Edit tour

Windows Analysis Report
https://youruno-chicka.blogspot.com/

Overview

General Information

Sample URL:	https://youruno-chicka.blogspot.com/
Analysis ID:	1525651
Tags:	urlscan
Infos:

Detection

Score:	24
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains obfuscated javascript

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

Found iframes

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1692 --field-trial-handle=2056,i,17654489147244666863,5989065647779282370,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://youruno-chicka.blogspot.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML page contains obfuscated javascript

Source: https://aqfer.lijit.com/samples/empty.js

HTTP Parser: (function(){})()

Source: https://youruno-chicka.blogspot.com	HTTP Parser: Form action: http://feedburner.google.com/fb/a/mailverify blogspot google
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Form action: http://feedburner.google.com/fb/a/mailverify blogspot google
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Form action: http://feedburner.google.com/fb/a/mailverify blogspot google
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Form action: http://feedburner.google.com/fb/a/mailverify blogspot google
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Form action: http://feedburner.google.com/fb/a/mailverify blogspot google
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Form action: http://feedburner.google.com/fb/a/mailverify blogspot google
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Form action: http://feedburner.google.com/fb/a/mailverify blogspot google
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Form action: http://feedburner.google.com/fb/a/mailverify blogspot google

Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=youruno-chicka.blogspot.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F2022%2F12%2Fups-ltl-tracking.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2022%2F12%2Fups-ltl-tracking.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=youruno-chicka.blogspot.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F2022%2F12%2Fups-ltl-tracking.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2022%2F12%2Fups-ltl-tracking.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.6440824229854869&stid=ZH0ACGb%252F08oAAAAIVAOoAw%253D%253D&tt=t.dhj&dhjLcy=1728041949448&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=youruno-chicka.blogspot.com&pn=%2F2022%2F12%2Fups-ltl-tracking.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2022%2F12%2Fups-ltl-tracking.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: https://dp2.33across.com/ps/?tt=iframe&pid=1198&us_privacy=&random=1728041949054.4
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=youruno-chicka.blogspot.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F2022%2F12%2Fcps-teacher-directory.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2022%2F12%2Fcps-teacher-directory.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=youruno-chicka.blogspot.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F2022%2F12%2Fcps-teacher-directory.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2022%2F12%2Fcps-teacher-directory.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.4328040925871892&stid=ZH0ACGb%252F08oAAAAIVAOoAw%253D%253D&tt=t.dhj&dhjLcy=1728041962631&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=youruno-chicka.blogspot.com&pn=%2F2022%2F12%2Fcps-teacher-directory.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2022%2F12%2Fcps-teacher-directory.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=youruno-chicka.blogspot.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=youruno-chicka.blogspot.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.1638713592211536&stid=ZH0ACGb%252F08oAAAAIVAOoAw%253D%253D&tt=t.dhj&dhjLcy=1728041979981&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=youruno-chicka.blogspot.com&pn=%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=youruno-chicka.blogspot.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://youruno-chicka.blogspot.com	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.17798619393600457&stid=ZH0ACGb%252F08oAAAAIVAOoAw%253D%253D&tt=t.dhj&dhjLcy=1728041995189&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=youruno-chicka.blogspot.com&pn=%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&qs=na&rdn=youruno-chicka.blogspot.com&rpn=%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&rqs=na&cc=US&cont=NA&ipaddr=

Source: https://youruno-chicka.blogspot.com

HTTP Parser: Base64 decoded: {"typ":"JWT","alg":"HS256"}

Source: https://youruno-chicka.blogspot.com

HTTP Parser: Title: ups ltl tracking does not match URL

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49810 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 20.190.159.23:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.65.92:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49918 version: TLS 1.2

Source: unknown

Network traffic detected: IP country count 11

Source: global traffic

TCP traffic: 192.168.2.5:49806 -> 1.1.1.1:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49810 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.7.2.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-Copertina.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.pinimg.com/originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.ebayimg.com/thumbs/images/g/1SIAAOSwpE1if-TG/s-l96.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/summary?alt=json-in-script&callback=pageNavi&max-results=99999 HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg HTTP/1.1Host: i.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.7.2.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.ebayimg.com/thumbs/images/g/1SIAAOSwpE1if-TG/s-l96.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4706781&@f16&@g1&@h1&@i1&@j1728041926449&@k0&@l1&@myouruno-chicka&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-10621084&@b3:1728041926&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://youruno-chicka.blogspot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg HTTP/1.1Host: i.pinimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4706781&@f16&@g1&@h1&@i1&@j1728041926449&@k0&@l1&@myouruno-chicka&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-10621084&@b3:1728041926&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/summary?alt=json-in-script&callback=pageNavi&max-results=99999 HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&j= HTTP/1.1Host: e.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /idg/?su=1040172804192949803086BC6CA2270E HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728041929; l=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=1ye1&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728041929; l=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728041929; l=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping/?t=300&d=youruno-chicka.blogspot.com HTTP/1.1Host: dtsedge.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=1ye1&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1728041929570&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&t=youruno-chicka&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=1040172804192949803086BC6CA2270E HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&event_source=dtscout&rnd=0.9027742755099117&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1728041929570&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&t=youruno-chicka&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=CoIKSmb/08t9YDaWCiSZAg==
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1728041931494%7D%5D
Source: global traffic	HTTP traffic detected: GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=c00e032a4a7d676e; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /ping/?t=300&d=youruno-chicka.blogspot.com HTTP/1.1Host: dtsedge.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728041931494.1&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728041931494.3&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&event_source=dtscout&rnd=0.9027742755099117&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /lt/c/16311/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn-tc.33across.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16311/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: /Origin: https://youruno-chicka.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; lotame_domain_check=youruno-chicka.blogspot.com
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed
Source: global traffic	HTTP traffic detected: GET /386076.gif?partner_uid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50131&et=13&cid=lr&fp=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed
Source: global traffic	HTTP traffic detected: GET /395886.gif?partner_uid=3647467566085439504 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; TDCPM=CAEYBSgCMgsI4MW60fucsj0QBTgB
Source: global traffic	HTTP traffic detected: GET /lt/shared/2/lt.iframe.html?c=3825 HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /6/data HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NzQ2NzU2NjA4NTQzOTUwNBAAGg0I0qf_twYSBQjoBxAAQgBKAA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=KasqauwbnuYXD9TafsTuK2rKnTNTHxB3mURO3O2e0VQ=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixels?src=LTJS&s=31%2C92%2C49%2C136%2C135%2C148%2C7%2C33%2C78%2C121%2C26%2C22%2C67%2C116%2C61%2C106%2C104%2C8%2C54%2C41%2C3%2C2%2C94&c=3825&ch=%7B%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tags.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /ttd?uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2fgfA_immdQT6-MSLB7lohTxvZ32H4qV2sk4Yb8xLDKU&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=d6a8e62c02b39434340fe0385cfb38dfdd73cda2c50b4b3ca2af8dd13273d13ff4cb09cee1a4f8eb&person_id=3647467566085439504&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647467566085439504
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/19/9.gif?puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0 HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=51mdg9u&uid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/c25ae5b72d8d3274a003b67bfc2dc4ed/url/https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=$!%7BTURN_UUID%7D/gdpr=0 HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.json?sid=9202507693 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=c25ae5b72d8d3274a003b67bfc2dc4ed HTTP/1.1Host: global.ib-ibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=d6a8e62c02b39434340fe0385cfb38dfdd73cda2c50b4b3ca2af8dd13273d13ff4cb09cee1a4f8eb&person_id=3647467566085439504&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647467566085439504
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=66ea7e9d-8204-47a8-85d5-80a3ea995cbb#1728041940510
Source: global traffic	HTTP traffic detected: GET /ttd?uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2fgfA_immdQT6-MSLB7lohTxvZ32H4qV2sk4Yb8xLDKU&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
Source: global traffic	HTTP traffic detected: GET /c/19/19/9/1.gif?puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=eye&google_cm&google_sc&google_hm=MnFWN1JueXdyME9FWmM2R0lvRUd5amNXZGYyOUMwZDBDUnRuSU9hUU9ud0k&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotame_dmp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /adscores/g.json?sid=9202507693 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A9968aqrePwCnLlTHyVWsDpy6JiT4pmib
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /map/c=10915/tp=TRNN/tpid=4278757405457797050/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /cookie-sync/lotame?gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /map/c=1389/tp=STSC/tpid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /ium?sourceid=11&uid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; TDCPM=CAEYBSABKAIyCwjgxbrR-5yyPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50146&et=0&fp=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647467566085439504
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1Host: sync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100; pid=7659047516959341367
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; TDCPM=CAEYBSABKAIyCwjgxbrR-5yyPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=5B34632B-EDA1-4BCE-8599-0FED55A84249&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&google_gid=CAESEObxwrCaOzker5SuoLKFgUo&google_cver=1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /cookie-sync/lotame?gdpr=0&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=LOTAME&partner_device_id=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmCvpx8rMTzl57wx-GYSdjj43qcfUDjXGHyz6V1rRW5ayPQf09fx5dmq9JYCyQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotame_dmp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmCvpx8rMTzl57wx-GYSdjj43qcfUDjXGHyz6V1rRW5ayPQf09fx5dmq9JYCyQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /map/c=1811/tp=TBMG/tpid=Zv-T1QAG_BWYbwAF/gdpr=0&_test=Zv-T1QAG_BWYbwAF HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP HTTP/1.1Host: dmp.truoptik.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=10915/tp=TRNN/tpid=4278757405457797050/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50146&et=0&fp=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647467566085439504
Source: global traffic	HTTP traffic detected: GET /sync?nid=lotame&gdpr=0 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728041942667; TapAd_DID=de1e418f-8e30-402a-a231-d67b35cef2ca
Source: global traffic	HTTP traffic detected: GET /map/c=10620/tp=TRAD/tpid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d/gdpr=0/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /ups/58736/cms?partner_id=LOTME&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /map/c=1389/tp=STSC/tpid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /qmap?c=9130&tp=BEES&tpid=AABA0k7N_6gAABW8jSU1uA&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=4278757405457797050
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=297708294 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=5B34632B-EDA1-4BCE-8599-0FED55A84249&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /k/264.gif?puid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&ttl=%%TTL%% HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#2; 3pi=19#1728041941626#-48783062#c25ae5b72d8d3274a003b67bfc2dc4ed; cf=gif; cip=19; cnac=8; car=2; gdpr=0\|
Source: global traffic	HTTP traffic detected: GET /map/c=10832/tp=TRUP/tpid=458588359a002125fac7aedfa09a88e3 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /map/c=1811/tp=TBMG/tpid=Zv-T1QAG_BWYbwAF/gdpr=0&_test=Zv-T1QAG_BWYbwAF HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D9828%2Ftp%3DADBE%2Ftpid%3D%24%7BDD_UUID%7D%2Fgdpr=0 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=5436/tp=SVRN/tpid=na/pv=y?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D5001%263pid%3D%24%7Bprofile_id%7D HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=na HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=de1e418f-8e30-402a-a231-d67b35cef2ca%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253Dde1e418f-8e30-402a-a231-d67b35cef2ca%252C%25257B%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252520Chrome%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25255Cu003dBrand%252522%25252C%252522version%252522%25253A%2525228.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%25252210.0.0%252522%25257D&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; TDCPM=CAEYASABKAIyCwjO4MmD_JyyPRAFOAFaBmxvdGFtZWAC
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1728041942135 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728041942105 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /map/c=10620/tp=TRAD/tpid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d/gdpr=0/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ups/58736/cms?partner_id=LOTME&gdpr=0&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNfT_2YCEHSr_pg0u5TD7uGn4Vg8CgQFEgEBAQElAWcJZ9xA0iMA_eMAAA&S=AQAAAqQgVqITPiYZy9376V71gps
Source: global traffic	HTTP traffic detected: GET /qmap?c=9130&tp=BEES&tpid=AABA0k7N_6gAABW8jSU1uA&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=e4968f08-978b-4a59-92c1-7d61fd432a2b&vxii_rmax=2 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU0OTY4ZjA4LTk3OGItNGE1OS05MmMxLTdkNjFmZDQzMmEyYiIsImwiOjE3MjgwNDE5NDM5MzQsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D281%252Ftp%253DANXS%252Ftpid%253D%2524UID%252Fgdpr%253D0%252Frand%3D297708294 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=cSAi24oG3d-WtdNjbvldK2to7xl5GCLQ5sK8Kxb4wDJQjN1BsfbWiV0GRLC5Bgv2G89d-tmeaYZet-teJ3KwCaAIRNWxfeVJSwrXaMWry0w.; receive-cookie-deprecation=1; uuid2=772338300018818479
Source: global traffic	HTTP traffic detected: GET /match?bid=1mpjpn0&turn_id=4278757405457797050&newuser=1&dc_rc=2&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&ttd_puid=de1e418f-8e30-402a-a231-d67b35cef2ca%2Chttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D10158%252Ftp%253DTPAD%252Ftpid%253Dde1e418f-8e30-402a-a231-d67b35cef2ca%2C%257B%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2520Chrome%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%255Cu003dBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728041942667; TapAd_DID=de1e418f-8e30-402a-a231-d67b35cef2ca; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1728041942135&_li_chk=true&previous_uuid=620ae37db1824fc2a4f3dab2f47d0b90 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=620ae37d-b182-4fc2-a4f3-dab2f47d0b90
Source: global traffic	HTTP traffic detected: GET /2022/12/ups-ltl-tracking.html HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; lotame_domain_check=youruno-chicka.blogspot.com; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDevice
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=121998&dpuuid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D9828%2Ftp%3DADBE%2Ftpid%3D%24%7BDD_UUID%7D%2Fgdpr=0 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73112750750020587081523322233517150305
Source: global traffic	HTTP traffic detected: GET /map/c=10832/tp=TRUP/tpid=458588359a002125fac7aedfa09a88e3 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1fsmrs8255tsw&us_privacy=$(US_PRIVACY) HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=c25ae5b72d8d3274a003b67bfc2dc4ed HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=620ae37d-b182-4fc2-a4f3-dab2f47d0b90&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU0OTY4ZjA4LTk3OGItNGE1OS05MmMxLTdkNjFmZDQzMmEyYiIsImwiOjE3MjgwNDE5NDQ1MDYsInQiOjF9; sc=eyJpIjoiZTQ5NjhmMDgtOTc4Yi00YTU5LTkyYzEtN2Q2MWZkNDMyYTJiIiwic2lkIjoic2lkLTQyMTkxODM2LTgyNDUtMTFlZi1iZjA4LTAyNDIwYWZmMDRjYiIsIm1zIjozLCJ0cyI6MSwicHMiOjEsInNwIjo1MDA3LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA0MTk0NDUwNywiXyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /map/c=10158/tp=TPAD/tpid=de1e418f-8e30-402a-a231-d67b35cef2ca HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-PtZnoARE2pyFEhiTtRIMQo36Po2B.O4y0ZE-~A&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=281/tp=ANXS/tpid=772338300018818479/gdpr=0/rand=297708294 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/tpid=73112750750020587081523322233517150305/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1fsmrs8255tsw&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcJ7AQZHQjAg9xugTEiVs6KK
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=1133&j=0 HTTP/1.1Host: loadm.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://id5-sync.com/c/19/2/7/3.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=cSAi24oG3d-WtdNjbvldK2to7xl5GCLQ5sK8Kxb4wDJQjN1BsfbWiV0GRLC5Bgv2G89d-tmeaYZet-teJ3KwCaAIRNWxfeVJSwrXaMWry0w.; receive-cookie-deprecation=1; uuid2=772338300018818479
Source: global traffic	HTTP traffic detected: GET /2022/12/undefined HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; lotame_domain_check=youruno-chicka.blogspot.com; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDevice
Source: global traffic	HTTP traffic detected: GET /help.insiteship.com/330/image403.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.buy-extensions.com/image/cache/catalog/additionalimg/ups-rating-admin-700x700.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=throtle HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCDXp_-3BjABOgT87-jmQgQdqB60.%2F6tLdu5EsFRzBePzG05UC8AiUUUJKSWdHEW1EbbZfbw; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCDXp_-3BjABOgT87-jmQgQdqB60.%2F6tLdu5EsFRzBePzG05UC8AiUUUJKSWdHEW1EbbZfbw
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=c25ae5b72d8d3274a003b67bfc2dc4ed&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcJ7AQZHKDhG8sisRA-6jmw7
Source: global traffic	HTTP traffic detected: GET /homesurfingonline.com/wp-content/uploads/2018/01/guide-on-ups-air-ground-freight-ltl-tracking-1024x640.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /support.webshopapps.com/freight/wp-content/uploads/sites/21/2013/12/ups6.png HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /docs.shipmount.com/wp-content/uploads/2020/07/s6-768x235.png HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?uid=Zv-T1QAG_BWYbwAF&bid=0rijhbu&dc_rc=3&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-plan-settings-3.png HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; lotame_domain_check=youruno-chicka.blogspot.com; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDeviceIf-Modified-Since: Fri, 30 Aug 2024 07:20:22 GMT
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=bb8a86b5-a336-c7e6-fc10-ef4342171444&iiqpciddate=1728041944595&tsrnd=18_1728041944596&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&gdpr=0 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /c/19/2/7/3.gif?puid=772338300018818479&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#2; 3pi=19#1728041941626#-48783062#c25ae5b72d8d3274a003b67bfc2dc4ed\|264#1728041944419#-1145940648#6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4706781&@f16&@g0&@h2&@i1&@j1728041944834&@k18385&@l2&@mups%20ltl%20tracking&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-26286205&@b3:1728041945&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=1133&j=0&xl8blockcheck=1 HTTP/1.1Host: loadm.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EE="aa65d0608318d38a490174bb7c6551f6"; ud="eJxrXxzq6XKLQSEx0cw0xcDMwMLY0CLF2CLRxNLA0NwkKck82czU1DDNbHFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngk9qrwIAHi0mww%253D%253D"
Source: global traffic	HTTP traffic detected: GET /map/c=281/tp=ANXS/tpid=772338300018818479/gdpr=0/rand=297708294 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-PtZnoARE2pyFEhiTtRIMQo36Po2B.O4y0ZE-~A&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5044&vxii_pdid=RO9hsv43VjtJegiqx3XZlggueyE&_t=1728041946 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU0OTY4ZjA4LTk3OGItNGE1OS05MmMxLTdkNjFmZDQzMmEyYiIsImwiOjE3MjgwNDE5NDU1NDEsInQiOjJ9; sc=eyJpIjoiZTQ5NjhmMDgtOTc4Yi00YTU5LTkyYzEtN2Q2MWZkNDMyYTJiIiwic2lkIjoic2lkLTQyMTkxODM2LTgyNDUtMTFlZi1iZjA4LTAyNDIwYWZmMDRjYiIsIm1zIjozLCJ0cyI6MiwicHMiOjIsInNwIjo1MDQ0LCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA0MTk0NTU0Mn0=
Source: global traffic	HTTP traffic detected: GET /map/c=10158/tp=TPAD/tpid=de1e418f-8e30-402a-a231-d67b35cef2ca HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/tpid=73112750750020587081523322233517150305/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1fsmrs8255tsw&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1fsmrs8255tsw; ljt_reader=JcJ7AQZHQjAg9xugTEiVs6KK
Source: global traffic	HTTP traffic detected: GET /teknowlogi.com/wp-content/uploads/2020/03/ups-freight-ltl.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /teknowlogi.com/wp-content/uploads/2020/03/ups-freight-1536x1024.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external-preview.redd.it/dCbpHY7rlr-_hPnobDE-ACO6ZtMp7kWneS1ohT62SF8.jpg?auto=webp&s=157cb93735a077579f41bbac8562c8e460d82a5a HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /www.buy-extensions.com/image/cache/catalog/additionalimg/ups-rating-admin-700x700.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.insiteship.com/330/image403.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-product-settings-3.png HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-plan-settings-3.png HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&j= HTTP/1.1Host: e.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=c25ae5b72d8d3274a003b67bfc2dc4ed&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1fsmrs8255tsw; _ljtrtb_5001=c25ae5b72d8d3274a003b67bfc2dc4ed; ljt_reader=JcJ7AQZHKDhG8sisRA-6jmw7
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4706781&@f16&@g0&@h2&@i1&@j1728041944834&@k18385&@l2&@mups%20ltl%20tracking&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-26286205&@b3:1728041945&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5007&vxii_pdid=aa65d0608318d38a490174bb7c6551f6 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU0OTY4ZjA4LTk3OGItNGE1OS05MmMxLTdkNjFmZDQzMmEyYiIsImwiOjE3MjgwNDE5NDU1NDEsInQiOjJ9; sc=eyJpIjoiZTQ5NjhmMDgtOTc4Yi00YTU5LTkyYzEtN2Q2MWZkNDMyYTJiIiwic2lkIjoic2lkLTQyMTkxODM2LTgyNDUtMTFlZi1iZjA4LTAyNDIwYWZmMDRjYiIsIm1zIjozLCJ0cyI6MiwicHMiOjIsInNwIjo1MDQ0LCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA0MTk0NTU0Mn0=
Source: global traffic	HTTP traffic detected: GET /cookie-sync/throtle? HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AABA0k7N_6gAABW8jSU1uA; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMTc0ODM4ODY2Ni90LzI/dpuid/ID5-bf3681nqp2gpsS1MRex0xmOXBAccmCOncBNIaVlQzQ/url/https%3A%2F%2Fid5-sync.com%2Fc%2F19%2F224%2F6%2F4.gif%3Fpuid%3D%24%21%7BTURN_UUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=4278757405457797050
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=bb8a86b5-a336-c7e6-fc10-ef4342171444&iiqpciddate=1728041944595&tsrnd=18_1728041944596&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&gdpr=&ckls=true&ci=hxsRtAsilg&nc=false&trid=-1322560431 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=hxsRtAsilg
Source: global traffic	HTTP traffic detected: GET /www.refundretriever.com/wp-content/uploads/2017/12/1-UPS-Hundredweight-CWT-Tier-Incentive-Discount-Refund-Retriever.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eniture.com/wp-content/uploads/2016/09/ups-warehouse-settings.png HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zmodulez.files.wordpress.com/2010/07/ups-freight-checkout.jpg?w=570 HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 HTTP/1.1Host: i.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.insiteship.com/330/image402.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=2&_ls=18&_cc=us&_pl=d&_b=chrome%40117&_cbid=1rrh&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=1040172804192949803086BC6CA2270E HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=c00e032a4a7d676e; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /i.ytimg.com/vi/F_Cdn5iprEI/maxresdefault.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trianglebeach.net/wp-content/uploads/2017/06/UPS-Freight-LTL-Map.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /docs.rocketship.it/php/1-0/_images/ups-bol.png HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.buy-extensions.com/image/cache/catalog/additionalimg/ups-rating-front-700x700.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1728041947122&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&ct=youruno-chicka%3A%20ups%20ltl%20tracking&t=ups%20ltl%20tracking&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1728041931494%7D%5D
Source: global traffic	HTTP traffic detected: GET /cookie-sync/throtle? HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AABA0k7N_6gAABW8jSU1uA; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1728041931494%7D%5D
Source: global traffic	HTTP traffic detected: GET /?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=c00e032a4a7d676e; done_redirects109=1; done_redirects282=1
Source: global traffic	HTTP traffic detected: GET /vi/F_Cdn5iprEI/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCmu4706781=1728041926449; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDevice; HstCla4706781=1728041944834; HstPn4706781=2; HstPt4706781=2If-Modified-Since: Fri, 30 Aug 2024 07:20:22 GMT
Source: global traffic	HTTP traffic detected: GET /du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-product-settings-3.png HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eniture.com/wp-content/uploads/2016/09/ups-warehouse-settings.png HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zmodulez.files.wordpress.com/2010/07/ups-freight-checkout.jpg?w=570 HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /ps/?tt=iframe&pid=1198&us_privacy=&random=1728041949054.4 HTTP/1.1Host: dp2.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/19/224/6/4.gif?puid=4278757405457797050&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#2; 3pi=2#1728041946661#-1785427807#772338300018818479\|19#1728041941626#-48783062#c25ae5b72d8d3274a003b67bfc2dc4ed\|264#1728041944419#-1145940648#6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&event_source=dtscout&rnd=0.6440824229854869&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /support.webshopapps.com/freight/wp-content/uploads/sites/21/2013/12/ups6.png HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728041949054.5&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=2&_ls=18&_cc=us&_pl=d&_b=chrome%40117&_cbid=1rrh&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /help.insiteship.com/330/image402.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=uNE6HWb%2F08vfxCwlfhG9kw%3D%3D&pcat=&pdev=&pctry=US&referrer=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&us_privacy=&cache_buster=1728041949054.3 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=bb8a86b5-a336-c7e6-fc10-ef4342171444&iiqpciddate=1728041944595&tsrnd=18_1728041944596&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&gdpr=&ckls=true&ci=hxsRtAsilg&nc=false&trid=-1322560431 HTTP/1.1Host: sync.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=hxsRtAsilg; IQadv=1728041947667; IQMID=137263905#1728041947667; IQPData=137263905#1728041947654#0#1728041947654; intentIQCDate=1728041947662; ASDT=0; CSDT=UEQ6MTEzMDRfMCZVUUVadUhE
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=BbnxOlAm1SWGEj5
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728041949054.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728041949054.6 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /www.refundretriever.com/wp-content/uploads/2017/12/1-UPS-Hundredweight-CWT-Tier-Incentive-Discount-Refund-Retriever.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.buy-extensions.com/image/cache/catalog/additionalimg/ups-rating-front-700x700.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1728041947122&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&ct=youruno-chicka%3A%20ups%20ltl%20tracking&t=ups%20ltl%20tracking&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A3%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A3%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041949054%7D%5D
Source: global traffic	HTTP traffic detected: GET /docs.rocketship.it/php/1-0/_images/ups-bol.png HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A3%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A3%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041949054%7D%5D
Source: global traffic	HTTP traffic detected: GET /423476.gif?partner_uid=2R6w6PhCV1KacxJKEW3eUM-syoFJ7hRX44tUjWSvbTR0 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=ouWyVe71W/kXD9TafsTuK2rKnTNTHxB3mURO3O2e0VQ=; pxrc=CNOn/7cGEgUI6AcQABIFCNtOEAA=
Source: global traffic	HTTP traffic detected: GET /trianglebeach.net/wp-content/uploads/2017/06/UPS-Freight-LTL-Map.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&event_source=dtscout&rnd=0.6440824229854869&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /vi/F_Cdn5iprEI/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=9sn4omv&uid=BbnxOlAm1SWGEj5&newuser=1&dc_rc=4&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=cf05fb488f42aaa6145abacd0b68811b8bd611e7c40eaac8fff87a0ed038284b791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /connectors/eyeota/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm51mhg1%26uid%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=66ea7e9d-8204-47a8-85d5-80a3ea995cbb#1728041940510; _ssuma=eyI3IjoxNzI4MDQxOTQxMTE5fQ
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333935407555&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26pid%3D500040%26it%3D1%26iv%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26_%3D1728041950.6098304 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMWY1NmYwZTMtNTRlNy00YjhiLWI1OGItMjM3MGI1ZjIzMzNmOjE3MjgwNDE5NTAuNjA3NzIzMiJ9.Zv_T3g.SC8rPz_NrPsUM004Wy5KtluqbUE
Source: global traffic	HTTP traffic detected: GET /c/19/136/5/5.gif?puid=Zv-T1QAG_BWYbwAF&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#2; 3pi=224#1728041950530#-1829449427#4278757405457797050\|2#1728041946661#-1785427807#772338300018818479\|19#1728041941626#-48783062#c25ae5b72d8d3274a003b67bfc2dc4ed\|264#1728041944419#-1145940648#6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /match?uid=5144588531850205557&bid=omt9pi0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /map/c=1882/tp=BKAI/gdpr=0/gdpr_consent=?https://tags.bluekai.com/site/5907?limit=0&id=${masked_profileid}&redir=https%3A%2F%2Fid5-sync.com%2Fc%2F19%2F321%2F4%2F6.gif%3Fpuid%3D%24_BK_UUID%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg"; _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /match?bid=m51mhg1&uid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&pid=500040&it=1&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&_=1728041950.6098304 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=620ae37d-b182-4fc2-a4f3-dab2f47d0b90
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728041950.6098304&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=EwKiuGsnK-hk5aD0; didts=1728041952; nnls=; pxrc=COCn/7cGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /match?uid=5144588531850205557&bid=omt9pi0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /match?bid=m51mhg1&uid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728041950.6098304&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=EwKiuGsnK-hk5aD0; didts=1728041952; nnls=; pxrc=COCn/7cGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2022/12/cps-teacher-directory.html HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCmu4706781=1728041926449; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDevice; HstCla4706781=1728041944834; HstPn4706781=2; HstPt4706781=2
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCmu4706781=1728041926449; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDevice; HstCla4706781=1728041944834; HstPn4706781=2; HstPt4706781=2If-Modified-Since: Fri, 30 Aug 2024 07:20:22 GMT
Source: global traffic	HTTP traffic detected: GET /www.stock.cps.edu/img/pgicons/fs19.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bateman.cps.edu/uploads/5/0/1/4/50143567/published/sy18-19calendar-english.png?1532366082 HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.carnegie.cps.edu/img/slides/5.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /carnegie.cps.edu/pdf1920/2019-20StaffOrganization-2.png HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /brentanomathandscienceacademy.org/images/large/2016/12-01-15-Brentano_T6C9098.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /peirce.cps.edu/uploads/9/2/4/1/92417616/darland.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcJ7AQZHKDhG8sisRA-6jmw7 HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4706781&@f16&@g0&@h3&@i1&@j1728041958653&@k13819&@l3&@mcps%20teacher%20directory&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:45332327&@b3:1728041959&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2022/12/undefined HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCmu4706781=1728041926449; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDevice; HstCla4706781=1728041944834; HstPn4706781=2; HstPt4706781=2
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728041958703 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=hxsRtAsilg; IQadv=1728041947667; IQMID=137263905#1728041947667; intentIQCDate=1728041947662; ASDT=0; CSDT=UEQ6MTEzMDRfMCZVUUVadjJl; IQPData=137263905#1728041950606#0#1728041947654
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1728041958701 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&j= HTTP/1.1Host: e.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=4; st=4
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=JcJ7AQZHKDhG8sisRA-6jmw7&rnd=1728041958829 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=620ae37d-b182-4fc2-a4f3-dab2f47d0b90
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcJ7AQZHKDhG8sisRA-6jmw7 HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCmu4706781=1728041926449; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDevice; HstCla4706781=1728041958653; HstPn4706781=3; HstPt4706781=3If-Modified-Since: Fri, 30 Aug 2024 07:20:22 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4706781&@f16&@g0&@h3&@i1&@j1728041958653&@k13819&@l3&@mcps%20teacher%20directory&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:45332327&@b3:1728041959&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /peirce.cps.edu/uploads/9/2/4/1/92417616/sandoval-pic-orig_3_orig.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /prussing.cps.edu/uploads/8/5/5/8/85586392/img-4032.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.cps.edu/globalassets/cps-pages/initiatives/teach-chicago-tomorrow/tctwheel_eng_3000px_resized.png HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /peirce.cps.edu/uploads/9/2/4/1/92417616/image3.jpeg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=3&_ls=32&_cc=us&_pl=d&_b=chrome%40117&_cbid=1amc&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=A21FC682B7104891AC4D28543611702A HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1fsmrs8255tsw; _ljtrtb_5001=c25ae5b72d8d3274a003b67bfc2dc4ed; ljtrtb=eJyrVjI1MDBUslJKNjJNTDVNMjdKsUgxNjI3STQwME4yM09KSzZKSTZJTVHSUTIFKjNMK84tKrYwMjUtKS5XqgUAD0YRdg%3D%3D; ljt_reader=JcJ7AQZHKDhG8sisRA-6jmw7
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=1040172804192949803086BC6CA2270E HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=c00e032a4a7d676e; done_redirects109=1; done_redirects282=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ping/?t=300&d=youruno-chicka.blogspot.com HTTP/1.1Host: dtsedge.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.files.edl.io/e4a1/19/11/27/215435-c57cc00b-43a7-44ea-8d40-743d7d2bb415.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.lanetech.org/wp-content/uploads/2019/11/IMG_0023-1-1.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.goudy.cps.edu/ourpages/auto/2019/3/13/48837226/go%20cps%20picture.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1728041960557&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&ct=youruno-chicka%3A%20cps%20teacher%20directory&t=cps%20teacher%20directory&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A5%2C%22ts%22%3A1728041951376%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A4%2C%22ts%22%3A1728041951376%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A5%2C%22ts%22%3A1728041951376%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041949054%7D%5D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A5%2C%22ts%22%3A1728041951376%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A4%2C%22ts%22%3A1728041951376%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A5%2C%22ts%22%3A1728041951376%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041949054%7D%5D
Source: global traffic	HTTP traffic detected: GET /bateman.cps.edu/uploads/5/0/1/4/50143567/published/sy17-18parentcalendar-english.png?1505493327 HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=620ae37d-b182-4fc2-a4f3-dab2f47d0b90 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232; sd-session-id=.eJwVi9EKwjAMAP8lz6ukSbNs_ZlhNYWiq7LOF8f-3fpycHB3wPK2bb1WqzvEffvYALdn6dYgHtDKd7UHRBBPgYmYeWYJqCIC5wDNWiuvupR7b3yWMaOxk2DqQpqSS9JBrJgk_-ccvdKEwc-ClxFViQnOH6gCJVo.Zv_T4Q.kPBX2_m6XsxP2mOT8unCnx-KB5o
Source: global traffic	HTTP traffic detected: GET /walshschool.cps.edu/uploads/1/2/7/4/127470817/parent-facing-overview-v3-page-003_orig.jpg HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=c00e032a4a7d676e; done_redirects109=1; done_redirects282=1; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&event_source=dtscout&rnd=0.4328040925871892&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728041962823.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728041962823.3&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=A21FC682B7104891AC4D28543611702A
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=uNE6HWb%2F08vfxCwlfhG9kw%3D%3D&pcat=&pdev=&pctry=US&referrer=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&us_privacy=&cache_buster=1728041962823.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232; sd-session-id=.eJwVi9EKwjAMAP8lz6ukSbNs_ZlhNYWiq7LOF8f-3fpycHB3wPK2bb1WqzvEffvYALdn6dYgHtDKd7UHRBBPgYmYeWYJqCIC5wDNWiuvupR7b3yWMaOxk2DqQpqSS9JBrJgk_-ccvdKEwc-ClxFViQnOH6gCJVo.Zv_T4Q.kPBX2_m6XsxP2mOT8unCnx-KB5o
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=JcJ7AQZHKDhG8sisRA-6jmw7 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU0OTY4ZjA4LTk3OGItNGE1OS05MmMxLTdkNjFmZDQzMmEyYiIsImwiOjE3MjgwNDE5NDczNTYsInQiOjN9; sc=eyJpIjoiZTQ5NjhmMDgtOTc4Yi00YTU5LTkyYzEtN2Q2MWZkNDMyYTJiIiwic2lkIjoic2lkLTQyMTkxODM2LTgyNDUtMTFlZi1iZjA4LTAyNDIwYWZmMDRjYiIsIm1zIjozLCJ0cyI6MywicHMiOjMsInNwIjo1MDM3LCJwcCI6MywidHNlIjozLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA0MTk0NzM1Nn0=
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=fb1707ba3b8a7a17 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728041962823.4 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728041962823.6&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=A21FC682B7104891AC4D28543611702A
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=uNE6HWb%2F08vfxCwlfhG9kw%3D%3D&pcat=&pdev=&pctry=US&referrer=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&us_privacy=&cache_buster=1728041962823.5 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232; sd-session-id=.eJwVi9EKwjAMAP8lz6ukSbNs_ZlhNYWiq7LOF8f-3fpycHB3wPK2bb1WqzvEffvYALdn6dYgHtDKd7UHRBBPgYmYeWYJqCIC5wDNWiuvupR7b3yWMaOxk2DqQpqSS9JBrJgk_-ccvdKEwc-ClxFViQnOH6gCJVo.Zv_T6w.PiPzbnFU4HMA-jDgNd0H1TWUE0w
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50052&et=0&fp=2895Id7GVS9TS8cm4TrffJSYTYf13oZDQKflLvHelagM&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647467566085439504
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Eyeota?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D63ri0ru%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588531850205557&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26pid%3D500040%26it%3D1%26iv%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26_%3D1728041963.1712222 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232; sd-session-id=.eJwVi9EKwjAMAP8lz6ukSbNs_ZlhNYWiq7LOF8f-3fpycHB3wPK2bb1WqzvEffvYALdn6dYgHtDKd7UHRBBPgYmYeWYJqCIC5wDNWiuvupR7b3yWMaOxk2DqQpqSS9JBrJgk_-ccvdKEwc-ClxFViQnOH6gCJVo.Zv_T7A.2j-hM7YF79ub3SgxCe1c8LS2MsE
Source: global traffic	HTTP traffic detected: GET /match?bid=r8hrb20&uid=nil&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588531850205557&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26pid%3D500040%26it%3D1%26iv%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26_%3D1728041964.1340399 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232; sd-session-id=.eJwVi9EKwjAMAP8lz6ukSbNs_ZlhNYWiq7LOF8f-3fpycHB3wPK2bb1WqzvEffvYALdn6dYgHtDKd7UHRBBPgYmYeWYJqCIC5wDNWiuvupR7b3yWMaOxk2DqQpqSS9JBrJgk_-ccvdKEwc-ClxFViQnOH6gCJVo.Zv_T7A.2j-hM7YF79ub3SgxCe1c8LS2MsE
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588531850205557&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26pid%3D500040%26it%3D1%26iv%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26_%3D1728041964.766357 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232; sd-session-id=.eJwVi9EKwjAMAP8lz6ukSbNs_ZlhNYWiq7LOF8f-3fpycHB3wPK2bb1WqzvEffvYALdn6dYgHtDKd7UHRBBPgYmYeWYJqCIC5wDNWiuvupR7b3yWMaOxk2DqQpqSS9JBrJgk_-ccvdKEwc-ClxFViQnOH6gCJVo.Zv_T7A.2j-hM7YF79ub3SgxCe1c8LS2MsE
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&pid=500040&it=1&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&_=1728041963.1712222 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChAKBgj1ARCEGQoGCKIBEIQZ; lidid=620ae37d-b182-4fc2-a4f3-dab2f47d0b90
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202273308&_puid=2XTsrgCx9F5jbvMT4F3SJhvGSMzjtc3blqyxBmS7H_iQ&_redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90%26uid%3D HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A9968aqrePwCnLlTHyVWsDpy6JiT4pmib
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&pid=500040&it=1&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&_=1728041964.1340399 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChAKBgj1ARCEGQoGCKIBEIQZ; lidid=620ae37d-b182-4fc2-a4f3-dab2f47d0b90
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728041963.1712222&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=EwKiuGsnK-hk5aD0; didts=1728041952; nnls=; pxrc=COCn/7cGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /peirce.cps.edu/uploads/9/2/4/1/92417616/darland.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.carnegie.cps.edu/img/slides/5.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /carnegie.cps.edu/pdf1920/2019-20StaffOrganization-2.png HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.stock.cps.edu/img/pgicons/fs19.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=3&_ls=32&_cc=us&_pl=d&_b=chrome%40117&_cbid=1amc&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /brentanomathandscienceacademy.org/images/large/2016/12-01-15-Brentano_T6C9098.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /peirce.cps.edu/uploads/9/2/4/1/92417616/sandoval-pic-orig_3_orig.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=1040172804192949803086BC6CA2270E
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A7%2C%22ts%22%3A1728041962823%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1728041962823%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A7%2C%22ts%22%3A1728041962823%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041949054%7D%5D
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1728041960557&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&ct=youruno-chicka%3A%20cps%20teacher%20directory&t=cps%20teacher%20directory&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728041949054%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A7%2C%22ts%22%3A1728041962823%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1728041962823%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A7%2C%22ts%22%3A1728041962823%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041949054%7D%5D
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&pid=500040&it=1&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&_=1728041964.766357 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChAKBgj1ARCEGQoGCKIBEIQZ; lidid=620ae37d-b182-4fc2-a4f3-dab2f47d0b90
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728041964.1340399&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=EwKiuGsnK-hk5aD0; didts=1728041952; nnls=; pxrc=COCn/7cGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&event_source=dtscout&rnd=0.4328040925871892&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=A21FC682B7104891AC4D28543611702A HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1fsmrs8255tsw; _ljtrtb_5001=c25ae5b72d8d3274a003b67bfc2dc4ed; ljtrtb=eJyrVjI1MDBUslJKNjJNTDVNMjdKsUgxNjI3STQwME4yM09KSzZKSTZJTVHSUTIFKjNMK84tKrYwMjUtKS5XqgUAD0YRdg%3D%3D; ljt_reader=JcJ7AQZHKDhG8sisRA-6jmw7; _ljtrtb_2=A21FC682B7104891AC4D28543611702A
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Eyeota?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D63ri0ru%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=1868b084-9b03-0cf5-5448-b3127096d6ad
Source: global traffic	HTTP traffic detected: GET /ping/?t=300&d=youruno-chicka.blogspot.com HTTP/1.1Host: dtsedge.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728041963.1712222&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=EwKiuGsnK-hk5aD0; didts=1728041952; nnls=; pxrc=COCn/7cGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=&ip=8.46.123.33&l1=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26uid%3D217503105025001766403 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A9968aqrePwCnLlTHyVWsDpy6JiT4pmib
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728041964.766357&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=EwKiuGsnK-hk5aD0; didts=1728041952; nnls=; pxrc=COCn/7cGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /peirce.cps.edu/uploads/9/2/4/1/92417616/image3.jpeg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728041964.1340399&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=EwKiuGsnK-hk5aD0; didts=1728041952; nnls=; pxrc=COCn/7cGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /bateman.cps.edu/uploads/5/0/1/4/50143567/published/sy18-19calendar-english.png?1532366082 HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /www.cps.edu/globalassets/cps-pages/initiatives/teach-chicago-tomorrow/tctwheel_eng_3000px_resized.png HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728041964.766357&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=EwKiuGsnK-hk5aD0; didts=1728041952; nnls=; pxrc=COCn/7cGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /3.files.edl.io/e4a1/19/11/27/215435-c57cc00b-43a7-44ea-8d40-743d7d2bb415.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=217503105025001766403 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://youruno-chicka.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /walshschool.cps.edu/uploads/1/2/7/4/127470817/parent-facing-overview-v3-page-003_orig.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bateman.cps.edu/uploads/5/0/1/4/50143567/published/sy17-18parentcalendar-english.png?1505493327 HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www.lanetech.org/wp-content/uploads/2019/11/IMG_0023-1-1.jpg HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=217503105025001766403 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2023/01/storia-del-circo-dall-antico-egitto-a-oggi.html HTTP/1.1Host: youruno-chicka.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4706781=1728041926449; HstCmu4706781=1728041926449; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc=ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D; _cc_aud=ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3; panoramaId_expiry=1728646737300; panoramaId=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27; panoramaIdType=panoDevice; HstCla4706781=1728041958653; HstPn4706781=3; HstPt4706781=3

