-Date-Max: 1722000210 X-Cache: HIT X-Age: 99212 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-30 13:17:01 UTC	15776	IN	Data Raw: 47 40 00 10 00 00 b0 0d 00 01 c1 00 00 00 01 e1 e0 2d 50 78 04 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 47 41 e0 10 00 02 b0 22 00 01 c1 00 00 e1 e1 f0 05 0e 03 c0 04 78 1b e1 e1 f0 0b 28 04 64 00 1e 3f 0e 03 c0 04 78 64 00 d9 68 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: G@-PxGA"x(d?xdh
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: ca c1 41 e7 47 89 ad 8d c4 06 fb 5d 64 8b 04 b1 47 01 e1 13 e5 8b 6e fb 07 c1 40 ed 69 0c 59 f8 dc b0 56 4a 95 c8 c6 49 ad 25 a0 57 56 76 db 9a 14 08 6e 94 65 87 d7 8d b1 7d ff f0 5c 51 6d 79 4b 13 01 cc 82 54 a6 07 aa 86 69 36 0e 3e 45 99 2e 15 ae 8c a1 c3 84 ef d3 51 52 b6 7c 52 c7 f4 a9 81 4d 81 45 a0 a9 f9 b6 82 ee 7b 4c 6b 47 ae b8 30 a1 d4 39 02 83 fc fd 5b 2e af bf 32 4d 59 6e be 95 1d f6 a7 1a fe ff 74 f4 99 6a 29 21 40 dd b4 ef c9 77 0b f5 f2 48 6d 1e f5 81 82 70 6a 1f e2 24 f0 87 dd 21 a4 ae bd 21 6d 21 23 d9 f1 41 69 de a9 ab 65 53 35 db d2 2a a6 09 42 84 7b ab 4b 04 09 bb e7 6d 1c e6 89 8d 9f 47 01 e1 14 9a 40 5b 37 19 ee 7e 3f 9a 92 5d c3 39 b3 b4 2b 72 b3 98 0c ae c5 6b 05 a9 5d 61 4f 6e 3e 24 e3 02 58 e0 0d bd 39 3b b3 64 ee 9e 78 64 9a 91 Data Ascii: AG]dGn@iYVJI%WVvne}\QmyKTi6>E.QR\|RME{LkG09[.2MYntj)!@wHmpj$!!m!#AieS5*B{KmG@[7~?]9+rk]aOn>$X9;dxd
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: 85 92 0d 61 33 9a aa 87 5f 5f fd 53 d2 a7 ff 3e b2 d9 83 ee 2d 3b bc f0 0b 00 87 52 29 37 10 ca 61 1f 88 4d c7 20 b0 1d d8 dd 7b cb 17 ea 3d 19 21 af 4a a4 a7 fb 94 5d 4c 40 eb 9e 83 86 3c e0 1f 99 0d a0 59 e4 5a 0b e5 b9 82 7a 6d 60 9a c5 95 1a ed d1 b7 e1 d0 d8 a8 75 3e fb bd af 7a 79 a7 98 18 d7 00 c1 a4 68 ff a4 25 0e ba f0 a3 d3 2f 51 c3 dc fa 91 01 a9 40 3f 7d 4b 67 8a 1d dd 6e 15 ca b8 32 18 e0 95 28 62 b7 3b 6e 8b bb b3 d2 66 bc 0f 0b 82 44 57 19 b0 ec b7 8d e7 41 b4 7e f0 c1 c8 c3 ed c4 85 ca d4 a6 ef e8 a8 09 ed 47 01 e1 1b 94 c8 1b 4f 1f 47 6f a2 d1 f6 1b c3 87 1d 27 98 07 b9 37 df 4c 68 35 80 0e 25 2a 12 a4 8c 56 32 58 4b a8 49 3e d5 ac 29 2b ae 40 25 c1 1a 6f 22 d8 0f 45 dc 3b 16 86 48 2d 47 53 a1 d4 17 b9 a4 59 c4 be 8f 01 a0 9a 87 ff e0 54 Data Ascii: a3__S>-;R)7aM {=!J]L@<YZzm`u>zyh%/Q@?}Kgn2(b;nfDWA~GOGo'7Lh5%*V2XKI>)+@%o"E;H-GSYT
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: 01 06 01 07 00 00 24 00 00 04 04 80 00 00 00 01 21 9e 52 4e a2 10 ff b6 88 2e 1b 08 fc 1e 1d 19 7b bb 38 57 f3 f8 74 5e 8d 4b 65 5f 05 fc 66 95 0a 10 da a5 5f 41 40 5b 1c 2f 87 d4 f9 ea 5d 48 02 d8 70 0f b9 a4 26 68 63 26 e9 4e 7d 5a cc 94 8d 05 8b 81 b4 2a 93 a3 5e e4 20 df 59 e5 09 39 1b 8e 78 fe fd 36 dd de 8c 92 13 25 5e c8 da 9e e0 8b 55 27 29 06 75 db 5e 1e 6f 16 1e a9 56 42 f9 7a 3c 79 a9 33 d4 22 78 fc a8 fb c8 a9 0a fa bd da 8a 90 47 01 e1 12 d3 de 35 80 3a e8 4f f5 99 13 e3 d8 fb 53 60 b8 17 bd 14 de 36 34 d7 86 01 ca 0c b7 28 05 45 e1 49 12 c4 41 a3 25 4d 25 70 e6 42 82 36 49 b7 81 11 df 96 3b 00 68 c6 20 cd b6 67 4d 5a 41 59 77 eb 07 4e 95 ce 41 a1 77 78 b0 6d 83 08 09 65 02 a0 82 f2 cd 9f 6b 21 d1 b3 8d 4e b1 4c dd 8c b3 f1 77 9d 79 fd be 42 Data Ascii: $!RN.{8Wt^Ke_f_A@[/]Hp&hc&N}Z*^ Y9x6%^U')u^oVBz<y3"xG5:OS`64(EIA%M%pB6I;h gMZAYwNAwxmek!NLwyB
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: 9f 05 da 5e 24 42 a6 1d 6e 2b d1 1e 1c 9d 9c 8a 7e 34 8b e7 0a 11 f4 23 06 10 82 d6 3d b6 b6 8e 32 51 7e 2f 5b b9 ef 72 73 8a ce 29 22 a3 95 75 33 e2 5e 42 31 f2 2f 72 51 e7 10 f9 22 e4 44 c8 11 9d 4c 5c f2 48 57 68 ea 72 a2 c3 8b b5 c5 28 6e d4 69 96 1c 47 67 4b 39 43 65 36 9e 8c b5 83 a4 1d 7c e9 07 0e 1d 9e 66 32 75 09 b2 44 c1 44 3d 14 fb 6f 79 9e bc c5 47 01 e1 19 75 2a 85 a7 e1 75 65 1a d8 a8 fa 75 c5 9e ab e9 e5 2b 87 25 31 5d 36 bd 05 11 90 08 d4 05 42 38 be 4c dd 8a 69 ba 95 0b 8a 04 ce e7 ca 2f f5 bf fe b0 cf e6 af e2 59 68 45 d9 9f dd b5 ad fc 1d 2d 07 83 47 05 8f 54 d7 74 f8 ad 99 9c 15 b9 a7 00 40 2d d5 32 84 8d 5d 9b a5 96 3d 4d d9 91 03 10 9a cf db fc 0f 59 c7 ec 7d a9 fa a3 3d 62 10 8b 60 40 51 4b c7 32 fa 5f e5 f6 f9 3c 2f 4a c0 40 8d a0 Data Ascii: ^$Bn+~4#=2Q~/[rs)"u3^B1/rQ"DL\HWhr(niGgK9Ce6\|f2uDD=oyGu*ueu+%1]6B8Li/YhE-GTt@-2]=MY}=b`@QK2_</J@
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: 0a 6d ed 46 8e e9 e7 41 bb 3e 71 7c 88 71 bb 44 51 96 87 09 c1 f3 06 0f 6c d0 b7 43 5c dc b2 42 88 ed f7 a3 20 1c 31 b9 a3 88 cd f3 e4 15 10 24 88 e9 2c 5d 4a 82 b7 e1 72 c2 90 b8 bf bc ee 1b a9 f3 ed d9 a0 9f 07 34 ca 57 79 bf d4 a6 16 fe 27 cd 7e b3 36 10 28 4c f6 46 08 53 47 01 e1 10 45 dd 16 cf 51 44 70 35 99 df 05 26 b5 22 03 0f a9 ed e8 aa 87 04 40 9e 25 bd 2b e8 2c eb ca 0a 4b 76 ae 3e 04 d2 d5 87 ad 60 3c 0f a4 2b a6 3d 8e ea 08 40 2e 5c 18 c5 1e 48 67 7a d5 23 1f 11 66 22 d7 6b 6f 37 26 a5 5a 02 85 d9 37 f7 69 ad 4b f3 55 a9 81 dd 1c 19 7d c9 c6 42 30 38 b3 b7 78 da 14 6f 67 49 cd fd 75 42 6a 9e ad 8f cc f2 38 94 75 92 8d d1 42 83 de 76 9e df da 1a 8e a0 66 df a3 4c 68 5e 65 ec f0 22 f2 8d 36 fa 79 80 24 a4 31 82 19 57 26 a4 06 bc 6a 47 f2 ac e8 Data Ascii: mFA>q\|qDQlC\B 1$,]Jr4Wy'~6(LFSGEQDp5&"@%+,Kv>`<+=@.\Hgz#f"ko7&Z7iKU}B08xogIuBj8uBvfLh^e"6y$1W&jG
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: 3e 9c 15 47 97 30 cb b3 a1 05 fa 3e 69 07 97 da b5 9b 83 e2 bb 88 88 3c cb 2c e0 a9 ce 30 82 09 fa 88 84 fa 9b 5f 55 2d d4 11 7e 29 84 f1 80 67 a4 8e 2c 1d 4b 18 bd 1d 5b b3 e1 f8 68 92 32 81 47 01 e1 17 bc eb ff d2 c7 24 3f f8 a5 37 fd f1 6c bf 4d d1 27 43 de de e9 68 b0 e1 7f 1f f3 f4 3b a4 2f 7c bc 8e d2 08 f2 f5 05 b4 c6 b5 18 6d d8 4d 7e c6 0d 3a 77 d9 76 e1 38 d6 08 55 b5 ab 0b ad 2f 5d 39 bd cb ad 5f 16 3d 84 b5 67 4c f7 81 4b 79 16 e0 43 bc 06 50 32 8f 7c 52 6e 90 36 30 30 4a 99 70 c1 fd 66 c9 60 d6 bb c9 c7 70 8b 0e 15 5f e5 66 00 e2 67 5b 1c f7 fd 3d f1 48 50 8b d6 10 eb 94 55 3f 5e aa 15 69 db 6d 25 a6 df d4 9e 3c e3 7f 89 c5 29 2a ec f2 6a ff 8a 1b 30 3c c2 63 2c 7c a7 86 e9 27 68 8a 11 b2 40 17 00 84 de 3e e8 a9 66 18 5e c9 5e e6 cb 47 01 e1 Data Ascii: >G0>i<,0_U-~)g,K[h2G$?7lM'Ch;/\|mM~:wv8U/]9_=gLKyCP2\|Rn600Jpf`p_fg[=HPU?^im%<)*j0<c,\|'h@>f^^G
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: 8e 5b 0b a3 90 65 87 03 8d af cf 83 24 54 55 53 f8 db 50 7b ee 05 54 98 0c ac 80 42 49 3a 77 20 e5 99 1b 5b 47 01 e1 1e 70 c5 b0 fa cf 8d 06 fd 0e dd f6 ae a4 56 de d5 7f c0 1c 72 a1 ff e7 fe 25 a6 21 ab f6 36 08 77 49 66 97 01 a2 9c 05 57 4e e7 b6 5e bb 12 36 bf e8 b3 23 54 2c 0b 27 bd 99 76 82 57 27 37 d7 94 db 8b d4 ac 7b 6e f3 2f 43 bc bc 68 f1 f4 2a 3c b4 6a 2c 56 ac 6b d6 1b 2b 67 82 c7 94 ea f8 73 8e 35 81 58 a7 0e 0a 66 93 55 26 84 cc 83 c9 75 da 78 6b b7 ac 4e bd cd 29 06 a1 3a f3 77 38 06 de f2 56 f8 cc ff e8 ab c4 df 0d be 2d 6d a7 db a2 29 81 66 f1 9b 42 d3 03 80 6a a2 a7 ae 55 d6 99 47 f2 78 83 6e 90 ec 51 e2 6f 8f 88 c2 df 39 30 fc 16 dd a5 78 9d 70 47 01 e1 1f 60 3a 32 1a 6d c9 18 2f ab e5 69 77 de 47 06 43 04 b6 a2 2a ae eb 31 e4 2b 2c 09 Data Ascii: [e$TUSP{TBI:w [GpVr%!6wIfWN^6#T,'vW'7{n/Ch<j,Vk+gs5XfU&uxkN):w8V-m)fBjUGxnQo90xpG`:2m/iwGC1+,
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: fd 4e 53 91 27 35 e7 51 47 01 e1 15 c9 db ad f2 49 6d 75 a0 56 55 db 67 79 45 a2 7c 04 51 d5 a1 21 ed 8d 89 db ca 74 cb 1a 03 1a e1 be 9e 00 83 4c 18 05 41 c3 32 c7 2d b9 87 b1 28 74 13 8e c8 3d 21 d8 bd 42 3f 37 3b c8 c7 cb 14 7c 4e d1 e0 e0 06 e9 58 b6 81 44 82 a9 3f e0 9b e0 50 e6 c4 9b d1 4d d4 e4 c4 84 d8 3a 76 81 07 52 2b a8 15 1c f9 b1 25 90 da 70 8f d1 f2 dd 63 d2 a1 ee 3e e0 38 e4 bb d8 64 4e 53 d6 b8 ca 98 10 ec 0a 85 5b c7 52 d4 d7 21 d8 48 9a 13 a8 70 91 a6 d0 b2 aa 1c b6 52 4c 34 3a a0 d1 dc eb 7c 7d 45 b0 44 c5 ae b6 a3 1b 7d cd a2 71 18 f5 03 73 63 64 dd da be 6b 55 47 01 e1 16 3c 4c 92 43 a0 2e 7c 05 c0 ba e0 b0 62 94 16 24 ee 5f 3a 6f 56 a7 73 0a 15 7a 2c 15 b1 01 05 3c 13 08 d8 79 c6 e0 39 6c ce e6 84 2c cb ac 4a e8 36 5e 84 c2 9f b0 60 Data Ascii: NS'5QGImuVUgyE\|Q!tLA2-(t=!B?7;\|NXD?PM:vR+%pc>8dNS[R!HpRL4:\|}ED}qscdkUG<LC.\|b$_:oVsz,<y9l,J6^`
2024-09-30 13:17:01 UTC	16384	IN	Data Raw: 59 60 e6 1f 4d 9d eb 30 36 fa 5a 63 f1 08 cb 45 d2 88 b4 0c db 3a f2 2f 3e 84 b2 de db 75 46 81 c1 81 57 2c 77 6e 87 5c 38 ef cf 58 17 d0 8c 8a 0e 13 d8 3e 16 06 cf c9 b3 be f9 1d 12 e3 3e 17 a9 f1 cc f3 84 d3 6a ce 3e ef 3b 5d 5e 54 1b ef 8a 29 79 46 a6 04 5b c1 b4 1c 96 75 0d 1e 1f ba cf b9 b8 a9 64 f5 3f 19 97 b3 5a 08 4c 76 5f 2d 1d c6 1b 1f db 56 22 fb 86 83 2f fa 05 50 d1 bb bf 3a 78 e5 15 07 ec 4c c3 87 3e 24 d6 22 81 86 a9 85 2d b7 6b 3f 2c e2 f9 6e bb b6 98 99 55 b4 0b 52 83 db ca 82 fc 1e 47 01 e1 1d f5 fb fc fa e4 f1 e3 7f cd f1 87 f3 55 ef 64 ea 47 5c 81 7b 79 79 a5 f1 d4 1b a3 89 b9 7d 33 ef 48 5a 50 db 84 29 1a c4 82 91 dc 8a 69 f3 ce e8 78 b0 1e 5a 48 c2 a4 f5 92 07 ec 68 fb 00 d7 48 93 ab d5 69 e4 5b e0 f7 82 bf 60 1f be 7b 0b 8e 52 54 62 Data Ascii: Y`M06ZcE:/>uFW,wn\8X>>j>;]^T)yF[ud?ZLv_-V"/P:xL>$"-k?,nURGUdG\{yy}3HZP)ixZHhHi[`{RTb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49895	142.250.186.142	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	446	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	2571	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Mon, 30 Sep 2024 13:17:01 GMT Date: Mon, 30 Sep 2024 13:17:01 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Content-Security-Policy: require-trusted-types-for 'script' Content-Security-Policy-Report-Only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';report-uri /cspreport/common;script-src 'report-sample' 'nonce-Vu4nk9t3Dongf04_jKBTxA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=G_2w7bimYuM; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=IzsdMiESEPc; Domain=.youtube.com; Expires=Sat, 29-Mar-2025 13:17:01 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgRQ%3D%3D; Domain=.youtube.com; Expires=Sat, 29-Mar-2025 13:17:01 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:17:01 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 62 30 35 35 37 63 65 33 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2024-09-30 13:17:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49902	172.64.151.101	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	622	OUT	POST /openrtb/pbjs?s=702064 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1438 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1438	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 30 63 30 62 30 32 36 36 61 31 37 33 38 65 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 45 35 25 45 34 25 45 45 25 45 32 25 45 30 25 46 32 25 45 35 25 45 42 25 46 43 25 46 31 25 45 41 25 45 38 25 45 39 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 4d 75 6c 74 69 74 72 61 6e 2c 64 69 63 74 69 6f 6e 61 72 79 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 Data Ascii: {"id":"10c0b0266a1738e","site":{"page":"https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9","domain":"multitran.com","keywords":"Multitran,dictionary,translation","publisher":{"domain"