Source: chromecache_505.2.dr, chromecache_450.2.dr

String found in binary or memory: Scoring.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"Answers To The 2014 Nfhs Football Exam mx.up.edu.ph\"\n src=\"https:\/\/i2.wp.com\/www.coursehero.com\/doc-asset\/bg\/64d2c6c9658485d4cb4832703eb491ac9cba3aa2\/splits\/v9\/split-0-page-3-html-bg.jpg\"\n width=\"100%\" style=\"margin-right: 8px;margin-bottom: 8px;\" \/\u003E\n \u003Csmall\u003ESource: \u003Ci\u003Ewww.coursehero.com\u003C\/i\u003E\u003C\/small\u003E\n \u003Cp\u003EAnswers To The 2014 Nfhs Football Exam 2997828aa792a2bba6528adf75d6cbac What Is Cheerleading Underwear? (with pictures)Darien Youth Lacrosse Association DYLA[Insights.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"2013 2014 Nfhs Exam Answers smo62.thaigov.go.th\"\n src=\"https:\/\/i2.wp.com\/image.slidesharecdn.com\/fin571finalexam-170411051943\/95\/fin-571-final-exam-20162017-uop-questions-and-answers-2013-2014-2015-14-638.jpg?cb=1491890338\"\n width=\"100%\" style=\"margin-right: 8px;margin-bottom: 8px;\" \/\u003E\n \u003Csmall\u003ESource: \u003Ci\u003Eimage.slidesharecdn.com\u003C\/i\u003E\u003C\/small\u003E\n \u003Cp\u003E2013 2014 Nfhs Exam Answers john OHSAA gt Officiating gt Directors of Officiating Development May 3rd, 2018 Email dan mcginnis hotmail com Bio Note A native of Columbus.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"2013 2014 Nfhs Exam Answers ashishshah.net\"\n src=\"https:\/\/i2.wp.com\/www.scfoa11.com\/uploads\/5\/3\/0\/8\/53084645\/2015_scfoa_exam_key.jpg\"\n width=\"100%\" style=\"margin-right: 8px;margin-bottom: 8px;\" \/\u003E\n \u003Csmall\u003ESource: \u003Ci\u003Ewww.scfoa11.com\u003C\/i\u003E\u003C\/small\u003E\n \u003Cp\u003E2013 2014 Nfhs Exam Answers This is a comprehensive textbook on Zimbabwean labour law. After detailing the history and purpose of the law, it offers a.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"Nfhs Soccer Exam Answer Key Pittsburgh Post-Gazette\"\n src=\"https:\/\/i2.wp.com\/d20ohkaloyme4g.cloudfront.net\/img\/document_thumbnails\/337126c16b4dfc5031137135c2f2480b\/thumb_1200_1553.png\"\n width=\"100%\" style=\"margin-right: 8px;margin-bottom: 8px;\" \/\u003E\n \u003Csmall\u003ESource: \u003Ci\u003Ed20ohkaloyme4g.cloudfront.net\u003C\/i\u003E\u003C\/small\u003E\n \u003Cp\u003EBookmark File PDF Nfhs Soccer Exam Answer Key (.pdf) or read book online for free. Complete Lacrosse Guide \u0026 Sizing Charts Lacrosse Video Details: Exam. 2020 \/ 2021 High School.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\" equals www.hotmail.com (Hotmail)

Source: global traffic	DNS traffic detected: DNS query: youruno-chicka.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: book5download.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: i2.wp.com
Source: global traffic	DNS traffic detected: DNS query: s10.histats.com
Source: global traffic	DNS traffic detected: DNS query: i.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: s4.histats.com
Source: global traffic	DNS traffic detected: DNS query: e.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: t.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: pxdrop.lijit.com
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: dtsedge.com
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: t.dtscdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn-tc.33across.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: a.dtssrv.com
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: c.cintnetworks.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: sync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: global.ib-ibi.com
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dmp.truoptik.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: track2.securedvisit.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: aqfer.lijit.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: agent.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: i.w55c.net
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: dp2.33across.com
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: 1.bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: ums.acuityplatform.com
Source: global traffic	DNS traffic detected: DNS query: ads.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: pixel.nordicdataresources.net
Source: global traffic	DNS traffic detected: DNS query: dis.eu.criteo.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: ice.360yield.com
Source: global traffic	DNS traffic detected: DNS query: idsync.reson8.com
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: sync.mathtag.com
Source: global traffic	DNS traffic detected: DNS query: thrtl.redinuid.imrworldwide.com
Source: global traffic	DNS traffic detected: DNS query: secure.insightexpressai.com
Source: global traffic	DNS traffic detected: DNS query: nlsn.thrtle.com
Source: global traffic	DNS traffic detected: DNS query: api.retargetly.com
Source: global traffic	DNS traffic detected: DNS query: eyeota.ck-ie.com
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Fri, 04 Oct 2024 11:39:06 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockServer: GSEAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Accept-EncodingConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 04 Oct 2024 11:39:06 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeX-nc: MISS jfk 3Alt-Svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 11:39:14 GMTContent-Type: image/gifContent-Length: 49Connection: closeP3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAVCache-Control: no-cachePragma: no-cacheExpires: 0X-Server: 10.45.12.0Access-Control-Allow-Origin: *Server: Jetty(9.4.38.v20210224)
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Fri, 04 Oct 2024 11:39:20 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockServer: GSEAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Accept-EncodingConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 04 Oct 2024 11:39:50 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeX-nc: MISS jfk 3Alt-Svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 04 Oct 2024 11:39:50 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeX-nc: MISS jfk 2Alt-Svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginTiming-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originContent-Type: image/jpegDate: Fri, 04 Oct 2024 11:39:50 GMTExpires: Fri, 04 Oct 2024 11:40:20 GMTCache-Control: public, max-age=30X-Content-Type-Options: nosniffServer: sffeContent-Length: 1097X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 04 Oct 2024 11:39:51 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeX-nc: MISS jfk 2Alt-Svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 04 Oct 2024 11:39:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeX-nc: MISS jfk 1Alt-Svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Fri, 04 Oct 2024 11:39:52 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockServer: GSEAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Accept-EncodingConnection: closeTransfer-Encoding: chunked

Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://codepen.io/rleve/pen/iCbgy
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://feedburner.google.com/fb/a/mailverify
Source: chromecache_272.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_272.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_414.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org/Blog
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org/BlogPosting
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org/BreadcrumbList
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org/ListItem
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org/SiteNavigationElement
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org/WPFooter
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org/WPHeader
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://schema.org/WPSideBar
Source: chromecache_471.2.dr, chromecache_320.2.dr, chromecache_341.2.dr, chromecache_245.2.dr	String found in binary or memory: http://schemas.google.com/g/2005#thumbnail
Source: chromecache_471.2.dr	String found in binary or memory: http://www.blogger.com/atom/ns#
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://www.blogger.com/feeds/2591793855401892345/posts/default
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://www.blogger.com/openid-server.g
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://www.gianmr.com/
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://www.gianmr.com/2016/02/seofastblogger-responsive-blogger-template.html
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: http://www.gianmr.com/p/terms-of-use.html#template-license
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr	String found in binary or memory: https://a.dtssrv.com/a?i=
Source: chromecache_475.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.json?sid=9202507693
Source: chromecache_383.2.dr, chromecache_303.2.dr, chromecache_206.2.dr, chromecache_480.2.dr, chromecache_433.2.dr, chromecache_231.2.dr	String found in binary or memory: https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_215.2.dr	String found in binary or memory: https://apis.google.com/js/platform.js
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://book5download.com/awfeaweeawsfgw/2023.js
Source: chromecache_475.2.dr	String found in binary or memory: https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:c25ae5b72d8d3274a003b67bfc2dc4ed
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr, chromecache_267.2.dr, chromecache_499.2.dr, chromecache_345.2.dr, chromecache_459.2.dr, chromecache_294.2.dr, chromecache_408.2.dr, chromecache_389.2.dr	String found in binary or memory: https://cdn.tynt.com/afwu.js
Source: chromecache_475.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZ
Source: chromecache_475.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZm
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://code.jquery.com/jquery-1.7.2.min.js
Source: chromecache_475.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/c25ae5b72d8d3274a003b67bfc2dc4ed/ur
Source: chromecache_475.2.dr	String found in binary or memory: https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fm
Source: chromecache_475.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=121998&dpuuid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&redir=https%3A
Source: chromecache_329.2.dr	String found in binary or memory: https://dtsedge.com/ping/?t=300&d=
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://feedburner.google.com/fb/a/mailverify?uri=DesainWebTipsBloggerDanWordpress
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWSw
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWT4
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV0
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV8
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVA
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVI
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVM
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQ
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVw
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_475.2.dr	String found in binary or memory: https://global.ib-ibi.com/image.sbxx?go=262106&pid=420&xid=c25ae5b72d8d3274a003b67bfc2dc4ed
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/1.bp.blogspot.com/-t3BpmfvYEjQ/UyXKskwtkeI/AAAAAAAASlA/bIcUYUA0Pb0/s1600/1533898_2
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/3.files.edl.io/e4a1/19/11/27/215435-c57cc00b-43a7-44ea-8d40-743d7d2bb415.jpg
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/bateman.cps.edu/uploads/5/0/1/4/50143567/published/sy17-18parentcalendar-english.p
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/bateman.cps.edu/uploads/5/0/1/4/50143567/published/sy18-19calendar-english.png?153
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/brentanomathandscienceacademy.org/images/large/2016/12-01-15-Brentano_T6C9098.jpg
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/carnegie.cps.edu/pdf1920/2019-20StaffOrganization-2.png
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/cdn.thetealmango.com/wp-content/uploads/2021/10/donkey.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/d9k3q4j9.stackpathcdn.com/wp-content/uploads/2016/10/Il-Circo-Masimo.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/d9k3q4j9.stackpathcdn.com/wp-content/uploads/circo-massimo-729x484.jpg
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/docs.rocketship.it/php/1-0/_images/ups-bol.png
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/docs.shipmount.com/wp-content/uploads/2020/07/s6-768x235.png
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-plan-settings-3.pn
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-product-settings-3
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/eniture.com/wp-content/uploads/2016/09/ups-warehouse-settings.png
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/external-preview.redd.it/dCbpHY7rlr-_hPnobDE-ACO6ZtMp7kWneS1ohT62SF8.jpg?auto=webp
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/funeraliecremazioni.it/wp-content/uploads/2021/08/FUNERALI_antico-egitto-02-1536x1
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/gamingbolt.com/wp-content/uploads/2022/10/The-Super-Mario-Bros.-Movie-1024x577.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/grifoneartigliopennaeforchetta.files.wordpress.com/2021/01/akhenathon-e-nefertiti-
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/help.insiteship.com/330/image402.jpg
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/help.insiteship.com/330/image403.jpg
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/homesurfingonline.com/wp-content/uploads/2018/01/guide-on-ups-air-ground-freight-l
Source: chromecache_360.2.dr	String found in binary or memory: https://i2.wp.com/i.ebayimg.com/thumbs/images/g/1SIAAOSwpE1if-TG/s-l96.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/i.kym-cdn.com/photos/images/original/002/454/405/30f.png
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/i.pinimg.com/736x/12/c6/2f/12c62fb652ab634599515643ac0e06a5--christopher-nolan-sup
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/i.pinimg.com/736x/48/56/c6/4856c637eab68e55591fba09b11f192b.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/i.pinimg.com/736x/c4/ef/0c/c4ef0c7067b29c52e55cf995a8c2f873.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/i.pinimg.com/originals/22/68/f9/2268f93232ba908ad3dee8bf3f14cb37.jpg
Source: chromecache_360.2.dr	String found in binary or memory: https://i2.wp.com/i.pinimg.com/originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/i.pinimg.com/originals/7d/a0/b2/7da0b2b836032052643eaa9b43b62af0.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/i.pinimg.com/originals/ee/e5/94/eee59475b23dd0494b4db3c1fb79c07f.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/i.ytimg.com/vi/2bkDpQ0zGR0/maxresdefault.jpg
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/i.ytimg.com/vi/F_Cdn5iprEI/maxresdefault.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/i.ytimg.com/vi/OwsCG6BqaEI/maxresdefault.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/28ebb8e4-4c6f-4113-94e0-1dc2288e
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/it.blog.bepuppy.com/wp-content/uploads/2017/04/storia-e-origini-del-gatto1.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/pbs.twimg.com/media/DwZwe0tXgAAGtsT.jpg
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/peirce.cps.edu/uploads/9/2/4/1/92417616/darland.jpg
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/peirce.cps.edu/uploads/9/2/4/1/92417616/image3.jpeg
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/peirce.cps.edu/uploads/9/2/4/1/92417616/sandoval-pic-orig_3_orig.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/preview.redd.it/in-the-super-mario-bros-movie-2023-jack-blacks-bowser-has-v0-pvq04
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/prussing.cps.edu/uploads/8/5/5/8/85586392/img-4032.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/static.fanpage.it/wp-content/uploads/sites/2/2016/11/come-doveva-essere-il-circo-m
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/static1.colliderimages.com/wordpress/wp-content/uploads/2022/10/super-mario-movie-
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/support.webshopapps.com/freight/wp-content/uploads/sites/21/2013/12/ups6.png
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/teknowlogi.com/wp-content/uploads/2020/03/ups-freight-1536x1024.jpg
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/teknowlogi.com/wp-content/uploads/2020/03/ups-freight-ltl.jpg
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/trianglebeach.net/wp-content/uploads/2017/06/UPS-Freight-LTL-Map.jpg
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/walshschool.cps.edu/uploads/1/2/7/4/127470817/parent-facing-overview-v3-page-003_o
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/www.buy-extensions.com/image/cache/catalog/additionalimg/ups-rating-admin-700x700.
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/www.buy-extensions.com/image/cache/catalog/additionalimg/ups-rating-front-700x700.
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/www.carnegie.cps.edu/img/slides/5.jpg
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/www.cps.edu/globalassets/cps-pages/initiatives/teach-chicago-tomorrow/tctwheel_eng
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/www.digitec.ch/im/Files/6/9/6/1/0/7/1/6/The_Super_Mario_Bros_Movie_202321.jpeg?imp
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/www.fortementein.com/wp-content/uploads/2020/03/tut-real-exp-4k-021019-0-00-36-05_
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/www.goudy.cps.edu/ourpages/auto/2019/3/13/48837226/go
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/www.lanetech.org/wp-content/uploads/2019/11/IMG_0023-1-1.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/www.looper.com/img/gallery/the-super-mario-bros-movies-first-teaser-has-fans-cheer
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/www.oneclicket.com/public/2020_01_aida-spettacolo.jpg
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/www.refundretriever.com/wp-content/uploads/2017/12/1-UPS-Hundredweight-CWT-Tier-In
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/www.repstatic.it/content/nazionale/img/2021/06/07/184006560-e7e84ed0-a901-4243-a75
Source: chromecache_494.2.dr	String found in binary or memory: https://i2.wp.com/www.stock.cps.edu/img/pgicons/fs19.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/www.themovieblog.com/wp-content/uploads/2022/10/Super-Mario-Bros-Movie-Trailer-The
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-01-768x396.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-02-768x501.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-03.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-10-768x664.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-Copertina.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://i2.wp.com/www.xfire.com/wp-content/uploads/2022/10/Nintendo-The-Super-Mario-Bros-Movie-tease
Source: chromecache_215.2.dr	String found in binary or memory: https://i2.wp.com/zmodulez.files.wordpress.com/2010/07/ups-freight-checkout.jpg?w=570
Source: chromecache_475.2.dr	String found in binary or memory: https://id5-sync.com/s/19/9.gif?puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0
Source: chromecache_475.2.dr	String found in binary or memory: https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap
Source: chromecache_494.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sWyfAUZDsQI7jVKBtPBOtuJNfzt9rKJmqEwKl1oq43
Source: chromecache_215.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tafHOnil_awbdETzCDyMPSDv-WjcFuxJs-nnSbT4s9
Source: chromecache_265.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uxeS-mWV-17rY3kp0r7He2-KPJOr8C5RCyKX1pusT7
Source: chromecache_475.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0
Source: chromecache_475.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Source: chromecache_475.2.dr	String found in binary or memory: https://ml314.com/utsync.ashx?eid=50146&et=0&fp=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr, chromecache_267.2.dr, chromecache_499.2.dr, chromecache_345.2.dr, chromecache_459.2.dr, chromecache_294.2.dr, chromecache_408.2.dr, chromecache_389.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout
Source: chromecache_372.2.dr, chromecache_478.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout?_t_=px&url=
Source: chromecache_372.2.dr, chromecache_478.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/error?e=
Source: chromecache_475.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntr
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr, chromecache_267.2.dr, chromecache_499.2.dr, chromecache_345.2.dr, chromecache_459.2.dr, chromecache_294.2.dr, chromecache_408.2.dr, chromecache_389.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=137085098&mapped=
Source: chromecache_475.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=c25ae5b72d8d3274a003b6
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://plus.google.com/
Source: chromecache_494.2.dr	String found in binary or memory: https://plus.google.com/share?url=https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.
Source: chromecache_265.2.dr	String found in binary or memory: https://plus.google.com/share?url=https://youruno-chicka.blogspot.com/2022/12/the-super-mario-bros-m
Source: chromecache_215.2.dr	String found in binary or memory: https://plus.google.com/share?url=https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.html
Source: chromecache_500.2.dr	String found in binary or memory: https://plus.google.com/share?url=https://youruno-chicka.blogspot.com/2023/01/storia-del-circo-dall-
Source: chromecache_475.2.dr	String found in binary or memory: https://ps.eyeota.net/match?bid=51mdg9u&uid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://schema.org/ImageObject
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://schema.org/WebPage
Source: chromecache_475.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%
Source: chromecache_475.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/ium?sourceid=11&uid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0
Source: chromecache_475.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/bsTd8NdE?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap
Source: chromecache_475.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/
Source: chromecache_475.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%
Source: chromecache_475.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr, chromecache_267.2.dr, chromecache_499.2.dr, chromecache_345.2.dr, chromecache_459.2.dr, chromecache_294.2.dr, chromecache_408.2.dr, chromecache_389.2.dr	String found in binary or memory: https://t.dtscdn.com/widget/?d=
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr, chromecache_267.2.dr, chromecache_499.2.dr, chromecache_345.2.dr, chromecache_459.2.dr, chromecache_294.2.dr, chromecache_408.2.dr, chromecache_389.2.dr	String found in binary or memory: https://t.dtscout.com/idg/?su=
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr, chromecache_267.2.dr, chromecache_499.2.dr, chromecache_345.2.dr, chromecache_459.2.dr, chromecache_294.2.dr, chromecache_408.2.dr, chromecache_389.2.dr	String found in binary or memory: https://t.dtscout.com/pv/
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr, chromecache_267.2.dr, chromecache_499.2.dr, chromecache_345.2.dr, chromecache_459.2.dr, chromecache_294.2.dr, chromecache_408.2.dr, chromecache_389.2.dr	String found in binary or memory: https://t.dtscout.com/udg/?su=
Source: chromecache_372.2.dr, chromecache_478.2.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=
Source: chromecache_469.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/16311/sync.min.js
Source: chromecache_366.2.dr, chromecache_329.2.dr, chromecache_323.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Source: chromecache_475.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=7&puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0
Source: chromecache_475.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0
Source: chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com
Source: chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/dyn-css/authorization.css?targetBlogID=2591793855401892345&zx=4baa9972-2
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/feeds/2591793855401892345/posts/default
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/go/report-abuse
Source: chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/profile/04094885442229942317
Source: chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=3213529611264218428&target=bl
Source: chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=3213529611264218428&target=em
Source: chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=3213529611264218428&target=fa
Source: chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=3213529611264218428&target=pi
Source: chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=3213529611264218428&target=tw
Source: chromecache_500.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5374677466533919725&target=bl
Source: chromecache_500.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5374677466533919725&target=em
Source: chromecache_500.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5374677466533919725&target=fa
Source: chromecache_500.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5374677466533919725&target=pi
Source: chromecache_500.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5374677466533919725&target=tw
Source: chromecache_265.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5788099956959844239&target=bl
Source: chromecache_265.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5788099956959844239&target=em
Source: chromecache_265.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5788099956959844239&target=fa
Source: chromecache_265.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5788099956959844239&target=pi
Source: chromecache_265.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5788099956959844239&target=tw
Source: chromecache_494.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=846112473809349360&target=blo
Source: chromecache_494.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=846112473809349360&target=ema
Source: chromecache_494.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=846112473809349360&target=fac
Source: chromecache_494.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=846112473809349360&target=pin
Source: chromecache_494.2.dr	String found in binary or memory: https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=846112473809349360&target=twi
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/jsbin/1203661419-lbx.js
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/338641159-widgets.js
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
Source: chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/11/
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/
Source: chromecache_494.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/adult-physical-exam-form-pdf.html
Source: chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/canada-skin-solutions.html
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.html
Source: chromecache_494.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/hp-printer-cartridges-online.html
Source: chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/learning-english-for-beginners-free.html
Source: chromecache_265.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/most-popular-bubble-tea-flavors.html
Source: chromecache_265.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/printable-superhero-party-games.html
Source: chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/the-super-mario-bros-movie-2023-bowser.html
Source: chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.html
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2023/01/
Source: chromecache_360.2.dr, chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2023/01/chttagong-board-hsc-2014-economic-question-paper.html
Source: chromecache_360.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2023/01/england-in-the-seven-years-war-a-study-in-combined-strat
Source: chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/2023/01/storia-del-circo-dall-antico-egitto-a-oggi.html
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/?m=1
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/?q=
Source: chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/favicon.ico
Source: chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/feeds/3213529611264218428/comments/default
Source: chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/feeds/5374677466533919725/comments/default
Source: chromecache_265.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/feeds/5788099956959844239/comments/default
Source: chromecache_494.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/feeds/846112473809349360/comments/default
Source: chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/feeds/posts/default
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/feeds/posts/default?alt
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/feeds/posts/default?alt=rss
Source: chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/2013
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/2014
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/answers
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/antico
Source: chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/antico?&max-results=7
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/applied
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/avery
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/berkel
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/board
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/chttagong
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/circo
Source: chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/circo?&max-results=7
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/colouring
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/combined
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/dall
Source: chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/dall?&max-results=7
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/drilling
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/economic
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/egitto
Source: chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/egitto?&max-results=7
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/engineering
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/england
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/exam
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/exercises
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/fractions
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/hommes
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/l336
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/nfhs
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/oggi
Source: chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/oggi?&max-results=7
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/paper
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/popa
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/question
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/seven
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/solution
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/stations
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/storia
Source: chromecache_500.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/storia?&max-results=7
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/stranu
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/strategy
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/study
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/understanding
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/visually
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/workbo
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/years
Source: chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	String found in binary or memory: https://youruno-chicka.blogspot.com/search/label/zrcala

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 50555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408

Source: unknown	HTTPS traffic detected: 20.190.159.23:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.65.92:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49918 version: TLS 1.2