2024-09-30 13:17:01 UTC	875	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 8cb47da4d90ac32a-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.multitran.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Tue, 30 Sep 2025 13:17:01 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sTd%2Fg9o2vkbNy%2BXziwJE6D1E8OjKYzf3xcv1rjg07StK3TDSoAlKeS%2F2b7RdrXEWWY%2B%2F4TZwd6%2BkF%2FSLKa44ven1wh63cx%2Fq7B%2B63pWZg5gJYWzBucDqUjYJSg%2F8PPcyDvJnzHnt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-09-30 13:17:01 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 31 30 63 30 62 30 32 36 36 61 31 37 33 38 65 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"10c0b0266a1738e","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49901	172.64.151.101	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	622	OUT	POST /openrtb/pbjs?s=702064 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1520 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1520	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 30 63 30 62 30 32 36 36 61 31 37 33 38 65 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 45 35 25 45 34 25 45 45 25 45 32 25 45 30 25 46 32 25 45 35 25 45 42 25 46 43 25 46 31 25 45 41 25 45 38 25 45 39 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 4d 75 6c 74 69 74 72 61 6e 2c 64 69 63 74 69 6f 6e 61 72 79 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 Data Ascii: {"id":"10c0b0266a1738e","site":{"page":"https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9","domain":"multitran.com","keywords":"Multitran,dictionary,translation","publisher":{"domain"
2024-09-30 13:17:01 UTC	877	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 8cb47da4ef845e60-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.multitran.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Tue, 30 Sep 2025 13:17:01 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2FWxCCYTc%2FnohD1p7Kpzw7cJ6%2FVR3W%2FBeqa%2Bcantg%2BxvndiiO4i85rYdHMtATgc7Ug3O5e7ETvAn2%2BFimatgDMxvqJNPvDQrqW8AibhJGp9gqH%2FRGkRZtJp%2BK%2FUZwM6U%2Bmb0wjTn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-09-30 13:17:01 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 31 30 63 30 62 30 32 36 36 61 31 37 33 38 65 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"10c0b0266a1738e","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49903	172.64.151.101	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	622	OUT	POST /openrtb/pbjs?s=702064 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1577 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1577	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 30 63 30 62 30 32 36 36 61 31 37 33 38 65 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 45 35 25 45 34 25 45 45 25 45 32 25 45 30 25 46 32 25 45 35 25 45 42 25 46 43 25 46 31 25 45 41 25 45 38 25 45 39 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 4d 75 6c 74 69 74 72 61 6e 2c 64 69 63 74 69 6f 6e 61 72 79 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 Data Ascii: {"id":"10c0b0266a1738e","site":{"page":"https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9","domain":"multitran.com","keywords":"Multitran,dictionary,translation","publisher":{"domain"
2024-09-30 13:17:01 UTC	863	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 8cb47da4ef678c54-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.multitran.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Tue, 30 Sep 2025 13:17:01 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BB440DtTJSUhnCX4780dCjN%2FST9vxi6cY0MXu67plS8iyMVnzLeOHlN3ML3AsQUvU6YywbefhC8A4fNfnU8r%2FudzjHh3pQM1FCiLVQaLiwjILiN6kgWPhQ%2BUSjDF%2FMyJWZBOPgPr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-09-30 13:17:01 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 31 30 63 30 62 30 32 36 36 61 31 37 33 38 65 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"10c0b0266a1738e","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49909	104.18.41.106	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	513	OUT	OPTIONS /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.multitran.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	732	IN	HTTP/1.1 204 No Content Date: Mon, 30 Sep 2024 13:17:01 GMT Connection: close vary: Origin, Access-Control-Request-Headers access-control-allow-origin: https://www.multitran.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: content-type access-control-max-age: 86400 set-cookie: LW_SERVER=lw20; path=/ CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=eH0aT9oEoTCTQ_2Az4pdb_VRp5sNAzEPEdIaBKciyrk-1727702221-1.0.1.1-dVUj4LEpILA8KctrBp4wL7BtxTGPM1SemlNslVM5rFAPKSN3A0aW5SYDixvd4Q49RqZ4_O3vIEhXYskKr5PGHg; path=/; expires=Mon, 30-Sep-24 13:47:01 GMT; domain=.ingage.tech; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb47da51bab42db-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49910	104.22.31.209	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	602	OUT	POST / HTTP/1.1 Host: prebid.smilewanted.com Connection: keep-alive Content-Length: 763 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	763	OUT	Data Raw: 7b 22 7a 6f 6e 65 49 64 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 5f 68 62 5f 64 69 73 70 6c 61 79 22 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 55 53 44 22 2c 22 74 61 67 49 64 22 3a 22 41 44 50 5f 34 32 38 34 35 5f 37 32 38 78 39 30 5f 30 30 30 30 30 30 30 31 2d 30 34 63 36 62 33 63 37 2d 65 38 62 33 2d 34 65 38 31 2d 39 38 63 31 2d 34 66 39 36 38 65 33 32 36 34 32 30 22 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 39 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 37 35 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 35 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 33 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 30 30 2c 22 68 22 3a Data Ascii: {"zoneId":"multitran.com_hb_display","currencyCode":"USD","tagId":"ADP_42845_728x90_00000001-04c6b3c7-e8b3-4e81-98c1-4f968e326420","sizes":[{"w":728,"h":90},{"w":690,"h":90},{"w":675,"h":90},{"w":670,"h":90},{"w":650,"h":90},{"w":630,"h":90},{"w":600,"h":
2024-09-30 13:17:01 UTC	537	IN	HTTP/1.1 204 No Content Date: Mon, 30 Sep 2024 13:17:01 GMT Connection: close Cache-Control: private, must-revalidate pragma: no-cache expires: -1 Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cb47da57c4ede92-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49913	151.101.129.229	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	625	OUT	GET /gh/prebid/currency-file@1/latest.json?date=20240930 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	752	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1594 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/json; charset=utf-8 X-JSD-Version: 1.0.2194 X-JSD-Version-Type: version ETag: W/"63a-YvuTSCsR5uWD6oFfjKADQOzzePs" Accept-Ranges: bytes Age: 33366 Date: Mon, 30 Sep 2024 13:17:01 GMT X-Served-By: cache-fra-eddf8230103-FRA, cache-ewr-kewr1740052-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-30 13:17:01 UTC	1378	IN	Data Raw: 7b 22 64 61 74 61 41 73 4f 66 22 3a 22 32 30 32 34 2d 30 39 2d 32 37 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 2c 22 67 65 6e 65 72 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 39 2d 32 39 54 31 36 3a 30 30 3a 33 35 2e 35 32 31 5a 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 7b 22 55 53 44 22 3a 7b 22 55 53 44 22 3a 31 2c 22 4a 50 59 22 3a 31 34 33 2e 30 36 33 32 37 32 39 38 37 39 39 30 37 2c 22 42 47 4e 22 3a 31 2e 37 35 32 38 32 33 30 38 36 35 37 34 36 35 35 2c 22 43 5a 4b 22 3a 32 32 2e 35 34 37 30 35 31 34 34 32 39 31 30 39 32 2c 22 44 4b 4b 22 3a 36 2e 36 38 33 30 39 37 33 32 39 32 37 30 34 37 39 2c 22 47 42 50 22 3a 30 2e 37 34 36 38 39 30 31 32 33 36 37 38 30 37 38 36 2c 22 48 55 46 22 3a 33 35 35 2e 37 35 33 37 31 39 33 30 34 35 33 34 39 2c Data Ascii: {"dataAsOf":"2024-09-27T00:00:00.000Z","generatedAt":"2024-09-29T16:00:35.521Z","conversions":{"USD":{"USD":1,"JPY":143.0632729879907,"BGN":1.752823086574655,"CZK":22.54705144291092,"DKK":6.683097329270479,"GBP":0.7468901236780786,"HUF":355.7537193045349,
2024-09-30 13:17:01 UTC	216	IN	Data Raw: 31 37 35 35 2e 32 31 33 37 30 38 30 33 32 33 35 30 33 2c 22 4d 58 4e 22 3a 32 36 2e 32 30 33 34 31 32 36 30 38 38 39 33 39 2c 22 4d 59 52 22 3a 35 2e 35 32 32 39 33 30 37 31 35 38 37 39 39 31 31 2c 22 4e 5a 44 22 3a 32 2e 31 31 37 37 36 31 34 30 35 33 36 31 32 39 39 34 2c 22 50 48 50 22 3a 37 35 2e 31 30 34 39 39 34 31 32 30 33 32 39 32 37 2c 22 53 47 44 22 3a 31 2e 37 31 36 35 30 33 38 37 35 37 38 32 39 35 36 33 2c 22 54 48 42 22 3a 34 33 2e 33 35 39 35 37 31 38 36 33 39 37 35 36 32 2c 22 5a 41 52 22 3a 32 32 2e 39 32 39 37 35 35 39 33 33 36 36 37 37 31 37 2c 22 45 55 52 22 3a 31 2e 31 39 39 39 33 32 38 30 33 37 36 32 39 38 39 33 7d 7d 7d Data Ascii: 1755.2137080323503,"MXN":26.2034126088939,"MYR":5.522930715879911,"NZD":2.1177614053612994,"PHP":75.10499412032927,"SGD":1.7165038757829563,"THB":43.35957186397562,"ZAR":22.929755933667717,"EUR":1.1999328037629893}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49907	5.135.209.97	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	610	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 755 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	755	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 34 38 30 30 30 33 2c 22 70 61 67 65 69 64 22 3a 31 35 31 30 33 39 30 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 30 35 38 33 38 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 55 53 44 22 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 41 44 50 5f 34 32 38 34 35 5f 37 32 38 78 39 30 5f 30 30 30 30 30 30 30 31 2d 30 34 63 36 62 33 63 37 2d 65 38 62 33 2d 34 65 38 31 2d 39 38 63 31 2d 34 66 39 36 38 65 33 32 36 34 32 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 45 35 25 Data Ascii: {"siteid":480003,"pageid":1510390,"formatid":105838,"currencyCode":"USD","ckid":0,"tagId":"ADP_42845_728x90_00000001-04c6b3c7-e8b3-4e81-98c1-4f968e326420","pageDomain":"https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%
2024-09-30 13:17:01 UTC	1500	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 30 Sep 2024 13:17:01 GMT access-control-allow-credentials: true access-control-allow-origin: https://www.multitran.com cache-control: no-cache,no-store pragma: no-cache set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Tue, 30 Sep 2025 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: vs=480003=6178397; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Tue, 30 Sep 2025 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=2809080294951148902; expires=Tue, 30 Sep 2025 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990218334016&o=1; expires=Tue, 01 Oct 2024 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; expires=Tue, 01 Oct 2024 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-09-30 13:17:01 UTC	1055	IN	Data Raw: 34 31 33 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 6e 75 6c 6c 2c 22 69 73 4e 6f 41 64 22 3a 74 72 75 65 2c 22 64 73 70 50 69 78 65 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 62 68 2e 63 6f 6e 74 65 78 74 77 65 62 2e 63 6f 6d 2f 62 68 2f 72 74 73 65 74 3f 70 69 64 3d 35 36 30 32 38 38 26 65 76 3d 31 26 72 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 74 62 2d 63 73 79 6e 63 2e Data Ascii: 413{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":null,"isNoAd":true,"dspPixels":["https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49897	18.159.212.21	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1314 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1314	OUT	Data Raw: 7b 22 69 64 22 3a 22 64 34 34 39 64 31 66 34 2d 38 37 65 63 2d 34 63 31 30 2d 38 65 64 36 2d 37 66 38 63 38 34 63 30 61 37 39 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 32 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 45 35 25 45 34 25 45 45 25 45 32 25 45 30 25 46 32 25 45 35 25 45 42 25 46 43 25 46 31 25 45 41 25 45 38 25 45 39 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b Data Ascii: {"id":"d449d1f4-87ec-4c10-8ed6-7f8c84c0a795","at":1,"cur":["USD"],"tmax":2100,"site":{"domain":"multitran.com","page":"https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9","ref":null,"k
2024-09-30 13:17:01 UTC	477	IN	HTTP/1.1 200 OK set-cookie: stx_user_id=20343d91-5e26-465f-aa19-7e2190cce0d8; Max-Age=2592000; Expires=Wed, 30 Oct 2024 13:17:01 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 content-length: 17867 x-openrtb-version: 2.5 access-control-allow-origin: https://www.multitran.com access-control-allow-credentials: true strict-transport-security: max-age=16000000; includeSubDomains; preload; connection: close
2024-09-30 13:17:01 UTC	14865	IN	Data Raw: 7b 22 69 64 22 3a 22 64 34 34 39 64 31 66 34 2d 38 37 65 63 2d 34 63 31 30 2d 38 65 64 36 2d 37 66 38 63 38 34 63 30 61 37 39 35 22 2c 22 62 69 64 69 64 22 3a 22 34 62 65 33 37 32 34 36 2d 37 64 30 65 2d 34 34 36 38 2d 38 65 37 65 2d 66 64 39 38 32 32 61 34 34 32 66 33 22 2c 22 63 75 72 22 3a 22 55 53 44 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 73 65 61 74 22 3a 22 37 37 22 2c 22 62 69 64 22 3a 5b 7b 22 6c 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 62 75 74 6c 65 72 3f 74 79 70 65 3d 6c 6f 73 73 52 65 61 73 6f 6e 73 26 61 72 69 64 3d 34 62 65 33 37 32 34 36 2d 37 64 30 65 2d 34 34 36 38 2d 38 65 37 65 2d 66 64 39 38 32 32 61 34 34 32 66 33 26 63 6b 65 79 3d 33 61 63 39 33 38 62 32 2d 31 66 62 31 Data Ascii: {"id":"d449d1f4-87ec-4c10-8ed6-7f8c84c0a795","bidid":"4be37246-7d0e-4468-8e7e-fd9822a442f3","cur":"USD","seatbid":[{"seat":"77","bid":[{"lurl":"https://b.sharethrough.com/butler?type=lossReasons&arid=4be37246-7d0e-4468-8e7e-fd9822a442f3&ckey=3ac938b2-1fb1
2024-09-30 13:17:02 UTC	2127	IN	Data Raw: 54 64 6c 4d 6a 45 35 4d 47 4e 6a 5a 54 42 6b 4f 44 39 6e 5a 48 42 79 50 54 41 6d 5a 32 52 77 63 6c 39 6a 62 32 35 7a 5a 57 35 30 50 53 49 73 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 57 51 75 4d 7a 59 77 65 57 6c 6c 62 47 51 75 59 32 39 74 4c 33 4e 6c 63 6e 5a 6c 63 6c 39 74 59 58 52 6a 61 44 39 77 59 58 4a 30 62 6d 56 79 58 32 6c 6b 50 54 49 7a 4d 44 6b 6d 5a 32 52 77 63 6a 30 77 4a 6d 64 6b 63 48 4a 66 59 32 39 75 63 32 56 75 64 44 30 6d 64 58 4e 66 63 48 4a 70 64 6d 46 6a 65 54 30 78 4c 53 30 74 4a 6e 49 39 61 48 52 30 63 48 4d 6c 4d 30 45 6c 4d 6b 59 6c 4d 6b 5a 74 59 58 52 6a 61 43 35 7a 61 47 46 79 5a 58 52 6f 63 6d 39 31 5a 32 67 75 59 32 39 74 4a 54 4a 47 63 33 6c 75 59 79 55 79 52 6e 59 78 4a 54 4e 47 63 32 39 31 63 6d 4e 6c 58 32 6c 6b 4a 54 4e 45 Data Ascii: TdlMjE5MGNjZTBkOD9nZHByPTAmZ2Rwcl9jb25zZW50PSIsImh0dHBzOi8vYWQuMzYweWllbGQuY29tL3NlcnZlcl9tYXRjaD9wYXJ0bmVyX2lkPTIzMDkmZ2Rwcj0wJmdkcHJfY29uc2VudD0mdXNfcHJpdmFjeT0xLS0tJnI9aHR0cHMlM0ElMkYlMkZtYXRjaC5zaGFyZXRocm91Z2guY29tJTJGc3luYyUyRnYxJTNGc291cmNlX2lkJTNE
2024-09-30 13:17:02 UTC	875	IN	Data Raw: 63 7a 6f 76 4c 32 4d 75 59 6d 6c 75 5a 79 35 6a 62 32 30 76 59 79 35 6e 61 57 59 5f 55 6d 56 6b 4d 7a 31 54 56 45 31 54 58 33 42 6b 4a 6e 56 70 5a 44 30 79 4d 44 4d 30 4d 32 51 35 4d 53 30 31 5a 54 49 32 4c 54 51 32 4e 57 59 74 59 57 45 78 4f 53 30 33 5a 54 49 78 4f 54 42 6a 59 32 55 77 5a 44 67 69 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 6b 75 62 47 6c 68 5a 47 30 75 59 32 39 74 4c 33 4d 76 4f 44 59 32 4e 44 55 5f 59 6d 6c 6b 5a 47 56 79 58 32 6c 6b 50 54 49 30 4e 6a 51 35 4d 79 5a 69 61 57 52 6b 5a 58 4a 66 64 58 56 70 5a 44 30 79 4d 44 4d 30 4d 32 51 35 4d 53 30 31 5a 54 49 32 4c 54 51 32 4e 57 59 74 59 57 45 78 4f 53 30 33 5a 54 49 78 4f 54 42 6a 59 32 55 77 5a 44 67 69 58 58 30 3d 5c 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e Data Ascii: czovL2MuYmluZy5jb20vYy5naWY_UmVkMz1TVE1TX3BkJnVpZD0yMDM0M2Q5MS01ZTI2LTQ2NWYtYWExOS03ZTIxOTBjY2UwZDgiLCJodHRwczovL2kubGlhZG0uY29tL3MvODY2NDU_YmlkZGVyX2lkPTI0NjQ5MyZiaWRkZXJfdXVpZD0yMDM0M2Q5MS01ZTI2LTQ2NWYtYWExOS03ZTIxOTBjY2UwZDgiXX0=\"</script><script>(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49906	5.135.209.97	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	610	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 870 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	870	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 34 38 30 30 30 33 2c 22 70 61 67 65 69 64 22 3a 31 35 31 30 33 39 30 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 30 35 38 34 30 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 55 53 44 22 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 41 44 50 5f 34 32 38 34 35 5f 37 32 38 78 39 30 5f 30 30 30 30 30 30 30 31 2d 30 34 63 36 62 33 63 37 2d 65 38 62 33 2d 34 65 38 31 2d 39 38 63 31 2d 34 66 39 36 38 65 33 32 36 34 32 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 45 35 25 Data Ascii: {"siteid":480003,"pageid":1510390,"formatid":105840,"currencyCode":"USD","ckid":0,"tagId":"ADP_42845_728x90_00000001-04c6b3c7-e8b3-4e81-98c1-4f968e326420","pageDomain":"https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%
2024-09-30 13:17:01 UTC	1500	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 30 Sep 2024 13:17:01 GMT access-control-allow-credentials: true access-control-allow-origin: https://www.multitran.com cache-control: no-cache,no-store pragma: no-cache set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Tue, 30 Sep 2025 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: vs=480003=6178397; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Tue, 30 Sep 2025 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=6178153711103958302; expires=Tue, 30 Sep 2025 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd2=q=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6&c=1&l&lo&lt=638632990217831684&o=1; expires=Tue, 01 Oct 2024 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd=%24qc%3D1315097306%3B%24ql%3DHigh%3B%24qpc%3D10020%3B%24qt%3D152_1829_29211t%3B%24dma%3D501%3B%24qo%3D6; expires=Tue, 01 Oct 2024 13:17:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-09-30 13:17:01 UTC	949	IN	Data Raw: 33 41 39 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 6e 75 6c 6c 2c 22 69 73 4e 6f 41 64 22 3a 74 72 75 65 2c 22 64 73 70 50 69 78 65 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 73 61 73 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 73 79 6e 63 2e Data Ascii: 3A9{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":null,"isNoAd":true,"dspPixels":["https://match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=","https://csync.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49898	18.159.212.21	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1314 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1314	OUT	Data Raw: 7b 22 69 64 22 3a 22 64 34 34 39 64 31 66 34 2d 38 37 65 63 2d 34 63 31 30 2d 38 65 64 36 2d 37 66 38 63 38 34 63 30 61 37 39 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 32 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 45 35 25 45 34 25 45 45 25 45 32 25 45 30 25 46 32 25 45 35 25 45 42 25 46 43 25 46 31 25 45 41 25 45 38 25 45 39 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b Data Ascii: {"id":"d449d1f4-87ec-4c10-8ed6-7f8c84c0a795","at":1,"cur":["USD"],"tmax":2100,"site":{"domain":"multitran.com","page":"https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9","ref":null,"k
2024-09-30 13:17:01 UTC	475	IN	HTTP/1.1 200 OK set-cookie: stx_user_id=7441c652-5098-4cc3-bfdc-84e81cbf6e82; Max-Age=2592000; Expires=Wed, 30 Oct 2024 13:17:01 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 content-length: 592 x-openrtb-version: 2.5 access-control-allow-origin: https://www.multitran.com access-control-allow-credentials: true strict-transport-security: max-age=16000000; includeSubDomains; preload; connection: close
2024-09-30 13:17:01 UTC	592	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 69 64 3d 37 65 61 64 34 33 35 65 2d 61 32 63 64 2d 34 63 62 66 2d 38 38 37 36 2d 61 64 62 36 36 38 32 32 36 31 33 66 26 70 68 3d 63 36 62 30 31 65 31 32 2d 61 61 36 32 2d 34 61 65 36 2d 39 65 31 30 2d 37 31 33 34 36 65 35 39 37 63 33 31 26 72 3d 68 74 74 70 73 25 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://u.openx.net/w/1.0/cm?gdpr=0&gdpr_consent=&id=7ead435e-a2cd-4cbf-8876-adb66822613f&ph=c6b01e12-aa62-4ae6-9e10-71346e597c31&r=https%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49905	51.89.9.252	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	609	OUT	POST /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive Content-Length: 3183 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	3183	OUT	Data Raw: 7b 22 62 69 64 73 22 3a 5b 7b 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 41 44 50 5f 34 32 38 34 35 5f 37 32 38 78 39 30 5f 30 30 30 30 30 30 30 31 2d 30 34 63 36 62 33 63 37 2d 65 38 62 33 2d 34 65 38 31 2d 39 38 63 31 2d 34 66 39 36 38 65 33 32 36 34 32 30 22 2c 22 62 69 64 49 64 22 3a 22 31 37 30 37 62 38 34 32 36 37 35 38 61 30 65 22 2c 22 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 22 3a 22 31 36 32 30 62 33 61 62 36 66 65 31 31 64 36 22 2c 22 70 75 62 49 64 22 3a 22 36 32 66 34 30 61 63 62 33 30 38 36 61 32 36 22 2c 22 65 78 74 22 3a 7b 22 70 6c 61 63 65 6d 65 6e 74 5f 6e 61 6d 65 22 3a 22 41 50 2f 34 32 38 34 35 5f 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 7d 2c 22 63 6f 6f 72 64 73 22 3a 7b 22 74 6f 70 22 3a 35 35 37 2e 32 31 38 37 35 2c 22 6c 65 Data Ascii: {"bids":[{"adUnitCode":"ADP_42845_728x90_00000001-04c6b3c7-e8b3-4e81-98c1-4f968e326420","bidId":"1707b8426758a0e","bidderRequestId":"1620b3ab6fe11d6","pubId":"62f40acb3086a26","ext":{"placement_name":"AP/42845_multitran.com"},"coords":{"top":557.21875,"le
2024-09-30 13:17:02 UTC	490	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.multitran.com access-control-allow-headers: content-type, origin, referer, user-agent access-control-allow-credentials: true p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-09-30 13:17:02 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49915	193.3.178.4	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	1203	OUT	GET /pbjs/1/AP/42845_multitran.com/1/www.multitran.com/ROS?rnd=0.43013598678955556&e=video_728x90_0%3A728x90%3B1&ur=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pbv=8.27.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ccpa=1---&e_quantcastId=P0-219187005-1727702215188&e_pubcid=ac47d973-e264-4b59-b4d0-8404bfddc2d2&vctx=2&vv=3 HTTP/1.1 Host: pbjs.e-planning.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	251	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: text/plain Connection: close Content-Length: 2 Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true X-SID: AMS-937