Source: classification engine

Classification label: sus24.phis.win@27/486@422/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1692 --field-trial-handle=2056,i,17654489147244666863,5989065647779282370,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://youruno-chicka.blogspot.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1692 --field-trial-handle=2056,i,17654489147244666863,5989065647779282370,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.204.158.49	true	false	unknown
i.ytimg.com	216.58.212.182	true	false	unknown
id5-sync.com	162.19.138.83	true	false	unknown
d-ams1.turn.com	46.228.164.13	true	false	unknown
spl.zeotap.com	172.67.40.173	true	false	unknown
live.rezync.com	13.32.27.83	true	false	unknown
cdn.w55c.net	52.57.67.153	true	false	unknown
crb.kargo.com	18.158.122.115	true	false	unknown
httplogserver-lb.global.unified-prod.sharethis.net	35.156.126.175	true	false	unknown
mwzeom.zeotap.com	104.22.51.98	true	false	unknown
sync.crwdcntrl.net	54.78.53.108	true	false	unknown
rtb-csync-euw1.smartadserver.com	81.17.55.173	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
api.intentiq.com	13.32.121.10	true	false	unknown
s4.histats.com	54.39.128.117	true	false	unknown
cm.g.doubleclick.net	142.250.186.162	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.97	true	false	unknown
idaas-ext.cph.liveintent.com	54.237.59.39	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
sync.intentiq.com	3.160.150.86	true	false	unknown
eyeota.ck-ie.com	80.77.85.29	true	false	unknown
idaas6.cph.liveintent.com	34.194.53.2	true	false	unknown
bcp.crwdcntrl.net	54.78.53.108	true	false	unknown
api.retargetly.com	104.22.17.141	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	unknown
match.prod.bidr.io	46.137.57.71	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	18.197.252.142	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	unknown
t.dtscout.com	141.101.120.11	true	false	unknown
pixel.onaudience.com	54.38.113.7	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
i2.wp.com	192.0.77.2	true	false	unknown
euw-ice.360yield.com	52.19.36.6	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	52.209.249.174	true	false	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	unknown
a.tribalfusion.com	104.18.37.193	true	false	unknown
dualstack.pinterest.map.fastly.net	151.101.192.84	true	false	unknown
dtsedge.com	188.114.97.3	true	false	unknown
ml314.com	34.117.77.79	true	false	unknown
a.dtssrv.com	172.67.163.146	true	false	unknown
s.tribalfusion.com	104.18.37.193	true	false	unknown
pixel-origin.mathtag.com	216.200.232.249	true	false	unknown
simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com	52.208.21.139	true	false	unknown
iad-2-sync.go.sonobi.com	69.166.1.34	true	false	unknown
de.tynt.com	67.202.105.31	true	false	unknown
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ps.eyeota.net	3.127.178.105	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
dmp.truoptik.com	104.18.80.52	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
d1tcwf12y4kqv3.cloudfront.net	18.244.18.27	true	false	unknown
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	unknown
i.simpli.fi	35.234.162.151	true	false	unknown
rtb.adentifi.com	3.208.227.142	true	false	unknown
sync.srv.stackadapt.com	54.147.101.158	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.72.22.163	true	false	unknown
thrtle.com	18.208.90.34	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	52.212.132.164	true	false	unknown
rtb-csync-euw2.smartadserver.com	164.132.25.184	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
pixel.nordicdataresources.net	57.128.187.108	true	false	unknown
sync.ipredictive.com	52.73.131.117	true	false	unknown
blogspot.l.googleusercontent.com	142.250.185.161	true	false	unknown
s.amazon-adsystem.com	98.82.154.76	true	false	unknown
ums.acuityplatform.com	154.59.122.79	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.75.156.33	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
dp2.33across.com	67.202.105.23	true	false	unknown
track2.securedvisit.com	107.23.180.140	true	false	unknown
global.ib-ibi.com	64.58.232.179	true	false	unknown
tags.crwdcntrl.net	65.9.66.68	true	false	unknown
thirdparty-logserver-lb.global.unified-prod.sharethis.net	35.157.251.153	true	false	unknown
t.dtscdn.com	104.26.12.60	true	false	unknown
nlsn.thrtle.com	54.82.142.25	true	false	unknown
e.dtscout.com	141.101.120.11	true	false	unknown
ic.tynt.com	67.202.105.32	true	false	unknown
ib.anycast.adnxs.com	37.252.171.52	true	false	unknown
load-euw1.exelator.com	54.78.254.47	true	false	unknown
idpix.media6degrees.com	unknown	unknown	false	unknown
sync.go.sonobi.com	unknown	unknown	false	unknown
token.rubiconproject.com	unknown	unknown	false	unknown
ice.360yield.com	unknown	unknown	false	unknown
secure.insightexpressai.com	unknown	unknown	false	unknown
sync.smartadserver.com	unknown	unknown	false	unknown
i6.liadm.com	unknown	unknown	false	unknown
ce.lijit.com	unknown	unknown	false	unknown
d.turn.com	unknown	unknown	false	unknown
cms.analytics.yahoo.com	unknown	unknown	false	unknown
sync.mathtag.com	unknown	unknown	false	unknown
thrtl.redinuid.imrworldwide.com	unknown	unknown	false	unknown
c.cintnetworks.com	unknown	unknown	false	unknown
i.w55c.net	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	unknown
p.rfihub.com	unknown	unknown	false	unknown
sync.sharethis.com	unknown	unknown	false	unknown
image6.pubmatic.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://sync.mathtag.com/sync/img?mt_exid=36&620ae37d-b182-4fc2-a4f3-dab2f47d0b90	false	unknown
https://pixel-sync.sitescout.com/connectors/eyeota/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm51mhg1%26uid%3D%7BuserId%7D	false	unknown
https://i2.wp.com/i.pinimg.com/originals/7d/a0/b2/7da0b2b836032052643eaa9b43b62af0.jpg	false	unknown
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODM4ODY2Ni90LzI/dpuid/ID5-bf3681nqp2gpsS1MRex0xmOXBAccmCOncBNIaVlQzQ/url/https%3A%2F%2Fid5-sync.com%2Fc%2F19%2F224%2F6%2F4.gif%3Fpuid%3D%24%21%7BTURN_UUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1728041963.1712222&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232	false	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=vb6pzhv&ttd_tpi=1&gdpr=0	false	unknown
https://x.bidswitch.net/ul_cb/sync?dsp_id=16&user_id=CAESEJqD3tFzgmk-zLiFw-9JZzE&google_cver=1&ssp=liveintent&bsw_param=37316be0-b2ef-3cb7-d751-5a35c0759f30&gdpr_consent=&gdpr=	false	unknown
https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0	false	unknown
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1728041980919.6&ref=	false	unknown
https://i2.wp.com/static1.colliderimages.com/wordpress/wp-content/uploads/2022/10/super-mario-movie-poster.jpeg	false	unknown
https://ce.lijit.com/merge?pid=58&3pid=5B34632B-EDA1-4BCE-8599-0FED55A84249&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F1242%2F0%2F10.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5	false	unknown
https://i2.wp.com/www.carnegie.cps.edu/img/slides/5.jpg	false	unknown
https://ads.scorecardresearch.com/b2?c1=9&c2=16937916&c3=2&cs_xi=29GHHAXEBEQ81B-dpB4QM7L6yB6T1O3CdIlMlMfz8UY0	false	unknown
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=na&rnd=1728041942135&_li_chk=true&previous_uuid=620ae37db1824fc2a4f3dab2f47d0b90	false	unknown
https://i2.wp.com/d9k3q4j9.stackpathcdn.com/wp-content/uploads/circo-massimo-729x484.jpg	false	unknown
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=uNE6HWb%2F08vfxCwlfhG9kw%3D%3D&pcat=&pdev=&pctry=US&referrer=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&us_privacy=&cache_buster=1728041949054.3	false	unknown
https://id5-sync.com/c/123/796/4/6.gif?puid=436aecaa-5018-42c7-b559-13e963926c6e&gdpr=0&gdpr_consent=	false	unknown
https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d	false	unknown
https://i2.wp.com/teknowlogi.com/wp-content/uploads/2020/03/ups-freight-ltl.jpg	false	unknown
https://youruno-chicka.blogspot.com/feeds/posts/default/-/egitto?alt=json-in-script&callback=readpostlabels&max-results=50	false	unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588531850205557&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26pid%3D500040%26it%3D1%26iv%3D1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%253A1728041950.6077232%26_%3D1728041964.1340399	false	unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1728041982.0333316&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f:1728041950.6077232	false	unknown
https://a.tribalfusion.com/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D9%26_t%3D1728041985&u=e4968f08-978b-4a59-92c1-7d61fd432a2b	false	unknown
https://um.simpli.fi/lj_match?r=1728042005340	false	unknown
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0	false	unknown
https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1728041929570&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&t=youruno-chicka&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117	false	unknown
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1728041994411.3&ref=	false	unknown
https://d.agkn.com/pixel/10751/?che=&ip=8.46.123.33&l1=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26uid%3D217503105025001766403	false	unknown
https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-Copertina.jpg	false	unknown
https://ps.eyeota.net/match?bid=6bqoi0v&uid=f5874891-8906-464c-a706-158f5d9ed358	false	unknown
https://pd.sharethis.com/pd/dtscout	false	unknown
https://youruno-chicka.blogspot.com/2022/12/undefined	false	unknown
https://dis.eu.criteo.com/dis/usersync.aspx?r=30&p=59&cp=id5&cu=1&url=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F203%2F7%2F3.gif%3Fpuid%3D%40%40CRITEO_USERID%40%40%26gdpr%3D0%26gdpr_consent%3D	false	unknown
https://track2.securedvisit.com/sync/1540_03681?id=JcJ7AQZHKDhG8sisRA-6jmw7	false	unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0	false	unknown
https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F434%2F5%2F5.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&consent=	false	unknown
https://id5-sync.com/c/123/203/7/3.gif?puid=b6d64fb9-eca9-41e5-9ff4-8dc0ef53fc88&gdpr=0&gdpr_consent=	false	unknown
https://aa.agkn.com/adscores/g.pixel?sid=9202273308&_puid=2XTsrgCx9F5jbvMT4F3SJhvGSMzjtc3blqyxBmS7H_iQ&_redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90%26uid%3D	false	unknown
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=na	false	unknown
https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&j=	false	unknown
https://i.pinimg.com/736x/12/c6/2f/12c62fb652ab634599515643ac0e06a5--christopher-nolan-super-mario-bros.jpg	false	unknown
https://thrtle.com/sync?vxii_pid=5032&vxii_pdid=Zv-T1QAG_BWYbwAF&vxii_ts=15&_reach=1	false	unknown
https://i2.wp.com/trianglebeach.net/wp-content/uploads/2017/06/UPS-Freight-LTL-Map.jpg	false	unknown
https://youruno-chicka.blogspot.com/feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist	false	unknown
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1728041962823.3&ref=	false	unknown
https://id5-sync.com/s/19/9.gif?puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0	false	unknown
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1728041962823.6&ref=	false	unknown
https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=de1e418f-8e30-402a-a231-d67b35cef2ca	false	unknown
https://thrtle.com/sync?vxii_pid=5015&vxii_pdid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d	false	unknown
https://id5-sync.com/c/123/1246/2/8.gif?puid=JcJ7AQZHKDhG8sisRA-6jmw7&gdpr=0&gdpr_consent=	false	unknown
https://sync.srv.stackadapt.com/sync?nid=throtle	false	unknown
https://api.retargetly.com/getuid?p=1625&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6bqoi0v%26uid%3D%25rlid%25	false	unknown
https://i2.wp.com/homesurfingonline.com/wp-content/uploads/2018/01/guide-on-ups-air-ground-freight-ltl-tracking-1024x640.jpg	false	unknown
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=uNE6HWb%2F08vfxCwlfhG9kw%3D%3D&pcat=&pdev=&pctry=US&referrer=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&us_privacy=&cache_buster=1728041962823.2	false	unknown
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=uNE6HWb%2F08vfxCwlfhG9kw%3D%3D&pcat=&pdev=&pctry=US&referrer=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&us_privacy=&cache_buster=1728041962823.5	false	unknown
https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0	false	unknown
https://ups.analytics.yahoo.com/ups/58691/cms?partner_id=THROTLE	false	unknown
https://i.pinimg.com/originals/7d/a0/b2/7da0b2b836032052643eaa9b43b62af0.jpg	false	unknown
https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-01-768x396.jpg	false	unknown
https://i2.wp.com/1.bp.blogspot.com/-t3BpmfvYEjQ/UyXKskwtkeI/AAAAAAAASlA/bIcUYUA0Pb0/s1600/1533898_251478525011924_1341263343_n.jpg	false	unknown
https://pixel.nordicdataresources.net/?pid=280413&uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d	false	unknown
https://pixel-sync.sitescout.com/connectors/throtle/usersync?redir=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5026%26vxii_pdid%3D%7BuserId%7D%26vxii_ts%3D12%26_t%3D1728041994%26_reach%3D1	false	unknown
https://i2.wp.com/du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-product-settings-3.png	false	unknown
https://ml314.com/utsync.ashx?eid=50052&et=0&fp=2895Id7GVS9TS8cm4TrffJSYTYf13oZDQKflLvHelagM&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90	false	unknown
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=JcJ7AQZHKDhG8sisRA-6jmw7&rnd=1728041988763	false	unknown
https://i.ytimg.com/vi/F_Cdn5iprEI/maxresdefault.jpg	false	unknown
https://t.dtscdn.com/widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&r=	false	unknown
https://bcp.crwdcntrl.net/pixels?src=LTJS&s=31%2C92%2C49%2C136%2C135%2C148%2C7%2C33%2C78%2C121%2C26%2C22%2C67%2C116%2C61%2C106%2C104%2C8%2C54%2C41%2C3%2C2%2C94&c=3825&ch=%7B%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	false	unknown
https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&pid=500040&it=1&iv=1f56f0e3-54e7-4b8b-b58b-2370b5f2333f%3A1728041950.6077232&_=1728041964.766357	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.blogger.com	chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/2023/01/chttagong-board-hsc-2014-economic-question-paper.html	chromecache_360.2.dr, chromecache_500.2.dr	false	unknown
https://www.blogger.com/feeds/2591793855401892345/posts/default	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/search/label/economic	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/search/label/stations	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://dpm.demdex.net/ibs:dpid=121998&dpuuid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&redir=https%3A	chromecache_475.2.dr	false	unknown
https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=846112473809349360&target=ema	chromecache_494.2.dr	false	unknown
https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=3213529611264218428&target=tw	chromecache_215.2.dr	false	unknown
http://schema.org/SiteNavigationElement	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/search/label/dall?&max-results=7	chromecache_500.2.dr	false	unknown
https://youruno-chicka.blogspot.com/search/label/exercises	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5374677466533919725&target=tw	chromecache_500.2.dr	false	unknown
http://www.gianmr.com/	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://i2.wp.com/www.repstatic.it/content/nazionale/img/2021/06/07/184006560-e7e84ed0-a901-4243-a75	chromecache_500.2.dr	false	unknown
https://youruno-chicka.blogspot.com/?m=1	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/search/label/dall	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
http://schema.org/WPSideBar	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/feeds/posts/default?alt	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/2022/12/	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/feeds/3213529611264218428/comments/default	chromecache_215.2.dr	false	unknown
http://feedburner.google.com/fb/a/mailverify	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://youruno-chicka.blogspot.com/2022/12/canada-skin-solutions.html	chromecache_215.2.dr	false	unknown
https://www.blogger.com/share-post.g?blogID=2591793855401892345&postID=5788099956959844239&target=tw	chromecache_265.2.dr	false	unknown
https://youruno-chicka.blogspot.com/search	chromecache_215.2.dr	false	unknown
http://www.blogger.com/openid-server.g	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_360.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tafHOnil_awbdETzCDyMPSDv-WjcFuxJs-nnSbT4s9	chromecache_215.2.dr	false	unknown
http://schema.org/BreadcrumbList	chromecache_494.2.dr, chromecache_265.2.dr, chromecache_500.2.dr, chromecache_215.2.dr	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZ	chromecache_475.2.dr	false	unknown
https://youruno-chicka.blogspot.com/2023/01/england-in-the-seven-years-war-a-study-in-combined-strat	chromecache_360.2.dr	false	unknown
https://i2.wp.com/www.looper.com/img/gallery/the-super-mario-bros-movies-first-teaser-has-fans-cheer	chromecache_265.2.dr	false	unknown
https://i2.wp.com/funeraliecremazioni.it/wp-content/uploads/2021/08/FUNERALI_antico-egitto-02-1536x1	chromecache_500.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	unknown	United States	54113	FASTLYUS	false
37.252.171.149	unknown	European Union	29990	ASN-APPNEXUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
151.101.128.84	unknown	United States	54113	FASTLYUS	false
98.82.157.137	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
64.58.232.179	global.ib-ibi.com	United States	13649	ASN-VINSUS	false
46.137.57.71	match.prod.bidr.io	Ireland	16509	AMAZON-02US	false
3.124.210.90	unknown	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
80.77.85.29	eyeota.ck-ie.com	United Kingdom	46636	NATCOWEBUS	false
37.252.171.52	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
164.132.25.184	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
65.9.66.104	unknown	United States	16509	AMAZON-02US	false
52.208.21.139	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com	United States	16509	AMAZON-02US	false
104.22.17.141	api.retargetly.com	United States	13335	CLOUDFLARENETUS	false
99.80.119.100	unknown	United States	16509	AMAZON-02US	false
35.156.126.175	httplogserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
3.66.133.160	unknown	United States	16509	AMAZON-02US	false
192.0.77.2	i2.wp.com	United States	2635	AUTOMATTICUS	false
18.196.164.227	unknown	United States	16509	AMAZON-02US	false
54.237.59.39	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.235.191.9	unknown	United States	14618	AMAZON-AESUS	false
54.39.128.117	s4.histats.com	Canada	16276	OVHFR	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
151.101.192.84	dualstack.pinterest.map.fastly.net	United States	54113	FASTLYUS	false
3.75.156.33	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
141.95.98.65	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
172.67.40.173	spl.zeotap.com	United States	13335	CLOUDFLARENETUS	false
54.72.22.163	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
216.58.206.33	unknown	United States	15169	GOOGLEUS	false
52.57.67.153	cdn.w55c.net	United States	16509	AMAZON-02US	false
172.67.163.146	a.dtssrv.com	United States	13335	CLOUDFLARENETUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
142.250.185.161	blogspot.l.googleusercontent.com	United States	15169	GOOGLEUS	false
54.82.142.25	nlsn.thrtle.com	United States	14618	AMAZON-AESUS	false
104.26.13.60	unknown	United States	13335	CLOUDFLARENETUS	false
3.215.157.212	unknown	United States	14618	AMAZON-AESUS	false
54.147.101.158	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
142.250.186.54	unknown	United States	15169	GOOGLEUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
52.48.114.218	unknown	United States	16509	AMAZON-02US	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
52.49.236.173	unknown	United States	16509	AMAZON-02US	false
216.200.232.249	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
13.32.121.10	api.intentiq.com	United States	16509	AMAZON-02US	false
69.166.1.34	iad-2-sync.go.sonobi.com	United States	27630	AS-XFERNETUS	false
104.22.50.98	unknown	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
216.58.212.182	i.ytimg.com	United States	15169	GOOGLEUS	false
44.215.250.231	unknown	United States	14618	AMAZON-AESUS	false
52.73.131.117	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
162.19.138.118	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
142.250.185.97	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
5.196.111.72	unknown	France	16276	OVHFR	false
65.9.66.68	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
37.252.171.21	unknown	European Union	29990	ASN-APPNEXUS	false
63.34.192.5	unknown	United States	16509	AMAZON-02US	false
3.127.178.105	ps.eyeota.net	United States	16509	AMAZON-02US	false
149.56.240.131	unknown	Canada	16276	OVHFR	false
35.204.158.49	um.simpli.fi	United States	15169	GOOGLEUS	false
104.18.37.193	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
3.120.162.160	unknown	United States	16509	AMAZON-02US	false
81.17.55.173	rtb-csync-euw1.smartadserver.com	Netherlands	24588	NETPROVODOV-ASRU	false
162.19.138.83	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
35.234.162.151	i.simpli.fi	United States	15169	GOOGLEUS	false
18.184.216.10	unknown	United States	16509	AMAZON-02US	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.157.251.153	thirdparty-logserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
18.158.122.115	crb.kargo.com	United States	16509	AMAZON-02US	false
172.67.74.186	unknown	United States	13335	CLOUDFLARENETUS	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
104.18.80.52	dmp.truoptik.com	United States	13335	CLOUDFLARENETUS	false
13.32.27.113	unknown	United States	7018	ATT-INTERNET4US	false
142.250.185.66	unknown	United States	15169	GOOGLEUS	false
142.250.186.34	unknown	United States	15169	GOOGLEUS	false
13.32.27.83	live.rezync.com	United States	7018	ATT-INTERNET4US	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
54.220.80.179	unknown	United States	16509	AMAZON-02US	false
54.38.113.4	unknown	France	16276	OVHFR	false
13.32.121.33	unknown	United States	16509	AMAZON-02US	false
188.114.97.3	dtsedge.com	European Union	13335	CLOUDFLARENETUS	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
54.76.166.236	unknown	United States	16509	AMAZON-02US	false
18.208.90.34	thrtle.com	United States	14618	AMAZON-AESUS	false
104.26.12.60	t.dtscdn.com	United States	13335	CLOUDFLARENETUS	false
18.197.252.142	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.217.16.193	unknown	United States	15169	GOOGLEUS	false
57.128.187.108	pixel.nordicdataresources.net	Belgium	2686	ATGS-MMD-ASUS	false
18.215.102.173	unknown	United States	14618	AMAZON-AESUS	false
141.101.120.11	t.dtscout.com	European Union	13335	CLOUDFLARENETUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
3.208.227.142	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
141.101.120.10	unknown	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525651
Start date and time:	2024-10-04 13:37:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://youruno-chicka.blogspot.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus24.phis.win@27/486@422/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.html Browse: https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.html Browse: https://youruno-chicka.blogspot.com/2023/01/storia-del-circo-dall-antico-egitto-a-oggi.html Browse: https://youruno-chicka.blogspot.com/2022/12/the-super-mario-bros-movie-2023-bowser.html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 172.217.16.206, 64.233.184.84, 34.104.35.123, 142.250.185.138, 142.250.186.163, 172.66.132.114, 172.66.132.118, 95.101.111.167, 95.101.111.145, 172.64.153.173, 104.18.34.83, 95.101.111.153, 95.101.111.156, 104.18.35.167, 172.64.152.89, 2.23.197.190, 20.109.210.53, 192.229.221.95, 40.69.42.241, 69.173.144.139, 69.173.144.138, 69.173.144.165, 51.144.7.192, 151.101.66.49, 151.101.194.49, 151.101.2.49, 151.101.130.49, 172.64.146.217, 104.18.41.39, 13.107.42.14, 2.19.126.149, 2.19.126.156, 172.217.16.202, 142.250.184.202, 172.217.18.106, 142.250.74.202, 216.58.206.42, 142.250.186.106, 142.250.185.74, 142.250.186.138, 172.217.18.10, 216.58.206.74, 142.250.181.234, 142.250.186.170, 216.58.212.138, 142.250.186.42, 172.217.23.106, 142.250.186.74, 193.0.160.130, 4.245.163.56, 216.58.212.131, 104.18.18.248, 104.18.19.248, 184.28.89.33, 216.58.206.78
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, e213908.b.akamaiedge.net, e9126.x.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, e167121.b.akamaiedge.net, update.googleapis.com, s10.histats.com.cdn.cloudflare.net, rtb-csync-geo.usersync-prod-sas.akadns.net, waws-prod-am2-241.westeurope.cloudapp.azure.com, fonts.googleapis.com, fs.microsoft.com, 2-01-37d2-0004.cdx.cedexis.net, content-autofill.googleapis.com, idsync.reson8.com.cdn.cloudflare.net, a-emea.rfihub.com.akadns.net, edgedl.me.gvt1.com, map.media6degrees.com.cdn.cloudflare.net, umwatson.events.data.microsoft.com, clients.l.google.com, e7876.dscg.akamaiedge.net, a1184.d.akamai.net, h2.shared.global.fastly.net, pixel.rubiconproject.net.akadns.net, otelrules.afd.azureedge.net, cdn-tc.33across.com.cdn.cloudflare.net, cdn.tynt.com.cdn.cloudflare.net, a24365-c026.edgekey.net, cert1.a1.atm.aqfer.net.edgeke
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://youruno-chicka.blogspot.com/

Input	Output
URL: https://youruno-chicka.blogspot.com Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://youruno-chicka.blogspot.com Model: jbxai	{ "brand":["Amazon.com", "Universal Pictures"], "contains_trigger_text":true, "trigger_text":"Fill in the blanks with appropriate alternatives given in brackets below the questions :", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://youruno-chicka.blogspot.com Model: jbxai	"{ \"brand\": [\"YOURUNO-CHICKA\"], \"contains_trigger_text\": true, \"trigger_text\": \"Tracking UPS Canada. Recently Tracked. Log in or Sign up to view your recently tracked shipments. UPS Freight Less-than-Truckload (\"LTL\") transportation services are offered by TFI International Inc., its.\", \"prominent_button_name\": \"OpenCart\", \"text_input_field_labels\": [\"Facility\", \"Services\", \"Zones\", \"Account#\", \"Default Rate Basis\", \"Rate Adjustment %\", \"Next Tracking #\", \"Last Tracking #\"], \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false } "

URL: https://youruno-chicka.blogspot.com Model: jbxai	"{ \"brand\": [\"YOURUNO-CHICKA\"], \"contains_trigger_text\": true, \"trigger_text\": \"Tracking UPS Canada. Recently Tracked. Log in or Sign up to view your recently tracked shipments. UPS Freight Less-than-Truckload (\"LTL\") transportation services are offered by TFI International Inc., its.\", \"prominent_button_name\": \"OpenCart\", \"text_input_field_labels\": [\"Facility\", \"Services\", \"Zones\", \"Account#\", \"Default Rate Basis\", \"Rate Adjustment %\", \"Next Tracking#\", \"Last Tracking#\"], \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false } "

URL: https://youruno-chicka.blogspot.com Model: jbxai	{ "brand":["Stock School"], "contains_trigger_text":true, "trigger_text":"cps teacher directory", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://youruno-chicka.blogspot.com Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://youruno-chicka.blogspot.com Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://youruno-chicka.blogspot.com Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://youruno-chicka.blogspot.com Model: jbxai	{ "brand":["YOURUNO-CHICKA"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://youruno-chicka.blogspot.com Model: jbxai	{ "brand":["YOURUNO-CHICKA"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:38:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9715479678930437
Encrypted:	false
SSDEEP:	48:8ed6TGOqHMidAKZdA19ehwiZUklqehgy+3:8XfN3y
MD5:	196431697E721E8F492B515B8EB60668
SHA1:	D5CF7CE3D723B4DF303E65F136E03B209125C87C
SHA-256:	BA3609FCC588E18FF0DEC34A600F76AD71D338104938F6B7CA03F4EA45A168CC
SHA-512:	90CB21A5893C302D9F1140495107DC5EB1AF02FD180348D5518C66A779475E12B453C23616F8EFF572B7CCB68E30ED148B6E3F993E26C6E10732397F08C66414
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....q..Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.\....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.\....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.\....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.\..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.\...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:38:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.988051065761702
Encrypted:	false
SSDEEP:	48:8ad6TGOqHMidAKZdA1weh/iZUkAQkqehny+2:8rfn9QKy
MD5:	C85938300F77795A5A1AA1C686FD4A9D
SHA1:	6C3DF766834A8BBEE5FE2875016993DDE9883860
SHA-256:	AB833D72472D3E2B6430CF43A66A6A7C9964003BF1F581515CAB41F7CED2C046
SHA-512:	9D659E29CC3FDEE10BD62DEA8740FE82A600A4617C72EADB9EA02E2DC77FAC4F27FA04A3AD87509372A258A9577F13C56C78224B27EE687AAC2626C560AFB37F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.\....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.\....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.\....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.\..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.\...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.997616367261123
Encrypted:	false
SSDEEP:	48:8xfd6TGOsHMidAKZdA14tseh7sFiZUkmgqeh7sBy+BX:8xMfpnzy
MD5:	AE36B39F9BD5E746601759D987CB63D9
SHA1:	4CE99A855F69D14007BCCD97BAA09CC2AACB4E03
SHA-256:	05DA789C31E71FE0DC35E3ED9161B3005C23E685ED89705BFA6C1524FD86CD53
SHA-512:	F91FB5A8460BA96D091B13997525DEB377F704E2113672505ECB3E3117789AEBFBDBDFEE7772BDDC38F79F7FA2E3465AB69B21E78145CA879B347C96091CCE42
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.\....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.\....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.\....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.\..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:38:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9867033491136152
Encrypted:	false
SSDEEP:	48:8ULd6TGOqHMidAKZdA1vehDiZUkwqehby+R:8FfEpy
MD5:	711A001A24104EEEEDAD0E1CDBC9465B
SHA1:	26184CAD7E62DD16E44044AE07A8C59ABB5A506E
SHA-256:	28464CF9BA4027B5034E90608AEF565FFCE07049A4847E04C53CBA224A2C7B9C
SHA-512:	C319B79937BA1505130F98E427E411B52DC777001EAF206DE2A14D336571C18968D82BE1BE7D4EA0CAB469202675603DED9F653F2F4939C14047007BD2607C51
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.\....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.\....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.\....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.\..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.\...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:38:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9752318449495627
Encrypted:	false
SSDEEP:	48:8O+fd6TGOqHMidAKZdA1hehBiZUk1W1qehty+C:8QfE9Ny
MD5:	62098B01F261DC0CF5D1C68AD42D92CC
SHA1:	A208870151D96510EA5215B1F00041D40C9C4952
SHA-256:	F816C2B3DCEB1490AD2A5498C30C419343757C78D7501EBEB3E7F2CE29AD30AE
SHA-512:	50E6D41F3FC8D9FDBC6A03D258DC656318D1D6E630AACBB04388CD7111B6FEC55972AA3527E684E3C20A72A22FCDB00EAA7F13F98209DAA5E75093131264AE17
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x...Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.\....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.\....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.\....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.\..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.\...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:38:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.984974259918874
Encrypted:	false
SSDEEP:	48:86d6TGOqHMidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbzy+yT+:8LfqT/TbxWOvTbzy7T
MD5:	327282A79FAA5AC6107FEEC5FDAA0B6E
SHA1:	4A36C0E6F9C7938A9ED3090F54848C59943159F1
SHA-256:	DEC0C3A4CF0E711669308A60B0EE6D088E420C780545E8F3F688C13935B2D233
SHA-512:	75A7737E16314E8B32FC467227BE63253EB13CC0B8B6F17A9438CD2D9F5DA16E7598CF9785620CC5BA5FFD33F483AB94C52C8D67CAA136E168420106605D6640
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=...Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.\....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.\....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.\....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.\..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.\...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 24732
Category:	dropped
Size (bytes):	9706
Entropy (8bit):	7.974244330200313
Encrypted:	false
SSDEEP:	192:sdfLzIYp/TqA9pWKOtmld+fBOApnSbGbZAsCQSu98xpZi2:sdffIeecIKameOsnSbeCsCu98xpM2
MD5:	373CEF3A03E2AAB544B1645A96E1557D
SHA1:	789BB2E7E291CE40587D62BDB821934E0F7B736D
SHA-256:	A9DCEB91B28EDD0CE446F678E2117ECE68191D4C2E609B07F4910D2F93F58226
SHA-512:	9DF97EEAC20A806BDDAAC955EA39554040D9B5A38A5C7432C4BC0347FFB4C8C14F1E923082D9B227D6421996AEE238B0A027038FBDC381EA3365616544B94388
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0.......+."..^mD.R..@y...Q.m".YIKq...5..8.t..=.9...C.i43..H..,y..Z.-.n,..5{I.....g....Z....if26..@...... _..Y..]..z/...Kk.W..I.....Y;.`PG.[k.J...G.%&"........mG.\..>.TZ;...K.\|.d.X^v/.5K.Nj......$...{d.Y.....EY.K}0.._...f.e..!.....5..:...O.H..@p.#...{k..O...w.....:.lZ.U.@..3J./w.......1....[k...66-.,.U.vn.u...bg...uuyn.X#.&.....IW..k/jnVS.&.o...t].{Y.'{...&.........u..h2~...e...;..M.J.U...4.Sj.Y.G...=.......h.....\.....i..O..g~`.X.u.........*..>...........U.u.I._}:..xXr..7\|....Q=.x.s P.....yG^08..#..'kg....U.......N..Z.<w..3.._..O..]r{.&..._...u.U.to"j.^....oA.4....g..g..2.f..Q&uW^.....D.z.....}.o}gm.V...Y.........._76......D.G....b..n.%z..k;.......?.$.D.....:[..:...a.....fk{[........}k....zv...........?.d>...Xcn...\|....^i..k.............n.Y.G.8..9<>..f......a.<.......Ok.:...'K.f...c(8....%<....<........6.<....B..x...3..L.:..3...(...9.6..;....Z.>...j.........A..uz...8>.}..............@....O......H>A..`...p....d....4M..

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	630
Entropy (8bit):	7.607138925903774
Encrypted:	false
SSDEEP:	12:eKN6dF4I7eX2iBZQKyVWQL84mHbaQ+8r8SXSQlNRR2FTIt4RHl80mt:5MF4I7OOpWQLm7a21SamVIyRF80mt
MD5:	210E8F62DC47AB1E7752F5EAFC0ED0E2
SHA1:	9BA16CEC87CA08DD665D4DEA728BFDC2716D4C80
SHA-256:	93F738DFFBF691823CB6170D93E9F61B4285119DE8B0132C2DE2CF47AD3A7C70
SHA-512:	D6BAE13F785C39BB4D40C3DDD47A114FD569194F55DF40BC12EE2707B38683A4E50247F42EBDC12D7AD6BCB5134BCAF40AF679537751CA71811156D4F52D1CD9
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/i.ebayimg.com/thumbs/images/g/1SIAAOSwpE1if-TG/s-l96.jpg
Preview:	RIFFn...WEBPVP8 b........P.P.>e(.E."....H@.D..........[0WJSH.......J.3...N<=..Sn.h[...;ZF-....%j.>.W".u........4........h9..................0..J.P.k..q_...].m...Sl.>.o..,..WPX.J..9...u2......I..k.,...\...yDU~...q....\......zwM..._..l.U>F.).......'G......`[.n.&..k7........=.....7..._P\.[.VF..}Z..R....h.3;.(._..m..*...$`3.s...x..;...Y.X...f.7@.(......a..b.X{.s5r.bQ698.K.b>.NZr.$.bja.bj.kp.U.^.....vp'..].u.y....~.p..4.v....U....~....;.....O.......d.. ...^S.....5.F..I]Hc.o._.&.\......U......&......tPmR.obH{4...q<G...I.............F.7...Z.4..x.O./.;9.a5l....r... ....C+)E..B....3t..bNZ.....

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728041942105
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2323
Category:	downloaded
Size (bytes):	1396
Entropy (8bit):	7.849278575881695
Encrypted:	false
SSDEEP:	24:XmWD6QTBP7ub9mJov058Qc7KwqjhIWdG0FDikTxS5CXX4kc0gEjHOYRiUKIs/:XHDBBTubQs0OQcMvFJTxS5zQg70c
MD5:	945A34EB07F1F9C4CC44051E020E004D
SHA1:	523A8592D238CAA761A0865C360B016B7538EDC2
SHA-256:	EA4EF58EF82300EEC79E3A77D3E432A50843CED9B592C642E74C34EB934D2C52
SHA-512:	FF3D9FE0B08B3083C46BF091D58E0412B1457473AC3B6255072CE1D12863D7202E0DC34FDDE5FA043C467064304240033C16D89B8AC38204D256908531D1E44B
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/1/d/t.dhj?cls=sync&dmn=youruno-chicka.blogspot.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=
Preview:	..........tV.s...W.>.#U....M...ir.L.vH.K.7#......-...7..Ko......Z...Of..Nm^j.....!.V.....Wh.D..{_'e.....4.M6c..\|.<..$fP..Pql-..B.J......U.tv:..i.u....Q..B...9.T..au....3Y......R..k.B..f...3-..."0.d..'...'.<YZ...........:S.\..pI6.c.E...:5..........%p\.t.....Q.Z...yZ&x8).sG\|.._+i.YT.,..1...p.1!..T9.4.?J+..f..5d;........^...l.[..<..&......'4.gem..y.._..m.S...\|}d</...)..$R1Y...z....<..~.}...q...m..t.u.&.....c..c4........48X...We.8......3iN.L.X..![...v.Y.1......0..:4...3ph.g..tEL.......5.+.{.4...%.....i..D...5i.,..M.\.Ic6.;.(.2..]...?x..=~.\.....A.h....2..'...\|.~......)..b...5..J-.-.......\|....z.OVl..mLJ.e.n....*...y.`T.....\|.o.s. -j@..e!.[.......&.y.c.c...........p}qh.'. .q" ..f...#.0t.q.....d..V@.h...).0~Z..5+.O.W.....z..X...gQ..g.._.~..E1>S?\|~.....]...Im.{..<\|.........E.79..{.~...oUm.b.Bo.....CP...a[...2..p."O..co..~s........Y..7~..gl..{....^..q;.....I\..lieA ....gM.n.....1y..#B%WE)..'i. .y..BY.q...6.w.......3..U..y.....8..x.R.....]

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/c=1882/tp=BKAI/gdpr=0/gdpr_consent=?https://tags.bluekai.com/site/5907?limit=0&id=${masked_profileid}&redir=https%3A%2F%2Fid5-sync.com%2Fc%2F19%2F321%2F4%2F6.gif%3Fpuid%3D%24_BK_UUID%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.9629609263693406
Encrypted:	false
SSDEEP:	3:lcyBmjFVcqeICn:lc5VheIC
MD5:	4FF4EBED4D93633E71D991DE649B394B
SHA1:	662C5B644F8044040644CBFED791208ABA42EF1D
SHA-256:	23663030C710B18965A228D681F516E809797FEEA911243EA706CADBA06A0306
SHA-512:	CFA58A504157F98F22EE962CA554801FB987BAF2E1E805A467A1178080E8B234E06D502455DEF4E3AF12303FFDA6D2F666D97CABFE2140AAFDDBE7DB8FDA6C16
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/homesurfingonline.com/wp-content/uploads/2018/01/guide-on-ups-air-ground-freight-ltl-tracking-1024x640.jpg
Preview:	Sorry, the parameters you provided were not valid

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	19456
Entropy (8bit):	5.368070514046372
Encrypted:	false
SSDEEP:	384:QlRIR3d1518qUT2nq+ZMOF1JXCtRgyeiyMQ6gTHwufvzlpszzLX1pDox4prZPGOb:QyJ18qUCFXXHkgphEfX1Fox4BZuOp1dt
MD5:	3F62449B84EE9485831C4C1726CDDD3B
SHA1:	8211B1E0C4DFB4D3AD7EE8A53D02F12B9503B06A
SHA-256:	3DB5FC063868D3CA5FC3CC2695F483266CFFEA00BEF68DFFD7E4944B947AACC8
SHA-512:	6ECEC6EC6AB4DF78BDA57C1873ED9B88B2CEBCBCDA730B5E2FDE6A68576798DA60A4006DD3E941A8CE0E48CE64236E1411C6435363BC420897E502B20ACE3977
Malicious:	false
Reputation:	low
URL:	https://cdn.tynt.com/afwu.js
Preview:	//v185 Copyright (c) 2008-2023 33Across Inc. All Rights Reserved..Tynt=window.Tynt\|\|[];.(function(){var d=window,m=document,h={distro:"AFWU",id:"AFWU-"+(new Date).getTime()};Tynt.AFWUL=!0;Date.now\|\|(Date.now=function(){return(new Date).getTime()});var e={_maxRef:600,_idMacro:"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",init:function(){this._icUrl=h.protocol+(Tynt.e\|\|"")+"ic.tynt.com";this._debUrl=h.protocol+(Tynt.e\|\|"")+"de.tynt.com/deb/v2";this._sicUrl=h.protocol+(Tynt.e\|\|"")+"cdn-sic.33across.com/1/javascripts/sic.js";this._apUrl=h.protocol+(Tynt.e\|\|"")+"cdn-ap.33across.com/javascripts/ap.js";.this._chmob=this._chua=this._chuav=this._chm=this._chpv=this._chp="";this.init.fbl=function(a,c){if(c)for(var g=0;g<c.length;++g)0<g&&(e[a]+=", "),e[a]+=c[g].brand+";v="+c[g].version};var a=navigator.userAgentData;"undefined"!=typeof a&&("undefined"!=typeof a.getHighEntropyValues&&(this._chpv="pending",a.getHighEntropyValues(["model","platformVersion","fullVersionList"]).then(function(a

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11440), with no line terminators
Category:	dropped
Size (bytes):	11440
Entropy (8bit):	5.405413454337748
Encrypted:	false
SSDEEP:	192:TixaOdP2DahLeKkda6nGvCvsojELj2n04UwXNAfLwUW1WuYx6jomrYZJp2XmIR2z:mxaOdWyLwaAWj2nvUwXNAfLwUWAuYx6e
MD5:	E959FBDD13DEF4B9A9D0A5FC9A7DE4D4
SHA1:	1E39712307E3673B40C0BDB8C7D3E86A3E8B60A0
SHA-256:	2DEFE59E357A7D0683C8283AC42841DB404A0884CAE2EAECEBF4B676E559DEDE
SHA-512:	590B22282634411002C9467C6C0D20D27979F841BFFCF893E715A2B61301A873457A9CBE0A765A11592E7F5CB81FC50D5BD436BD5D47DC93BFB776515B02E2C9
Malicious:	false
Reputation:	low
Preview:	(function(){var n="undefined",t=function(t){return typeof t!==n},e="js15_as.js",r="",i=!1,o=!1,a=!1,s=!1,c="0.2.1",u=25,_="-",f="_HISTATS_SID",d="histats_custom_destDivProducer",p=function(n){_+="_"+n};p(c);var v=function(){i&&console.log.apply(this,arguments)},l=function(n,r){var i=n\|\|{};try{var o=r.document,a=r.navigator,s=r.screen,c=r.Date,f=r.Math,d=function(){return o},p=function(){return d().getElementsByTagName("body")[0]\|\|d().getElementsByTagName("head")[0]},l=function(n){return"function"==typeof n},h=function(n){return t(n)&&n instanceof Array},m=function(n){return t(n)&&!!d().getElementById(n)},y=function(n){var e=!1;if(t(n)){if("NaN"==parseInt(n))return!1;e=parseInt(n)>0}return e},g=function(n){return y(n)?parseInt(n):0},w=function(n){return"string"!=typeof n\|\|n.length<1?n:n.replace(/^['"]?(.)['"]$/,"$1")},T=t(window["_DEBUG_HISTATS_ASYNCR_DO_NOT_AUTOSTART"]),I=function(){return parseInt(1e4f.random())+1},H=function(){return Math.floor(4e8*Math.random())-2e8},C=I(),E="hist

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16831)
Category:	downloaded
Size (bytes):	16880
Entropy (8bit):	5.168478852854888
Encrypted:	false
SSDEEP:	192:S0S5JcKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+86b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	0606BAC7226F031B1C5354DA4A5D762E
SHA1:	081C9C7B3179C6D0612BC967586455F2A0591D51
SHA-256:	A2FBE256CA07AA3402472AD06098FC56F9E96DE1CB07F2C4E936C77B3F426ED0
SHA-512:	4217C4AB12AD78FB593004566DEC6D29A336D1FDCFC3BE3F2865663226B8165F6B97024FB07FC180344A4136C8E3EBA0B38B9B89CB4B9B4064E92FEB429D4D63
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/feeds/posts/default/-/egitto?alt=json-in-script&callback=readpostlabels&max-results=50
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ml314.com/csync.ashx?fp=d6a8e62c02b39434340fe0385cfb38dfdd73cda2c50b4b3ca2af8dd13273d13ff4cb09cee1a4f8eb&person_id=3647467566085439504&eid=50082
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2097
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	7.831312491646247
Encrypted:	false
SSDEEP:	24:XwmOHj7FVa/ZK+kNJuGiSdAzvMuUMeXhDFW82swoydY/:Xn4a/ZK1Tj+vMzTW82sLP
MD5:	80D8F4DD25F0D41FC0638E5641734EFE
SHA1:	9348E64DC4784919748B31B2EFBF2AFF3CCA21C8
SHA-256:	5E4217B5E343E7F92E36EF0FD485DCDEC6D9801076EDADCED8F6756C94CCA7AA
SHA-512:	3C674DFD3A8E2586AA80B41B03889C9D6E9E522881F8ABE255838FCE1828D309F6C83824504541AC54F813312F80C79471F5EF9A95912BDD6FE791373FB081B9
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C
Preview:	..........tV.w...."..c$.......!...x@...n.....b.P....g..,t...#......E&M..u..O.,..@..Ir.8.x..m.3C..T.....&..R.....B.....f.KN....x...%_.D..ZjQ.".&6q\...<j..\...h.)1B..}...#..,t8.^..@..k.kS..[j.-..SeY...yyp....K..^tUO.Dg....1.o.v.'.4..9Q/...<.."../!....g.*m...zk4.Df.c..&/...0....M.....".+.+\.U..Ya_../.Sq..Y^....xz.&._ .. ..<....d....!.:...1....+.....;.^../..v..W.q..$q+...@..&.<-.Lg....?.\|".....z;..}zRdK.F._..T....2O.m.....8.)..:..X.]..P.(O'...............D......(.K.m`......0....mdQ.w.$W.wo.ft.R.....7..P.U.jB.Xx.....1...t..^7...7....<.U...)ov.....:..[.F.s..0.FQ..dJ.uR...E..z..[.o.@)..Pyftf>.Y........E..p..E.6..j.\|y..'LTf.h..j........U...N.g.....u....H.ad.e.7....L..\|-s'.....2.k.6.mjs..q}93FJ....8....W..0.....8...d........8.o...+n~C..8.H..7....{......X....#.'d^..c...y.1..G..o.......4G-#D...}.......j.X.F....Sp.@..\|..."..L.F.OuoH?C......F.~.W(..5...)....c..(\|.,.O..s..2E..\|,.b9.....~9.+......2.1...__.qE.}{.sEdR..;.z...2...1<.rq...1.vm3.hjJ..`...p

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2683)
Category:	downloaded
Size (bytes):	76355
Entropy (8bit):	5.442037779036157
Encrypted:	false
SSDEEP:	1536:nFNZpocbeVw+QgUy/rWukbhnlBBULag4X4xl1DL0hwSnj4Vj4JLZ1fRJ6B:FbowoUy/rWukbhnlBBRo1DLbSnw0vRJk
MD5:	2B79BD63AB9E491F100A9B9D789A7065
SHA1:	AD2EFAAC66F74E795B313993B222B44C07AC6867
SHA-256:	A754BC940261B80B6E27B273358E3E14835F91131BF4BA7D07316645742E69E7
SHA-512:	700BC5689B20A2E59C0F2A3D5412AD1C7B2F4F329E71F16C6DFE631028621A4536052BAEC94B94EE0D532815696BF16E099279EC6DAAE44127386B73E7E20C87
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/2022/12/ups-ltl-tracking.html
Preview:	<!DOCTYPE html>.<html lang='en' xml:lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>. Meta title by GianMR -->.<title>ups ltl tracking</title>. All Meta by GianMR -->.<meta content='blogger' name='generator'/>.<meta charset='UTF-8'/>.<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>. [if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]-->.<meta content='Zero Unnamed' name='author'/>.<meta content='follow, all' name='alexabot'/>.<meta content='-5;120' name='geo.position'/>.<meta content='2021, DDR' name='copyright'/>.<meta content='en' name='language'/>.<meta content='United States' name='geo.placename'/>.<meta content='global' name='target'/>.<meta content='United States' name='geo.country'/>.<meta content='all, follow' name='robots'/>.<meta content='all' name='google

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.digitec.ch/im/Files/6/9/6/1/0/7/1/6/The_Super_Mario_Bros_Movie_202321.jpeg?impolicy=ProductTileImage&resizeWidth=1704&resizeHeight=852&cropWidth=1704&cropHeight=852
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x577, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	99296
Entropy (8bit):	7.997897688811516
Encrypted:	true
SSDEEP:	3072:AWyouCOKnSxAROxrWIwUyzhzUxyuI8Y3PcKVSGz7:AWyOjnSKRWK6ytzcVI8Y3pH
MD5:	DED3100D67D91BB5A947203684AD2B09
SHA1:	7506D6819A7AD77D18FA7C9622A8C328087C2CAC
SHA-256:	BBE9E89431448083DC1B96A3A3C12FBE6B1B1A1C1887C83A472D2EE2031B2182
SHA-512:	38A2903A1A48F6205F346B549ADC96935B17D276B95ED7CCBC8E3D043CFB47F4FF4AB078FEC2C0CB2A0F89BE725FAE3D9D5A79CEE5C00086132CFB9560638C21
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/gamingbolt.com/wp-content/uploads/2022/10/The-Super-Mario-Bros.-Movie-1024x577.jpg
Preview:	RIFF...WEBPVP8 ..........A.>m..F$".!+R.q...fl.......11..a.[..@.,.q..y...7.....r:3.3...._..w..{.q.f.........v>.......x.........G......._..............{...'.?.....~.\|............k.g.W..._..._.?........h.....M.......o..S?..E.i./...\|.\|.._.?.?.........../......!.[./...\|....W..aO.......n.^..G......>.{.u...o...{...........x>..O....Z.. ...{..Q.........weK...z..l.,..?..J.#.F\|n.7.a.q_...6{......#n..\|w.s.~...7.....D....].....A.........f.X.g#iADuC.U.`...6...A............#C....._pur.zz.c3..n{.f..H..f.X.R.Y...:C..>...pW=.b]9...N...>..S..gn....^./.E....b.@.]X1...O8~....{..o.d..]..W..ra..\|}.Y.?W.jO..-.4..&.).\|.c...C..0....:TI:....9NM.4.w.].$(..LL.."v1.....$.'..o....gC.". .......?%j`.......kg...........!..2.I..%`..>../.........].6.K.H..;..,........#...H./.^.d.\|...n..v........b..vo......). ..m/..\:m.}%.....Y..g9.G.2.:-y~..Fk.x..@...Y#M..#x..j....#c.....Z:ih.$:.X..h..S...y...9.x.Op....+..e.....E...\'....K..c...@RB"Y^.u..z......eY.....@..M.X..kn........S"k2..b.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43601), with no line terminators
Category:	downloaded
Size (bytes):	43601
Entropy (8bit):	5.362094585622624
Encrypted:	false
SSDEEP:	768:HiS1YxfHfIcITa4P5+23ex/BVQOXGsWIYTHpji7J:HioYxfyTaW5KVQpsEHpgJ
MD5:	9B991FC4E41448221BE02744748EC589
SHA1:	47DF0B75614D17D1E94D61FC4006849EA8E1E13D
SHA-256:	FFE8AC1AD574101276F7BA3BF6CFB95D55ACE8486BF60329ADBF843C64A2EBCE
SHA-512:	FA4E263114DBC0BFE29FB7C1A39F7A0D36178D0BD6B6075B99D1183315F1FE6A23D1AB8ACC49710E2165D945135B5AEDC685A723F0DBC5C7E0F6EBE6E878DBDB
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/16311/sync.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16311_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16311_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16311_a(a)}}var sync16311_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16311_c; if("function"==typeof Object.setPrototypeOf)sync16311_c=Object.setPrototypeOf;else{var sync16311_d;a:{var sync16311_ba={Ua:!0}

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.9629609263693406
Encrypted:	false
SSDEEP:	3:lcyBmjFVcqeICn:lc5VheIC
MD5:	4FF4EBED4D93633E71D991DE649B394B
SHA1:	662C5B644F8044040644CBFED791208ABA42EF1D
SHA-256:	23663030C710B18965A228D681F516E809797FEEA911243EA706CADBA06A0306
SHA-512:	CFA58A504157F98F22EE962CA554801FB987BAF2E1E805A467A1178080E8B234E06D502455DEF4E3AF12303FFDA6D2F666D97CABFE2140AAFDDBE7DB8FDA6C16
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/docs.shipmount.com/wp-content/uploads/2020/07/s6-768x235.png
Preview:	Sorry, the parameters you provided were not valid

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32769)
Category:	downloaded
Size (bytes):	94840
Entropy (8bit):	5.372946098601679
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
MD5:	B8D64D0BC142B3F670CC0611B0AEBCAE
SHA1:	ABCD2BA13348F178B17141B445BC99F1917D47AF
SHA-256:	47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
SHA-512:	A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-1.7.2.min.js
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (574)
Category:	dropped
Size (bytes):	19456
Entropy (8bit):	5.368070514046372
Encrypted:	false
SSDEEP:	384:QlRIR3d1518qUT2nq+ZMOF1JXCtRgyeiyMQ6gTHwufvzlpszzLX1pDox4prZPGOb:QyJ18qUCFXXHkgphEfX1Fox4BZuOp1dt
MD5:	3F62449B84EE9485831C4C1726CDDD3B
SHA1:	8211B1E0C4DFB4D3AD7EE8A53D02F12B9503B06A
SHA-256:	3DB5FC063868D3CA5FC3CC2695F483266CFFEA00BEF68DFFD7E4944B947AACC8
SHA-512:	6ECEC6EC6AB4DF78BDA57C1873ED9B88B2CEBCBCDA730B5E2FDE6A68576798DA60A4006DD3E941A8CE0E48CE64236E1411C6435363BC420897E502B20ACE3977
Malicious:	false
Reputation:	low
Preview:	//v185 Copyright (c) 2008-2023 33Across Inc. All Rights Reserved..Tynt=window.Tynt\|\|[];.(function(){var d=window,m=document,h={distro:"AFWU",id:"AFWU-"+(new Date).getTime()};Tynt.AFWUL=!0;Date.now\|\|(Date.now=function(){return(new Date).getTime()});var e={_maxRef:600,_idMacro:"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",init:function(){this._icUrl=h.protocol+(Tynt.e\|\|"")+"ic.tynt.com";this._debUrl=h.protocol+(Tynt.e\|\|"")+"de.tynt.com/deb/v2";this._sicUrl=h.protocol+(Tynt.e\|\|"")+"cdn-sic.33across.com/1/javascripts/sic.js";this._apUrl=h.protocol+(Tynt.e\|\|"")+"cdn-ap.33across.com/javascripts/ap.js";.this._chmob=this._chua=this._chuav=this._chm=this._chpv=this._chp="";this.init.fbl=function(a,c){if(c)for(var g=0;g<c.length;++g)0<g&&(e[a]+=", "),e[a]+=c[g].brand+";v="+c[g].version};var a=navigator.userAgentData;"undefined"!=typeof a&&("undefined"!=typeof a.getHighEntropyValues&&(this._chpv="pending",a.getHighEntropyValues(["model","platformVersion","fullVersionList"]).then(function(a

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 700x700, components 3
Category:	dropped
Size (bytes):	45691
Entropy (8bit):	7.92434920257139
Encrypted:	false
SSDEEP:	768:TVNV5sDSfVJc7foCKr4CmBPEfiU15XHA4HguBP26C9vb4MepzRIJiJ9Q4ggz:TDV5sOfzTxe/85XHTguBP2bN9epm8J9h
MD5:	388ED062C3FE3F7C1167B2B212CB31A3
SHA1:	6A30FB29C7DC3B1BA24C50344231F5EBF9649999
SHA-256:	EF2DE78C1AA6EEF819A920EEF52C2E63F9443353CE0265A3697FA59339BC0964
SHA-512:	04F46BD4427A3C520166B72A19134AA4577019A2E8A7AB2C8C91A44FC694BE303E45561CF101875BAADC02B9482056BC14447102B7029A9DFC4ACC87F9ACC11D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C............................................................................".......................................................................................;......o...I..~e...A.X.......=.....^3.+.........[...[.9n.....[.9n.....[.9n.....[.9n.....[.9n.....v9z>Z>.f._1.......1g.c.\|.._.~Y....hr..............:.9....C...iF..d...=...WE.cs..>.<..o..KO.>....\|...O..>]_P.t}C......P.q....P.q....P.t}C...>\}C......P.q....P.zOS......;..../.G.pa...........`....A.....\|.>.~g_}.>;.o'.O.I.Q.;..~......y?+~....?,~.?,~.?,~.?,~.?,~.....c...c...c...c...c...c...c...c...c...c...c...c...c...c...c..........c8<.+...>........?.y..7.....??..7....O...../%...y.....z.q.y.....z.q.y.....z.q.y.....z.q.y.....z.q............u.....>....].{.......?.............ltq.5_I....Sh..56.L..2....4..-.Kp..4..-.Kp..4..-.Kp..4..-.Kp..4..-.Kp..4.Q..

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1382x922, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	128988
Entropy (8bit):	7.998400928054197
Encrypted:	true
SSDEEP:	1536:tD/+Bjn9ujHQTPQRk2hh+w4BGgM50Uo3xmmR45Pw8/hTXTGfOQSD/bdHNCsNpg7T:tgjnQuok2hULMrEA5yfOb/b3DH+Fgid5
MD5:	C493E0A2DA3C9380A4B1C27271354055
SHA1:	6AF8D9A176402B0BB8B59A637EBB7B11634721BA
SHA-256:	08E73494A1FB8D00BF72339632E4899369C51EFE83D3E9C0E23BD3F42DE224F5
SHA-512:	9AEAA58EAE1F3EBCF07B8309382E4A05188861ADB73B796925A10487062E3D080FD76EB9D296BEC34CCEE6606BAFDFC0E1BE94FA8BAE9B2245ED0947F9BD2503
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/brentanomathandscienceacademy.org/images/large/2016/12-01-15-Brentano_T6C9098.jpg
Preview:	RIFF....WEBPVP8 .........f...>m0.G.".'&......cnLJ...=.i'..D.l.7.E.X..O M...?.<{{_..ot.....M.O..N.._.C..;....=;.'.?.~3./.>!....7o_...g..._...........k...w..e........../..........._/.../F_...........?..U>M.....?......l.+._..zo.sw...y......?.........g....$..~.......i.P.O..?...w...z_....J.d...k....D...G.NuCfQ.:..f.\|`.CN..P.m!.iO.w.....J..........r.2qN..n..y0...>.F...))"......V._...K..3gj..,...A.X9t....O....DT...k...4...j=....hz%~...2.r-s.......i.cZ..a.ZA..(P...@..QB..g?.?.~.;....:ITP..V....G.l...J0.1..!..p...w"../8...mF...W............i....v....iW.ak.<.b5_Mu..hpD.y._...w......#.BL.4}..../...m...?.C.?4.@... q.Td..v;U?.E....s...s5..Wz&.J..z..~.E...b....[+.;oo.,.......R.....2....y0...l.~.$...0. .kc..T.#~ipxU..~.........G/...c..+...ED.....__,Cs......Z...w~...e...5.@......X.\|..7.t.._S..,...L.E..%3....`..".o.U..bA5Y ..*....L..;..r.._.9A.`......L5....0W#@"..8b............-._......X.2.d.2..Z..-y&.....'.w0.<..w..Ze.L:....B..+.B4-....,.\|..NM.......O^..h$.{

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.2806390622295662
Encrypted:	false
SSDEEP:	3:2LGffo:2LGXo
MD5:	1B9BFBE209FD6BDB0DAE667C8956FA63
SHA1:	309E9A6B919D5CD697834855382244FC06E21A55
SHA-256:	2C6F0C2E544B26A69E4BCE070D3EAB8647CAF5C92770E2596C14CD28E1AA3F05
SHA-512:	4A4A78CCFF839AE4916AF4715D315947BED1798C8C9A1A558305050D0A68FA507EF7E760379394F5207445F5C672D28EE5F32183934142AB47B0267394F0199C
Malicious:	false
Reputation:	low
URL:	https://aqfer.lijit.com/samples/empty.js
Preview:	(function(){})()

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	62971
Entropy (8bit):	7.768030689201553
Encrypted:	false
SSDEEP:	768:NirduMzF8UiwWYEORZCuURz/kLFKAnwnih0wKMBhkxKQddddddddttRj2NfC5sKv:NKDiwWOR+9oluMB9gf2NfssOH
MD5:	7325555B023A165AAD3E32BF22094F3F
SHA1:	D2391ECE780F15160B757516F57AFFC1C46F6B00
SHA-256:	3192D90953E962592C17C7C224B4C3FD0B70D5A8A916988EB813C4DAAE0C35CD
SHA-512:	0C2018279FF450A123741807D5A6A67102D750820F54B586E9730A617F2858A23180482FE05E861E56849390204D04C579091FA504DF264EA47CA119D3705BB6
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;..........."........................................^..........................!...1QRU...."2ASTaq....56bt....#3Bu.....$4Crs....Dd.%&e..EFc.....................................3.....................1....!Q.AaR"2........#bq.3B.............?....>t.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................3......0.....A..0.....A....G2......0.....A....G0.....0..s..H..3. G0.....0..s..H..3. G0.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 660x371, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	43290
Entropy (8bit):	7.9956947692654134
Encrypted:	true
SSDEEP:	768:skHtQPU4mnhzci9SXAKvPXBXKfGsPvogtooLlJ8c/w9yuNGMKq87LvDkc:5HtZRQAKXpuLLlJZuNnKt7LvDP
MD5:	0B2B6FFE9D15EF07FAF26AFD32E46C8E
SHA1:	4D4066620635D8547D5A4C8B6E1901D612FF4B3C
SHA-256:	338A4C5387C6D08F6FE46F53D1B0DEE86BA87047814C9D8754C254153E0D4D22
SHA-512:	61F0F77AADB7AD048F5A907060EFCB2C842DF014B3D52A93D8C520D28267D470007F3D72EC2DBFBD5A06320E33979BAA4164A4915B97C21F5D3EB834CCD13FFD
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/it.blog.bepuppy.com/wp-content/uploads/2017/04/storia-e-origini-del-gatto1.jpg
Preview:	RIFF....WEBPVP8 .....G.....s.>m0.G.".!'r;....ce......$.K.r..N.e...<....x...V......S.,?....<....~.Nu_..{....k.........#._s\|.........a.C....G./._........[..........LXxv:..P........{=Z.{.7.../.........`...._...................e..Q.$...P.g...Ph.M...."...\.....)?........$ ..8...wt.CM{....d0..r<j..gj...k=.x..e.'N...j.....r.3.-.+.?..M{.G.T..-.=!.O.g......}d.7..n......;r..O~.H..I?.:..E..3...A..(;.+^.!.O...0..z.fa'.)8y...U...h.,.. ..q.jx....<......D.......'v@J...\|..N..\....J.$F.....L....y....?c`4->N..>-......Lb..\|.U...+.G.....Ni...f{No...O ...%..j..../.1G....zr..2f^d...J.....t....o..~8.....n..70..;/......Q.G..."...AK.S..iDQs...3.1.._rRk..]C-P.VD..F.~..03.u.z.....gX_..K...r...!..,......u.53.Q.m...X.....e ;...-.{.J.N..p\|..b.~4(Q...r..BA..........t:..~PC.b.g0......o..Q......u:t.>..<$\Hx....Z^..2).Ia.&..I.....}O_.=....@u1=e.i........._[e..lU....q..2....f.Oa....Y..k...Q#...`..N.M.......6.L.i...r..../.u.B#.:m..2.......O.~..k..=.m."...Y........%(f.&q..&q...

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 3989x1927, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	742054
Entropy (8bit):	7.999279921287581
Encrypted:	true
SSDEEP:	12288:PT2fljdvkfrFM6LzNhY6E6oqkpek+PIoJRtBgded3nEtNCdw75W3qfM5J:PMljgFTLphYxh0JRKed3EtAdMWHJ
MD5:	836AF52F3099D4FDD344A2D0E164B3AD
SHA1:	AF8665760784C6B977FA3A0554E0817ECE66D487
SHA-256:	63142C88B50F0B90160649ACCF49AA2ED101D0C7C5EF89E7185D6D5DAB2D134D
SHA-512:	967937E665D93974C4BC2E34FD9C583C9D4408D8ECD03AAEB192038E26A173971CE20D8C431DED2387FF4E5254592F05AC6C17257E045C2FD901F751ACCE48BE
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.refundretriever.com/wp-content/uploads/2017/12/1-UPS-Hundredweight-CWT-Tier-Incentive-Discount-Refund-Retriever.jpg
Preview:	RIFF.R..WEBPVP8 .R....!..*....>m2.H$"...R.8...gn........g......f...}.?...{.~w.#.'..........~......w.../......)........O.....C.w..\|.......[.W.N..G...........j...........0..~.......w.w...x..............3........_...G.......{U...w.....^Y...g.o....x.....P.........0.......O...#P.....1.s........i.............o........w.?...58.3.?.?x\|.e.}~.........E...?../.+...o...}.{M.....}.\|.y..................y?.....7.......c..._._..p}......U.....O...._.............._.>@.........'.O..t..?................?._.....o..\|......g................W.........../...?....?...O./{.'...........[.G.G......9.+....M.'./......+.%.C...?.?........'..._......Y.g........9.?...w./.....i.....?...o....[...?.....="._...?......7.....T>g...'.....>'~3..._........w.......)._.....?.?.......3.g........M...g.....u?........_..................O._......t.w.G.....?..........?..................y.7.........................?.......=.../.......T.{[`V._.Z......L.W..P.{.U..s..U.qV...Z....[].]kk..mr................_.Z....

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728042005341
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&event_source=dtscout&rnd=0.29599364292840113&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 2000, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	418401
Entropy (8bit):	7.952087105020754
Encrypted:	false
SSDEEP:	6144:QOrA05td4OrZSlBH2zFiVfYp4VLe9XEB9AKKZGTTv/Vnsk1A7gSNOaHOYPhGMCUa:WwtFZGgCPyXEfAKKmTtsmA7LNOaHPfa
MD5:	54CC573A04DF1AED6F2F2BE620FD6C80
SHA1:	FD9BA38409E91187DD4AFEF4B8CAC6976DC8B3AE
SHA-256:	492A1015CB6DA67AAFFF28106AC2519B6D3777E41EDE91A35BD3E09969890986
SHA-512:	46259454522DBFF5B6E77F905760103001EB50F82197AEC516BD84663BF6B6D656B0EA5E13AAFF232A3765F39F6767BD21C7237491E491BDFA8EA08A55F6672C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............4K....PLTEGpL...t....O..Q.!a.......\p..>..t..a........N..............b..O.....?..u....u +x"-........"..+..#...a.................... ...u..k..........%<EM...@IR...\|....(......".CX....O_...}..DNW.....8@GM0...1V3/...S.......)........3.....'.....<.Yf......r.)...H)&....(..+...2;B..,o...."..........dmA.....IT]z%3...[96........?.....7#..E/.....(B,....9>++.5P.mt.v{....... 6.+?.pe.....1.,J.WK..2.=U.&$,4;<%$....cX.fWR:9...v.#..H.7Wkqx..-.!4t{.:58..C...(+2...D@C.0J7..U]eea.._\.Q?.K;}-G.[LLKM.0L.kjw....?\|..cfl.Bc`VWyRN.....%.vu.?Z^HG.Oo.{t....<...xD9..<..N..._.m:0....>I.#6..Y..K..r.Pd.. c....Y..............6R...@.'.\T...pk[.dw.<6..r. <]...&.....}..w.;5.s.......Yg.}[.6.....`. .g........BX8...[..af?..$.v.z........ar......1B?{4.S..F...K...?z..........e..........P....tRNS...V....)._..Q.L....}..^.IDATx..mh]W..;&.#. L..=..I.Iuz.&M.87......mc.C5....<.Z...L.v..\.r.B.`R.{@.Te..P^P..HH&m.C.Q.I..B7 J.rP;.F..z....k.......9...GG/....K....../...4(;

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 600x800, components 3
Category:	dropped
Size (bytes):	81299
Entropy (8bit):	7.970243487042669
Encrypted:	false
SSDEEP:	1536:vijpT6pmwEI5l2NmrtgUvz60gP9Jv9BKrBt/x8V5pji1195hRnIvJ+O0XzHQcK:KjpT/fIJrtg656KrmVi1r5Ps+zDHQcK
MD5:	6BA3DCE94C4690D2AE9355E72113A4B2
SHA1:	85B2C387945F926D52A21B801A8A4AAFC7D19B84
SHA-256:	0DF220B88511BDE7B3B33498A287EEDA08E388C7ADFE915DF7CE9E0FA1B80A64
SHA-512:	53B75FD7B6C94970D425B7F9CC04D689A87E026C8932DDE39D97798C8E700F1E56F3681A4A35BA0225C67551145262234F44DC01CD0C82BF667B39A80796BC0B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C....................................................................... .X..".........................................................................................................................................E .p. ......................................H.H..... .H.............................................EH(............ .C..6.w.Nn.P.h.......................A@.......".....A@....f.g...<.Zz.?.E.t.u%.:d.[.....v.....x.g...`.@.........................T.X.......\|..a.Y.6U.%.:O1..h..l.V..z[.jv.T...kC.......xV...c....@4.........................T.X...f.7.fr...Nd...L:.iQ<..L.u.V....u....}\.~.N.J%.g.E.../Y.....{..p...........................T.@...+!W.u\|...r..X.9...0.".](_[.YY.[j..k{.........K1...\|....y..\MJ.....K...M......N@......................".J....:...6.W.r-D...jH.i:.6........o.j.z5.>........kd7.9.3=......=..]..]G[.;..z........{..............5..........T.X!.I.+...{Z...!.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=6bqoi0v&uid=f5874891-8906-464c-a706-158f5d9ed358
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 850x450, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	52074
Entropy (8bit):	7.996292942262768
Encrypted:	true
SSDEEP:	1536:aqqXcDYWKJBkqCEUmo7gdqU8ZujV+trkW:anshwi28EjekW
MD5:	5FB70E864346B18E81F78E520D7C5A25
SHA1:	512C1656E51151E3D82DB6B23C777951B0D1AC6C
SHA-256:	86B9467F4BB2F9BF710778291E2E85E5ABF25448851AC163C41C6EC3869F5BA8
SHA-512:	CA6EE2F28C4CB283F826F66A8CF29BA5945763DE55924EBF359FD65323DBCD4D83BAA1AF5ADF1E6B4856187F637CFE0A551F3423B80CA0B6272F21987B458BD0
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.oneclicket.com/public/2020_01_aida-spettacolo.jpg
Preview:	RIFFb...WEBPVP8 V...p2...R...>m2.G.".%'s. ...em.....R/<.4..]..;n.[{)=@....\|.\|...xs.qO...._._F/L....~.................O.......7.<.\|..0...............j=I.w.3...=....]....E=..3.7..G.+._._..\|~...L?Y.Q......./............_......H......?..n..?eK.B...%.....pap.L..D....%4..LBF.Z~..C&x....u.........hxg......V.+A.r...bct3........a...l).G."..."a.=.b.Mw.?..K..-y%.v......>..e%....#7H8..q..m'.=...b....K0.h.......%.B.x. .A0E2O..$.d.J...<..X..'..G5..?.<X.-.5...A...{&MW6...{O6...,.l..\|;D.<$.7.....q..%1LD.."T[.>z..t.c...w.....f.&....H....@..1../.gl.......1...6..3U.J.;J.,.\&......z.=...SO/W...ZMW.)_A .Z.tlS.6Z...7..g..r...5.\|A..V...>...:.1o...5.R....K..Y_$`,.Q.C....d..5.k.!.@..6[....F.....P.c./...v....d.....-.j....d.x.J.D....+.>..$%8...A..~.\|.....`N7.....zO.3..Y<e...nA!...=....K.q.MP.$v...Q...W..#KYZ.....).8........^.._..C..q...2.\|..n..-...iP....d..i........:.o..e^...y..8.rD.....q*P..4t..q...\|.K.3..nym..~.........,.o6a...>l....P.....P..........)Q.......gp'.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4706781&@f16&@g0&@h3&@i1&@j1728041958653&@k13819&@l3&@mcps%20teacher%20directory&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:45332327&@b3:1728041959&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&@w
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2017:06:20 10:19:35], progressive, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	1541361
Entropy (8bit):	7.9777761600124615
Encrypted:	false
SSDEEP:	24576:h2dAvTay0TEqTnOojn0+CCpns4lMo9FhSFemTmj71aZBU8AAEuAD:h2OXuTO/kds4roTA0ZBUnY8
MD5:	E6E91B52ED25A0EFD64C23A76A9630A7
SHA1:	15C9D29096947B5EFDE56D2A9802D77D5C421FA6
SHA-256:	2F6F47D54F7BB65D47515187BF5C4639DAB7E274319D219A2047B453FB949862
SHA-512:	A49B2FF635D420F2A11034299FE3DC3B20E836509C5A611C094BA0742E6934460F0202D19BB4B5C1C7B770B1AB8D4BF4C62A5C2CC87921E6DFE14C49A919AABA
Malicious:	false
Reputation:	low
Preview:	......JFIF............ .Exif..MM.*.............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop CS6 (Windows).2017:06:20 10:19:35..................................................................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................k...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%E.I$.............l...mx.g........Ue..Q......;)..i...2.K.c....F.2.....#.....~.......X..~>/.m{...Y9.....[..C......[_..x..c..~&mT.$.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&event_source=dtscout&rnd=0.17798619393600457&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16600), with no line terminators
Category:	dropped
Size (bytes):	16600
Entropy (8bit):	5.106011935059437
Encrypted:	false
SSDEEP:	384:wE3QyMp8WeOzzXlNo19PuSFoo4t3JML84v7K1LqVT4FbN0sI:wE3QyMp8Wf419PuSFoo4t3SL84zK1Lqd
MD5:	26A760EB1716CF6B311E16ED82D0EEB5
SHA1:	345DA68966B17C4A0415765B62C755107BA2E01B
SHA-256:	F3EE00626500892F28D8EF92B554D64F2EF43A54B9F2AA9F167262F28DB339C6
SHA-512:	2E49E019D026BB278E83377C5EC1C603FB1E36D971253BCADEB9C9EE5867110CC4E2ED9B3E59286DE659119C52191685764F9799584C85ECD07609B374AF2259
Malicious:	false
Reputation:	low
Preview:	(() => { var i = { d: (e, t) => { for (var r in t) i.o(t, r) && !i.o(e, r) && Object.defineProperty(e, r, { enumerable: !0, get: t[r] }) }, o: (e, t) => Object.prototype.hasOwnProperty.call(e, t) }, e = {}, t = (i.d(e, { default: () => u }), { JS: "js", PIXEL: "pixel" }); let s = { brands: 0, mobile: 1, platform: 2, architecture: 3, bitness: 4, model: 5, platformVersion: 6, wow64: 7, fullVersionList: 8 }; let a = { chrome: 2097152, safari: 8e4, opera: 2097152, edge: 2048, firefox: 65536, ie: 2048 }; class r { constructor(e = !0) { this.isSync = e } collect() { return new Promise((e, t) => { e(this.getDeviceInfo()) }) } getDeviceInfo() { return { screenWidth: window.screen.width, screenHeight: window.screen.height, devicePixelRatio: window.devicePixelRatio, language: navigator.language } } } class n { constructor(e) { this.allLevels = { FATAL: { value: 10, color: "magenta", secondaryColor: "magenta" }, INFO: { value: 20, color: "green", secondaryColor: "green" }, ERROR: { value: 30, col

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=3840, bps=206, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=5760], progressive, precision 8, 1382x922, components 3
Category:	dropped
Size (bytes):	183079
Entropy (8bit):	7.965510799894135
Encrypted:	false
SSDEEP:	3072:NRO8bk66pzEl7mD5RwjKbiltk88Q720rKjkvJA/CSe7ENMh4nfYK0A:fmDHN88E2D+JA1aEy2n7
MD5:	89E3C1B7458C3E014796198A584A0E8B
SHA1:	8DAA5C406230F0248E28154C2F1C4B45B144E8FA
SHA-256:	D3442D2AC7657FAA1C7E284F5CEA6C2F09F0418B160BB3945B713068232864EC
SHA-512:	5F35A0FCD0619755A7840D1A77CD9327FBB0DBA503073AC74CFD9C73798FDF43ECA806E3FACE905BCE448E4F9ECE5391F8121491352B44ABB9B69D2FD90B3A89
Malicious:	false
Reputation:	low
Preview:	......JFIF............&.Exif..II...............................................................................................................................(...........1...........2...........;.......2...........C...i.......T.............Canon.Canon EOS 5D Mark III......'.......'..Adobe Photoshop CS5 Macintosh.2016:09:16 17:14:32.jennifer shaffer.jennifer shaffer..........................."...........'...........0...........2...................0230................................................................................................................................f......................."..........................................................................1.......2...2.......?...4......._...5.......t...............#.......2015:12:01 14:08:32.2015:12:01 14:08:32..t.@B.................................... ....... .....022021010736.........F.......................EF24-70mm f/2.8L USM.0000000000........................................(................................"..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16831)
Category:	dropped
Size (bytes):	16880
Entropy (8bit):	5.168510763174177
Encrypted:	false
SSDEEP:	192:S0S5TmKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+06b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	7FFC587B6A79EB66ADC2FC1E4B5ACBBC
SHA1:	38B89DB973AE186A74E6A82E6CA4E53F10F6A9B0
SHA-256:	190E7AB47C448414538C5A4CD52BE93035F260B6D20DC0CD39A1D0BE59F8E39C
SHA-512:	A8B2CD1216AD51AC188135AE32DB2463EF591A92D261BB7B5D8DB6C86B193BB3223C4F95ADD3C6361403737C72B7D65DC865C6A1D648F41EEDC6FA258EC8FBBF
Malicious:	false
Reputation:	low
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11440), with no line terminators
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.405413454337748
Encrypted:	false
SSDEEP:	192:TixaOdP2DahLeKkda6nGvCvsojELj2n04UwXNAfLwUW1WuYx6jomrYZJp2XmIR2z:mxaOdWyLwaAWj2nvUwXNAfLwUWAuYx6e
MD5:	E959FBDD13DEF4B9A9D0A5FC9A7DE4D4
SHA1:	1E39712307E3673B40C0BDB8C7D3E86A3E8B60A0
SHA-256:	2DEFE59E357A7D0683C8283AC42841DB404A0884CAE2EAECEBF4B676E559DEDE
SHA-512:	590B22282634411002C9467C6C0D20D27979F841BFFCF893E715A2B61301A873457A9CBE0A765A11592E7F5CB81FC50D5BD436BD5D47DC93BFB776515B02E2C9
Malicious:	false
Reputation:	low
URL:	https://s10.histats.com/js15_as.js
Preview:	(function(){var n="undefined",t=function(t){return typeof t!==n},e="js15_as.js",r="",i=!1,o=!1,a=!1,s=!1,c="0.2.1",u=25,_="-",f="_HISTATS_SID",d="histats_custom_destDivProducer",p=function(n){_+="_"+n};p(c);var v=function(){i&&console.log.apply(this,arguments)},l=function(n,r){var i=n\|\|{};try{var o=r.document,a=r.navigator,s=r.screen,c=r.Date,f=r.Math,d=function(){return o},p=function(){return d().getElementsByTagName("body")[0]\|\|d().getElementsByTagName("head")[0]},l=function(n){return"function"==typeof n},h=function(n){return t(n)&&n instanceof Array},m=function(n){return t(n)&&!!d().getElementById(n)},y=function(n){var e=!1;if(t(n)){if("NaN"==parseInt(n))return!1;e=parseInt(n)>0}return e},g=function(n){return y(n)?parseInt(n):0},w=function(n){return"string"!=typeof n\|\|n.length<1?n:n.replace(/^['"]?(.)['"]$/,"$1")},T=t(window["_DEBUG_HISTATS_ASYNCR_DO_NOT_AUTOSTART"]),I=function(){return parseInt(1e4f.random())+1},H=function(){return Math.floor(4e8*Math.random())-2e8},C=I(),E="hist