2024-09-30 13:17:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49908	54.155.119.8	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	625	OUT	POST /rtb/bid?src=prebid_prebid_8.27.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 1743 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1743	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 34 36 35 64 36 36 31 64 66 32 39 30 61 36 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 41 44 50 5f 34 32 38 34 35 5f 37 32 38 78 39 30 5f 30 30 30 30 30 30 30 31 2d 30 34 63 36 62 33 63 37 2d 65 38 62 33 2d 34 65 38 31 2d 39 38 63 31 2d 34 66 39 36 38 65 33 32 36 34 32 30 22 2c 22 69 64 22 3a 22 32 34 66 32 35 61 64 33 34 35 35 35 65 64 63 22 2c 22 74 61 67 69 64 22 3a 22 39 38 30 35 34 31 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 39 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 37 35 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 36 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 Data Ascii: {"id":"3465d661df290a6","imp":[{"adunitcode":"ADP_42845_728x90_00000001-04c6b3c7-e8b3-4e81-98c1-4f968e326420","id":"24f25ad34555edc","tagid":"980541","bidfloor":"","banner":{"format":[{"w":728,"h":90},{"w":690,"h":90},{"w":675,"h":90},{"w":670,"h":90},{"w
2024-09-30 13:17:02 UTC	486	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/json Content-Length: 24 Connection: close Vary: Accept-Encoding Set-Cookie: ljt_reader=JaxdABZHSa3Np753SGSkvL_c;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type
2024-09-30 13:17:02 UTC	24	IN	Data Raw: 7b 22 69 64 22 3a 22 33 34 36 35 64 36 36 31 64 66 32 39 30 61 36 22 7d Data Ascii: {"id":"3465d661df290a6"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49914	141.95.98.64	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	592	OUT	GET /analytics/711/pbjs HTTP/1.1 Host: api.id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	377	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers cache-control: max-age=300, public access-control-allow-origin: * content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Mon, 30 Sep 2024 13:17:01 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-09-30 13:17:02 UTC	81	IN	Data Raw: 34 36 0d 0a 7b 22 69 6e 67 65 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2f 65 76 65 6e 74 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 31 30 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46{"ingestUrl":"https://api.id5-sync.com/analytics/event","sampling":10}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49920	172.64.151.101	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	622	OUT	POST /openrtb/pbjs?s=861631 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1435 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1435	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 39 65 62 39 31 39 65 61 38 37 66 36 36 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 2f 63 2f 6d 2e 65 78 65 3f 74 3d 35 34 32 38 38 37 37 5f 31 5f 32 26 73 31 3d 25 45 44 25 45 30 25 46 33 25 46 37 25 45 44 25 45 45 2d 25 45 38 25 46 31 25 46 31 25 45 42 25 45 35 25 45 34 25 45 45 25 45 32 25 45 30 25 46 32 25 45 35 25 45 42 25 46 43 25 46 31 25 45 41 25 45 38 25 45 39 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 4d 75 6c 74 69 74 72 61 6e 2c 64 69 63 74 69 6f 6e 61 72 79 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a Data Ascii: {"id":"19eb919ea87f66","site":{"page":"https://www.multitran.com/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9","domain":"multitran.com","keywords":"Multitran,dictionary,translation","publisher":{"domain":
2024-09-30 13:17:02 UTC	865	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:01 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 8cb47da6c98242b1-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.multitran.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Tue, 30 Sep 2025 13:17:01 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PnwNoFrJ5uxR0M5F9iQqYNyTdkgjOlkChYri04%2BIhUyi4%2FWv4h19RBkb%2FavNOMu00T4s849P4bcob0AOVxmHzugBNEP6O1N92dm%2BACAh1Y5aOHoD43%2B1wTHNcqkqgQMSkRX7jqGr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-09-30 13:17:02 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 31 39 65 62 39 31 39 65 61 38 37 66 36 36 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"19eb919ea87f66","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49922	104.18.41.106	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	513	OUT	OPTIONS /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.multitran.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	732	IN	HTTP/1.1 204 No Content Date: Mon, 30 Sep 2024 13:17:01 GMT Connection: close vary: Origin, Access-Control-Request-Headers access-control-allow-origin: https://www.multitran.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: content-type access-control-max-age: 86400 set-cookie: LW_SERVER=lw19; path=/ CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=5IjI34jReBR9d.Kmub9YqRdqQBipBsh_nLyTzahmWEs-1727702221-1.0.1.1-s0EgM2QLmAaGuXmZ6NJmby0DULAlT9SASJyoKKAfqnRPGDomPRIahnUCKB4i6bRCZ6pp6JSKe2WsG0S1fXVDhA; path=/; expires=Mon, 30-Sep-24 13:47:01 GMT; domain=.ingage.tech; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb47da6f8757d05-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49916	193.3.178.4	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	1289	OUT	GET /pbjs/1/AP/42845_multitran.com/1/www.multitran.com/ROS?rnd=0.43013598678955556&e=728x90_0%3A728x90%2C690x90%2C675x90%2C670x90%2C650x90%2C630x90%2C600x90%2C580x90%2C570x90%2C468x60%2C320x50%2C300x50%2C300x75&ur=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pbv=8.27.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&ccpa=1---&e_quantcastId=P0-219187005-1727702215188&e_pubcid=ac47d973-e264-4b59-b4d0-8404bfddc2d2 HTTP/1.1 Host: pbjs.e-planning.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	251	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: text/plain Connection: close Content-Length: 2 Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true X-SID: AMS-937
2024-09-30 13:17:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49900	185.89.210.180	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	605	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1733 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1733	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 39 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 37 35 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 37 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 35 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 33 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 30 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 35 38 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 35 37 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":690,"height":90},{"width":675,"height":90},{"width":670,"height":90},{"width":650,"height":90},{"width":630,"height":90},{"width":600,"height":90},{"width":580,"height":90},{"width":570,"height":90},{"
2024-09-30 13:17:02 UTC	973	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 138 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.multitran.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 5a7a41be-4432-48c1-ba70-3e5694e53372 Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 18-Sep-2034 13:17:02 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-09-30 13:17:02 UTC	138	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 39 33 61 65 35 66 34 61 38 64 33 36 63 39 22 2c 22 74 61 67 5f 69 64 22 3a 32 33 33 31 33 39 39 38 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 34 31 31 35 37 33 36 33 34 35 33 38 35 30 33 34 35 30 31 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"93ae5f4a8d36c9","tag_id":23313998,"auction_id":"4115736345385034501","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49899	185.89.210.180	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	605	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1696 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1696	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 39 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 37 35 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 37 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 35 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 33 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 30 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 35 38 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 35 37 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":690,"height":90},{"width":675,"height":90},{"width":670,"height":90},{"width":650,"height":90},{"width":630,"height":90},{"width":600,"height":90},{"width":580,"height":90},{"width":570,"height":90},{"
2024-09-30 13:17:02 UTC	973	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 139 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.multitran.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 0b2b768a-1bff-41fd-9e08-458410f7828f Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 18-Sep-2034 13:17:02 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-09-30 13:17:02 UTC	139	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 32 32 31 31 65 39 39 38 32 61 35 39 39 34 38 22 2c 22 74 61 67 5f 69 64 22 3a 32 38 33 33 35 35 36 31 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 31 39 38 33 38 36 33 37 30 37 36 36 35 30 30 33 35 31 38 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"2211e9982a59948","tag_id":28335561,"auction_id":"1983863707665003518","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49926	69.166.1.8	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	2415	OUT	GET /trinity.json?key_maker=%7B%22235886e1c3c9eb9%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%2C%2224ef5b5a31fd70f%22%3A%222460649b48d5963cdf8a%7C640x360%7Cf%3D0.85%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D1%2C%22%7D&ref=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&s=0b9c28c3-3a0a-4b6b-b1de-da65705d3d5d&pv=f820334a-8eee-4857-a4f3-e2c72b0c4b10&vp=desktop&lib_name=prebid&lib_v=8.45.0&us=5&iqid=null&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22multitran.com%22%2C%22keywords%22%3A%22Multitran%2Cdictionary%2Ctranslation%22%2C%22publisher%22%3A%7B%22domain%22%3A%22multitran.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1180	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 13:17:01 GMT content-type: application/json content-length: 666 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-176 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://www.multitran.com set-cookie: __uis=816eb57d-a170-4d89-9a52-e61f6d07f53b; expires=Tue, 30 Sep 2025 13:17:01 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: _usd_multitran.com=f820334a-8eee-4857-a4f3-e2c72b0c4b10; expires=Tue, 01 Oct 2024 13:17:01 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: receive-cookie-deprecation: 1; Secure; Path=/; SameSite=None; Partitioned; Expires=2025-03-29 13:17:01.315831291 +0000 UTC; HttpOnly set-cookie: __uih=1; expires=Mon, 30 Sep 2024 13:22:01 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85176\|Zvqk0; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-09-30 13:17:01 UTC	666	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 32 33 35 38 38 36 65 31 63 33 63 39 65 62 39 22 3a 7b 7d 2c 22 32 34 65 66 35 62 35 61 33 31 66 64 37 30 66 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 66 38 32 30 33 33 34 61 2d 38 65 65 65 2d 34 38 35 37 2d 61 34 66 33 2d 65 32 63 37 32 62 30 63 34 62 31 30 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 62 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 Data Ascii: {"slots":{"235886e1c3c9eb9":{},"24ef5b5a31fd70f":{}},"sbi_dc":"iad-2-","pv":"f820334a-8eee-4857-a4f3-e2c72b0c4b10","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"bs","url":"https://pixe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49912	18.244.15.236	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	2332	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pid=9p4eLEHty4Grr&cb=0&ws=1280x907&v=24.827.1552&t=3000&slots=%5B%7B%22sd%22%3A%22ADP_42845_728x90_00000001-04c6b3c7-e8b3-4e81-98c1-4f968e326420%22%2C%22s%22%3A%5B%22728x90%22%2C%22690x90%22%2C%22675x90%22%2C%22670x90%22%2C%22650x90%22%2C%22630x90%22%2C%22600x90%22%2C%22580x90%22%2C%22570x90%22%2C%22468x60%22%2C%22320x50%22%2C%22300x50%22%2C%22300x75%22%5D%2C%22sn%22%3A%22%2F103512698%2FADP_42845_728X90_af7ac722-2488-47de-81af-fd4897f62d72%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220 [TRUNCATED] Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	451	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 272 Connection: close Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true Date: Mon, 30 Sep 2024 13:17:01 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 7daf545331a4f565a58e22b0fa952528.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: khHuUmWBmm_OO7CtNOIDvnA3RVLlO8dbvbmVhR4v-CFPZWs6mEocLg==
2024-09-30 13:17:02 UTC	272	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 6e 2d 69 6e 64 65 78 5f 6e 2d 61 63 75 69 74 79 61 64 73 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 63 6e 76 5f 6e 2d 69 6e 6d 6f 62 69 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 6e 2d 73 6d 61 61 74 6f 5f 6e 2d 73 68 61 72 65 74 68 72 6f 75 67 68 5f 6e 2d 6f 6e 65 74 61 67 5f 70 6d 2d 64 62 35 5f 6e 2d 76 6d 67 5f 6e 2d 62 61 69 64 75 5f 6e 2d 6e 61 74 69 76 6f 5f 61 6e 2d 64 62 35 5f 73 6f 76 72 6e 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Out

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49904	54.170.214.245	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:01 UTC	612	OUT	POST /adreq?cb=8997 HTTP/1.1 Host: ads.servenobid.com Connection: keep-alive Content-Length: 1540 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:01 UTC	1540	OUT	Data Raw: 7b 22 73 69 64 22 3a 32 32 35 31 34 35 38 37 39 32 36 2c 22 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 25 32 46 63 25 32 46 6d 2e 65 78 65 25 33 46 74 25 33 44 35 34 32 38 38 37 37 5f 31 5f 32 25 32 36 73 31 25 33 44 45 44 45 30 46 33 46 37 45 44 45 45 2d 45 38 46 31 46 31 45 42 45 35 45 34 45 45 45 32 45 30 46 32 45 35 45 42 46 43 46 31 45 41 45 38 45 39 22 2c 22 74 74 22 3a 22 44 69 63 74 69 6f 6e 61 72 79 22 2c 22 61 22 3a 5b 7b 22 7a 22 3a 5b 5b 37 32 38 2c 39 30 5d 2c 5b 36 39 30 2c 39 30 5d 2c 5b 36 37 35 2c 39 30 5d 2c 5b 36 37 30 2c 39 30 5d 2c 5b 36 35 30 2c 39 30 5d 2c 5b 36 33 30 2c 39 30 5d 2c 5b 36 30 30 2c 39 30 5d 2c 5b 35 38 30 2c 39 30 5d 2c 5b 35 37 30 2c 39 30 5d 2c 5b 34 36 Data Ascii: {"sid":22514587926,"l":"https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3DEDE0F3F7EDEE-E8F1F1EBE5E4EEE2E0F2E5EBFCF1EAE8E9","tt":"Dictionary","a":[{"z":[[728,90],[690,90],[675,90],[670,90],[650,90],[630,90],[600,90],[580,90],[570,90],[46
2024-09-30 13:17:02 UTC	556	IN	HTTP/1.1 200 Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: cap_908=10; domain=servenobid.com; SameSite=None; Expires=Tue, 01 Oct 2024 13:17:02 GMT; secure Access-Control-Allow-Origin: https://www.multitran.com AMP-Access-Control-Allow-Source-Origin: * Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin Access-Control-Allow-Credentials: true cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 vary: accept-encoding
2024-09-30 13:17:02 UTC	741	IN	Data Raw: 32 64 65 0d 0a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 64 65 76 69 63 65 22 3a 22 43 4f 4d 50 55 54 45 52 22 2c 22 73 69 74 65 22 3a 32 32 35 31 34 35 38 37 39 32 36 2c 22 62 69 64 73 22 3a 5b 5d 2c 22 73 79 6e 63 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 32 2f 72 6d 70 73 73 70 3f 73 75 62 3d 64 75 72 61 74 69 6f 6e 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 2e 73 65 72 76 65 6e 6f 62 69 64 2e 63 6f 6d 25 32 46 73 79 6e 63 25 33 46 70 69 64 25 33 44 33 32 31 25 32 36 75 69 64 25 33 44 25 35 42 52 58 5f 55 55 49 44 25 35 44 22 2c 22 68 74 74 70 73 3a 2f 2f 70 2e 72 66 69 68 75 62 2e 63 6f 6d 2f 63 6d 3f 70 75 62 3d 34 34 30 30 37 26 69 6e 3d 31 22 2c 22 68 74 Data Ascii: 2de{"country":"US","device":"COMPUTER","site":22514587926,"bids":[],"syncs":["https://sync.1rx.io/usersync2/rmpssp?sub=duration&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D321%26uid%3D%5BRX_UUID%5D","https://p.rfihub.com/cm?pub=44007&in=1","ht
2024-09-30 13:17:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49924	185.64.189.112	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	634	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1648 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	1648	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 32 37 37 30 32 32 32 30 36 37 31 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 34 35 63 35 66 61 38 39 64 63 63 62 39 62 22 2c 22 74 61 67 69 64 22 3a 22 34 39 30 36 38 31 30 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 38 35 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 76 69 64 65 6f 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 76 69 64 65 6f 2f 6d 70 34 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 76 69 64 65 6f 2f 77 65 62 6d 22 5d 2c 22 6d 69 6e 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 6d 61 78 64 75 72 61 74 69 6f 6e 22 3a 33 30 2c 22 73 74 61 72 Data Ascii: {"id":"1727702220671","at":1,"cur":["USD"],"imp":[{"id":"145c5fa89dccb9b","tagid":"4906810","bidfloor":0.85,"secure":1,"ext":{},"bidfloorcur":"USD","video":{"mimes":["video/mp4","application/javascript","video/webm"],"minduration":0,"maxduration":30,"star
2024-09-30 13:17:02 UTC	231	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.multitran.com Cache-Control: no-cache, no-store, must-revalidate Date: Mon, 30 Sep 2024 13:17:01 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49930	142.250.185.78	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	857	OUT	POST /el/AGSKWxXnSE66mO87Xh0td5veDs0zBoJVxrZrwQN3xkDqvf0ujG6yW9x6L5GvSQ5ThReyKpeoE1An56R07N7XCAYumF9hZ5o4BiS7Ekb2ZNJg566-4CPrkZW75LhWaV--v90pu8dNVvs70g== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.multitran.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	155	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 37 37 30 32 32 32 30 37 31 33 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 32 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1727702220713,null,null,[[2,1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-09-30 13:17:02 UTC	1876	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-hxRqK1aOGFWQav8XY2lhxA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmLw05BicEqfwRoCxO5aF1n9gXjvx0usR4F46f3LrGuBWIib49zJV9vZBDo-fMxWcknKL4xPzs8rSc0r0U1MKdYFsYsyk0pL8otQ2KllIBU5-enpmXnp8UYGRiYGlkZmegbm8QUGAMb4L4Q" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49929	142.250.185.78	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	857	OUT	POST /el/AGSKWxXnSE66mO87Xh0td5veDs0zBoJVxrZrwQN3xkDqvf0ujG6yW9x6L5GvSQ5ThReyKpeoE1An56R07N7XCAYumF9hZ5o4BiS7Ekb2ZNJg566-4CPrkZW75LhWaV--v90pu8dNVvs70g== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.multitran.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	158	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 37 37 30 32 32 32 30 37 31 36 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1727702220716,null,null,[null,[1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-09-30 13:17:02 UTC	1876	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-A6hdb6Ubro2T28xgcint5w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmJw0ZBicEqfwRoCxO5aF1n9gXjvx0usR4F46f3LrGuBWIib49zJV9vZBE78P5en5JKUXxifnJ9XkppXopuYUqwLYhdlJpWW5BehsFPLQCpy8tPTM_PS440MjEwMLI3M9AzM4wsMANAWL6k" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49931	212.102.56.178	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	606	OUT	GET /instream/content/reading/resoomer/hls/eng/main_00001.aac HTTP/1.1 Host: video.adpushup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	624	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/octet-stream Content-Length: 132544 Connection: close Last-Modified: Wed, 11 Jan 2023 07:26:23 GMT ETag: "63be649f-205c0" X-Robots-Tag: : noindex, nofollow X-77-NZT: EgwB1GY4sQH3mc0GAAwBisclxAH3M8UOAA X-77-NZT-Ray: 1cb09c0ecb035d49cea4fa66e586ab0d X-Accel-Expires: @1728292969 X-Accel-Date: 1727256373 X-77-Cache: HIT X-77-Age: 445849 Server: CDN77-Turbo Access-Control-Allow-Origin: https://www.multitran.com Vary: Origin X-Accel-Date-Max: 1722003340 X-Cache: HIT X-Age: 445849 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-30 13:17:02 UTC	15760	IN	Data Raw: 49 44 33 04 00 00 00 00 00 3f 50 52 49 56 00 00 00 35 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 73 74 72 65 61 6d 69 6e 67 2e 74 72 61 6e 73 70 6f 72 74 53 74 72 65 61 6d 54 69 6d 65 73 74 61 6d 70 00 00 00 00 00 00 02 cf 88 49 44 33 04 00 00 00 00 00 46 50 52 49 56 00 00 00 3c 00 00 63 6f 6d 2e 65 6c 65 6d 65 6e 74 61 6c 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2e 74 69 6d 65 73 74 61 6d 70 2e 75 74 63 00 32 30 32 33 2d 30 31 2d 31 31 54 30 30 3a 30 30 3a 30 30 5a ff f1 4c 80 01 bf fc 21 30 01 e8 3d 1e ff f1 4c 80 46 5f fc 21 5e cc ff f9 fd f7 fb 1f fe 3c 05 54 2c 20 56 e0 15 f8 e4 15 f8 e4 12 c2 9a 53 96 27 7c 6f d7 de ff 8f c1 e8 1c 7c e2 28 2e 01 a1 b5 b5 17 04 6d cf 7a b1 6f 3e 23 65 cc 78 bc a2 10 e5 d1 b0 15 55 25 96 3c b4 7f 5a bd 77 14 fb 3a b6 49 79 e7 09 Data Ascii: ID3?PRIV5com.apple.streaming.transportStreamTimestampID3FPRIV<com.elementaltechnologies.timestamp.utc2023-01-11T00:00:00ZL!0=LF_!^<T, VS'\|o\|(.mzo>#exU%<Zw:Iy
2024-09-30 13:17:02 UTC	16384	IN	Data Raw: 8c 6a ee af 84 a4 ea ef 24 66 89 16 af fc 8a 2f d3 eb df 29 03 1f f2 c7 80 dd 57 3d 35 01 1c 10 0e 79 46 06 ba 0e 8a d4 f8 28 00 a6 8f e4 d5 0c 4f 23 a2 5e 1e 1e 60 c3 97 fe 7f 63 00 5e ed 3e 6f 44 fa c0 8c 93 fa a9 18 01 7c be 5f 23 43 08 10 97 d7 a5 be 4b 06 66 16 c2 87 f9 e8 90 38 4a 00 00 64 86 d0 43 e8 40 0d 5c e5 d1 f9 b8 0b d5 e5 e4 2f 75 0a e9 cc 31 c6 77 e3 9b 5b 21 5c 8b 03 57 ec be 0e 12 04 fa 8b 55 2a 77 21 a5 31 66 16 f6 08 00 de b0 80 00 31 fd 60 2f 5f d1 68 23 54 e1 cd 9c 55 30 ca b3 53 6b a5 86 0a eb 36 f6 7c 6a bc df 1f 90 fe b0 1f ff f1 4c 80 4b 3f fc 21 1c 0f ff ff 66 ff fc 04 95 fc 30 1b 0b 8d 86 08 3d 00 0c eb 7d 6d e7 b7 4f 3c d7 55 a8 9c f5 76 c0 df 77 93 24 f2 30 f1 d5 49 0c 5d ac ac a2 3c 82 e9 32 8b 21 40 98 a8 2a be f4 e9 21 22 Data Ascii: j$f/)W=5yF(O#^`c^>oD\|_#CKf8JdC@\/u1w[!\WUw!1f1`/_h#TU0Sk6\|jLK?!f0=}mO<Uvw$0I]<2!@!"