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 700x700, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	15502
Entropy (8bit):	7.98447999936812
Encrypted:	false
SSDEEP:	384:DdICVSDo+C9UGSla56pB8df6jjmtAvju4HFuTdw:5P4MBUGH5Ldf6PmtAvju4ludw
MD5:	D2854DACE388735765DBF7D3E316D9E5
SHA1:	2FBE139B393753622E95120FE0132B0DDAE1543B
SHA-256:	B026857C667B9E06B913AA0EA42988FEDF5A2FA28EDB503971BF00A9B832B727
SHA-512:	3494FCE8C1971B769A8BC36B161CF4F75836761A9497921E7D9CA87B65A9C9970AEEDEB14AFCD408E8925AC2898D601F62CC0062C2EB237DFA60E4AFF6CA5538
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.buy-extensions.com/image/cache/catalog/additionalimg/ups-rating-admin-700x700.jpg
Preview:	RIFF.<..WEBPVP8 z<...e.......>m6.I$"."!.Y....in....0X.g.\|.U..M.$.;>?M..s.v..^..39~.}.....4....[.7....<5.5.O...>..cz.w.......q.O....._..G....]/.'./..Y.k..._.G.'.....s./...._.E.m...K.....^.........G....q_.?....g.....C..A..f..b.....\|6Y.<.^e..R..J.r.M...i`.oat...8....E.Khg...g.8..Z.\9.Y..TzZ...P]o<z:m..kp...'s.c.oj-..=.s_.s...8...%..<.f.`..,....]!....O..j.GI7<a.......].........n....S.U.awOsg;....I...7<v.....v...,....G..s..(Y.x...V...9W.7p...:..3.........3=.......A:....8../....iN.I.o../..w`.......^=.O.;...;A.[..V.....Q.........H..R5^..('o6.kU}....F.&.}.C...3.6.....P^.,.o)...uc.g..7n. .....Sy.s....=g....j..>.56..z;...G...4...u..#.4...F.............}.(.!.F.;.2Z...F..j..@.\|..!...V.g.g...E.......2....~r.d.<.4.X.r..v.....V}.k.....=Gv./sm......LL.L<..I.r......[`.W....l.V..1.!..e(...FP\...C\.-.Q.!uq..4..4.........w,/n.bf..p%.x....z.,+q......$.y....{....U...b4.t.g...;........m.n.29?..U..X[~J}...\.....TL.C..{.......1.6..\|.B...7.*...+..q.......a.p%.n

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	"https://i2.wp.com/images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/28ebb8e4-4c6f-4113-94e0-1dc2288e11ae/de8csz6-5b97847e-ddd4-4987-8a9c-cd74c0e2b90c.jpg/v1/fill/w_751,h_1063,q_70,strp/super_mario_2022_movie_illumination_concept_poster_by_vinvinmario_de8csz6-pre.jpg?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ1cm46YXBwOiIsImlzcyI6InVybjphcHA6Iiwib2JqIjpbW3siaGVpZ2h0IjoiPD0xODExIiwicGF0aCI6IlwvZlwvMjhlYmI4ZTQtNGM2Zi00MTEzLTk0ZTAtMWRjMjI4OGUxMWFlXC9kZThjc3o2LTViOTc4NDdlLWRkZDQtNDk4Ny04YTljLWNkNzRjMGUyYjkwYy5qcGciLCJ3aWR0aCI6Ijw9MTI4MCJ9XV0sImF1ZCI6WyJ1cm46c2VydmljZTppbWFnZS5vcGVyYXRpb25zIl19.T9LLqdzLHnfGsdT3Dg7hjkVAz5Ara7d_ZhKsEwwF5_M"
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	downloaded
Size (bytes):	1097
Entropy (8bit):	7.1267421578787715
Encrypted:	false
SSDEEP:	24:Ky0+zvQL4a/DCA7BpFkBYIWT9kmjidIzU/02ewC4cCwOMUM:KyUrt13kBrAzu0UxewC4cCAUM
MD5:	E2DDFEE11AE7EDCAE257DA47F3A78A70
SHA1:	6E902FA6302EB30CD204579BCA6A59B37233E262
SHA-256:	20E9AAB22032D85684D7D916A1013F7C577A132A5B10EA3FD3578E8D0B28A711
SHA-512:	C97040681510AD0184CCF903708CA9EDD0A6B49DFEF62C0D8A569425DE60C8087637F6510FC9BDA938D323B430590663467B140AB31F2A8ED42C296AE566F718
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/2bkDpQ0zGR0/maxresdefault.jpg
Preview:	......JFIF............................................................!.........".".............................................................................Z.x..".......................................=...........................!."12ARa.Bqr...U............Qbd.........................................................?..@......t..2.4..2.4..&`........f.b...)....6.j.pVZ7......C:#uf........<.Z.W..oMku.@....<\.O....H.....M?^_...n.Z..W.:>v.W.....lr.h.8e.z...zw.ie4..Ee.C.#:=(....R.'F..0...e.............T...9.p.z.n/1..mSV..t.V."..U .MI.;w..{O%...q..[$x.7UV....t.....=6.l.`Si)u7.u.^zUW..[....L....a?.yn..mN...K..:..Z..&_....{......j.sj.j-.T...U.^m.2\.O7..M.{.V.v..V.z..Re\|8...?.4qL5.i..Z..V.2e.....'....%zV....v.8..A.@.......F......>.8].JU...j.z.Vb~..o)......../..n...{m....vI..U.qoZ..+U..Z{.&Z...;...B.......k.X.R.;t...\|J.-...ku.Kk5_s.[8.te...d.k..l..%.{].i....{5}%Y...in.f.3....}M.Mx....[7.......]..R..+.IZ6.....ZRQ..zcVs..t.... H.....J.....sYa........ko>.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=9130&tp=BEES&tpid=AABA0k7N_6gAABW8jSU1uA&gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1850x700, components 3
Category:	dropped
Size (bytes):	143334
Entropy (8bit):	7.97381049209161
Encrypted:	false
SSDEEP:	3072:UFrSBHmQxo55WzoA9axz2e6TD3PhWCZGyzt7ZlE3nRwQ4vOedYbe5VpRCUq8:GrUfzF6z2emhNkyzt7ZsV4KWsUq8
MD5:	5E562E4D0A221CF1320087A4E41AB545
SHA1:	372AB53FB614EA5E6D9BC24CBEDCC2FBC1201823
SHA-256:	938E7CE2CBD558E3509FCAC4FA5550B6EE719E1730C2035386CF3B6172EB5441
SHA-512:	CDDF6751775D05435991946335571F1175F1AA93A1785622BDD834D5830EDD6B40614ECE05B159315AC49E8A005F86920956ED7EB4EBC72DE733ECFE3C71B825
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........:.."........................................N.........................!1..AQ"aq..2..#BR..$34br....%5CDSTcs...&6.EU..'..d..........................................................!1.A"2..Q#a3q.B.$RS.............?..g.W.jD..[($.[.....~Fi.w..V.ZJ7p.)....=.<.....yXx....~a.A.1...Qu...z..N..V/.9a..T..).8{. .sr.!..G..#..4q7.....Bl.X.6...r.~.W...T...8......4o..V...I...X.v.(..-.kt.E)..j.S.IF.:$K..4.tN&. afl..K...6.....-.""nbi>a.M..&...F..Y.....G#..T6;...J./..2.7..$axx.Q....b>#..F.p..idtd.....pL1..E.I...7...$..<'.......oEi.!..].>av....>..!.-.....z%.B.3..5..p(...W.1..jV.D_..A..L..A.g+...N..p.y.L .....8A...~T/.9..y\|.f....q......~h..`..\?.yPx..\6..OS....]=....].A....Y.xMeA.g9....K.`...,4.#.~@a....?2"...E.o..Q..C..g.w.e....L..kt}.._.T._.....2..0.B.m......}...X.2..1.......;..b...E..\.. .3.=..P>..l....V53

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 26516
Category:	downloaded
Size (bytes):	10006
Entropy (8bit):	7.972403776947168
Encrypted:	false
SSDEEP:	192:EctMuAWs1ilwUOinYsBR2VVb9DwBXj4NvPTfiuZGUJ9roqRrfsqTY:EGHlCsBR2Dg8Nvr6uZGUEifJTY
MD5:	636B6ED4F27E73B2552E78143432789A
SHA1:	FBE51C1AC59D2759D4B46952FA6876DC4F8C5766
SHA-256:	E895B289F668FAA8AB8D69B2C0E1926EF4004DD3D63E506AE813801968CF9C06
SHA-512:	C19D07F286CA767324770CCBE6B2CAFB3B68EC2393C112494BE9135F82B755698E9FAF0EAC450AF1620DA861BEADBCC45B8CFB8D88660647073FFF34B4A34943
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/1.1550.828/a/US/t_.js?cid=c026&cls=sync
Preview:	...........{{..8...U..BEl..U2q..I.$..]E.2N..HF.ib...< .s..g.<.<....Gc.f.a.......2........C..t6..c6..z.UP.g......'.N!..m...^....z..c..xV.C..8..s.b.B.U.W>...S.}6........;.....s,>.{v.F.dU.0..\|.........W............W:]......"^...W\.....W....o..8.\|.~...{.....u..Q.Uu..9.Uu.T..Yx...D.....5.H...G..,.$8.....c}.>M.....2]..y1....z%..L.YU2..U.P=QJ..M%..A}#.......;..........5.z.Z.E.O..{....&.......^}.@R.k..0.../.p.....V;<...Ar.we.A2..`..[0n'.....6.wG..Y.s.r.~z7.V.?4;g.."x..Y2.7.}."d...Ks.N..}.T.hz..qs[....K}/b.U.Q.:Q:R...;.l.{r&.do........R1''.Q..Q..S._.yry........r.>.z....@..o.t..z:N.....S..sQ.5.+A.W^.'A2.....i\|...n...J......V...w.-..z}@6...yN....7p..Qw..i}.^.+.....n+gP.[....{^m..\...?W.'W..Y.J.`......Xa.3.O.......V.....NL...\|.c..hQ..P....q.....]..Ix.......7....*..o\&l..W.....__.%_-.$\|6>.L..+.._..;...X....:}H.V4m.....LqX9..d..??...........7.0...D=,.Z...30..L:..!....,.......{...8..j...`s..~9..vZlr.#.........ir ....U..l......."

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	4.59361063591946
Encrypted:	false
SSDEEP:	3:QBRgyNq/HG9AikXxMGfwY:IgymGfkeGfwY
MD5:	C25675E32984E9858D57B19A693AB39B
SHA1:	6F56A01676B4D0AF917E561D871B26E7C1D1E626
SHA-256:	48B314CD0FF85B1A7F69DFB3C3F40DB0D79C45CA2E2D1A42A3FF2D727FB05B9C
SHA-512:	E6EE91C04B6F4995B698496079FF902E25746B93CD3316182CFA9D1590703D3CB2C790D0978DFEC5195872EC76DD335EBDAD249FD1671CA1FE9382629D99959E
Malicious:	false
Reputation:	low
URL:	https://t.dtscout.com/pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=1ye1&_cb=_dtspv.c
Preview:	try{_dtspv.c({"b":"chrome@117"},'1ye1');}catch(e){}

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x853, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11302
Entropy (8bit):	7.983708272316248
Encrypted:	false
SSDEEP:	192:LKtce+/FCsgGVItPg0wUDPZ0puiK3kyQxcVYAx/rWStEX9GWGodN1oRlm3Q:NCbHbX90puiK3vQ8YAxz8ZtNuRlmg
MD5:	BF284B814AA940CF41E42D4597E5CC98
SHA1:	104CD2B4A1883155E7C07238C30D3B00F2DB3C16
SHA-256:	8400A8E4A95202E4A8BCC0CA1D41C71D737FD17AC73FA499C93B73E0D3954636
SHA-512:	84A7C92BEB4D078F1FE313D3689041887FE2D2D0F9C96ACA1F8EB692ACC87DC104B445CC670677B56DA2C5DD639C0E2CA109EB3E5CB45C7DA37E3673DA643553
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.xfire.com/wp-content/uploads/2022/10/Nintendo-The-Super-Mario-Bros-Movie-teaser-STORIES6.jpg
Preview:	RIFF.,..WEBPVP8 .,..p......U.?...U....'...!.en.1...........9......Q!..kG......{.h+.W..]s3./.6...k......yr_n.....g..e..?../..<. DgD<....G.....V].....p...O.g.(......+.J#mf.8._N?<w........+..R.b...qene..o.<8....;H1..\|Q.........U(3..)..q..d...1]3......p...hiM...x......TR...v..E-......U........r.6Wd.......a........ij..n... ..BN4.8.&.....#...y..8D..WSR..}..1.s:.6\|..C......:^.a...9.dv.b...A.9.C0g...?&.x.....9........m5....1.i...`.._`....M..l..~....#.G.=%o..f..=F.'.......~./........u.....@%..q.J..<..S..@~.%g.)#;..'..E.O..4........:V...\.r7..)...l.TpwrO.h.e..Q.I..xr.O.Cr.=.y..a.r\..X".........6.M!7.....{4`...t....l.8-...o..9.6....E;.%Rm..-YgD(.S{..{....N..r..A.yY6..;{...He..S-.'=i...#.w$(..[>....e9.ul.M.B)Lg....@........%m......q..N%Mn....d<..$..2..c..:h.....5._..%r....l".(.I..p......~3{.~.X{&c%.....%.....S.3x......dra.4>4.R8.c...q..X...L..{.....j..1..XA]..Rc....ti.lpp."^0...Jh.F.;.e....II..).i.,...5.?>..X..c.M..E..0.R6C8F.k.3..#q.?...k8

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-Copertina.jpg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	3638
Entropy (8bit):	1.2843393639542857
Encrypted:	false
SSDEEP:	6:NXulKltegZ//OekukCS4kdxpHIWvUkt/ctmnzteghFnUtC+i/T2MWFetk/m+:NaKXe2m5CREDssfnxeo/2XUKu+
MD5:	59A0C7B6E4848CCDABCEA0636EFDA02B
SHA1:	30EF5C54B8BBC3487EA2B4C45CD11EA2932E4340
SHA-256:	A1495DA3CF3DB37BF105A12658636FF628FEE7B73975B9200049AF7747E60B1F
SHA-512:	BCFEBB2CA5AF53031C636D5485125A1405CA8414D0BC8A5D34DD3B3FEB4C7425BE02CF4848867D91CF6D021D08630294F47BDC69D6CD04A1051972735B0F04D4
Malicious:	false
Reputation:	low
Preview:	...... ..........&...........h.......(... ...@................................f..........Z..........."z.......r..........r.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?uid=5144588531850205557&bid=omt9pi0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2683)
Category:	downloaded
Size (bytes):	77532
Entropy (8bit):	5.470098270179484
Encrypted:	false
SSDEEP:	1536:5J1HJlVZpocbeVw+QgUy/rWukbhnlBBULag4X4xl1Bqd7DPbhwanj4Vj4JLZ1fPc:5DowoUy/rWukbhnlBBRo1YXmanw0vPJu
MD5:	82BFF4A14BB90D53939FBB3F9D204E75
SHA1:	813B02EEB288CB9BCDB7AC129348600C893BA648
SHA-256:	F909B014678E0A3F5FB7D6E61918C2E7C7E3F16A5031676DCAE471FC9239DE13
SHA-512:	1C8E2BCA38D2451E272DE9DFF2D5FFC54396366D2D1C094461D43DB95D17C1D84371014C93BE17991EE0E644905172C0B93B4E396C428FD89CDD14463CA5972A
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/2022/12/the-super-mario-bros-movie-2023-bowser.html
Preview:	<!DOCTYPE html>.<html lang='en' xml:lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>. Meta title by GianMR -->.<title>the super mario bros movie 2023 bowser</title>. All Meta by GianMR -->.<meta content='blogger' name='generator'/>.<meta charset='UTF-8'/>.<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>. [if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]-->.<meta content='Zero Unnamed' name='author'/>.<meta content='follow, all' name='alexabot'/>.<meta content='-5;120' name='geo.position'/>.<meta content='2021, DDR' name='copyright'/>.<meta content='en' name='language'/>.<meta content='United States' name='geo.placename'/>.<meta content='global' name='target'/>.<meta content='United States' name='geo.country'/>.<meta content='all, follow' name='robots'/>.<meta cont

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=2112, bps=206, PhotometricIntepretation=RGB, manufacturer=Panasonic, model=DMC-FZ7, orientation=upper-left, width=2816], progressive, precision 8, 638x425, components 3
Category:	dropped
Size (bytes):	483946
Entropy (8bit):	7.975440267986263
Encrypted:	false
SSDEEP:	12288:ng2nTLTDBuJnuopt32OvZef/DH+CnSZM+CTTEtMINloISJhhh6x0O+2Vn:ngi1XoXbv4f/D3SZMdEqDh25Vn
MD5:	41B77AD9B409DF7A9EA9185BF9C089E4
SHA1:	8A157716B7ADD1217C96DD6BF6777012310FC4BB
SHA-256:	C4E808D73CE066E24799BE839AD7C11701B14C21383339909916C266900480A6
SHA-512:	4E6A2A0A67C874B0413559C2622416DAF3192CF0F0EC30732122DEBC79E0A377D9CB0A3CE4C9C6FDCA98B354ED68644A46B8BCD957A735BADEB812D49D406416
Malicious:	false
Reputation:	low
Preview:	......JFIF............(.Exif..II*...........................@...................................................................................................(...........1...$.......2...................................i.....................Panasonic.DMC-FZ7......'.......'..Adobe Photoshop CC 2015 (Macintosh).2016:11:03 16:31:58.PrintIM.0250..................d..........................................................................'.......'.......'.......'.......'..^....'.......'.......'.......'........................................"........................."...........'...................0220........................................................................................................................................................0100....................~...........................................................................................................C........................................................................... .......2007:09:16 16:47:07.2007:09:

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	7582
Entropy (8bit):	5.134556249693696
Encrypted:	false
SSDEEP:	192:J41qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:CUIhymDAZJFDfRLaOTO3ll7
MD5:	95105BA4CA37B8553AA24DFBCE2A2107
SHA1:	6358CBB013C48D17D64A0C15C3EF007DCB8D3068
SHA-256:	67309A98204E8810E06B0483A46E770C9DB7D2DD00C4BEE126E3C3B7B4EF4828
SHA-512:	E2D2B9CC494301FE0A9A0374D9A578DB21F03B7F627D22D81CB50E07A2F5F50F36BC1866FCB188DFD87BEA3B641D0B2F3BC7D984AF56B7C675D17420244B2FEC
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "10401728041967F7C7C5BBA662DDCA0B";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1236x1600, components 3
Category:	downloaded
Size (bytes):	233612
Entropy (8bit):	7.978095603883222
Encrypted:	false
SSDEEP:	6144:GakVh0RHbtpuzIn3k534YPvZ+qrFLP1ejwOqpxESEJMTGUeM:l2hwH730oYPVrBhvsSSMTGE
MD5:	755C10C23F7D4CE1B5B756A7BEE97B0D
SHA1:	D64568BFEAA6DB2BC6AFA1BB66F98943B839BEBC
SHA-256:	A23B27DAB77B62CF13D8A0347DB6DD38912C0BDEFF8DD0C7654CF287160A81AC
SHA-512:	36B3920773F8A6CAB0B3D947A24B7586D7A0956ADAEBC92946209156799042144016CB6A0EAB6A504F2226CB26DB6936EBFFD14B17279F425D0216F0201902BC
Malicious:	false
Reputation:	low
URL:	https://i.pinimg.com/originals/7d/a0/b2/7da0b2b836032052643eaa9b43b62af0.jpg
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......@...."..............................................................................................................................................................^x...-z...P&=<...x...'..6L............a.i.Y...\|..$(6F........_Q<e..@._..0......z&1......................................W..............z.=d...8.c.D.l.u......{/...O<.I.K.#...4..\|....;......A1'.\|v..<6=W..I._I.a=..\z...@.."...v..l.....#..O...%.....kt.c.P...'.......8g..\....................$BD$BD$BD$BD$BD$BD$BF..[.O..A.z....{.......h7..H...k......:.c.M73.=..F..^......q..xo..q..u.~zs...7._B.<..=#.=...\|.x?{8/;....=...>l.G...m^.=/.=,.}...b<..."2}W.T..y......o.~........p...zV.V).r=..;o.....................@.....@.......UH..[.!...A.v..3...d.;.....n:n...] w...(..&...>b..2...q.{..R{...A@....N...k.:.~..^If.....>.z..4y.Q.nx,p...x...

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?google_gid=CAESEGXGsv_XYEGzM9DGAi1tHgk&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7ff4aee2-6ac0-4d51-5fe4-86405d87860c&reqId=9b321332-15f0-412a-6258-738244f46d46&zcluid=c00e032a4a7d676e&zdid=1332
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 800x793, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	23490
Entropy (8bit):	7.9919546701371615
Encrypted:	true
SSDEEP:	384:8d0OCwaWdeDYYfHKrFRvAVChqnJk2rgf5kBoSk2iS7kdix/T2H+YJ3urOlJzFg:pnW8TH4F2MqnJyCjTel+YB5Py
MD5:	7B6F054C094BFC8403FE5DE3D94693B2
SHA1:	F5008D8D20B7A8A7E75E03BB9F4AE600D8740FBC
SHA-256:	DB0210EF05BF1D6E8170CD756F8B658B219D2A05167CE50A4F18E8B8B392B71C
SHA-512:	0399ABCFB72AC4D70A71927A75245FBE7BB71E711E897421C5BA1B74ACA56D7A10094F0CCEF0BF38DB98BCB5F0539B5B2873180867BA8403951CE5295825FFDA
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/peirce.cps.edu/uploads/9/2/4/1/92417616/image3.jpeg
Preview:	RIFF.[..WEBPVP8 .[.......* ...>.P.M.$..".Y.0..gn..d.E/.bL.1N..ml......@6..!.../>.......?.~o..`.I.....?....W.>0......M?...x..3..>g......8.0tc}..n\../.x........e.o....37...2j.^..]o..`... ....(.d.a5.....~ST..\..K%7..&<a.....k... ....;.trk...J........6......d...q.......\|%..`VJF.G\|r8....9Ap.X'T7..._a,;.Dfo%AT.2.)S.EY...T."Nt4.%......ci..!.j..L&.aFHe..<S.V..(H...L...........u3.Ic9.f..b..N.t.4F...E.1.<.;29..Qm....L.5Kf[:..ym.R...i.>.8xux..u..\|Q........9..!...9.]...jT..J\|..p....oM...$..!....o.Jm...'"L.mn.IT.m.._.Ez .......B.)...d.. ..>..v.A....,.(S...~.D.Q.;t'z..:!.[..,.J...\|.....@..LK.&.I....^n)mcr_..;\.{.f..Q...R..t.4K.D.,na...D.=....(..B...,..._...].rR.v.....1.....i&.$7.k..].L.....h.......d.....;.7~......\|....(.......X.o.....s^Q....Z../jf..K.g..y{.$cp..<0U.=....Ls.L.P...J..7tL5`..w.I.@.q.R...!...t.\|..v../....9......i..C..>.&..;..['.6g...B.Y..+..v.2...?..E.i.\.%...i.0...J.....,\|.qa.....,.X3...[..#...Y...)JH..r...*9...%.U...G1..6................t

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27303)
Category:	downloaded
Size (bytes):	27466
Entropy (8bit):	4.752060795123139
Encrypted:	false
SSDEEP:	384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T
MD5:	4FBD15CB6047AF93373F4F895639C8BF
SHA1:	12D6861075DE8E293265FF6FF03B1F3ADCB44C76
SHA-256:	DDD92F10AD162C7449EFF0ACAF40598C05B1111739587EDB75E5326B6697C5D5
SHA-512:	F8BE32CBA15170319B5C9F663C6F0C4FFDD4083CF047D80F7B214D302B489ECA25FBEE66DDB9366D758A7598EFC9B9A886B02C9F751AE71F207CB9DB1356243A
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.5.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.5.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/eyeota?uid=2fgfA_immdQT6-MSLB7lohTxvZ32H4qV2sk4Yb8xLDKU&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	62971
Entropy (8bit):	7.768030689201553
Encrypted:	false
SSDEEP:	768:NirduMzF8UiwWYEORZCuURz/kLFKAnwnih0wKMBhkxKQddddddddttRj2NfC5sKv:NKDiwWOR+9oluMB9gf2NfssOH
MD5:	7325555B023A165AAD3E32BF22094F3F
SHA1:	D2391ECE780F15160B757516F57AFFC1C46F6B00
SHA-256:	3192D90953E962592C17C7C224B4C3FD0B70D5A8A916988EB813C4DAAE0C35CD
SHA-512:	0C2018279FF450A123741807D5A6A67102D750820F54B586E9730A617F2858A23180482FE05E861E56849390204D04C579091FA504DF264EA47CA119D3705BB6
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/F_Cdn5iprEI/maxresdefault.jpg
Preview:	......JFIF.........................................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;..........."........................................^..........................!...1QRU...."2ASTaq....56bt....#3Bu.....$4Crs....Dd.%&e..EFc.....................................3.....................1....!Q.AaR"2........#bq.3B.............?....>t.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................3......0.....A..0.....A....G2......0.....A....G0.....0..s..H..3. G0.....0..s..H..3. G0.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16831)
Category:	dropped
Size (bytes):	16880
Entropy (8bit):	5.168543209130913
Encrypted:	false
SSDEEP:	192:S0S5xcKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+o6b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	00428595233E9016ED7107CF6CE26B07
SHA1:	245B5BBB1AD098E52E78C6D92A70D38E604E568F
SHA-256:	06BDBA713671662565B0F5A8B666DE8D8D3AF40D20FFEFB6658C0545031B6A13
SHA-512:	5C85738D7BB198000A5062595D33FD01433918CF8DCD00C99A66A16750F68F0BCDD80A323F8C9BFD52AC16F0487C9085C7FEC0ED86A6C996F0ED5B65005C7F81
Malicious:	false
Reputation:	low
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/static1.colliderimages.com/wordpress/wp-content/uploads/2022/10/super-mario-movie-poster.jpeg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x1132, components 3
Category:	dropped
Size (bytes):	111691
Entropy (8bit):	7.958457995493825
Encrypted:	false
SSDEEP:	1536:alFvrLLFr/oxDSjFQQQ7pbeRxU46DKzLxwqO+OI8k/2VOgDXYNVLCcwBJW/nZ:QFPpwKo71eE4685KyTKYLCcwGvZ
MD5:	C97958D49F8376147B392D81AC10B57F
SHA1:	11608E05B12DC6A0F951379AE2375F6E7F3E684E
SHA-256:	D98AB51D3B771265F773CF13BD3593F50D1EE9F6099F935B0CC0F1DC5FBC535D
SHA-512:	986FA6491E72D95B27CE696013F2FBA97E899491D5313B7E6E3A07C2FA40E2307232FC942B83B82C80104703334BEC47B43E40FABC0450108863082131720E56
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......l. .."...............................................................................@................. .'...I..Iu...}.'..Bu..:.......O..E.^.. !...aW.R............Q-..........}_../...7...0...\.+.E...X........N@.T...W".v.u:.o.~.^..+...b....~.<.rq.........y.U.5b..+6j..........+...F.@..A.,.D....:9.o....)J7.d._.>.@...r.Q=..W!.y...9...=.n[".....y./....6..b.....x.........n......+VP.Z.Y,...f.Y@.....j6....... ..............c....].GF:}7.Jzn.G....\|6{.._g..p........o.=7W.F.0....2.. .........i...K..eW<,..e.\.5w..zX......`W.._.@bXP.}..`@xX.....D...w..I......y.'....\|X..}.'."y..8..hOI...@..\|X..`W.,...].+....D..J........7[$d...r.u..:......oN.?...................xlk...3`3a..l`3`3`3`3`3`3`3`3`3`3`3`3k....L.zd.1^..!.@......j.Y,.{.M...WU.e..5.>.Et.tDb..X...Y.'.\..:G3...O..,..)...x..G\.......pr..M.....R.=

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=4278757405457797050/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/preview.redd.it/in-the-super-mario-bros-movie-2023-jack-blacks-bowser-has-v0-pvq046df8hs91.jpg?auto=webp&s=63544d9a9de87273559889131fe1d319a88a37bc
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63965), with no line terminators
Category:	dropped
Size (bytes):	63965
Entropy (8bit):	5.415839533934785
Encrypted:	false
SSDEEP:	768:Sa+O7y8yVCWTXTnkbnErQJe+ISMnfI2gpyrJZa6Dx76H1W7XAW2vr3:Sa+ZCkDiEcJe+ISMnxJjDy1EXAj3
MD5:	2AFD7A7856345176E1C9C378191AE043
SHA1:	5E2C23320DDC06A4B00BBD81DC58D9D6A897401D
SHA-256:	3029A59A3EB78E1675C02962B4C2EFA72C770B73C3336F95F14B4C73B7465397
SHA-512:	139CB12A253E234E52C8B0E3F3FD6932E04250D2B8818EDC525939546B06852E26B17C1269AD5967FA2B9DCB965976C79EA9090168B04A457E769E2CC9457158
Malicious:	false
Reputation:	low
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt3825_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt3825_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt3825_aa(a)}}var lt3825_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt3825_b; if("function"==typeof Object.setPrototypeOf)lt3825_b=Object.setPrototypeOf;else{var lt3825_c;a:{var lt3825_ca={Vb:!0},lt3825_da={};try{lt38

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.9027742755099117&stid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-03.jpg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	35768
Entropy (8bit):	7.988106086943012
Encrypted:	false
SSDEEP:	768:7T5A+naRyC00GftLju5GSS6RxUN7H5fx/8hAm/qPe7Y3Wq5TjVHxtQJ:BxnMjGVLjuA4G7px/8WyPYJveJ
MD5:	F531371DFBDD9B4FC5FB4BEBB42BE0F5
SHA1:	218F2BFD8005F65E222A3B05EFFC5BBBD9DD4B25
SHA-256:	191D7BB1D13E2F688608ACCB91594AB8CE3CC013EF79D48179EE333A22A3211E
SHA-512:	8E87288A31B23205279E5E541E157D90175B4EB39F64EF0801272CA7B50B3A2BDFD7A913251CE35F22C57410635BD4C671135DCBF37713A20FFD47117D7299CB
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-plan-settings-3.png
Preview:	RIFF....WEBPVP8L..../.Ck...I.$GJ...{Z...y"?.Z.tE&...d.m.E..{.......n.....H..I...s.$../..~...U.9.B...iw.H.E.....E.Dr..".H..A..A&)9#..A..8Y.l..0.@......W.SSLT'.p...&.d....p"...p... .......4.0..8.B[.k}.LL;..'.."..n..p.&......T....K7s..}....s.a.,.d.jP..U.L..Jt..F...4.S...P..4.A`..J..D'.a`'Q.. S.....b.=(..QwU..Z....W?.....Z;....;..A....4.%....v)w.l......[.'..t.`(C.v...u.Gw...G.8.8.+.mT4+=+-...4v..C...E.l...).R.H..e.....{...f..F?..u..K}&...A#A$q8m..D..Ao.Z...n.4..ZmuC..J........6.S.K....p...n........Z.,..J....J..........s8.lN:......y7s..O;..a..I.B......A.7.$....e. ..._..h&{>..7.m;..o.<.Y.^..4.Xs..N..Fm..qb..-.R....1W....Bi..R..m.......{...0.....{.............E...4..aF..CL...^B.....3...........v.6.@..S......h...n.J*JI..-.Ew..N..gK.l.m^.Y....].#.7.;8.+.-....-_. ...1{A..S?B.P.I...?..#.....?6p...........F}.FPn.S...W......q$I.....yUouVf...U.Gm....}v......2..A.od...2V..F"<.{.D.d$..;b..4..;g{.,..k...mK.+..d.qB....."8X..# rv.&T...3aT.=I..`....UC.}.o.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	274462
Entropy (8bit):	7.994703545495518
Encrypted:	true
SSDEEP:	6144:DSRW1MCgJO4cjJuUgbuLokAtfdoUy0HIFYY:DSRW1M9QVYb6hAHXa6Y
MD5:	CDA987A1B129BB767EE16F225F453CB3
SHA1:	B1BFACF98F0E2613F58CFA6AC06FCC4991DA53E9
SHA-256:	CF6936B21E872233A030DEA4A779AD2BF82B4FE5068B5CE6F6EDC9E746CD9F01
SHA-512:	A951F3BD145484DC08952769F993B7BDE2F8FE878347675912702C29E5CE73F5ADC558594D4799852D4682871844A69F54FC96FD2D17DCD9F623AF357CAD0691
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/support.webshopapps.com/freight/wp-content/uploads/sites/21/2013/12/ups6.png
Preview:	RIFF.0..WEBPVP8L.0../I...@n.H..{.']..Ww.l...... .j......h.u...B[h.._......j...w.n.`K..=.....!.R...N(.I.Y..:..>...T...........hR....Ga'(....Hr2.........d...%.m.tK'Y2..#.H...!..-....m.~.....M.7.d...K..$]../s,9.=.8..........I5q...j.- .2s.....\......q..../"..pI...c_D....Z..}...4..m.-.i"..7ON........dH...1.^=..K...c..m7....#>B.GQN.bH....z/#.bh.B\|.h$9...M94.........(m2...i.......9.d.<.,,....%.D..b.XfFV.%.x.%...R.b.=2.....-'...(......1"<b.......r.......y.pd.......v.qt.#F`.....GK1o....G^..&.:H.Q3.f..=.2.....2.D....&..B...}`......=.E?.`.I..w.X....q..P..Gv.J)$n.-/.;..P..r......\|.R..u..<....3......P.B..1..........-X.*f....@.wPB.Uv.._ZB...Y..8... H.h....X...V...P,mA.@[.....U.......\|.x".... ..0Jb.......!H....kB..ePL.....P,(@..X.Xh.%.....M."]:)].T...^....H>g..!5.a....s%.t.w...HM.Qb...q.A.Y<..\D.3..N."&&........d.....\|...[..L....\|.C....+....C.T.$ID..P\............u..N.S8..FK...@.......D.\....GVV....yJ.....~."?.......@..3.....L...B.1.I..F.....IR%