2024-09-30 13:17:02 UTC	16384	IN	Data Raw: 54 92 c2 01 b4 40 ac 6a 1a 0a 8a c2 e1 80 c8 84 40 87 2a 00 05 d6 bd 35 d7 55 9b 7c 7b d7 ef de a8 ec 3c ed 43 de 7d 95 c0 42 29 a8 a2 13 b4 69 e7 a0 72 d4 ae 6b c2 c0 b4 a3 5b 04 81 17 cc 3f 4d bb 5d 47 ce 64 af 3c fe 57 ce f0 2d 8d ca 7b 4c cb 29 07 4b 71 f4 61 43 3e a1 3c 19 60 54 cd 0b 9b bd 4b b0 f4 11 01 ae 51 24 6d d0 4c d4 0b 35 fa 33 73 15 34 c5 70 03 27 0c 52 91 18 0d 00 5a c5 d2 94 c1 be 50 97 18 fd 92 5c b1 ff 70 be 15 26 03 95 c5 ac b5 68 a5 09 ac 42 c0 e3 28 8c 3a 60 78 9c 4c 7a 99 f9 ab 79 c1 70 02 2a 7e 68 2c 63 fd 5a 4c b3 6f c7 40 05 ca 35 80 50 39 85 2c 00 1b be d9 01 59 01 86 8d 2f df a3 0c 28 36 7a 75 79 9f 43 7f 30 0b ec fb 36 02 a4 00 07 05 79 ff 57 43 62 1c b0 c4 e6 70 b8 61 10 f8 14 c2 f0 03 c2 f0 40 2b 81 c4 e1 a7 1e 61 80 04 cb Data Ascii: T@j@5U\|{<C}B)irk[?M]Gd<W-{L)KqaC><`TKQ$mL53s4p'RZP\p&hB(:`xLzyp~h,cZLo@5P9,Y/(6zuyC06yWCbpa@+a
2024-09-30 13:17:02 UTC	16384	IN	Data Raw: dc 9f 60 fb db 84 ea db 76 16 b3 98 77 6b 02 9c cb 4a 55 54 ec f8 72 da 9f 24 d5 20 c2 51 a4 8a 49 e6 0b 42 e7 f7 9d 36 d5 83 ee 98 f5 a5 dc ed f2 c9 68 2e d8 55 c3 8c 55 9e 87 89 45 87 d1 71 ed 78 58 d5 36 56 9a fe 79 95 a6 9d 32 80 15 9c 2a 45 19 63 da 50 de 9f e8 6e 15 e5 64 76 3f 8b fd 67 b0 72 4c 76 29 59 62 e2 fb 26 b9 59 35 54 db 73 ae 4e e9 eb bc e5 a7 3f 48 b4 ea d6 37 de 53 bf 64 87 d7 73 1e 7d 82 ac d4 59 d8 0b 13 fb 5c 4d 65 c4 b5 8d 9f 91 08 53 52 c2 33 7d 7e 90 4f bb b7 bb b1 89 00 4f 5a 60 f6 3a 53 06 86 a1 a3 02 0b 10 ad de eb 8e 9d a7 5c ea 93 bf 8c cd 2b 9e ac 98 0d ba c7 66 1c 94 68 12 e8 e7 c1 5a 25 d9 6d 69 f8 f5 bf 02 62 e8 bb 2e b1 54 cc 3a 84 8c ce b7 ec 92 aa a6 93 62 59 94 00 81 35 cf 2a de 20 e5 68 a5 b7 fb 09 ad 25 9e 9e dc 4b Data Ascii: `vwkJUTr$ QIB6h.UUEqxX6Vy2EcPndv?grLv)Yb&Y5TsN?H7Sds}Y\MeSR3}~OOZ`:S\+fhZ%mib.T:bY5 h%K
2024-09-30 13:17:02 UTC	16384	IN	Data Raw: 95 04 de 19 3f 66 92 bb 5f 92 74 de 52 22 db cf 6c b7 04 d0 a0 03 98 e5 f7 46 38 c6 54 ce 36 0f f9 14 8a 11 08 18 f3 ce d6 11 a0 a3 88 ec 0a 45 e4 01 aa 9a 38 dc cb a2 bc d9 4b c5 67 22 c6 d3 f2 98 00 07 73 59 4a ab ff fa ee bd 98 97 43 87 8e 57 9f e3 75 49 1b de 2e 13 f7 bd 67 d3 e7 00 5e eb 4a 00 6b 4a be 4a 70 39 17 16 00 1b 80 fa 14 99 04 8a 60 93 98 0b 3a 6a 1d 7b 2a 2a 35 d7 8e 22 c0 0d 57 d2 10 95 61 07 28 00 4c 3f 25 38 d7 80 01 3b e0 00 02 b6 79 b9 02 b5 80 16 0a e9 fe 33 9f 55 cd 02 bc 2f f6 5e b0 06 97 f7 4e 60 18 75 dd 6c 81 cf e9 38 40 39 7d df 86 02 be dd 94 65 80 de c0 03 fb 48 65 c2 07 ff f1 4c 80 46 df fc 21 1c 0b fd ff 7d bf fc 04 a5 e6 83 68 30 d8 54 26 30 43 1e b7 d2 2b 17 e4 c2 f8 f0 ea 6b 99 73 29 d7 7c 4a 60 4b 9e 65 d2 dd 21 fd 61 Data Ascii: ?f_tR"lF8T6E8Kg"sYJCWuI.g^JkJJp9`:j{**5"Wa(L?%8;y3U/^N`ul8@9}eHeLF!}h0T&0C+ks)\|J`Ke!a
2024-09-30 13:17:02 UTC	16384	IN	Data Raw: 59 2e 92 34 65 ae ae 73 86 39 0b f9 e6 e0 1a 06 9c b1 7b d1 16 49 a1 1d 8a 69 c2 bc f9 63 a5 ef 53 e1 ad 5f b1 c7 a5 00 01 82 9a 97 c3 6f 71 45 5e 39 a3 83 92 5d 3b e1 01 60 05 98 a1 3f 87 4d 25 71 2b 28 b7 96 8c 75 dc 89 cd 35 93 4b 52 68 06 9d 54 a4 46 94 57 48 ad 77 ff f5 61 08 82 b6 79 df fe 7e 56 35 03 4b f3 4f ac f4 1a 17 23 53 bb e9 80 14 1d 97 5c f3 10 19 35 88 49 66 15 36 7c 6a 06 ff bf d6 00 01 ac 74 93 3c 8d 41 70 b1 66 fe bb ba 39 92 b2 86 87 b1 d8 03 3f fb 94 06 47 65 f7 fc c3 c6 c0 82 c0 39 21 e3 2d 1e ff f1 4c 80 69 df fc 21 1c 0b ea be b6 87 0e 04 9d ca 87 61 a1 58 60 56 2a 34 12 84 07 3e c0 7c 1b aa 68 82 74 d9 2f 7c 35 92 56 a8 27 8d fe f6 4c d2 b7 c9 21 c9 f1 b2 58 0b 3f 8c 42 19 a7 40 67 f2 d3 71 c5 3a 9a 13 7b 2f 47 f7 1f 33 51 30 e8 Data Ascii: Y.4es9{IicS_oqE^9];`?M%q+(u5KRhTFWHway~V5KO#S\5If6\|jt<Apf9?Ge9!-Li!aX`V*4>\|ht/\|5V'L!X?B@gq:{/G3Q0
2024-09-30 13:17:02 UTC	16384	IN	Data Raw: e2 f0 3e f3 3d 14 02 44 7d 62 02 2b a9 51 0c 99 f9 bc 4b 04 c6 90 8c d2 71 85 a1 32 3d 74 79 60 bd a4 8b 73 f4 27 66 7b f2 46 33 ad a9 c3 c2 3d d0 a7 28 ad fe b8 6f cd ab 51 23 ff 5e a9 d8 db 67 89 b8 50 5f 1f bf 60 51 9a e4 6b 5d 0a c4 a1 02 ae 5d 7d 73 3f 60 1c 74 72 5d 10 15 56 4a 31 66 57 98 99 39 1c a0 b5 db b8 ab 7e 7a 5e a0 eb 9b aa ae 38 a8 e8 d2 85 d0 4a 87 fa 16 78 59 d4 54 f4 4f 49 ab b7 5a 33 27 7b bf dc 6d 02 27 56 91 1c b1 6d a4 ac e3 80 21 6f b9 6a 84 3c 65 cd 35 90 10 94 31 a3 42 4c ae 41 9b 86 11 04 17 d1 93 b1 0e ef a1 42 aa d6 6c 96 fb a7 83 c5 46 6d 8d 1a 1a 5a 95 5c 58 bd aa e5 05 64 18 2b 91 d5 5c 9f a0 ca 9e 1e 1e d8 e4 68 1e 3f 43 5c a8 65 f0 01 e4 78 9a 7e 7b 18 d1 5e 69 56 c5 8f 95 f2 4a 93 aa cf b9 15 69 60 b3 0d 24 06 f3 ff fd Data Ascii: >=D}b+QKq2=ty`s'f{F3=(oQ#^gP_`Qk]]}s?`tr]VJ1fW9~z^8JxYTOIZ3'{m'Vm!oj<e51BLABlFmZ\Xd+\h?C\ex~{^iVJi`$
2024-09-30 13:17:02 UTC	16384	IN	Data Raw: ea 7f 9b be 85 a9 55 47 92 de 23 a0 66 47 12 59 06 83 19 cb d3 a8 ca 07 eb 30 a0 ac 03 08 42 e9 0b 33 ae c8 e4 b1 40 6c 94 61 0c 08 0e f1 dd 0f 1a 62 1d 34 e1 c9 3c af 9f 3c cb bc b4 e7 54 13 dc 28 9d d1 8f dc dc b8 f9 8a dd f5 cd dd ee 5e de ca af 89 b7 2e 90 23 48 03 56 8a f2 63 03 39 04 d1 16 d2 31 09 cc e2 51 95 d1 5c 05 98 03 2f 59 5a 37 9e 75 5a 0b 75 dc 82 f9 7c 96 7c 90 cb 8b e4 49 8e 1d 9f 81 af 2b d5 8f 71 f2 a0 b7 36 ab d0 16 6b 50 61 ca ac 6d e4 8e 87 06 7d f3 20 14 c0 73 24 ea 68 22 11 5d d4 55 65 71 71 63 65 03 9d 0e 84 47 0b 06 4d 2b 2e 69 48 2b 06 2f 4a f4 5a df 6e 55 b1 08 d9 cc b5 18 b6 b6 67 ec 97 39 a7 55 29 e1 66 df 98 a4 98 67 0e a3 55 9e 2d a6 ca 45 e0 06 15 0d a7 a1 cc da 50 d9 30 2a ba f9 da 00 29 aa a3 4c 49 c8 43 22 ef 1a a8 97 Data Ascii: UG#fGY0B3@lab4<<T(^.#HVc91Q\/YZ7uZu\|\|I+q6kPam} s$h"]UeqqceGM+.iH+/JZnUg9U)fgU-EP0*)LIC"
2024-09-30 13:17:02 UTC	2096	IN	Data Raw: 98 b6 80 60 92 60 0b 8a c7 23 b0 d0 c4 34 11 10 1c ec 03 a0 bd e7 94 59 77 dc df 5e 4c d7 7c 84 b2 06 20 7c 7c 5d cb 6b 11 41 d9 78 47 c3 84 49 a2 24 71 05 78 6a 96 73 5e bc eb 4b 74 6f ac bf d8 93 9f 2f 6e 59 dc 2a b9 86 70 aa 3c 32 3f 68 58 60 c3 ba 6d 89 0b cf ba 69 83 57 8b b7 ec de f9 8e 5e 6b 68 be 26 40 23 a8 f6 c0 57 59 e7 90 5e ff 53 ec 80 00 00 80 54 be 3a c9 69 0a 52 97 b2 77 6b 1e a8 48 06 16 28 03 28 82 b6 12 20 ba 94 0d 13 7f 43 77 e3 e2 4a 98 a7 37 28 cf e5 d8 66 05 e7 80 0d ff 03 ed 1c c0 1a 9c 9c c0 38 c0 00 00 14 f5 c7 c2 81 80 50 00 03 01 72 87 6b b0 85 08 d7 41 e2 54 4e 55 e4 92 c0 ea eb 2c 75 4b e3 53 d3 98 e7 b9 d2 5c a2 b4 e8 d1 e7 53 d7 a6 d5 64 8b 0a 06 33 24 0c 96 85 76 81 9a 61 19 4f 54 60 a3 b6 99 27 4f 59 3a ab 86 c8 07 49 7e Data Ascii: ``#4Yw^L\| \|\|]kAxGI$qxjs^Kto/nY*p<2?hX`miW^kh&@#WY^ST:iRwkH(( CwJ7(f8PrkATNU,uKS\Sd3$vaOT`'OY:I~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49932	142.250.185.78	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	857	OUT	POST /el/AGSKWxXnSE66mO87Xh0td5veDs0zBoJVxrZrwQN3xkDqvf0ujG6yW9x6L5GvSQ5ThReyKpeoE1An56R07N7XCAYumF9hZ5o4BiS7Ekb2ZNJg566-4CPrkZW75LhWaV--v90pu8dNVvs70g== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.multitran.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	155	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 37 37 30 32 32 32 30 37 31 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 33 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1727702220719,null,null,[[3,1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-09-30 13:17:02 UTC	1876	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-iZmE_VdDPyXmhAw9DAvs6Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmLw0JBicEqfwRoCxO5aF1n9gXjvx0usR4F46f3LrGuBWIib49zJV9vZBC7M-Vyo5JKUXxifnJ9XkppXopuYUqwLYhdlJpWW5BehsFPLQCpy8tPTM_PS440MjEwMLI3M9AzM4wsMAMNEL3o" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49928	142.250.185.174	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	701	OUT	GET /f/AGSKWxXFqCEi660SmhLNDaznrmn_K_vf3ONLw-fZWG54w-GaF18Z8jQFmo6T4kVsQFLz9WT8MBQNhBbwdhU87czheYwaeyGr5z9gR03SEhZ4I42iFg_m5Nctp5ISCm9gs4u1hNFuwdODyqLfkPPzw1O5lcMP0sCcg-al3X-3Pb0VnwUc-AIsfNovOoVDT7E7/_/websie-ads3./cgi/ad_/ad/empty./site_ads.-panel-ad. HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	1885	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-dRErwVPmAr0O18blJLSO5Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/ContributorGlobalRouterHttp/web-reports?context=eJzjKtDikmLw0pBiOO90h-k6EEt8fcmkAcRO6TNYg4C49eY51qlAnPTvPGsRELtrXWT1B2JDhUusjiBcdInVE4hVey6xmgLx_XWXWJ8D8d6Pl1iPAvHS-5dZ1wJxkcQV1iYgFuLmOHfy1XY2gRvX_1UqaSTlF8Yn5-eVFGUmlZbkF6Ulp6UWpxaVpRbFGxkYmRhYGpnpGZjGFxgAAHKXRl8" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:17:02 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 39 61 66 36 37 33 61 30 2d 30 37 34 66 2d 34 35 62 33 2d 62 30 61 38 2d 38 32 30 34 30 36 66 31 34 31 62 61 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['9af673a0-074f-45b3-b0a8-820406f141ba'] = true;
2024-09-30 13:17:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49934	169.150.255.181	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	393	OUT	GET /instream/content/reading/resoomer/hls/eng/main.m3u8 HTTP/1.1 Host: video.adpushup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	557	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/vnd.apple.mpegurl Content-Length: 2033 Connection: close Last-Modified: Wed, 11 Jan 2023 07:26:23 GMT ETag: "63be649f-7f1" X-Robots-Tag: : noindex, nofollow X-77-NZT: EggBqZb/swFBDAHDta8GAbcfhAEA X-77-NZT-Ray: f88df72e4ffbab69cea4fa6658df3d0f X-Accel-Expires: @1728639663 X-Accel-Date: 1727602863 X-Accel-Date-Max: 1726566053 X-77-Cache: HIT X-77-Age: 99359 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-30 13:17:02 UTC	2033	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 35 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 31 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 49 4e 46 3a 34 2e 30 35 33 2c 0a 6d 61 69 6e 5f 30 30 30 30 31 2e 61 61 63 0a 23 45 58 54 49 4e 46 3a 33 2e 39 38 39 2c 0a 6d 61 69 6e 5f 30 30 30 30 32 2e 61 61 63 0a 23 45 58 54 49 4e 46 3a 34 2e 30 31 31 2c 0a 6d 61 69 6e 5f 30 30 30 30 33 2e 61 61 63 0a 23 45 58 54 49 4e 46 3a 33 2e 39 38 39 2c 0a 6d 61 69 6e 5f 30 30 30 30 34 2e 61 61 63 0a 23 45 58 54 49 4e 46 3a 34 2e 30 31 31 2c 0a 6d 61 69 6e 5f 30 30 30 30 35 2e 61 61 63 0a 23 45 58 54 49 4e 46 Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-TARGETDURATION:5#EXT-X-MEDIA-SEQUENCE:1#EXT-X-PLAYLIST-TYPE:VOD#EXTINF:4.053,main_00001.aac#EXTINF:3.989,main_00002.aac#EXTINF:4.011,main_00003.aac#EXTINF:3.989,main_00004.aac#EXTINF:4.011,main_00005.aac#EXTINF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49921	54.155.119.8	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	625	OUT	POST /rtb/bid?src=prebid_prebid_8.45.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 1108 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	1108	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 35 33 66 35 61 38 66 31 31 30 65 64 65 36 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2d 69 6e 73 74 72 65 61 6d 2d 75 6e 69 74 22 2c 22 69 64 22 3a 22 35 33 36 33 37 65 61 66 31 30 62 35 35 38 22 2c 22 74 61 67 69 64 22 3a 22 31 31 32 37 31 33 33 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 38 35 2c 22 76 69 64 65 6f 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 76 69 64 65 6f 2f 6d 70 34 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 76 69 64 65 6f 2f 77 65 62 6d 22 5d 2c 22 6d 69 6e 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 6d 61 78 64 75 72 61 74 69 6f 6e 22 3a 33 30 2c 22 70 72 6f 74 6f 63 6f 6c 73 22 3a 5b 33 2c 36 2c 37 2c 38 5d 2c 22 77 22 3a Data Ascii: {"id":"253f5a8f110ede6","imp":[{"adunitcode":"multitran-instream-unit","id":"53637eaf10b558","tagid":"1127133","bidfloor":0.85,"video":{"mimes":["video/mp4","application/javascript","video/webm"],"minduration":0,"maxduration":30,"protocols":[3,6,7,8],"w":