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 900x382, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	98304
Entropy (8bit):	7.9979452697282545
Encrypted:	true
SSDEEP:	1536:Glx6vAOMtfp1eTVVNf7CQwy7mtfLtmEa0Ti1zgsG8hMSHNkVt0Q1iE+:wOuwTF7Cg78f5mXvzQ1f+
MD5:	5FABF8D3BDAE8773D2727763DBB4641D
SHA1:	68F66330F2F246F9517EC6784227ECC843627606
SHA-256:	62C473BD87AAC780EA448B20FA9005C2EDBE265760A84D6EE9EA90722D7E420D
SHA-512:	56C0116578936BA502A3DB0384E05B82883E27A900C15E0FFE133B218C7701F620DEA3DE4EC336614189D09A0E9AFAA52361CB8AAD06B5151E9480E4FF538B7C
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.stock.cps.edu/img/pgicons/fs19.jpg
Preview:	RIFF....WEBPVP8 ....p......~.>m.E.".......bn?....1......1.....>..._.\|..k.......w..A.........^.......................t.......W.?.O........q}..j........c....._..O..._..r=.?..........?........W..?\|.E.K.O.G...w....?.............I.....?..?..............?m..?1.......7...................?..`.u>..S........>../..U.g.I.s...........~......../..9_......O...'.....?..................{..........>B...~...W._....................?.O......$..a.a.3..\..~.......wF..UI.,mahP.3..2..r.w6.T.NM....V....o.....M.]..j.....#..n.].....j..e.k..k~WQ.!>z7#a.....g..?.z...\|..i...........c..N..u.<E-.,6U.:y.pi54Ls.d.,D&.......>...f.......mz[...\|...`..r...".dc..Gg...Z.T;.j.v."CY....c.v.i.h...(.I.~...$8..7.....R..!{....A<..;./"....l..Mh.n.w.0S....f,.`_.).~......@...\=...s..(...A...6......b.....!v.T.F..4...\|.Ks<....7%..)......a..U...JV_...Z.Q..{a..q.3..U..<.Z..Ro@...GJ..H..L.V.`&. .%&..[$b`f.......g...w@22..N).z.:.....w.............1.3z......k.13ie.gN1..pso....>V-...?..g.El...:3..7.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	22588
Entropy (8bit):	5.375735519754164
Encrypted:	false
SSDEEP:	192:+oTOoHogoL5oHo5uy8oe0bqGIwY9oYoRoot/dB0q4e6uyfrbqGIwYMH17o/A85ql:+SOK96oFZtoq99fzMFuq9PUhq9IW/q9Z
MD5:	6BF480D537B42D3C7ED07519B75D465D
SHA1:	0084D4A7BA157FF2480F3A7B66DEBFBEB8257491
SHA-256:	1C1A042B43957B8D3665506EB3A4584F769E68078684D934B990B4BD5EE176A8
SHA-512:	75151D73D52C886DD2E93093B7B1A99E6B51E2326F6210549D97894845A4FBF4391659CFB66F1D74227A49A263C11DF76EE200FB8C30A0BEAC073C7C27FCE427
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300,400,400italic,600"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV0ewJER.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQewJER.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVwewJER.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@f

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 443, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	46217
Entropy (8bit):	7.9857395388796055
Encrypted:	false
SSDEEP:	768:GIza1e2WHpkyjRx24BwXzNDU0J0liexRg/sq/jVi8ZcJHMCWBz5adiIg:RWSkIRx2r/m0ga/sYjz+1vdA
MD5:	3A5F8D400687A5337933738DE196C449
SHA1:	46D02403D9AD1A195F75B8DFDDCEB5742CD158DB
SHA-256:	A24750FFED09BF9013678D36F68C599F4A8018D8E142B042766A6AD5FE1C5996
SHA-512:	2FAD279836D46DD1EF50255250C32F0C732E12F7EC4752A2ABF769D28FC3781FF0E21945CB07CF7B0370C2CD1A8E05F083418EC6C31C04BBD9D343C65F0440D6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............g.O.....gAMA......a.....sRGB........(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:FBA5AA31902811E8A35EEED1F0E5E315" xmpMM:DocumentID="xmp.did:FBA5AA32902811E8A35EEED1F0E5E315"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FBA5AA2F902811E8A35EEED1F0E5E315" stRef:documentID="xmp.did:FBA5AA30902811E8A35EEED1F0E5E315"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......tEXtSoftware.Adobe ImageReadyq.e<....PLTE....!^FH......K.$\......CF..#`................&b..Z...HM~.... ^.........2

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x800, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	27424
Entropy (8bit):	7.9932667298963915
Encrypted:	true
SSDEEP:	384:vfj5e2fXA36Vi1gCVr0ZI0CCDyEUsHupcHWeXJwfkCAVw+yyhGnS51S1Ez9uyrwr:vfF59Vr6cIPLh1f/QZhGndmz9uyrwhSM
MD5:	AB48467BC382F7A36DA44AF4EC8B3A27
SHA1:	C8F6179F2C072FD81F2ABB9349A7C14A44E9661B
SHA-256:	F12D9E93C0F0927DA4E6A13784504190F4A4BB4E07498A450C01DF8C9E030B05
SHA-512:	6637EEC6FBB5877697E64FED73229FD13D8D800B5E7E77421D73E2C9372B56E0E5A4A26FC9F8ED4479C815F21970E73DB8C280C1F0F78154278F3C842AA0FF09
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/peirce.cps.edu/uploads/9/2/4/1/92417616/darland.jpg
Preview:	RIFF.k..WEBPVP8 .k..P....X. .>.L.K.$#'.z.@..gl..7...\c......fv5.6j.".n....P=X...g.........._...z3...\|t.]...F....-...._.9...x....Q.z........H..B,......C....h.J.... .."..#....\...{.r......A%, ....1....e_g.@...f.q.G..Q.!....R..4..6$.......... IkD.a&%.. !.xaT...(..q.3.b.$t.....o..J..j..2q.Kk..l...S.".hw).x..9..X.Yqt.>go;.e......e...'aK&.@.....#^.T.1.I.......A.G4.p{..k..bO.+k.:....S:.jXX......#...........nA......n.....X.TX$&.) .VZ....]52.O......I.f.BJ.2^C7..M..f.gEf..<.?{I.5L.....q\|D.Zm.f0...i..r...:..../.l..O.....:.Q.mO..9.}R.\|.......{.}..~..;.C....=..+{........9.SOq......~.V..[..z......B....O.m\|W.G.....&^...T{F...jRM.K..k.02x..............Y..? y9..8.C.'C..4..D.:gT..S.N.l..>..n..%.Y.iF.\|1..g..V..^..V.O.4U.Y$..@..b5..+0...0c.{.....h.E..16J..X...d.3$.`....=.^..P.l.:..6......@o.."...&.2K...B...}g..B.l.8U...vPp1..u....#.2.Q..S....{~...c....).....\|a..9.......&_...E@..d..m.g+...D[..>..p..k..,P.........).f...glIw..x.yN2.Xgb5.NbU34".N.....u!4..r.F.6

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47136, version 1.0
Category:	downloaded
Size (bytes):	47136
Entropy (8bit):	7.99615068864472
Encrypted:	true
SSDEEP:	768:/mKiHVeRlbsF/1p6cYAagXYe2eUEBJu2Sz12n7PS/NwlY2jOh/QOaReZ5QBdN5TA:/mjHmqNp6cYJe2u6z12njS1E6BQOa1TA
MD5:	A47C3355AAE82555F7CA3C38E8A4C1D6
SHA1:	C57E17BD233D69F67EC6EDE882E7932CDC02D56D
SHA-256:	6B0DAB5300943D98F4F20DE9D48A49E0186441F6FB8B5E95A9635A30C0B60E72
SHA-512:	3F448E5625EFDC95929CA2A504C17C4814FC8ED2A83B232F07B2E1A50F421D894C34F4CE5C699C42ED6F615C3EF9A141C98B740E14EA6923CA4E64A4FA7D3B77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2
Preview:	wOF2....... ......................................s..z...?HVAR.H.`?STAT.$'....+...\|.../V.....<.....T.0..$.6.$..$. ..~......[q.qB.c.A.IUY?.v.'...s;(y..w...."A}.]...?5...I.iAA....?....,.H...h.s...U.zi..CRk..6^[.c.....r...a...!.....U,.."......).skT.c..N.:.M../i.:]?._...n..%h..?..L.x..LI...h../\|.yn..M...ni..~[./.7..8y......-F..v....C.Ju....'..o.....\e....DQ.e/.D.L%.dm."0n...T.k......1..........ANOzfT.m7)59..Q.-'=Q.R2<m......p.y.....;... .....TD..dV`...s...MY.3.T....(ZJ....T..LT.D.....`s....7.~.......a.V...1.,D.l..._e..6.....QV1....M....R.g....W...@..Vlmj.$mn..00.g.p....b....%.....^.v...........3..Z........E...F(..a.&.!.y..Q.C...u.../}.a&F...Fm...GB-......%.....w..I..6..B.$.L2Qb.]gs>........Kp'.y8.u......f%.:&...T..l.fmJ...,..]u.8.n..)i..H.b....,...2.^...M5..Y..R.}."\|.c,.ur8M._.lY......X].zw.@.x. ......B=..6.0t."Y..Z...C.;?=8W...@.a..S.].4 ...&..Y..R. p..zV..3[..R-g`.c..@<....r'Ep$...9..$.>.u..... ..k..P..#Ch..D..O'D<.BQ3.../;.`..\|......Y{...._.8...}$..m.L...W

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x473, components 3
Category:	dropped
Size (bytes):	62857
Entropy (8bit):	7.967382278062469
Encrypted:	false
SSDEEP:	768:t1GV/QjPVn+B1mxKzHa2qF4OW+hAWtbjgSM5qhzAwolsqVFEa2FT4xgpgX7FSq5:ts1QjNn0cKzHWfvb8Jqhbzqbb2u74q5
MD5:	05536CFABBBEA77EFBCC1D9D5CF4F9D4
SHA1:	E192BDE4182B150E8B4C909E676FEB2A3866CE3C
SHA-256:	86AE868A0B3B5D463B58719DCBF32347AAF35156A377931EF3D4A4C3AD0B6FF6
SHA-512:	6C3C48B1667F1D6E4A640F207C21AB39D7BE74AE38B9E864124FF95CEDAB9883CC2930094D4293CB811B0603B8D61537B3CC96FC2347E856E488F4EBD47C22EF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................................................e...H4.H."U..D@.$.F$.4.....Tr.q....q....,..".....@..B JQ"w..XD.DC...."..B...&q.).gL.L89..DJf..&f...d.fL.....a...!q.8..J1.f.+b.f2.;...@D...-{..e......I.7...@.DW#b.K)ZYX...i....B ..W.....F..7...(FH.d!..V...B..qf....$.......<q...fv.X...1$..;E).K.,..H'g.H$':..J3.........L......H.qA.8I........f4..! .8..Q....3!K...q;.A.,q...$R......)..NJ......,=W%8.J"$.q.HD.4.H...DN..&x....L..I .s%.1.Vf$...bu...q:C!2.:4..!.).gL.8.I.Q.)....F.H.+.WqA...9....0H.."'-..^#,l...)..1...!.h.....h`.22`..Pg.BC...8rDD..O....i.j......#.....,...Q.<P.......q#..@#`..$.4.(,r...2knU.0.I..N..1jF..\d.he&.X.....rJ..).....!.9#0...%zU.q..,X...&:.\.D.0<.e....g/X..M..mV"V{DAf.#..#..$....L..`..N.D.....u....,..1VK.Q..$.%...&`C.A..$........i.)<...ud....$.mGt...'. ..m.Y.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4706781&@f16&@g0&@h2&@i1&@j1728041944834&@k18385&@l2&@mups%20ltl%20tracking&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-26286205&@b3:1728041945&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&@w
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	7582
Entropy (8bit):	5.132470685815007
Encrypted:	false
SSDEEP:	192:J91qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:JUIhymDAZJFDfRLaOTO3ll7
MD5:	824EC725DC910D77AE6FE02AE27B570B
SHA1:	82FE74FA21BB48B945E21A82ED838356439F0602
SHA-256:	D312EAD80CD1ACFAD71F667DEF0479CF08390A2F5AEC91C471CE642184B9B551
SHA-512:	FA3645AA3EBC380757F21A132AED067AA697EEB99039679433C8748B2B96BB298DCDA811D0D38455F45F2BFD949AA54DD89D4C6BAC18731F43F620F64BFC98CE
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "10401728041975124491192B3319C1DC";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1728041929570&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&t=youruno-chicka&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16827)
Category:	dropped
Size (bytes):	16876
Entropy (8bit):	5.168839586730591
Encrypted:	false
SSDEEP:	192:S0S5GFKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+k6b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	C73884D3A321E7C1E188E9A1121D8426
SHA1:	80AAFA83CF98B44573668F213657BC11672F2CB7
SHA-256:	493183DB12674C2E807248EDEC0772E462C248748859F021FB810B485876EA42
SHA-512:	B60F94037D6CE380577017C281F64E9514EF6F6BCCDBC50BEFB8D2DA42E1BBAD204EE042C25E27B260B5A3FC481EB459CD43B77138D53376F273CF932A72ECED
Malicious:	false
Reputation:	low
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x853, components 3
Category:	dropped
Size (bytes):	25773
Entropy (8bit):	7.970026514762218
Encrypted:	false
SSDEEP:	768:5Lr5nrhFpsnykKcm631MwGaP+FFvJLZVGb8x:5LdrMypcJ3rP+F1RZVfx
MD5:	FAFEB807EE322291F6A9084D2FFDA7CD
SHA1:	F50FC9916AE8813C64439C6B8C0575A31F65CA3E
SHA-256:	E857B04508DB89E2043C99E9F6DC3AF6F7F1C827C3D1B1EF3B8984F1952A7120
SHA-512:	6E838AC27B5B803AC439B3E9372C123A43ABE67FDED40F260EC2DAFBDA69091284FA5A9EED718A2E5D969E7F14EDD87DF65E5FAC38F9417237EC1C6B6E2CE28B
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................,.".".,B)0))0)B;G:6:G;iSIISizfafz................................,.".".,B)0))0)B;G:6:G;iSIISizfafz................U...."..........3.................................................................1......`.. .AP..I .d`..m....u6J.=3<..e.-..\.0_+..k..j(..tjzZ..@.FM..]VT.mV.......5[H%..5..2.....R.-..W.]..~gK...U.....i....c(I%.H.........V..&.%....6$..\.jJ.\|.5.c.v..j......;Wy...>WMa.......N.........(PZU.....-..\|.......Y.gq].^V......s.Mo[.^oK.U..FBHWF....9.Ea.C @@.elI.e..i#QY...H.V...p..k....xpS.K..G.W.:..........v..$#nk)......WQnt.G..5-..'M7.....>~.r.k..'7....... .(.......H`I @@".(.... ...p.Er._]..M...rV.?.^.O..4..~....z=.W..'L>...[./....u..i..{..z.A.R%..h..FUW56..}6.^.'^m..%..W....`.k..qb.n.W...I.+ H..H.........(....+...PL.4../.c..RFB.J[......o.}\z...};>.g..}#.....>..O....8o..a.i.?.....\|.R.Y.(.3.Y4eN.%..mv{..6.....[~{.,x..Z.dqs...W.I...(.......... .FA.!..`3..F.......vD5.d..[VT..z....k.....:..

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 900x382, components 3
Category:	dropped
Size (bytes):	417262
Entropy (8bit):	7.994185588405679
Encrypted:	true
SSDEEP:	6144:1t832Ce9xYzNv4ssqCtWsdlcushwpK6Tq1N0lRaqPd+NPJvOyUrrIYCnOu7Y:1G2CsYGss5WeEYKUq1yl8w+NPJvq1uE
MD5:	C1B955080BD8572AEE55E52C7D9C4E77
SHA1:	DB467BD2F616E5926EC262B955C0C3D9C930CFB4
SHA-256:	B9794C615FE674E81A61084BD96F03FAA73EDC7F7D2918AF1830E0B3632A170E
SHA-512:	4386A18FB31FCD1B7870C228E6BAD0091E8E3388E28AFCD3D7688F27DC64CD9C63562D61061B27E8304054CD88DD997FB2092E895A861CBDAB149D13574584E7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d.....C....................................................................C.......................................................................~..........................................................................................?9....R..k...B,l...>F.N..:.q....t.E..n.e.D&3j..e,..F.b..i....].=.D..3s7C..rE.5tq.{..\|.PJ.k..9......!.y .QR"...<."{.s.G..d.....Y.%..\|..F..C..I..H.,.q..CcE.._1..\TY..k......n...$.q......A.G52.cQL.UQ.2.t).X....e.....9.......\|.9,...4.p.-.....a....OC$...ZC{.$..`..5@.V..s.Oj.`....V.......>............).$.Q...y.P;q..Zr.o..D.....b>L.....i/.K.. '..(x...9.lF...-d.....eg\|....]......`.y.PJ...B.W....tM....'.\|!.....w*suR...9q...CbU....+.Ka...[%.K.es.,.{..].>..E..W@...........6..f....D..x....C..6d.I..6}@..F8.x..J...i#....Q- ....%.]2...R.y.G.......&.[%...n.......I\..z..e...CW..._..wXz.HT..-.QZ.f.X9..J..YVX...X.......3....... ..<d.)..[.sd1..Rd...-.h,qw....7.]:...v......2.. by.%.........\|.#.Y.f..-l...7{..\..pI...

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://track2.securedvisit.com/sync/1540_03681?id=na
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.4328040925871892&stid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728041958703
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-02-768x501.jpg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=3280, bps=206, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D4S, orientation=upper-left, width=4928], progressive, precision 8, 1600x901, components 3
Category:	dropped
Size (bytes):	374316
Entropy (8bit):	7.9809423242195034
Encrypted:	false
SSDEEP:	6144:mnHse9mAj3mqPKVnLTaN9+o9UWArcKeyVMhhXS+55IqzwJrbM+JujbfTQ/B0y5v2:mnHLYg3mqP4nLa3vyCwnbkTM/B0y5vGF
MD5:	8F1FF1AEBAB70F845F7C3F0B0F404E18
SHA1:	9F8480A1E35ABBE0ED320761E9106AABB6F40939
SHA-256:	9D66B7ED6E31973539A0A33B0F8B50422740B1107A269EC38C2BD0141ACEBD85
SHA-512:	159824AAE28BA442B4402C75932561F8FDB339A470E21222AA26A21C926AEC4B834F951385E319DC9B2CB8A409228A83DAB357B4B6F293D6FAB8FFF887A49C15
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....xPhotoshop 3.0.8BIM.......\..P..Vivien Killilea..U..Stringer..x..SANTA MONICA, CALIFORNIA - JUNE 05: Honoree Jack Black, winner of the Comedic Genius Award, poses backstage during the 2022 MTV Movie & TV Awards at Barker Hangar on June 05, 2022 in Santa Monica, California. (Photo by Vivien Killilea/Getty Images for MTV)..z..XX / GB.....E..Z..Santa Monica..t..2022 Getty Images..e..United States..d..USA..7..20220605..n..Getty Images for MTV..i.&2022 MTV Movie & TV Awards - Backstage.....2..(..Not Released (NR) ..g..775819645.....1401244706..s..Getty Images North America.._..California.....CEL.....ENT.....ACE..\..Barker Hangar....Exif..II...............@...............................................................................................................(...........1...!.......2.......!...............i.......8...%.....................NIKON CORPORATION.NIKON D4S.,.......,.......Adobe Photoshop 23.3 (Macintosh).2022:06:05 17:46:08.............6...........>.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	95431
Entropy (8bit):	7.955426267718126
Encrypted:	false
SSDEEP:	1536:W2ZtISxFPUhDJkoiPyVhZkS4VyB/uZ9VZnL3v6KMRGvTSaeVPfPmXX:zxmfkw3F/uZ/hLmRvtVPGXX
MD5:	A2DCB60BCE8553A043ACA5DB95043DA2
SHA1:	E4279B6636C10047676232FDD387C6D36EF6F57C
SHA-256:	453A2E23ABE2572BB231EA2F1A9F1191E975069A117C6BE084E8B5CD1313D87C
SHA-512:	4A82585A610E963528EE2E0BE198A6C05F067A52790E5FE1B38E85BA4A56BBDF76C0A9EE49303D3C4EE74E42BF199122A061D23DB04CB9B32D84581D0D21758B
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/OwsCG6BqaEI/maxresdefault.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................p...........................!".12AB..#QRaq..b......$36CUr......SVcestuv..........%457DT...........&E..df..'..F.................................>.......................!..1.A."Q.2aq..B....#R.3C....Sr.$b...............?..\....S..i....)LhS%.Ch.,..5.:E:t.(...u..c.QF.c..RF.&WR.(S.".-2..c"u.D.'..AU.L..T.d.S..}J..$..U.\I....b}HB....$...[#G!.\|.....S.i4.5.G._1........m(..3r..+.I.^.........z....$..%-.(l....R..-4...G.i.q.V.......OEI.{L..%TQ...5VP.d.^..J8M=W......@..'6i...H\..B...jEk.h..=......Z.).....Y..9!W5B..N...],i..>VQ..R.V... ..UX..Z...T....D.R..u........$..p....Qv....mMN.Ii.T'$l.....R.. ..).P9.{.)f.KCGs.+0..c$....c../...J..&..h..z...:%...U....EU.^.......u.I(g].G)Q.l..SI .*5h.LYII.2.......N....D.[#.,.:....Q.'.#h...JP..I..HD1.H..)...!..%.O:6.HDg...

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, progressive, precision 8, 618x800, components 3
Category:	dropped
Size (bytes):	63478
Entropy (8bit):	7.958533252403935
Encrypted:	false
SSDEEP:	1536:N63L5RzuceiW5MlmEvV4nUXycXWI1SDqDQYNHqX9:kRzuceiW5MMEvV6e3S2DQYNHI
MD5:	010BCA80EC4F35049E14B69597DE3FEC
SHA1:	52478041858AA37AE98A639EABD88D2B05FFFB13
SHA-256:	FD8BA501298958EA7D5D96EC81655D66A1D04CCBEB2A58A28F558E8E0092C706
SHA-512:	495C974E1C4190DE042B4A839681F36AB3BE6F557D7CE5D1075E8F3542C40715D0A9B1F480B2974B8054D9C88292D7A2D569A1E7819CAEE120D6725D4C7F422D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222...... .j.."...........................................................................................................yF.._..=_.............................BL.n.=K../.....<[.....{j..9)GF.....k.[^..Pi:.....n^J..s...s..................s..z.....`.......8..m...`F..$W...l.U.+}.&.\|.+.............

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1114 x 612, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	225118
Entropy (8bit):	7.991204891497228
Encrypted:	true
SSDEEP:	3072:c2NMl5zCNr9Fwj/wUSLVFnTaJFHyrdwlHf5tU7OvHMKc49sjsX+ltbOl7S:JCjmBcIUSJFTaO85tqKcnal7S
MD5:	88837DC2CFA043D0781A9B1FB0BCBB3D
SHA1:	A4C3A7C985D87AD9C229E8BE7D286AEE319496B8
SHA-256:	06FFC5390402DC9BF2871625C51E05328DF0C67B0E80A6DC49D3041BB1A7B470
SHA-512:	879D6A0AB3A6D62FDF4AEBD2945E05AF458E73F21488DC0775CBAFFB12374D7E36F8E42B7BC71356BE08577A4987370E0DEFCECB9435C131C96E9291E9279764
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Z...d......@.F....gAMA......a.....sRGB.........iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <exif:PixelXDimension>1114</exif:PixelXDimension>. <exif:UserComment>Screenshot</exif:UserComment>. <exif:PixelYDimension>612</exif:PixelYDimension>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.g.$.....pHYs...%...%.IR$.....PLTE..............G@BY.........*p..........................r................O.....4.......i.................................................................................................lol......................~....................................ilh.......................................rso..........................x......................msqupg......#$,...{zs~....#.ug........n..9...y...............

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 980 x 1268, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	338615
Entropy (8bit):	7.997809890937887
Encrypted:	true
SSDEEP:	6144:bnv1bk5pjjVovDnpYOiT30EwZcKKT0szNHqrKYfHZ6pGkppt12OmKnO3MWB:bnRkXjjVoiEEuSz2KYf56pGkppwd
MD5:	03CAA6E31DFA89F6A876895A1A4DCF16
SHA1:	535FD3712AF0B50E7C2CF2B56815A5305F1B2F3C
SHA-256:	EF2CC02D87C57FF3D78038E6CB89E1E4ACD30192644AD2BC32DD5AA1E3057678
SHA-512:	0B5505DBF22767695D608F4D698BA6EC953A10CEF70637790FFFE02E0377FF01E21BEB8C4E008FBAFF2E27B05732B9D8321E45F6B1DFF44FD13C8E41495D21AA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE......................................................................................................................}}}......zz{llm......................vvv......ppp..............................rrs.........;S....ZYY......utr......`ab..............edc...............jihyxx..IIH...`^\RQP...fgi......Z\_WUT..............................................................................................~{w...........spl...ruy............vz~...........imq.........ABC...~z......oLMO...............................................\|.c..{...z~...............\|...RUX...{vrk}Ujfbp.^..g.........=<86M....mqv`di'('...j......u.^..upkgbqO>V.11....x.o568...XeG...........^eU.....G[./F.MY>ar.Se...v...o..~.....CL6.....mtd......)?w.............mu..'rIDATx..}kl[e.......ifO`....c....`....#..:.p..F.^.{.......Zh..\J...UK..ns1.;..".&.Z[..%VFc#..la[.....Y.vn.s...w =.k.4..{.q..k...<....j....j....j....j....j....j....j....j....j....j..

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.232641492080285
Encrypted:	false
SSDEEP:	6:51bchb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWPWk:51bc513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	F00B9F108EE4B82E7393FE516C1F4331
SHA1:	A6899C9194391E08FD7ACA6766781767F6C6AA42
SHA-256:	3EE0D32CD4676F729030BCEA357AD025A47DB2AAA2849638EFF63201C531FD82
SHA-512:	980B938B6F3FE23DEE977E53A279109C47D638A3398FB99368899E704A401866356B4BCE21C7C939A22A76C2B59C12E8EABDFE45190463BE0EEBDC0D2194EBE8
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=142";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.605388542207534
Encrypted:	false
SSDEEP:	3:eOtLFaAD:eO58AD
MD5:	4D95F7B32CDD5FAC247863312996B041
SHA1:	86850A2277BD32DF8A6994029EE460D4250DEC42
SHA-256:	F1677395258565A3F17E98D4B43E8AE047F2E1A103C4D9B644D807EC926706FE
SHA-512:	57A0D57AD8C39F20E03E70C585A9A1790419A934F08C6FD2C71236F0E8ED2FA2E520C28C164B07815C095A38EE4DBE69FF0AD94B570E44F77C5CB64EB4274E71
Malicious:	false
Reputation:	low
URL:	https://match.prod.bidr.io/cookie-sync/throtle?
Preview:	unknown partner: throtle

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2323
Category:	dropped
Size (bytes):	1396
Entropy (8bit):	7.849278575881695
Encrypted:	false
SSDEEP:	24:XmWD6QTBP7ub9mJov058Qc7KwqjhIWdG0FDikTxS5CXX4kc0gEjHOYRiUKIs/:XHDBBTubQs0OQcMvFJTxS5zQg70c
MD5:	945A34EB07F1F9C4CC44051E020E004D
SHA1:	523A8592D238CAA761A0865C360B016B7538EDC2
SHA-256:	EA4EF58EF82300EEC79E3A77D3E432A50843CED9B592C642E74C34EB934D2C52
SHA-512:	FF3D9FE0B08B3083C46BF091D58E0412B1457473AC3B6255072CE1D12863D7202E0DC34FDDE5FA043C467064304240033C16D89B8AC38204D256908531D1E44B
Malicious:	false
Reputation:	low
Preview:	..........tV.s...W.>.#U....M...ir.L.vH.K.7#......-...7..Ko......Z...Of..Nm^j.....!.V.....Wh.D..{_'e.....4.M6c..\|.<..$fP..Pql-..B.J......U.tv:..i.u....Q..B...9.T..au....3Y......R..k.B..f...3-..."0.d..'...'.<YZ...........:S.\..pI6.c.E...:5..........%p\.t.....Q.Z...yZ&x8).sG\|.._+i.YT.,..1...p.1!..T9.4.?J+..f..5d;........^...l.[..<..&......'4.gem..y.._..m.S...\|}d</...)..$R1Y...z....<..~.}...q...m..t.u.&.....c..c4........48X...We.8......3iN.L.X..![...v.Y.1......0..:4...3ph.g..tEL.......5.+.{.4...%.....i..D...5i.,..M.\.Ic6.;.(.2..]...?x..=~.\.....A.h....2..'...\|.~......)..b...5..J-.-.......\|....z.OVl..mLJ.e.n....*...y.`T.....\|.o.s. -j@..e!.[.......&.y.c.c...........p}qh.'. .q" ..f...#.0t.q.....d..V@.h...).0~Z..5+.O.W.....z..X...gQ..g.._.~..E1>S?\|~.....]...Im.{..<\|.........E.79..{.~...oUm.b.Bo.....CP...a[...2..p."O..co..~s........Y..7~..gl..{....^..q;.....I\..lieA ....gM.n.....1y..#B%WE)..'i. .y..BY.q...6.w.......3..U..y.....8..x.R.....]

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/funeraliecremazioni.it/wp-content/uploads/2021/08/FUNERALI_antico-egitto-02-1536x1308.jpg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16827)
Category:	downloaded
Size (bytes):	16876
Entropy (8bit):	5.1687564340173395
Encrypted:	false
SSDEEP:	192:S0S53CKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+c6b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	9559BD3C57F5433C0B53642C10B2214F
SHA1:	1B0240B42EE611C1738628A6D07AD45CCF422200
SHA-256:	53F54B64BA984D5E2DCAB5DBB90C580CDD60413BDE2F4627FB904B436BBFA036
SHA-512:	6A920C9DDA0BC13C9002DE90CA5382DAC88C28DA6A9C9C23048CC99C7B9176170E4B9582338BE7A18A7044FD3760EDFE6852FD53C201F0204215D1FE904BF963
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/feeds/posts/default/-/oggi?alt=json-in-script&callback=readpostlabels&max-results=50
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&event_source=dtscout&rnd=0.9027742755099117&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4706781&@f16&@g0&@h5&@i1&@j1728041988702&@k12550&@l5&@mthe%20super%20mario%20bros%20movie%202023%20bowser&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:181497686&@b3:1728041989&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&@w
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", progressive, precision 8, 828x960, components 3
Category:	dropped
Size (bytes):	156488
Entropy (8bit):	7.986746574293409
Encrypted:	false
SSDEEP:	3072:wDlaUftqSt68Kgnjuxo0TKpMHB6UVeowD/fgj:wDlLlqSE8hni7TKpwB6inQ/fgj
MD5:	5F6A13AD34E7A61323D42114CB48293A
SHA1:	276D9A3C00D5A3DB9B933271EEFB96876CF4E8F1
SHA-256:	80CE6126A1F833A6A9001B2C8CFEAD238B1A9951D5034167646AE72FBE5372B5
SHA-512:	ACB4A4A511F502E851AE6DFE884595CF8E4EE0CD7D99DFD80E4F3191AEC135E481A742C99E2C59418D2BA9E177231BE6C2C89A5B877EEAAB5CA254653175ABBA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85.................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}........<.."................................................., LH..@............../`.r.M\|...-G.i.>.[.^6...2uu%.P.-.ZZ..E4.]}...8.w.[.L.2..Hp.>...m.P._\.a1.rM...t...F4.hn.U..~.j.8=.F.zNt...:,.X..h.?m./.(.+...x.i4Y..X.H.R....G.F1.(R.d9....l...K.t.`...... ...l.:...FXM.....k.o.......8..y){{...{.%,XU....F.[....^m...>.%\|.s:.0.i.....Q.-b......)(...U%.5...xvN.H.-d.$>......<...au#.!..[..:..o....X.!mD.]q#..".L.F.ppB.=...(..F".T.&...Y]pZ..IK.&v.l..BC...p.e..[p..j....Q.3J[..Wqp../.K...z....$.(]V......F..'.S...`d8.C,..W.t.CpF..G}....]..R...o^.5O...K...1...x1..>.z.....).~;.EF&/.k....2.FT.0.U.e~S...5.I....W.-..Hz2U.aY.M.....\|$<.v.\|(.4.G.."..[V.A2d......T....]f.P..&$.(a...0T.#NwUB.m"bB....E.t.U..O....o.(...D..=.....`. ......l.o*.v.]i.....l...<.i]M...0.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 26516
Category:	dropped
Size (bytes):	10006
Entropy (8bit):	7.972403776947168
Encrypted:	false
SSDEEP:	192:EctMuAWs1ilwUOinYsBR2VVb9DwBXj4NvPTfiuZGUJ9roqRrfsqTY:EGHlCsBR2Dg8Nvr6uZGUEifJTY
MD5:	636B6ED4F27E73B2552E78143432789A
SHA1:	FBE51C1AC59D2759D4B46952FA6876DC4F8C5766
SHA-256:	E895B289F668FAA8AB8D69B2C0E1926EF4004DD3D63E506AE813801968CF9C06
SHA-512:	C19D07F286CA767324770CCBE6B2CAFB3B68EC2393C112494BE9135F82B755698E9FAF0EAC450AF1620DA861BEADBCC45B8CFB8D88660647073FFF34B4A34943
Malicious:	false
Reputation:	low
Preview:	...........{{..8...U..BEl..U2q..I.$..]E.2N..HF.ib...< .s..g.<.<....Gc.f.a.......2........C..t6..c6..z.UP.g......'.N!..m...^....z..c..xV.C..8..s.b.B.U.W>...S.}6........;.....s,>.{v.F.dU.0..\|.........W............W:]......"^...W\.....W....o..8.\|.~...{.....u..Q.Uu..9.Uu.T..Yx...D.....5.H...G..,.$8.....c}.>M.....2]..y1....z%..L.YU2..U.P=QJ..M%..A}#.......;..........5.z.Z.E.O..{....&.......^}.@R.k..0.../.p.....V;<...Ar.we.A2..`..[0n'.....6.wG..Y.s.r.~z7.V.?4;g.."x..Y2.7.}."d...Ks.N..}.T.hz..qs[....K}/b.U.Q.:Q:R...;.l.{r&.do........R1''.Q..Q..S._.yry........r.>.z....@..o.t..z:N.....S..sQ.5.+A.W^.'A2.....i\|...n...J......V...w.-..z}@6...yN....7p..Qw..i}.^.+.....n+gP.[....{^m..\...?W.'W..Y.J.`......Xa.3.O.......V.....NL...\|.c..hQ..P....q.....]..Ix.......7....*..o\&l..W.....__.%_-.$\|6>.L..+.._..;...X....:}H.V4m.....LqX9..d..??...........7.0...D=,.Z...30..L:..!....,.......{...8..j...`s..~9..vZlr.#.........ir ....U..l......."

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16827)
Category:	dropped
Size (bytes):	16876
Entropy (8bit):	5.1687564340173395
Encrypted:	false
SSDEEP:	192:S0S53CKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+c6b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	9559BD3C57F5433C0B53642C10B2214F
SHA1:	1B0240B42EE611C1738628A6D07AD45CCF422200
SHA-256:	53F54B64BA984D5E2DCAB5DBB90C580CDD60413BDE2F4627FB904B436BBFA036
SHA-512:	6A920C9DDA0BC13C9002DE90CA5382DAC88C28DA6A9C9C23048CC99C7B9176170E4B9582338BE7A18A7044FD3760EDFE6852FD53C201F0204215D1FE904BF963
Malicious:	false
Reputation:	low
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	8165
Entropy (8bit):	5.167854883228919
Encrypted:	false
SSDEEP:	192:JC1qcmiE3CEIFt7NSymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:QUIxSymDAZJFDfRLaOTO3ll7
MD5:	678F44CD6DED7A7E602B33C550B9D2A5
SHA1:	65A1D2FA27BAB1503339160E0F6A5B5213A85BD1
SHA-256:	A0FDB3CC117F4C27A271C5E0F7B5FBA3CA93BF73C0D75418402278A6ED9518D7
SHA-512:	6936BBB4EEEB58FA30EA36747EFD52F18E816842E8656B5C6FD41328D720E5AAD7EBBF0FAF9EB1AED0E5929BA99D04878A303F2CC768D01A8FB4E23C40EC5A26
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "10401728041950A1A15751415A57C178";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=772338300018818479&pt=de1e418f-8e30-402a-a231-d67b35cef2ca%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3
Category:	dropped
Size (bytes):	1359
Entropy (8bit):	7.453753767658268
Encrypted:	false
SSDEEP:	24:6tYeh1qaPsqyaQ9A9Jq8NqkPAzgRNnIZGTEcQ8xR8dz1FO/mGszQsz328UCodj5d:SoaEqXQujq8NnYkRWcQiy51FOOdznz/K
MD5:	7E38A78E5DC8F67AE17B6EB76A25348C
SHA1:	4DCB57651A75ABFD07FB36C70C6C5108C49BDB34
SHA-256:	A567462F4EDD496BDF5CD00DA5BBDE64131C283E3CF396BFD58C0FAC26B13D9A
SHA-512:	18D6CF4A43AD7299CA70D1F6CC3743CDB508BB5160A3E440FB59B98D1AA47DB1629CB09D36A264B460B8CDADE30DD0003B5C277A856212DF5622BE5D1C144F76
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................... ...C................ ......P.P...........................................<...........................!1."2..4ABQaq....CRbu...#35STr.........................................................?....@.P(.....@.Pk...E.;.&=#r%\|..GK$.5....=.7.].....-......?...&&.E.@......5........k.jXljp)1...2q..@}%.~.....m....KK.\y.[..t (o9g@.j.:...G..R.V....p....{..^..a{....{hn...!+ZB.>.<I.i....=.Y.-..HO'.7,.y.\|.A.t.k$.7n.ZX<1...G.qz.}...tc....0..[.~viq...+.G..M \|h3.Q.I..#.....c........POPxNq..:.?.Jr3.?..q..I-l...T'.2\i/......V@)J2U.8..w~.v....R.m.~..w?.....Qy.qN..8...k%J'.M....X.^.).L+K.-...R.u..(;..ne...8.{..\|.QX....H.Pt}..{w.q.j........1A.zm..,0.I.v....\|.:.p........A.vFW...=...<t...r.I......7.....~.....sk...[n6.?.E!...g....u...J....(p ........Hs&<....We..V..Jrh:.E......C.-.le4.<.......<..[..:...4....KP.l..t...Pb\..&B{Q...8.v..P\|.....6..<

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.9629609263693406
Encrypted:	false
SSDEEP:	3:lcyBmjFVcqeICn:lc5VheIC
MD5:	4FF4EBED4D93633E71D991DE649B394B
SHA1:	662C5B644F8044040644CBFED791208ABA42EF1D
SHA-256:	23663030C710B18965A228D681F516E809797FEEA911243EA706CADBA06A0306
SHA-512:	CFA58A504157F98F22EE962CA554801FB987BAF2E1E805A467A1178080E8B234E06D502455DEF4E3AF12303FFDA6D2F666D97CABFE2140AAFDDBE7DB8FDA6C16
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.goudy.cps.edu/ourpages/auto/2019/3/13/48837226/go%20cps%20picture.jpg
Preview:	Sorry, the parameters you provided were not valid

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=1389/tp=STSC/tpid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 624x396, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	54404
Entropy (8bit):	7.99636769085629
Encrypted:	true
SSDEEP:	1536:3FLC6DV2QF7m5sLjNWeSda1ktN1Poc4dETVt:VLxF5F9SHt3ft
MD5:	28A17CFE4667E75F5286F06421740435
SHA1:	1EBC2014C4AC3C26EDA72B456F78EBDEC9DFDCC7
SHA-256:	BC80BD93432B7EBFF7CA5F541A590409E2EAD72D7E4DCD2DEA080102917A5E4A
SHA-512:	65E4E3B222B1532AE648AF8C9875DBB92C89CA1FA34AD61A1A9CEF9373A5B35DE9CCAC9533B7E97F66E57F04052BEA5A1B478D9D56CBBADF52CF93D347DD5C2C
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/pbs.twimg.com/media/DwZwe0tXgAAGtsT.jpg
Preview:	RIFF\|...WEBPVP8 p...0....p...>m..F$"..+.....K...?br..L~r.l..,..~....{.....O....../n.....?.;.z~..O....t.[\|O.)..[>H}........}....A.O....i............G..".?......`...........=..O..A.....?.-...?.z......7...>....k..`..._.~......g.H...S.....&C8.Y`....>...@. .bNod...d.Ox......j.Ia....^...6.A'..q.........+U..z........E.c....BZ...W....k.'....9.b$L'.^\......1.A....S...C.].u.ef..j..YR65b1.o.N..%.2..qF.7...[-..A.......4.....K..(XgaR...m....@=..(g...L.....C...T..+..[..e>.n....K.y0`.Y..@.:2...1.b...T.L..G.(<8h...z..(.\.iD...Om.L[.2....X.E.l..$S.o.a..c...b..^.j.z.]2...M.g...An.2..1!.mg..M....`......_ZQZ....3f...3....7Q"..#...xM......}...W$F..........oH......l....hq.(`\|...\|...-..8.....Q.a..T...}..Z'..VW...g....ce...M....jp(.e..v.QCN~..ai....E.kD.!7..&......9..?....;..o@_U=G...G....,.5.....s....y...[R.6t......w..Hv...)..VqH..E..v.}!...+I.{-.....N.^...._WO.~.B.u."dn....68A.sH fx....9......Gm...s.a.~.~.b.1YE.......l..@9?l.....UT...H......>0....7H.W..e........f..F

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	8528
Entropy (8bit):	5.178439085785017
Encrypted:	false
SSDEEP:	192:Jr1qcmiE3CEIFt7NSymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgmpHx:LUIxSymDAZJFDfRLaOTO3lluHx
MD5:	9ABEB0C39FF4812B17D121A7CDD53ED5
SHA1:	DF591DE74EB16F5E861D511E0D6A018CCF7EC1B9
SHA-256:	CD28A18B6318F6E4224D514F31C4DACF916CF53B2AE7C081D2B70FF1049C0244
SHA-512:	7555676A09CF36F08D030D850C7BDF453577355088132F82CD8604C4C59487051127E1C1256636751668AAB2442E48BDBD613BB4AAA3B1E45C02B130386237A6
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&j=
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "104017280419612BE9A60FAEA8134F5B";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 700x700, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9458
Entropy (8bit):	7.969983051181282
Encrypted:	false
SSDEEP:	192:nPSdK0yUu0HfMY+eQAq3+4/UJiYfR5iGPIsRf:n3cu0HkY+Iq3jluwSF
MD5:	E2F72DA3C9B57B0065ADB26DFFE003F6
SHA1:	01F75281F6203C3A6495B0F2399AEF9142E6D638
SHA-256:	B153C46D44B10C8AD5CAD43A98DA03CDA60DE3E17A6CE8822C036AFAD9FADC84
SHA-512:	7AB34226974F743AD06A3DE3C78F8CC9BED527064A93B6BA02988A2FB5729CF60189F61353E59F11F8272E33C07B5C6C527CC790B43EB13A66E983DB2666C19D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.buy-extensions.com/image/cache/catalog/additionalimg/ups-rating-front-700x700.jpg
Preview:	RIFF.$..WEBPVP8 .$..P........>m6.I$"..!......in.&.F..pA.\....o....).l...p':...?\.}...../h{..+.~a...k....y.......~+.=...?./...or....=z..._L_..+.o...../..=a.C..........Q...+.........................>...?........'.+.........\Z..g.1PT..p.........AS.].z..sk..S..Nmw..b....=LT.9.......6...1PT..p.........AS.].z..sk..S..Nmw..b....=LT.9.......6...1PT..p.........AS.].z..sk..S..Nmw..b....=LT.9.......6...1PT..p.........AS.].z..sk..S..Nmw..b.J.K...P..%..RU.......'..P.W...Q.:X.......^[..B^P~.\|......r.[T .p...{..Gf.].Z...\|"...j..6.yBT4.. ....$..s._....{.D.J....(o.T...n7.I.T8........#%.V..P......!..K{....b.....y....NmN.c...#...lPr.Uz..d./j@.eo..........=R.Z..g.....\.....#.......re..0. .@P..L%..99.N..z....`../..Q-.Jh.............h.^8..DqS......./YK.9/....f.[@t...A.i..:m.a.1(....m....$*k..c].z.....A{.v .....x..)..D.K..).l..XK....(f&..S........Y...._..,~.R\._k.06.....8QW..L .C.o...aF..2./.0...9.....!........8.FX......#e+.+)E...J.'..M.C..Z(U........i.f..2S

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=de1e418f-8e30-402a-a231-d67b35cef2ca
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 755x394, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	18200
Entropy (8bit):	7.986905606559745
Encrypted:	false
SSDEEP:	384:xhs1/LsETn13qca55vFTnSscozeEC8JnddwRgUF6U5mNyDXxzNfNFtf2ggNs3:xW1/LsG3qca5rnSFoz1dKRgUF6hNyJNV
MD5:	420291FC32CBE480810F11DBE9259046
SHA1:	C02E2EEBBFF30C45262F4D4DC251A11295C364E2
SHA-256:	834E87F1E4A5B20AF352FE807682580E7364EEC966A63D05E9256A15E281C83E
SHA-512:	DFA85B9E177439E4E29F82E6507B3691B09CA296AB526C8EB54788FCD99946FD20EEC645BDC18EDC6821C086CF28063CD9D2328351DAC659428F1CFA39F0C220
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/help.insiteship.com/330/image403.jpg
Preview:	RIFF.G..WEBPVP8 .G.../.......>m4.H.".!"5K....en..j0.............U..{.+.......W.?.....z.x.~......;.o..Y..?...}.\|..;...w.O.{..7.o...?.O..._..l..uj..........Q.}....~....;...o...w.?....&..._._.......a......5..............r?...}.n..}.......x...[.O.?..or............,.....w......?....y...[.....?..............>....4.%......._....L.K...../...........?..?....................!......Op....=..S..~.....lA..f...d...eC...j...;+..xr.Z...V.J........;....1..T.......@....7..C..J.i..l.....d....."F.W0.e..!...it...o.uE...^..y.V.w......b...5.....U.?z..].:#....J.....Cj..5L.M.<..3u<.k.6Y.......=...C..:h.8.w.S:.^.....u.#..&.a.......\Q.~M..f...Y;,..N.'e....d.vY;,..;Z9..dx......A3....N...\U........%..,.f.6.....r.....D...7........[.L..gZY.JiV..K...M.h6.X.....B.$....w..i.<...........u...C.6.Z..`.....D.`.&i......X..vx.~.....k..(i......W...4T..H.z.?C.....%.$y!.;.]%.......k!..%0..^{..>........0.L...qZD........nT...Q`B.q.8Uj.R..iA....9.{.j..~._......~..(.,m...O.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1728041992272&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&ct=youruno-chicka%3A%20the%20super%20mario%20bros%20movie%202023%20bowser&t=the%20super%20mario%20bros%20movie%202023%20bowser&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 980 x 1268, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	371902
Entropy (8bit):	7.99635254149343
Encrypted:	true
SSDEEP:	6144:/u8S9sHSEq+eqIBEs2YA0G616gEDef9V5a9Z2tIDbVRpjsLsUMV+hyBOkcVfS6ps:/ur9sTFI2FL61L1fhyVRVUTMVoyBtc50
MD5:	BCE15DC149B5696009B034D561783861
SHA1:	69B12F4CD60BE5C2B1E5AEF4AEF69727EFE6B21A
SHA-256:	DA4A1A8A7F2086AA30EBDFF78EAB39651D765BCC2C7528245D615D87C0A45303
SHA-512:	7E5DC8A5B884E3DA6C31CE595CFD508BEF20EC6731C3147C3525F96DAD64850D1EDFD86FC0AF64FF58757B705716074FEB49AB3999F9105B3FFC24D8D1A278C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE............... ..........................................................................................."! .......................................'''.............................................................................%$$FFG..............................................srr....................baaVVW.................\|\|\|........hgf...KIH...]]]hikmllwvuyyy...#""......oop210ONM.........[YX......VTS...ceg.~~.....PRT...ttu,+.........@>=njg......;97......twz...........@AD.......~z......~yu:;>........................~..hd`sok...458....z~....................643...mrwFCA...........ytp...\`d..........hlq...VZ^vz..............................+.1...c^Z.........HLP.........UQM.........................~......................"../....yIDATx..}.\.g..+&a..S.P.@.`$...C......S`......(.b.C.......5....b[{...Z..R.Z........-.....G.[...yzh&3.....<.s}.RD.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD..2!.G..".KB.l....Q.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	438322
Entropy (8bit):	7.973033567281755
Encrypted:	false
SSDEEP:	12288:nbB6wQ23sEk9rg7Isii9zOaASs+ky22xguo:nUes7i9qajwy2Iguo
MD5:	BFE427F4E69AF870B7BBA60C7EA71C1E
SHA1:	EDA68420FB964904280DB2FA17A22BC44ACC9BB6
SHA-256:	217D51D95A535100431F7B1E7C284076BEF4D97A95BE09EB3C90836F58AF9F91
SHA-512:	64ED080E5A0EA07CDC98D152BD8741066140244E6F029EDAD341898829743CDBDBD7CE6802783B3C747F98DA98B1BFC0975384DC7E57C44FAEB6BB4D27C7473A
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/i.kym-cdn.com/photos/images/original/002/454/405/30f.png
Preview:	RIFF...WEBPVP8L..../Y...8n.H.`W.,..p.;.AD.'`~..?......#.....r...H....RnA.R..A#...m.H....3.......K.....)@[Z+...<..mKi...sm...$E....n-..=.x.(....w[......Bh.%[...k+.n?o.......r...y^..K..Hr$.#..u.....={...h...."...O..H.j[I3l.E.....\|...ww.....].[..H.$9R\|u[......Y#..qeZ.'.!8_`...0.....Q.p>.D....0L\<..:&.`..@...G$d......5......p..u..q@. .&xXbB...../...c2....ik...&83.@..1...&.TSM...q.1.t..k..2.)>.Y.B.df..k4...:fP...>v.....5...#.?....5.t.W.~v..KW...].]..Y.... ..B.."E>H.5:..p.M/L.T.=..u]m.n....!$.N...`.....'t....j.Z<._f........4.TS.U.hhh............].n........[.=^/..U.@g_m_M.T.A.....p.....u....Y.?.uY.ful.V%.jr..V.II.!:.!......(...T_.{...j.{.g..b....I..!.'..P(.p.$).l.}....{..3.........?..x...........eB.....uu.af.....j.~.........).......B...}?fo.XW.j..X%P-..$....?.p..p..@L1..@...Re7....d...+.s.# ...!..\..!....q..%L.>!.r...#...O.!`.X.*...q.F.Z7<+.I......"b...[../..A).X).Xk.\|.Ek.l.3U.x........b..F...vs.)g.,..}R../=.YS...Quwu.A..zW....7...L..".&aV..L.I..A.d#".&T.B.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&event_source=dtscout&rnd=0.6440824229854869&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=1811/tp=TBMG/tpid=Zv-T1QAG_BWYbwAF/gdpr=0&_test=Zv-T1QAG_BWYbwAF
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x473, components 3
Category:	downloaded
Size (bytes):	62857
Entropy (8bit):	7.967382278062469
Encrypted:	false
SSDEEP:	768:t1GV/QjPVn+B1mxKzHa2qF4OW+hAWtbjgSM5qhzAwolsqVFEa2FT4xgpgX7FSq5:ts1QjNn0cKzHWfvb8Jqhbzqbb2u74q5
MD5:	05536CFABBBEA77EFBCC1D9D5CF4F9D4
SHA1:	E192BDE4182B150E8B4C909E676FEB2A3866CE3C
SHA-256:	86AE868A0B3B5D463B58719DCBF32347AAF35156A377931EF3D4A4C3AD0B6FF6
SHA-512:	6C3C48B1667F1D6E4A640F207C21AB39D7BE74AE38B9E864124FF95CEDAB9883CC2930094D4293CB811B0603B8D61537B3CC96FC2347E856E488F4EBD47C22EF
Malicious:	false
Reputation:	low
URL:	https://i.pinimg.com/originals/22/68/f9/2268f93232ba908ad3dee8bf3f14cb37.jpg
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................................................e...H4.H."U..D@.$.F$.4.....Tr.q....q....,..".....@..B JQ"w..XD.DC...."..B...&q.).gL.L89..DJf..&f...d.fL.....a...!q.8..J1.f.+b.f2.;...@D...-{..e......I.7...@.DW#b.K)ZYX...i....B ..W.....F..7...(FH.d!..V...B..qf....$.......<q...fv.X...1$..;E).K.,..H'g.H$':..J3.........L......H.qA.8I........f4..! .8..Q....3!K...q;.A.,q...$R......)..NJ......,=W%8.J"$.q.HD.4.H...DN..&x....L..I .s%.1.Vf$...bu...q:C!2.:4..!.).gL.8.I.Q.)....F.H.+.WqA...9....0H.."'-..^#,l...)..1...!.h.....h`.22`..Pg.BC...8rDD..O....i.j......#.....,...Q.<P.......q#..@#`..$.4.(,r...2knU.0.I..N..1jF..\d.he&.X.....rJ..).....!.9#0...%zU.q..,X...&:.\.D.0<.e....g/X..M..mV"V{DAf.#..#..$....L..`..N.D.....u....,..1VK.Q..$.%...&`C.A..$........i.)<...ud....$.mGt...'. ..m.Y.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16829)
Category:	downloaded
Size (bytes):	16878
Entropy (8bit):	5.168663089296055
Encrypted:	false
SSDEEP:	192:S0S5VYKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+g6b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	152B42FB1328A6F44801ED77320C288A
SHA1:	5C3C7D923F4E05ACF29B2BCD11DE3EC3D301A8A2
SHA-256:	08BD237262A9DEA7DFC687EEDB1A8E675D7AA62A2FDB90CAA2814B2A32460C59
SHA-512:	230B6C636805A073B178942992D3392635CC03C92419BA29BE24BC640A907F161655298C387FF0E0A4725F770B99ABC134F0691BC114D3BA959CBECA0459878C
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/feeds/posts/default/-/circo?alt=json-in-script&callback=readpostlabels&max-results=50
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=772338300018818479/gdpr=0/rand=297708294
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1236x1600, components 3
Category:	dropped
Size (bytes):	233612
Entropy (8bit):	7.978095603883222
Encrypted:	false
SSDEEP:	6144:GakVh0RHbtpuzIn3k534YPvZ+qrFLP1ejwOqpxESEJMTGUeM:l2hwH730oYPVrBhvsSSMTGE
MD5:	755C10C23F7D4CE1B5B756A7BEE97B0D
SHA1:	D64568BFEAA6DB2BC6AFA1BB66F98943B839BEBC
SHA-256:	A23B27DAB77B62CF13D8A0347DB6DD38912C0BDEFF8DD0C7654CF287160A81AC
SHA-512:	36B3920773F8A6CAB0B3D947A24B7586D7A0956ADAEBC92946209156799042144016CB6A0EAB6A504F2226CB26DB6936EBFFD14B17279F425D0216F0201902BC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......@...."..............................................................................................................................................................^x...-z...P&=<...x...'..6L............a.i.Y...\|..$(6F........_Q<e..@._..0......z&1......................................W..............z.=d...8.c.D.l.u......{/...O<.I.K.#...4..\|....;......A1'.\|v..<6=W..I._I.a=..\z...@.."...v..l.....#..O...%.....kt.c.P...'.......8g..\....................$BD$BD$BD$BD$BD$BD$BF..[.O..A.z....{.......h7..H...k......:.c.M73.=..F..^......q..xo..q..u.~zs...7._B.<..=#.=...\|.x?{8/;....=...>l.G...m^.=/.=,.}...b<..."2}W.T..y......o.~........p...zV.V).r=..;o.....................@.....@.......UH..[.!...A.v..3...d.;.....n:n...] w...(..&...>b..2...q.{..R{...A@....N...k.:.~..^If.....>.z..4y.Q.nx,p...x...

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	7582
Entropy (8bit):	5.1342062770595245
Encrypted:	false
SSDEEP:	192:JjO1qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:FCUIhymDAZJFDfRLaOTO3ll7
MD5:	367926F3CC78433ADE91DF66CF83B0F7
SHA1:	18BCFC50A5B1FEB0B931D5E7F165A7C83F812932
SHA-256:	DF325CF7F090DB70214B024A29D39886E6FCE09BD49C05D3E7709AE34FDDB6D9
SHA-512:	08E79F44C7944C2D5FD6DD088EFD920AC047F116E546611F2A1C98472796C66D0F2A39A1B66B1273336C62E7FE6153863DF7F4B0381407CC4384AC38BEA41FC8
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&j=
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "104017280419743BA2F2C1E873F0FE48";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	3638
Entropy (8bit):	1.2843393639542857
Encrypted:	false
SSDEEP:	6:NXulKltegZ//OekukCS4kdxpHIWvUkt/ctmnzteghFnUtC+i/T2MWFetk/m+:NaKXe2m5CREDssfnxeo/2XUKu+
MD5:	59A0C7B6E4848CCDABCEA0636EFDA02B
SHA1:	30EF5C54B8BBC3487EA2B4C45CD11EA2932E4340
SHA-256:	A1495DA3CF3DB37BF105A12658636FF628FEE7B73975B9200049AF7747E60B1F
SHA-512:	BCFEBB2CA5AF53031C636D5485125A1405CA8414D0BC8A5D34DD3B3FEB4C7425BE02CF4848867D91CF6D021D08630294F47BDC69D6CD04A1051972735B0F04D4
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/favicon.ico
Preview:	...... ..........&...........h.......(... ...@................................f..........Z..........."z.......r..........r.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2097
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	7.831312491646247
Encrypted:	false
SSDEEP:	24:XwmOHj7FVa/ZK+kNJuGiSdAzvMuUMeXhDFW82swoydY/:Xn4a/ZK1Tj+vMzTW82sLP
MD5:	80D8F4DD25F0D41FC0638E5641734EFE
SHA1:	9348E64DC4784919748B31B2EFBF2AFF3CCA21C8
SHA-256:	5E4217B5E343E7F92E36EF0FD485DCDEC6D9801076EDADCED8F6756C94CCA7AA
SHA-512:	3C674DFD3A8E2586AA80B41B03889C9D6E9E522881F8ABE255838FCE1828D309F6C83824504541AC54F813312F80C79471F5EF9A95912BDD6FE791373FB081B9
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync
Preview:	..........tV.w...."..c$.......!...x@...n.....b.P....g..,t...#......E&M..u..O.,..@..Ir.8.x..m.3C..T.....&..R.....B.....f.KN....x...%_.D..ZjQ.".&6q\...<j..\...h.)1B..}...#..,t8.^..@..k.kS..[j.-..SeY...yyp....K..^tUO.Dg....1.o.v.'.4..9Q/...<.."../!....g.*m...zk4.Df.c..&/...0....M.....".+.+\.U..Ya_../.Sq..Y^....xz.&._ .. ..<....d....!.:...1....+.....;.^../..v..W.q..$q+...@..&.<-.Lg....?.\|".....z;..}zRdK.F._..T....2O.m.....8.)..:..X.]..P.(O'...............D......(.K.m`......0....mdQ.w.$W.wo.ft.R.....7..P.U.jB.Xx.....1...t..^7...7....<.U...)ov.....:..[.F.s..0.FQ..dJ.uR...E..z..[.o.@)..Pyftf>.Y........E..p..E.6..j.\|y..'LTf.h..j........U...N.g.....u....H.ad.e.7....L..\|-s'.....2.k.6.mjs..q}93FJ....8....W..0.....8...d........8.o...+n~C..8.H..7....{......X....#.'d^..c...y.1..G..o.......4G-#D...}.......j.X.F....Sp.@..\|..."..L.F.OuoH?C......F.~.W(..5...)....c..(\|.,.O..s..2E..\|,.b9.....~9.+......2.1...__.qE.}{.sEdR..;.z...2...1<.rq...1.vm3.hjJ..`...p

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&event_source=dtscout&rnd=0.1638713592211536&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1280, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	337660
Entropy (8bit):	7.9993088772990335
Encrypted:	true
SSDEEP:	6144:OiZUcOl5Wj2lj+gG3wiZJmroYofT2VAdUFl1Uy1bYxSCQ+KbpU:3ZUcOl5WK+gG3wwmkYoQAaj1UlxSHG
MD5:	52EED3C2512CF884B253F499B22DFFEA
SHA1:	5E281EA806E3E2272AC6779614051F0FA18C78F3
SHA-256:	9035FD36809D39911C2D9EFB5789CF4B504BB67356CD45987066C77097DECBD7
SHA-512:	4AF803D34B85439FEBE25BEB8578C9855F5DA32ADCA8A316773C354F008369304F4A0E713850A426997373C0B3F5B8404F6802562C6FC48F1AF7F7F1DEBC03F3
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/trianglebeach.net/wp-content/uploads/2017/06/UPS-Freight-LTL-Map.jpg
Preview:	RIFF.&..WEBPVP8 .&...[...*....>m2.G$#$!.8.8...M....}....R..\|.?..._]..._.<......"..z..7....z..#...7......fyw8.6..h,.g......G@..>._.......^...?........_...._.............y....?....g.../.:..?..P.6.[.w.O..2.......c.......................}........3................G.....?...}8.....g..............C.................s......._............w.o....O_..r.....I.....#.....?.O.....\|................?...............{............?...'.K........x..............?._..}.G.s.G.........s.............c.......=........_...w...;.....?.........................c...O./....w...G..._...}......?..............?.?........7........k.......k..?....k..........._..m~^...m...O......1~..........?........../.......................W......................y..5.xkl.....[g....m...<5.xkl.....[g....m...<5.'.u..xkl.....[g....m...<5.xkl.....[g....m...<5.xkl.....[g....m..........C.~....%..K.<..y/.._..q.j..6.R<......S.P.B..<7..x.....y.'..=\|....t..Z....O....s%09...9.dA.m...<5.xi6.C.m;.`..d..H...

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 624x396, components 3
Category:	dropped
Size (bytes):	71815
Entropy (8bit):	7.984064659070609
Encrypted:	false
SSDEEP:	1536:eOtVAz27DLlezAu7k8XfuqS5iu2c6Wlu9EFf:e5coPudrplf
MD5:	457836D9CEC31E7B358E0C80051020D4
SHA1:	8B1061FD8B7BEC3C2814DCC9D74D5EF67718B4F6
SHA-256:	9F821C448708B3428F8106621B68AF1D1C15F94EE05DCF726A0A1570885EA127
SHA-512:	FBD48D3F72D81B347F56701F528BCAA0ADDBBF4D8673C20A27F0EF45504C85025AB906DD2667F2DEC953E5D1A787247C10E0DE095E7B25603CEC61DAF0EB0AFA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.........................................................................p.."..............................................................................{.#..{.....JCFS.5..c\.1.....X..d.^#....p..."<p..Q.=....S.....U..u>..S.\|u>......>.;S..<.'W.#.~.N.%......A..]....aL/..D.../.,!w.SY..0/..e..+..m:..y..nK.#.......wiJ..~........]....D.W0....=..(.w....#....g!1......#..:^.$Y.......J.;.@..."1.1.'................1..\|...9H...idy..Z.p".@.......)1:u....F.......;.#..N3..h!I.Q...TK/.(......B....>.X.{d.>Kx..z.?...%l..7sj.8....F._m.4...%fT.7...v..{ ....l....V.WG.b.....l.$..R.......UL..l.]a.e...u.z...#.l..4H..r...Y.. :.....03.....[*...\U."4..T..&..d.Q0d..wa.\|N...E...ago..W{.}..Y..d..c.j....5x.._y9....R}..xk...../.2+/s....y.}..=gU..".^Y.......+.U..+o;.e;,e.%......O..L....4.TN#.W.>....."..1.Q..)......a...z#V1p:....\.......r...E.#K....../... .COH...p.......c

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 618x800, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	43484
Entropy (8bit):	7.995014892506594
Encrypted:	true
SSDEEP:	768:/xuK/zEyHgtWZR3nJ0xdk6cvsn4Y1acM356FvvZtULlqfF0pqZnSD:/x9zEyH+4ox+6qGJULlqfF0QSD
MD5:	A940772D071EBCF6DC924DABB1E75370
SHA1:	7ACA6A0E12562F10669FA3FC2B42383CD56CAAE6
SHA-256:	83A82275C410FF5BEA760998F83D593107EB0F7297FC80F5B2F30052F4A96BE3
SHA-512:	913966C8C27672F639AD91DF839771DF05A4E7790F20D432A01C76831AE2DE6624459900A356C286D93FB7973581595F1A5D4CD02EAF919E1417DEBE8E5BF0F3
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/walshschool.cps.edu/uploads/1/2/7/4/127470817/parent-facing-overview-v3-page-003_orig.jpg
Preview:	RIFF...WEBPVP8 ........j. .>.B.J%..$.... ..cn..0.....JT.S>.....#.~..o..s...?..G...~X.'.............'.......n.W...@..........j..........<....'.O...._.....P./.....s..\|......_}.....?....../._........c.....?....z...../....<..+./....i.......?............?`.........7.....^U_....[............o..........O.....\|..>...s.7....z_......o....1#.mo...V..[[.mo...V.^/4.S.O..,..D....dJm.).D...p>...lB.......1..g.s....w....)....7......E..........&w.c..X...[[....X...._.c.z...U..{..4...T.A...~....U..D..u?(.dJm.).>).x.. . .c/.#.&...M.%6.............,{.'.o...V..[[.mo..&..]..Y..f....D2.."Sl.M.%6.."Sl....m.Zv.VO...]....?]..%O.Rp..h.!5d$...s#m.).D.....)0(}....yN.x..RA..D..t....~.....9G.u..z.o..#m.).D....W~....6..w.tg.0....<Z..b.6..l.. .Z...gb....e...v..W.q...`......g'.=?...C..7V.Y..e.... .......k.\|px...dg8Vg..2..l.)."E.}..7.gGH..3.._...pm3..h..,.U..[.mo....k...9...9.$?...Ci.B,..v&.{\|s.9...a......p#...u...z......~........y.bp>......}Vgp.+...g._y...q.9).X.(...U...`

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55950)
Category:	downloaded
Size (bytes):	56016
Entropy (8bit):	5.272467689359362
Encrypted:	false
SSDEEP:	384:QUcg6kQAMYTriZXvoDHu+qwnvdnvVWAXBceNZqjtS9g:QUAGbbqwvd1BXwjtQg
MD5:	9C47B1D805F30A70131A4EB58FA86D24
SHA1:	012E63AC74498379C3FDC58149D5165D988F9409
SHA-256:	193C92D0B3972D4F84A9320AFB37B5D67EFB902E5ED0D8393E2682849034B5C6
SHA-512:	3B9FC01D41CC3017A0F72EF18C8A8F98AE0757D43C1DFC4F16AEC19A9B82AA27D08F9312C9117522671A136DA03ACB6D8DC9DDCC57BD1AFFC3B658F40A173F11
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/feeds/posts/summary?alt=json-in-script&callback=pageNavi&max-results=99999
Preview:	// API callback.pageNavi({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"question

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.00, resolution (DPI), density 41x23, segment length 16, comment: "LEAD Technologies Inc. V1.01", progressive, precision 8, 755x394, components 3
Category:	dropped
Size (bytes):	48686
Entropy (8bit):	7.827020840102555
Encrypted:	false
SSDEEP:	768:1BHNegohT0NcuQnEHdq32dlGxnZecauMJYHH+mGZq:/5ohkcucE42d0TUeemGU
MD5:	49F6EE4118334CDE1CAB04F4CFEEBFDD
SHA1:	28E03CFC53B8CD994188F3BD58B3B692C90A1E55
SHA-256:	7F24B4E8990B051AF87BBBBF8CBF62D5D81B9D0E6C176D26ADE00DAED205A570
SHA-512:	B5B433B50022D30C682318736FFDE31F7DF8DA33E4D554FFBC883B76C8799A60033FCF2C770CEE60A6983846F1B305E857B066110B606EEB8A5C140B344B216A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....)........LEAD Technologies Inc. V1.01....C.....................................$..."... + "&')))..-0,(0$()'...C...........'...''''''''''''''''''''''''''''''''''''''''''''''''''.............................................................................................V....}20....S..x......1 ...#.........................{x.NN1113&.E.FZ....)(.r..rz..\|t........G..u.[=W.4e.......f&&d....................[..{..Ci...J......A...H;...[....f..S..}..k.0:.S....xY.J.i..].Eafr%yfh.Ji,...................9..d....<........d...Yf.]q.........O.\..................S.f......................................}.......................................=.........................................{n.sZ.=y................z........^..n...\|m..@._...W....................................{n.sZ.#..%..{..>..;};j.4LG...~#.....R.>...?..!{.+.....T........=.j....F...~fy.g...KN=.k..[.......J..~$.........."rL/^~"......F.....................5..z......n.....#..~fC.xz.z?U.y.?..3....L

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, datetime=2013:10:20 00:24:45], progressive, precision 8, 736x1117, components 3
Category:	dropped
Size (bytes):	121922
Entropy (8bit):	7.985492756002766
Encrypted:	false
SSDEEP:	3072:7Xl7jmHX71TzjISOXha365g3oYqozVj1PLz4F:Z7jmHpXkBI3Gd7oXM
MD5:	104C27545F2A28CA626EA8F0CD5F256E
SHA1:	8AE99B3920228CF32E246AD1D531590A725DB7FD
SHA-256:	45E0F49EA69E0F6511D13CA0CF512CE187B12D1D8C7383183F65E0E43B6106FC
SHA-512:	627B805970B444FBD4872E814B57DD371F279D8E2BE665DA4352D158C0914FDF21982730B2CC01A8FBB6C5522ED43F5174648E52DBA4DB14A007144B07FDDF68
Malicious:	false
Reputation:	low
Preview:	......JFIF.............6Exif..II.......2...............2013:10:20 00:24:45....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......]...."..................................................................................y}y....{.#........z\|.>o..z..2..o=........!..r....4n....n.tG..l.L.Z.LXKS......#>{.....+.S..h..{...sX....T....i-Xm....).mp.,g.e0a.R+..@...#Pbb.ed.W...w"G..r...<.a..-..#]Ul.~..i...n.=.dhV!.r.Z4Z..d.8........%.F1..;OY]Ff.>...7,..Zf..W.......9.:...!.....Ns.5#..........s~.......g......>%......{.%.........3.{x_I..EZ9..^.<..7..E6.8.+......\.f.gA.....`...j...c.+.zF[>z.....k:.Sr.V.....-s. #..I..\|.U.Fv^.8..r.Z.].....la5.....S....!........z.NWlW.k.z9.;.Z.z.!...IR.S..?+.@....\|.k.E.u..[#n.?\.....E...Jy..yw..q..7.g.......<6.......r..RV..ZF...Bf..v.hL...jw2.g.l........Q..M.3./.a"....^.vD.m)T$H..-..G.m..2..Xk...s.X.z./..u.X..{..X.v.'.......zD......3.U...Ol..~..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.9629609263693406
Encrypted:	false
SSDEEP:	3:lcyBmjFVcqeICn:lc5VheIC
MD5:	4FF4EBED4D93633E71D991DE649B394B
SHA1:	662C5B644F8044040644CBFED791208ABA42EF1D
SHA-256:	23663030C710B18965A228D681F516E809797FEEA911243EA706CADBA06A0306
SHA-512:	CFA58A504157F98F22EE962CA554801FB987BAF2E1E805A467A1178080E8B234E06D502455DEF4E3AF12303FFDA6D2F666D97CABFE2140AAFDDBE7DB8FDA6C16
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/d9k3q4j9.stackpathcdn.com/wp-content/uploads/2016/10/Il-Circo-Masimo.jpg
Preview:	Sorry, the parameters you provided were not valid