2024-09-30 13:17:02 UTC	486	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/json Content-Length: 24 Connection: close Vary: Accept-Encoding Set-Cookie: ljt_reader=JaxdABZHFVdQXjOVSqS7W4vE;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type
2024-09-30 13:17:02 UTC	24	IN	Data Raw: 7b 22 69 64 22 3a 22 32 35 33 66 35 61 38 66 31 31 30 65 64 65 36 22 7d Data Ascii: {"id":"253f5a8f110ede6"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49925	3.124.64.248	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	833	OUT	POST /header/auction?lib=prebid&v=8.45.0&referrer=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&tmax=3000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 1797 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	1797	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 41 64 70 75 73 68 75 70 5f 49 6e 73 74 72 65 61 6d 5f 50 72 65 72 6f 6c 6c 22 2c 22 66 6c 6f 6f 72 22 3a 30 2e 38 35 2c 22 76 69 64 65 6f 22 3a 7b 22 68 22 3a 33 36 30 2c 22 77 22 3a 36 34 30 2c 22 61 70 69 22 3a 5b 32 5d 2c 22 63 6f 6e 74 65 78 74 22 3a 22 69 6e 73 74 72 65 61 6d 22 2c 22 6c 69 6e 65 61 72 69 74 79 22 3a 31 2c 22 6d 61 78 64 75 72 61 74 69 6f 6e 22 3a 33 30 2c 22 6d 69 6d 65 73 22 3a 5b 22 76 69 64 65 6f 2f 6d 70 34 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 76 69 64 65 6f 2f 77 65 62 6d 22 5d 2c 22 6d 69 6e 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 70 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 70 6c 61 79 62 61 63 6b 6d 65 74 68 Data Ascii: {"imp":[{"id":0,"tagid":"Adpushup_Instream_Preroll","floor":0.85,"video":{"h":360,"w":640,"api":[2],"context":"instream","linearity":1,"maxduration":30,"mimes":["video/mp4","application/javascript","video/webm"],"minduration":0,"placement":1,"playbackmeth
2024-09-30 13:17:02 UTC	763	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 p3p: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" access-control-allow-origin: https://www.multitran.com access-control-allow-credentials: true set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 x-auction-status: 29 set-cookie: tluid=1590848361649052531873; Max-Age=7776000; Expires=Sun, 29 Dec 2024 13:17:02 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None content-length: 19 connection: close
2024-09-30 13:17:02 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49927	18.244.15.236	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	2080	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9&pid=9p4eLEHty4Grr&cb=1&ws=1280x907&v=24.827.1552&t=3000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A85%2C%22id%22%3A%22Adpushup_Instream%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22640x480%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D [TRUNCATED] Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	451	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 272 Connection: close Access-Control-Allow-Origin: https://www.multitran.com Access-Control-Allow-Credentials: true Date: Mon, 30 Sep 2024 13:17:02 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 ee56c180ebc0f0d7092e692f115e2808.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: TqIXRzM6R_C7Mwuvi5z2SnQVO5g6V3appSdMuw3IBI_Vpn8zu2e-ZQ==
2024-09-30 13:17:02 UTC	272	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 6e 2d 69 6e 64 65 78 5f 6e 2d 61 63 75 69 74 79 61 64 73 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 63 6e 76 5f 6e 2d 69 6e 6d 6f 62 69 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 6e 2d 73 6d 61 61 74 6f 5f 6e 2d 73 68 61 72 65 74 68 72 6f 75 67 68 5f 6e 2d 6f 6e 65 74 61 67 5f 70 6d 2d 64 62 35 5f 6e 2d 76 6d 67 5f 6e 2d 62 61 69 64 75 5f 6e 2d 6e 61 74 69 76 6f 5f 61 6e 2d 64 62 35 5f 73 6f 76 72 6e 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-acuityads_n-MediaNet_n-Beeswax_smrt_cnv_n-inmobi_n-adYouLike_n-smaato_n-sharethrough_n-onetag_pm-db5_n-vmg_n-baidu_n-nativo_an-db5_sovrn_3lift_n-Out

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49935	172.64.151.101	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	365	OUT	GET /openrtb/pbjs?s=702064 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	578	IN	HTTP/1.1 204 No Content Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/json Connection: close CF-Ray: 8cb47da8ccec17f9-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i3g8QWn9HAfo6qMB2SQHgbBRfJqLHsy3oKrOWJHD9q4NRL4uTErrSo0mAYuducJ1qXfRT610Ca75Xr8vQ8mGfnEYzO2e%2FZ8DQgFRxi3U%2FAQNOA%2Bb%2FeaX7Sk85gXTYwRD9QqgpeGJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49936	104.18.41.106	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	611	OUT	POST /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Content-Length: 1551 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	1551	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 36 39 37 38 37 66 34 39 35 36 62 32 34 66 22 2c 22 74 6d 61 78 22 3a 32 31 30 30 2c 22 73 6f 75 72 63 65 22 3a 7b 22 66 64 22 3a 31 2c 22 65 78 74 22 3a 7b 22 73 63 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 61 64 70 75 73 68 75 70 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 35 30 62 32 30 61 39 62 62 64 61 62 37 35 31 34 63 30 39 36 65 31 32 64 33 62 36 66 30 36 64 38 22 2c 22 68 70 22 3a 31 2c 22 72 69 64 22 3a 22 32 36 39 37 38 37 66 34 39 35 36 62 32 34 66 22 7d 5d 7d 7d 7d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: {"id":"269787f4956b24f","tmax":2100,"source":{"fd":1,"ext":{"schain":{"ver":"1.0","complete":1,"nodes":[{"asi":"adpushup.com","sid":"50b20a9bbdab7514c096e12d3b6f06d8","hp":1,"rid":"269787f4956b24f"}]}}},"site":{"domain":"www.multitran.com","page":"https:/
2024-09-30 13:17:02 UTC	636	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2661 Connection: close vary: Origin access-control-allow-origin: https://www.multitran.com access-control-allow-credentials: true set-cookie: LW_SERVER=lw08; path=/ CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=BYE7zA08ucNc5GvH24a_m5Zf1fys0uzWhJhk495R4zA-1727702222-1.0.1.1-0BiIxfa0tQQ2K88tApEXkj_JVfE.85qyI3GfVNdiRMHY0_lio22OqdnL2z015e2osr3iZtRoFRYLwz3avr6x4w; path=/; expires=Mon, 30-Sep-24 13:47:02 GMT; domain=.ingage.tech; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb47da8e8be43cd-EWR
2024-09-30 13:17:02 UTC	733	IN	Data Raw: 7b 22 69 64 22 3a 22 32 36 39 37 38 37 66 34 39 35 36 62 32 34 66 22 2c 22 62 69 64 69 64 22 3a 22 30 31 4a 39 31 48 37 48 4a 53 43 30 50 4b 54 48 34 51 56 34 53 47 30 42 32 35 22 2c 22 6e 62 72 22 3a 30 2c 22 65 78 74 22 3a 7b 22 73 79 6e 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 70 69 78 65 6c 3f 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 25 32 46 77 64 63 25 32 46 76 31 25 32 46 73 79 6e 63 25 32 46 73 6f 76 72 6e 25 32 46 65 34 31 36 64 39 64 65 2d 37 33 61 33 2d 34 31 64 36 2d 38 37 35 62 2d 66 63 63 38 35 38 35 61 33 32 32 34 25 33 46 75 69 64 25 33 44 25 32 34 55 49 44 26 67 64 70 72 3d Data Ascii: {"id":"269787f4956b24f","bidid":"01J91H7HJSC0PKTH4QV4SG0B25","nbr":0,"ext":{"sync":[{"type":"iframe","url":"https://ap.lijit.com/pixel?redir=https%3A%2F%2Fcs.ingage.tech%2Fwdc%2Fv1%2Fsync%2Fsovrn%2Fe416d9de-73a3-41d6-875b-fcc8585a3224%3Fuid%3D%24UID&gdpr=
2024-09-30 13:17:02 UTC	1369	IN	Data Raw: 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 2f 77 64 63 2f 76 31 2f 73 79 6e 63 50 61 67 65 2f 75 6e 72 75 6c 79 3f 75 73 65 72 49 64 3d 65 34 31 36 64 39 64 65 2d 37 33 61 33 2d 34 31 64 36 2d 38 37 35 62 2d 66 63 63 38 35 38 35 61 33 32 32 34 26 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 31 72 78 2e 69 6f 25 32 46 75 73 65 72 73 79 6e 63 32 25 32 46 72 6d 70 73 73 70 25 33 46 73 75 62 25 33 44 69 6e 73 74 69 63 61 74 6f 72 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 2f 77 64 63 2f 76 31 2f 73 79 6e 63 50 61 67 65 2f 73 68 61 72 65 74 68 72 6f Data Ascii: type":"iframe","url":"https://cs.ingage.tech/wdc/v1/syncPage/unruly?userId=e416d9de-73a3-41d6-875b-fcc8585a3224&to=https%3A%2F%2Fsync.1rx.io%2Fusersync2%2Frmpssp%3Fsub%3Dinsticator"},{"type":"iframe","url":"https://cs.ingage.tech/wdc/v1/syncPage/sharethro
2024-09-30 13:17:02 UTC	559	IN	Data Raw: 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 67 6f 2e 73 6f 6e 6f 62 69 2e 63 6f 6d 2f 75 73 61 3f 6c 6f 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 25 32 46 77 64 63 25 32 46 76 31 25 32 46 73 79 6e 63 25 32 46 73 6f 6e 6f 62 69 25 32 46 65 34 31 36 64 39 64 65 2d 37 33 61 33 2d 34 31 64 36 2d 38 37 35 62 2d 66 63 63 38 35 38 35 61 33 32 32 34 25 33 46 75 69 64 25 33 44 26 67 64 70 72 3d 30 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 2f 77 64 63 2f 76 31 2f 73 79 6e 63 50 61 67 65 2f 6f 6e 65 74 61 67 3f 75 73 65 72 49 64 3d 65 34 31 36 64 39 64 Data Ascii: "type":"iframe","url":"https://sync.go.sonobi.com/usa?loc=https%3A%2F%2Fcs.ingage.tech%2Fwdc%2Fv1%2Fsync%2Fsonobi%2Fe416d9de-73a3-41d6-875b-fcc8585a3224%3Fuid%3D&gdpr=0"},{"type":"iframe","url":"https://cs.ingage.tech/wdc/v1/syncPage/onetag?userId=e416d9d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49923	54.170.214.245	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	613	OUT	POST /adreq?cb=10188 HTTP/1.1 Host: ads.servenobid.com Connection: keep-alive Content-Length: 1206 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.multitran.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.multitran.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	1206	OUT	Data Raw: 7b 22 73 69 64 22 3a 32 31 39 32 39 30 38 31 30 35 30 2c 22 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6d 75 6c 74 69 74 72 61 6e 2e 63 6f 6d 25 32 46 63 25 32 46 6d 2e 65 78 65 25 33 46 74 25 33 44 35 34 32 38 38 37 37 5f 31 5f 32 25 32 36 73 31 25 33 44 45 44 45 30 46 33 46 37 45 44 45 45 2d 45 38 46 31 46 31 45 42 45 35 45 34 45 45 45 32 45 30 46 32 45 35 45 42 46 43 46 31 45 41 45 38 45 39 22 2c 22 74 74 22 3a 22 44 69 63 74 69 6f 6e 61 72 79 22 2c 22 61 22 3a 5b 7b 22 7a 22 3a 5b 5b 36 34 30 2c 33 36 30 5d 5d 2c 22 64 22 3a 22 6d 75 6c 74 69 74 72 61 6e 2d 69 6e 73 74 72 65 61 6d 2d 75 6e 69 74 22 2c 22 66 6c 6f 6f 72 22 3a 30 2e 38 35 2c 22 67 22 3a 7b 7d 2c 22 73 69 64 22 3a 32 31 39 32 39 30 38 31 30 35 30 2c 22 70 69 64 22 Data Ascii: {"sid":21929081050,"l":"https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3DEDE0F3F7EDEE-E8F1F1EBE5E4EEE2E0F2E5EBFCF1EAE8E9","tt":"Dictionary","a":[{"z":[[640,360]],"d":"multitran-instream-unit","floor":0.85,"g":{},"sid":21929081050,"pid"
2024-09-30 13:17:02 UTC	556	IN	HTTP/1.1 200 Date: Mon, 30 Sep 2024 13:17:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: cap_908=10; domain=servenobid.com; SameSite=None; Expires=Tue, 01 Oct 2024 13:17:02 GMT; secure Access-Control-Allow-Origin: https://www.multitran.com AMP-Access-Control-Allow-Source-Origin: * Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin Access-Control-Allow-Credentials: true cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 vary: accept-encoding
2024-09-30 13:17:02 UTC	741	IN	Data Raw: 32 64 65 0d 0a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 64 65 76 69 63 65 22 3a 22 43 4f 4d 50 55 54 45 52 22 2c 22 73 69 74 65 22 3a 32 32 35 31 34 35 38 37 39 32 36 2c 22 62 69 64 73 22 3a 5b 5d 2c 22 73 79 6e 63 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 65 72 76 65 6e 6f 62 69 64 2e 63 6f 6d 2f 67 65 74 73 79 6e 63 3f 72 65 64 69 72 65 63 74 3d 63 68 72 6f 6d 65 25 33 41 25 32 46 25 32 46 76 65 72 73 69 6f 6e 25 32 46 22 2c 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 32 2f 72 6d 70 73 73 70 3f 73 75 62 3d 64 75 72 61 74 69 6f 6e 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 2e 73 65 72 76 65 6e 6f 62 69 64 2e 63 6f 6d 25 32 46 73 79 6e 63 25 33 46 70 69 64 25 33 Data Ascii: 2de{"country":"US","device":"COMPUTER","site":22514587926,"bids":[],"syncs":["https://ads.servenobid.com/getsync?redirect=chrome%3A%2F%2Fversion%2F","https://sync.1rx.io/usersync2/rmpssp?sub=duration&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3
2024-09-30 13:17:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49940	151.101.65.229	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	391	OUT	GET /gh/prebid/currency-file@1/latest.json?date=20240930 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:17:02 UTC	752	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1594 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/json; charset=utf-8 X-JSD-Version: 1.0.2194 X-JSD-Version-Type: version ETag: W/"63a-YvuTSCsR5uWD6oFfjKADQOzzePs" Accept-Ranges: bytes Age: 33367 Date: Mon, 30 Sep 2024 13:17:02 GMT X-Served-By: cache-fra-eddf8230103-FRA, cache-nyc-kteb1890022-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-30 13:17:02 UTC	1378	IN	Data Raw: 7b 22 64 61 74 61 41 73 4f 66 22 3a 22 32 30 32 34 2d 30 39 2d 32 37 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 2c 22 67 65 6e 65 72 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 39 2d 32 39 54 31 36 3a 30 30 3a 33 35 2e 35 32 31 5a 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 7b 22 55 53 44 22 3a 7b 22 55 53 44 22 3a 31 2c 22 4a 50 59 22 3a 31 34 33 2e 30 36 33 32 37 32 39 38 37 39 39 30 37 2c 22 42 47 4e 22 3a 31 2e 37 35 32 38 32 33 30 38 36 35 37 34 36 35 35 2c 22 43 5a 4b 22 3a 32 32 2e 35 34 37 30 35 31 34 34 32 39 31 30 39 32 2c 22 44 4b 4b 22 3a 36 2e 36 38 33 30 39 37 33 32 39 32 37 30 34 37 39 2c 22 47 42 50 22 3a 30 2e 37 34 36 38 39 30 31 32 33 36 37 38 30 37 38 36 2c 22 48 55 46 22 3a 33 35 35 2e 37 35 33 37 31 39 33 30 34 35 33 34 39 2c Data Ascii: {"dataAsOf":"2024-09-27T00:00:00.000Z","generatedAt":"2024-09-29T16:00:35.521Z","conversions":{"USD":{"USD":1,"JPY":143.0632729879907,"BGN":1.752823086574655,"CZK":22.54705144291092,"DKK":6.683097329270479,"GBP":0.7468901236780786,"HUF":355.7537193045349,
2024-09-30 13:17:02 UTC	216	IN	Data Raw: 31 37 35 35 2e 32 31 33 37 30 38 30 33 32 33 35 30 33 2c 22 4d 58 4e 22 3a 32 36 2e 32 30 33 34 31 32 36 30 38 38 39 33 39 2c 22 4d 59 52 22 3a 35 2e 35 32 32 39 33 30 37 31 35 38 37 39 39 31 31 2c 22 4e 5a 44 22 3a 32 2e 31 31 37 37 36 31 34 30 35 33 36 31 32 39 39 34 2c 22 50 48 50 22 3a 37 35 2e 31 30 34 39 39 34 31 32 30 33 32 39 32 37 2c 22 53 47 44 22 3a 31 2e 37 31 36 35 30 33 38 37 35 37 38 32 39 35 36 33 2c 22 54 48 42 22 3a 34 33 2e 33 35 39 35 37 31 38 36 33 39 37 35 36 32 2c 22 5a 41 52 22 3a 32 32 2e 39 32 39 37 35 35 39 33 33 36 36 37 37 31 37 2c 22 45 55 52 22 3a 31 2e 31 39 39 39 33 32 38 30 33 37 36 32 39 38 39 33 7d 7d 7d Data Ascii: 1755.2137080323503,"MXN":26.2034126088939,"MYR":5.522930715879911,"NZD":2.1177614053612994,"PHP":75.10499412032927,"SGD":1.7165038757829563,"THB":43.35957186397562,"ZAR":22.929755933667717,"EUR":1.1999328037629893}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49939	142.250.185.98	443	7836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:17:02 UTC	704	OUT	GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.multitran.com%2Fc%2Fm.exe%3Ft%3D5428877_1_2%26s1%3D%25ED%25E0%25F3%25F7%25ED%25EE-%25E8%25F1%25F1%25EB%25E5%25E4%25EE%25E2%25E0%25F2%25E5%25EB%25FC%25F1%25EA%25E8%25E9 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-09-30 13:17:02 UTC	1000	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Date: Mon, 30 Sep 2024 13:17:02 GMT Expires: Mon, 30 Sep 2024 13:17:02 GMT Cache-Control: private, max-age=3600, stale-while-revalidate=3600 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 452 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkWSbxOlTMIkl-LIZeF82OqWfqWAA_MkcH5wRG4XcDrGH8bPOMRFl5GIdbd; expires=Wed, 30-Sep-2026 13:17:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:17:02 UTC	390	IN	Data Raw: 5b 6e 75 6c 6c 2c 5b 5b 5b 22 31 30 33 35 31 32 36 39 38 22 5d 2c 5b 22 31 32 35 34 31 34 34 22 5d 2c 5b 22 32 31 36 38 37 35 34 33 38 37 35 22 5d 2c 5b 22 32 32 39 31 37 34 39 30 39 34 31 22 5d 2c 5b 22 32 33 32 30 31 36 39 38 38 30 35 22 5d 2c 5b 22 32 35 38 37 33 32 37 36 22 5d 2c 5b 22 34 32 34 35 33 36 35 32 38 22 5d 2c 5b 22 37 30 34 37 22 5d 2c 5b 22 37 31 30 33 22 5d 5d 5d 2c 5b 5b 5b 22 31 30 33 35 31 32 36 39 38 22 2c 31 5d 2c 5b 22 31 32 35 34 31 34 34 22 2c 31 5d 2c 5b 22 32 31 36 38 37 35 34 33 38 37 35 22 2c 31 5d 2c 5b 22 32 32 39 31 37 34 39 30 39 34 31 22 2c 31 5d 2c 5b 22 32 33 32 30 31 36 39 38 38 30 35 22 2c 31 5d 2c 5b 22 32 35 38 37 33 32 37 36 22 2c 31 5d 2c 5b 22 34 32 34 35 33 36 35 32 38 22 2c 31 5d 2c 5b 22 37 30 34 37 22 2c 31 Data Ascii: [null,[[["103512698"],["1254144"],["21687543875"],["22917490941"],["23201698805"],["25873276"],["424536528"],["7047"],["7103"]]],[[["103512698",1],["1254144",1],["21687543875",1],["22917490941",1],["23201698805",1],["25873276",1],["424536528",1],["7047",1
2024-09-30 13:17:02 UTC	62	IN	Data Raw: 30 34 37 22 2c 31 5d 2c 5b 22 37 31 30 33 22 2c 31 5d 5d 5d 2c 5b 5b 5b 22 37 30 34 37 22 2c 31 2c 5b 5b 31 5d 5d 5d 2c 5b 22 31 32 35 34 31 34 34 22 2c 31 2c 5b 5b 31 5d 5d 5d 5d 5d 5d Data Ascii: 047",1],["7103",1]]],[[["7047",1,[[1]]],["1254144",1,[[1]]]]]]

Target ID:	0
Start time:	09:15:33
Start date:	30/09/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0xf80000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	09:16:36
Start date:	30/09/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff760f40000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:16:37
Start date:	30/09/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff760f40000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	09:16:43
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:16:43
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1948,i,36543809609165043,4265203075758315399,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:16:46
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.multitran.ru/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:17:00
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4824 --field-trial-handle=1948,i,36543809609165043,4265203075758315399,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:17:21
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	09:17:22
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2412,i,10596119694725537203,12646345865528063777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	09:17:25
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.multitran.ru/c/m.exe?t=5428877_1_2&s1=%ED%E0%F3%F7%ED%EE-%E8%F1%F1%EB%E5%E4%EE%E2%E0%F2%E5%EB%FC%F1%EA%E8%E9"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	09:17:38
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4992 --field-trial-handle=2412,i,10596119694725537203,12646345865528063777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of open application windows. Window listings could convey information about how the system is used.For example, information about application windows could be used identify potential data to collect as well as identifying security tooling ( Security Software Discovery ) to evade.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\Desktop\D9E40000

C:\Users\user\Desktop\D9E40000:Zone.Identifier

C:\Users\user\Desktop\Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx (copy)

C:\Users\user\Desktop\~$Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Windows Analysis Report
Serhii Dubinevych - FuelWell-P&L-financial-projection-02_2023.xlsx