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 660x371, components 3
Category:	dropped
Size (bytes):	54901
Entropy (8bit):	7.980909942175245
Encrypted:	false
SSDEEP:	1536:T0u/pcZyAlLY7kxsWbzMR3YtaUg/6+FbtgTnSD:Tr/pcZ9lLY7wsdlYtS/6+ngTnSD
MD5:	5966E2FFBA2E034483DF4C3B1F350423
SHA1:	B9B1023DFEAF50C863A985AF2A0C20890A92F5CB
SHA-256:	3ED31CA26D446679CE0C139EE8E85328FCEB3C5EAE21DF9D29DCBE50D592B0D0
SHA-512:	C8A6D533B45EC0D476DB9D9604CDBF82E0497090B525A7ED5352295AA2FF0CD463D5F06F5057D755646E8C6EB08EDC2347521C6F6C202185F01AA69233CD7CEF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""......s....".................................................................................a.....w....oVITy..=..e...4...0..,.iPbC.........cH.Y,..E<uAG.Ti...q..c..0..&..4.I....#.?..cH.1..N.r...`........."(wr.=)5....j(.&..Eg&...U'....!.@.(+..]kY9=O....@....cP..5...."h. .W.....9yX..{$.:....iP.J...i...s...V.6.....I..b\|.h1....sE...".5.@o#..s...{...}'i....zq......Sp:F.2...J%.8...P.M}.'.B...8..kOD.=.`";......U.ep..s.....28s...B..R`....U.@..6...&l..".XQ.}....+.Db.=..DrmG.9.k\....ze.=..^%..y.?..z.....Q...R9.$......f..cJ.F."+....5-.JW0.....b....o".....p..=..\|.e.J$. f.Xr..M..HR.#9)7U.#k.CF(..^.p\!sH..9.Vw$...r..7p8.Fs^.6@.......E.]Y..^.x..+..cyh.....j.X...S...P....... /.#.."...rc...G/.......)...d..}....yP&.V<..6..9.D.*.#....5.X.a.b0.b3...=.B...b....ws@.N.C..D`...s....<uTx.g=...[...^W(.4jA..._......K...v.5r

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/c/123/1242/0/10.gif?puid=JcJ7AQZHKDhG8sisRA-6jmw7&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4077)
Category:	downloaded
Size (bytes):	66896
Entropy (8bit):	5.436510052248412
Encrypted:	false
SSDEEP:	1536:/Y16rZpocbeVw+QgUABBULag4X4xlSybLh+lyZ1fQA0aJ/xG:g16dowoUABBRoSyQlyvQA0aJ/xG
MD5:	CA8F3BB1B97BFA6CAC268D431247402F
SHA1:	F859DC6410BE59BEA8E2DF787329540A5B430140
SHA-256:	18B7EF33A8D8BCB39E91BEB6070536550F472D98A53191AB5B1C261DAEFB3C26
SHA-512:	3AF9296074B4E9EF7907C0FD259C2A21ABCB41C5B2607B4093828B5F7525376B896B13C3228F41DF55E48455D85364F49CAA7995161F7CB155033A7C20212EE7
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/
Preview:	<!DOCTYPE html>.<html lang='en' xml:lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>. Meta title by GianMR -->.<title>youruno-chicka</title>. All Meta by GianMR -->.<meta content='blogger' name='generator'/>.<meta charset='UTF-8'/>.<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>. [if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]-->.<meta content='Zero Unnamed' name='author'/>.<meta content='follow, all' name='alexabot'/>.<meta content='-5;120' name='geo.position'/>.<meta content='2021, DDR' name='copyright'/>.<meta content='en' name='language'/>.<meta content='United States' name='geo.placename'/>.<meta content='global' name='target'/>.<meta content='United States' name='geo.country'/>.<meta content='all, follow' name='robots'/>.<meta content='all' name='googlebo

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HSinYn:xY
MD5:	F7D59D3BE131AD16CC24D036112D9991
SHA1:	635B8DB4843997BA0331C4C0EDDD2601F4F69698
SHA-256:	57CCDE9F4BE6E3F510E37BEFB67BA272AB6D263980802EA18C18F3B78B3DAB32
SHA-512:	1446489C33DA980A237731A984D9FD017475CC0BA4C022DE45571A1AD4F295860717712DB60E6EA3E1F79ABB0C8EB7F1B15C5FB05E436D170E94B8740DFBF595
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmyI5rcvPMVRxIFDXhvEhk=?alt=proto
Preview:	CgkKBw14bxIZGgA=

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	8165
Entropy (8bit):	5.1691284300649425
Encrypted:	false
SSDEEP:	192:Js1qcmiE3CEIFt7NSymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:aUIxSymDAZJFDfRLaOTO3ll7
MD5:	73F6FFA7122E593214152A6C6B673F2B
SHA1:	BDE475C2DA0F00E045D11FF84BE0235B2C268F11
SHA-256:	D06BA9F64DB9AA5E5AE64BFA53C6B289662FAC52F1C9B57240212ED7AB42B241
SHA-512:	0EAC5D6051580B657556B8D8C32BE6C9CB0BE71564AA03E885AF95C2401BA4687EA554FCB68990C7A3A9226660E1BB24DB3C0128306CE324C0A1C2FFD7CAD5B2
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&j=
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "1040172804194772BB79A6B6003FC38A";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 960x473, components 3
Category:	dropped
Size (bytes):	78062
Entropy (8bit):	7.983841612207689
Encrypted:	false
SSDEEP:	1536:LpWUWBJVQUKu/c6HSqoPonTkSTCH4OoF+qIRF/xdU/xqp2C:YUWPTKCcN7onTfPF+75w/x82C
MD5:	95BF1AD9C8E4E2193A697B3FC7636D4D
SHA1:	E4E0502C7392E97EBF0D04B0956792C5314EF385
SHA-256:	1B77237D9DF22EF98527688249A23D6B54EDA01D891DF006ECE8B867654A6D34
SHA-512:	8A1BEE30F2DF6118818D0503550AF60932C6A5043069E148141CCABEEA2726A04FE5DB79954E6A6E29BA0447C6ECC5E25F6B93EBF3053D747887BB9E3CE6084A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d.....C....................................................................C............................................................................................................................................................b.W.......9....:..O;R''\|.=3......-.vte.....L{...x....... .....x}yB.kA..4g.....2..W....P.! J.:._@.t..].Vd^..2\.f.;.6...{%.....+.h.5w.t.....V.A....."...P..f.......:.....W.....6q....:.._.=.W/g.,D2.qzs.:Y..5"e......&.{x.Z...X.kw-n..RC.Ld......J.&.v....x.\|.5.zLz.(.@.`..Xi=...U..s..Z...6]s.z..p...H....MY....>..W..X4.x........+.......r....../{..1...Z...y.G>..MOE..{..xk^tQD.)..!..\Z.:gd...*..\.n5.:`.k<....6X....5X.Nn..G\.`..BE F.R...q.....78OP.T.<.&.u.s......Nz8d.n......zh.};".^,..8II(.U...w.a.y.8Y...6~.V.M.OF...=.=m.6....e...s.EVS..Y...).%.%..-.v... T.j.j.C....^}.].[..N..Ev,_...2.a.[..0......,.C.~...jV.k<.L.^.TcY...v}...8\|.Vs.y.k9=.Y.}.yto......a.b..k..S...].wy..0..O>.g..Ks.s._.g(2t...I.y

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1098 x 572, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	120319
Entropy (8bit):	7.990925493995713
Encrypted:	true
SSDEEP:	3072:ioM4ug2LAmnc43v3kpVtG4+phXnZWB/J9NT:Z3sUp5p24+pJZWdJDT
MD5:	2974EAE89C5F06FB38E5A255058FDA28
SHA1:	75D1E7C19B352121F88084B953AF0D69AE2B4B82
SHA-256:	7257C7D37F2DA15C9FA004E2DC82AB03E9F4B4FA901D91A14650439EB63CA70E
SHA-512:	3B3660E3DE680DCE66E59F640829D68D46E2113DF921D290E73F6D742655EA15A6102C64A6F2A1AB83AC6A4F7466CCF022C5712BE56D0FA07BE7724E48F6515D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...J...<......3.4....pHYs..........+......PLTE.......................2........1............LT..........=?&......OX....IP.@D................~.....AH............................EL.......`n.Wb....S].......[h.............5...........................N[.......\|...........du...................;E....................................&...)-i..Jg}.......}.....{..98......x.........................JOTo.....BE;...........Ef.1...............................2sU....z.T=9TUL.........#.%.;................&3.................dy.....BC...>B9CJL.....!."...Zv.jph.14...Zd\....................J.__v\|v.....r....7:......[w.-[:....-..t....G_..../<..~f..............}E..v[W6*;......u..0s~..{o.....s........[q..Y._7]k...=........l<.Cf....t......J:.......-KV......8._....r:..X'.....q.C......X$.\|^...n..A5.!.. .IDATx..=h]...0........q.i.b.2.....6..&..TC.47.c...6<.<p .....4..I.....0.d.I.$R..]XH(.l..?..W..Mv-i..s...9......`.....~o8...\|8...=.....B_N.p.....k.N/..~w....r

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1850x700, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	74790
Entropy (8bit):	7.99756405808974
Encrypted:	true
SSDEEP:	1536:A0WrPztZhSDg0oHzgh647UFEIPRY2MDGqs:A5rJi05zS6cUFEGO2Mqqs
MD5:	8550EACA7C4BFA4D47DDCE3187CFEDAB
SHA1:	4C63611D6EC4F4D5637D8E6D0E7863FDCD0FCE9A
SHA-256:	22CAB439477280A2F863EEF006768E4C58657B4D8C1AC60316E34164ECD7C2A1
SHA-512:	381ED6231A18EB694A2981A32BE4B9F4AB9992512C1BC0BA07674D873F368AF881ABB47C7C62D0DAAACB86D7E4E96E7402721A2C143A7DB4AB19536F19FD27F5
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/3.files.edl.io/e4a1/19/11/27/215435-c57cc00b-43a7-44ea-8d40-743d7d2bb415.jpg
Preview:	RIFF.$..WEBPVP8 .$.......:...>.@.H.......em.N...m.7#..f.G..\.].._P...7...~.?.>..g.A...Og?-.......3.......E...j....3?...o..._;.G.7.L....z..1.....?Vls...........Zu.c..{.?..\|..x......y.........J.......g..FO.=A.t)A....&......B(...C.:.@=....C.m..eZ...hv~.6.....lPVw.b.....`.[0/....[.CJn......[Xe.@..q.k.=6\|....zQ...RN....%p..A.Da2...gu....}7N&.I.K.>.y...a..t.e......v....N..fw...1(..5.N....i.I./....J.II..:....8;..P...e............\|.s...OJ..=(..V..i.~.1...x.5/.:.k.....`.....c...R........O.u.....K{...F..\.;o{Gg.z.4...K....7;..$.....y.t....W'.c7...2c..u....iV5.......0._Z.!..v....z.B.K0&.U.....l=...4....J^g7.....j.#..$....9...-........<.u4.P....q.`...E....2St....FV;6lu...$n.=g...y...Ilk..H3......Lc..gkg..\|.p..P2y)..j%...;E..2.C[....}.3..;`......................nGT7.9......Q..\.........o.y2..R....B...u.qF^\|.u.Q).Q.{l...z.h../...f=..+.`UW....r.av..VA8.&9X.s..#....0..!...%....LH '9..F..._./*&u....N.Xb.....P0....... .V...7.=.hS.CYI.....

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=5B34632B-EDA1-4BCE-8599-0FED55A84249&gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x586, components 3
Category:	downloaded
Size (bytes):	59409
Entropy (8bit):	7.958404997847459
Encrypted:	false
SSDEEP:	1536:7WVnErXrIrNfGBbEGk3ZQxEongkHB09fBQwzOCQNCWw:gyX0EBbLGjogEwf6kpP
MD5:	DB5E77565C4813ED9E3A33C8580EAC50
SHA1:	82A1B04A15653241FF24C44051B5AEC053FB07CE
SHA-256:	536618741C85CA1FBA14268B07348DCE3B698A8646C8DE84E91F26B7CB58272C
SHA-512:	3BC6650715AEFC5FC4BAEF1A69EE6F5FB0AF3688E729349527392128EA23804C4C02A120B54923ABAAF2A4504F326CED86A891EB990C662F4513273FE9760380
Malicious:	false
Reputation:	low
URL:	https://i.pinimg.com/736x/c4/ef/0c/c4ef0c7067b29c52e55cf995a8c2f873.jpg
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......J...."............................................................................aN.j....... . .....D......J..PAJA@..H.J....TT..P..T..Hd......EA..PTQD...R......AHp.... .".H.A..Q..TT..Q.QPPAD@....EEG"..(.(.( ..........u.C.+.fj%.U....t..@..(".....((..(.. ....* ..P......(....(... .. ..............( .&M..5.^.....sO!....Y7p..,P.5....IQ....t.TP...E......QU@A..@.P....P.........P@...........A...1y..Nj.Z...n.-rh..A,....e...U.b...W.4.z.dkq.J.6.(....(@..(.....G .. P.(...........R.@..@..B(...DQ.R.q..)..]<..Z.Un5..v2.....V.j.]!BFX.......+.f.:.J3KaQ`T...DT...U.......D............A@....(...@.P+;..y......Z.......v....qNai^...A.a.j2.5 a.Y.v.b.=)oE..t+.r5_...$........EE.T.A....@T(..QD........."..%(......KL...Y...X<..O%...Vie.:...k.:%."...6c......I....Ti.g)c......s.b.Q.].RX...vD3gB("...TE.Q@....P.......@.AA.@.......

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2444
Entropy (8bit):	4.674959509701474
Encrypted:	false
SSDEEP:	48:Gun1i4KtlT+YU9MpRa/zcFhxpLKiu/lHpegj5y72a4ukvzLx:L1i4KtlTla/szp6yqaIvzLx
MD5:	8D7AA851E6958F2F4F402E35011A8581
SHA1:	1ABAF1D915445B5CE18F310391617A1EA0804BDC
SHA-256:	03298401519D95AA4F83D8E70F93E6E9B5CEA1C3CB79D5893676B83869122132
SHA-512:	C5D1415205CED23603A23A3D7868FF01342B0AB4542507B811D130D220C78E5D0057602D832A363DCEBB548E755377CD27715E90FA7099A57788BC610AB363DC
Malicious:	false
Reputation:	low
Preview:	(function () {. try {.. // set up our pixel. var fcmp = typeof __cmp == 'function';. var fcmpv2 = typeof __tcfapi == 'function';. var rnd = Math.random();. var img = document.createElement('img');. var exptid = encodeURIComponent('ZH0ACGb/08oAAAAIVAOoAw==');. var url = window.top.location === window.location ? window.location.toString() : document.referrer;. var img_src = 'https://pd.sharethis.com/pd/dtscout?_t_=px&url=' + encodeURIComponent(url) + '&event_source=dtscout' + '&rnd=' + rnd + '&exptid=' + exptid + '&fcmp=' + fcmp;. img.async = true;.. // set up the aqfer script. var pxscrpt = document.createElement('script');. pxscrpt.id = 'pxscrpt';. pxscrpt.async = true;. var pxscrpt_src = 'https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=' + rnd + '&stid=' + exptid;.. var done = false;. function load() {. img.src = img_src;. document.body.appendChild(img);. pxscrpt.src = pxscrpt_src;. document.body.appendChild(pxs

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16600), with no line terminators
Category:	downloaded
Size (bytes):	16600
Entropy (8bit):	5.106011935059437
Encrypted:	false
SSDEEP:	384:wE3QyMp8WeOzzXlNo19PuSFoo4t3JML84v7K1LqVT4FbN0sI:wE3QyMp8Wf419PuSFoo4t3SL84zK1Lqd
MD5:	26A760EB1716CF6B311E16ED82D0EEB5
SHA1:	345DA68966B17C4A0415765B62C755107BA2E01B
SHA-256:	F3EE00626500892F28D8EF92B554D64F2EF43A54B9F2AA9F167262F28DB339C6
SHA-512:	2E49E019D026BB278E83377C5EC1C603FB1E36D971253BCADEB9C9EE5867110CC4E2ED9B3E59286DE659119C52191685764F9799584C85ECD07609B374AF2259
Malicious:	false
Reputation:	low
URL:	https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Preview:	(() => { var i = { d: (e, t) => { for (var r in t) i.o(t, r) && !i.o(e, r) && Object.defineProperty(e, r, { enumerable: !0, get: t[r] }) }, o: (e, t) => Object.prototype.hasOwnProperty.call(e, t) }, e = {}, t = (i.d(e, { default: () => u }), { JS: "js", PIXEL: "pixel" }); let s = { brands: 0, mobile: 1, platform: 2, architecture: 3, bitness: 4, model: 5, platformVersion: 6, wow64: 7, fullVersionList: 8 }; let a = { chrome: 2097152, safari: 8e4, opera: 2097152, edge: 2048, firefox: 65536, ie: 2048 }; class r { constructor(e = !0) { this.isSync = e } collect() { return new Promise((e, t) => { e(this.getDeviceInfo()) }) } getDeviceInfo() { return { screenWidth: window.screen.width, screenHeight: window.screen.height, devicePixelRatio: window.devicePixelRatio, language: navigator.language } } } class n { constructor(e) { this.allLevels = { FATAL: { value: 10, color: "magenta", secondaryColor: "magenta" }, INFO: { value: 20, color: "green", secondaryColor: "green" }, ERROR: { value: 30, col

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1025 x 630, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	56745
Entropy (8bit):	7.9498307109715185
Encrypted:	false
SSDEEP:	1536:BLOW0wtj0hZjd4AQlMJN6SjbK4qjwc8xjgJV3XUyo56jMdDFi:B6W0gwhZpOlMrfbLqf8xEJV3EyD45i
MD5:	38DD5EA732CB08C0BE968E9DCAC4C2AB
SHA1:	049115382CBAAFCA5C4C5AAC9868F89A53BC471A
SHA-256:	7BE88013EE22C551197DBBE207559AD8CEAD56AA8F51BE738F63005FEF2DCD06
SHA-512:	62BF6083FAC9CF2D817E5460650EC28D8F51F1B05FF971D3AF19E4E53C0A36D98D20FA9069E829F782650D80084432A277DBA3B65CBE22CE07CC6BB3F58D3691
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v.......ki....gAMA......a.....sRGB.........pHYs...........~.....PLTE17>...............G................................D..05:........................-39....rvz......'-4T.................g..BIR5;BEMW:@F...y........$&,?.....bgky}.......MRY......U\d>DM...O.....3............Ybk...GDE.........VXZTNJ...1.....?;:...y........nqu...............[hxbo............K7%ba`......JUe.......ilp..RC8................................fv.ePC...9Ih.h=...............s...................o~......k...Pf...E...f[P`z...N09UQo...........zbI.uL...o]1..3M~....znu...........F#.t.......7zE$.....{.....a....",J...%6\|..e\......i.w;.ra.?sd^..U>U.yV7HYw...gG+..yb0......%_V..);h...q...........~(.Dh..<f......S8.X$NN.a_.a....wqm...C&8.^......a==K..'2..>2...&D........x]C....l:.Aj./U.Pz.TmAHm.z.DZ.....v..1..M.j.2....^..yX.... .IDATx...k.X..]%....{..$R..#FS.cY.X.....E....~....N.At..P.k.....?~...9...+.....gv../.$_...{>.{.3..#..pqq.........................

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24984, version 1.0
Category:	downloaded
Size (bytes):	24984
Entropy (8bit):	7.992209564589015
Encrypted:	true
SSDEEP:	384:Q5uIjdBKsKtonblEDVlglYSnDqoK0/65voSFjngxDnMG5QLKhfpy8PCyjc:Q5ZesAoh4lglYSnmoK0/4vFjc8LCRjO
MD5:	303A79D404D97CCBB3D803088FC387D8
SHA1:	66E3525B79A1A58A63FE0934F31676DD40C7F033
SHA-256:	7E510E61C497D334DA21ECCDA06DF5D3A428C9EA94D6903B6138E7C7255ABA0F
SHA-512:	5751D97634F0FD270E36044A1EF077C0EC1D9B146BD8E5D28207A083CB350FA467E083433C2F81CFF896AC7E3756B7014A408FEB203F2D175FDEBA0A37F3614E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
Preview:	wOF2......a...........a...............................j?HVAR.V.`?STAT.$'....+...\|.../V....`.D..j.0..T.6.$..>. ..~.......'...6.Yw.....=W.y.DL.4.a.&)....N.!C.n..R.....".".P..=.#.L........62....2...e.z.V..U...r.H.Y.T.ZdkK...#ux3,..&.I..dcb.[.>.....)g9up..f4.p..D.l...V..iEl.A..e....z.S..v.......c?.<..w...{V.9..C.=0MsF..o9......[.3...K..'...`....HA....b5..ms.l+.t....a...^......m.[...8.....A.DR@.3P..F0. ...s..XT}T. .......MzK(.FX..3<m..o.!..z....."..]3.e$ .X...Y.f].n7.([....{....@......sxC....8...9q........XJ........&m..e...M.. . A.B..!!x..AK}.i;Q.[.........N;..u.A...w9qA..4...I..q..e...o.....C.UVW.}.rn.x.W.8.kP.C<..{.3o.G&U.......25..3.../..k..uK..BB......(D....?....xgf...8...U)..Y%j.p.2....^....Q..!...".......a...P.../m.w&<.....R.1..FZ]H.8):.3...\...wV.P........K..@.j..C.:..jE..L...R.Z..@.<....y-_hsj.+J`....i. ..Ba.S..4...\|o@.R.R..8.!..t.3y!U!J..X........i..+..P.X..M...K5..fgF+.F..V.! .....X.B.........i.]..m.......*..`[>.q..m..w.......fC<

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.232641492080285
Encrypted:	false
SSDEEP:	6:51bchb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWPWk:51bc513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	F00B9F108EE4B82E7393FE516C1F4331
SHA1:	A6899C9194391E08FD7ACA6766781767F6C6AA42
SHA-256:	3EE0D32CD4676F729030BCEA357AD025A47DB2AAA2849638EFF63201C531FD82
SHA-512:	980B938B6F3FE23DEE977E53A279109C47D638A3398FB99368899E704A401866356B4BCE21C7C939A22A76C2B59C12E8EABDFE45190463BE0EEBDC0D2194EBE8
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4706781&@f16&@g1&@h1&@i1&@j1728041926449&@k0&@l1&@myouruno-chicka&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-10621084&@b3:1728041926&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F&@w
Preview:	_HST_cntval="#3Vis. today=142";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.6440824229854869&stid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	241962
Entropy (8bit):	7.995815514153473
Encrypted:	true
SSDEEP:	6144:7LWRIr73H0AKpKHtcuIsSFO5dNqBUxNNwJFOo/XDWa8:qIr73UwHtcuvRdNqBUxvo/k
MD5:	64F5F115F592960FFAF92D77CEF15835
SHA1:	D0A504F2ED1148DE99346C1672878732414334AB
SHA-256:	FFDB4E04FBEC6BA9BD1AD2F0B0382866A0BCDA1FC8EB0E5EC20281E098F33544
SHA-512:	09695AE5B14215585F6236248C342EBCA2BE7E922156107EE2F68A637FA4B7561A5B5B0B520D331A4E6680F407C2FDAEAB9AF150803F94C0AA7C5F0093AC9357
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/docs.rocketship.it/php/1-0/_images/ups-bol.png
Preview:	RIFF"...WEBPVP8L..../`...U..$I.........G....2..:..[bU.J.W..P....\.s.S..F. V.....D.QE.V..:....U...#U......$.."."" ..t.....x..2.....,F......`...q.a.A.q(.......)...}.ujK{..,lc.......\|.)t...<.WP.2\|.U......?.G.T.w[ .O...b..q...y_.th(4...(f+Z9t...z.Y..G.E.'.h.E..l.-.....T....Z~3~....;....-..r...v.:9>JC.O.>n[..w.[....r.Q.r.m..n[[...nQm.Ta.JT.....J*m.jKU..v.vI..k....6.....o.o...vU...affT...&...=g..x..ff.`8..xx...ffNz..A.f..p:+.'...>.5..!.3:p`.z9........t\|&...9.3..ki....'.pj....:=.ff..9k.....3..:...3..f.0S.a&...c...^+L...g\|f.{.v8.fN:..N.P.s`0...^.ffr.@h.9....@.;.3A....O#y..O.... ........w:.....s.........2{;.c.t.RZ.b!h..../../..........#.,K.X.e.9...qb..(%..v{..-.3.....}<z..n.l.....L2[.-.b.f...Z.d.m.....z.(?...Q......r..:...........<...<s....0s..y.s.........L...vw....1K^C\|$.l....l.N.3.,.o..%0.&...l n\|.c..8.`...E.W.U.U.....[..n..2..u.U.7..zvQ.5....6..X.....X.U.\|....!.....Z.Aw..H.m[Q.....1.. .n.m$I.<....?.#p...?$.e3.Ti...d......m.KJT.......+......\.V..U]aU...

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728041971688
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 694x460, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	22632
Entropy (8bit):	7.990849451881704
Encrypted:	true
SSDEEP:	384:JzAxOBPhrE2/bGqTonHoETs6r5KbC5jPt2UFeoFj0qJWndp3UbXBPNfGPyCF:JzJzrPbGqyTTs6r5Km5Lt2IDjUpE7BPY
MD5:	AB4D8A39E9E7185CB92B8A672B77B6E3
SHA1:	1BC1777A66A6D5F085CF1A68192EDF56565DB2C9
SHA-256:	6F695754FCF6AF141B8E1BCB45386A1AB1517DFB8B791FEAC6CAD9BAF4A21015
SHA-512:	150E42F3D2B4A3247EEF7553E7BC7D0608F335892673778E4D15B220FD9FA2C3D028C21C8883BE7293122ABA0A95EEB2125C93863DCB04BD5072FC3F035BED85
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/help.insiteship.com/330/image402.jpg
Preview:	RIFF`X..WEBPVP8 TX..0N.......>m4.H$".........en.6y+.@..+^.J.]....._..S._:G...OS_.=B..y............o..._...?..........[........c...?..J...o.?..j.....o....5.....O.............O.O..p.....g............G..._........k.O........3.....3...o....W...K.G....j........._..;...c.c....._.......q............z}....W......?....e.....o......g...o.... .s.o................q.w...O.........................e,..=n......36vu..8.%?.9.s6.I..w3n+...Z..%5.J............Zv4l.^.T)(.R%.~.V.Kd..Q..j........m.q.W+@.Hw.....!\.......h;.-\e?3KT...m[.B.Z..C..M.n!..h.I..q6..+..sy.>-.m8Hd.^..u..h.D....HHD.....Y\|....4.{.bK.6(...F..(dA'.d... .iA..Z...lR\|.E."...q.....n....FY.V..;0.2.,.}>..^z...&!...D..~.Z...E._...^k..\|.G.....$z.....}...g..U...P......6....$....j.B........m.q.W+@.Hj.4&.t.1D.l......R.r7.1z9......#^....`..2)..{b..C...!a(}..U..g.S......U.V..B...%k.....*.....6.......]..Qf.....}.`ZW2...X. .......m[.B.Z..C..M.n..wgF.~....u.B..].!r....(.bL..Y..O\g-.<.!X)7.g.............m

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.9629609263693406
Encrypted:	false
SSDEEP:	3:lcyBmjFVcqeICn:lc5VheIC
MD5:	4FF4EBED4D93633E71D991DE649B394B
SHA1:	662C5B644F8044040644CBFED791208ABA42EF1D
SHA-256:	23663030C710B18965A228D681F516E809797FEEA911243EA706CADBA06A0306
SHA-512:	CFA58A504157F98F22EE962CA554801FB987BAF2E1E805A467A1178080E8B234E06D502455DEF4E3AF12303FFDA6D2F666D97CABFE2140AAFDDBE7DB8FDA6C16
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/teknowlogi.com/wp-content/uploads/2020/03/ups-freight-ltl.jpg
Preview:	Sorry, the parameters you provided were not valid

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 550x375, components 3
Category:	downloaded
Size (bytes):	89220
Entropy (8bit):	7.976863610809806
Encrypted:	false
SSDEEP:	1536:5B6oAMGRUcG30rBbhGSFoUUd+25SDi4bvdeBrA426+Qi4H2ZdwkwEur7i5:5B6oAMGR9Bbh1UkVuIdms6fHgekL95
MD5:	A0D0EEF9A53DDD6F95F231F504D5F2FF
SHA1:	641EE1F07E2E8AB462091AAE1E668B3BA27AA156
SHA-256:	95625ED3D2C6F3F62235AA2F91A6682B8530617F1366DC64E37615E0C7E3C33C
SHA-512:	2F550403E4D723D89B3B151C71086D4B3F046A398D6A202991232786115547BD1CB528E9A9CA986B705E2F8A7FD365561618C773937013AF4E09AE25AC928889
Malicious:	false
Reputation:	low
URL:	https://1.bp.blogspot.com/-t3BpmfvYEjQ/UyXKskwtkeI/AAAAAAAASlA/bIcUYUA0Pb0/s1600/1533898_251478525011924_1341263343_n.jpg
Preview:	......JFIF.............lExif..II*.......1.......2...............i.......:.......Google............0220........&...........w...................................................................................................................................................w.&..".........................................O........................!..."12.ABQRab.#qr...3............$C..4S.....%.&Tcs.5................................=......................!..1AQaq..".......2R..#B.b...3r...S$............?.......................{.....".b.TS.i.N6..>.j..S.......I.E.`..ap.+MOZ}...7..........]G.A..W..\.....zya.g....kJ!Zu4=?...W.2..5...n.e..A..v.#......vV.".i.S.N.....,A...+..3...T........5....]X..~./;`...f%.....nd.......@M.h......Z:..CoZ....<.A..[+D.Zi.PV........x...r..F...BhzP.O...W..t).U.t._7.<...t.>I...{......woi................m\..u].9N........!.FO0m5....8.s..\|...&..I+(biv.B.=....J.=..+V..cT`\..!........W..kn..[Rk.k.Z[...6uW.....v..:.......I......v..$j.f.:...u!..>d..Nkl.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43601), with no line terminators
Category:	dropped
Size (bytes):	43601
Entropy (8bit):	5.362094585622624
Encrypted:	false
SSDEEP:	768:HiS1YxfHfIcITa4P5+23ex/BVQOXGsWIYTHpji7J:HioYxfyTaW5KVQpsEHpgJ
MD5:	9B991FC4E41448221BE02744748EC589
SHA1:	47DF0B75614D17D1E94D61FC4006849EA8E1E13D
SHA-256:	FFE8AC1AD574101276F7BA3BF6CFB95D55ACE8486BF60329ADBF843C64A2EBCE
SHA-512:	FA4E263114DBC0BFE29FB7C1A39F7A0D36178D0BD6B6075B99D1183315F1FE6A23D1AB8ACC49710E2165D945135B5AEDC685A723F0DBC5C7E0F6EBE6E878DBDB
Malicious:	false
Reputation:	low
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16311_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16311_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16311_a(a)}}var sync16311_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16311_c; if("function"==typeof Object.setPrototypeOf)sync16311_c=Object.setPrototypeOf;else{var sync16311_d;a:{var sync16311_ba={Ua:!0}

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, datetime=2013:10:20 00:24:45], progressive, precision 8, 736x1117, components 3
Category:	downloaded
Size (bytes):	121922
Entropy (8bit):	7.985492756002766
Encrypted:	false
SSDEEP:	3072:7Xl7jmHX71TzjISOXha365g3oYqozVj1PLz4F:Z7jmHpXkBI3Gd7oXM
MD5:	104C27545F2A28CA626EA8F0CD5F256E
SHA1:	8AE99B3920228CF32E246AD1D531590A725DB7FD
SHA-256:	45E0F49EA69E0F6511D13CA0CF512CE187B12D1D8C7383183F65E0E43B6106FC
SHA-512:	627B805970B444FBD4872E814B57DD371F279D8E2BE665DA4352D158C0914FDF21982730B2CC01A8FBB6C5522ED43F5174648E52DBA4DB14A007144B07FDDF68
Malicious:	false
Reputation:	low
URL:	https://i.pinimg.com/736x/12/c6/2f/12c62fb652ab634599515643ac0e06a5--christopher-nolan-super-mario-bros.jpg
Preview:	......JFIF.............6Exif..II.......2...............2013:10:20 00:24:45....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......]...."..................................................................................y}y....{.#........z\|.>o..z..2..o=........!..r....4n....n.tG..l.L.Z.LXKS......#>{.....+.S..h..{...sX....T....i-Xm....).mp.,g.e0a.R+..@...#Pbb.ed.W...w"G..r...<.a..-..#]Ul.~..i...n.=.dhV!.r.Z4Z..d.8........%.F1..;OY]Ff.>...7,..Zf..W.......9.:...!.....Ns.5#..........s~.......g......>%......{.%.........3.{x_I..EZ9..^.<..7..E6.8.+......\.f.gA.....`...j...c.+.zF[>z.....k:.Sr.V.....-s. #..I..\|.U.Fv^.8..r.Z.].....la5.....S....!........z.NWlW.k.z9.;.Z.z.!...IR.S..?+.@....\|.k.E.u..[#n.?\.....E...Jy..yw..q..7.g.......<6.......r..RV..ZF...Bf..v.hL...jw2.g.l........Q..M.3./.a"....^.vD.m)T$H..-..G.m..2..Xk...s.X.z./..u.X..{..X.v.'.......zD......3.U...Ol..~..

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	7582
Entropy (8bit):	5.134765338819469
Encrypted:	false
SSDEEP:	192:J11qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:9UIhymDAZJFDfRLaOTO3ll7
MD5:	16EABD0BC4343279911246EE7518219F
SHA1:	49BFC39DDAEB02B532FD8949D147FAD2D04D7133
SHA-256:	0104F523C48B4531C08F0F2317C73812F7DF81B856B0924DB8682C63A65DD156
SHA-512:	0FD5935E350EA5991682A32857A4888133A32484A400071D6DC30C90AC20C21FCB0A368AFC0E5B0AA295B9A34884F7010DEF24A335F58F4553B4E47622C0BC84
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "10401728041979CB5F44C25E76F48C69";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 500x281, components 3
Category:	downloaded
Size (bytes):	21091
Entropy (8bit):	7.9664227661450235
Encrypted:	false
SSDEEP:	384:sCAxATt6kOCnwWksjU4u2hSZmKfpL17U+xkcTxsrBX4LmqjqbZ1401:sHM6BYksw4NhGfpL1wCkr9kZOZD1
MD5:	085564790D4C3007399768670B8F66B0
SHA1:	1689834B9626FD96E03F02B9494209EAB3AE68DF
SHA-256:	A70E38E6CFE8AA46C3D937D7338C396974DE3AC29336FB21B9FC4564190467B2
SHA-512:	4755D5299DF33F920BFE9956BF29809F1213825FF79B124B42537E4F91B6D935B4A4CB6A6C2A07AA74DA660721BBF6E069AA2D8641BF3E06A99A5EF11B729E1E
Malicious:	false
Reputation:	low
URL:	https://i.pinimg.com/originals/ee/e5/94/eee59475b23dd0494b4db3c1fb79c07f.jpg
Preview:	......JFIF.....`.`.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................&.W.....C$....Z.+.2.f<..=.zC....5\d....GS..4.=..O6.h..-Ym.s#...........%..s.x......j.qv.EW..+..`bu$......I...... ..mcE.."..JI..&.6VU.\&h.o...S...3m..8...McFi#.e{^.\n.....8'O6:..-v.,[I/=5!..qy..M4N..l>..%8.3.a...../....V.g. .S.T.3...K^.ik.....I..F..d-I7..i?..L..a.0....d..5V..n.3.d.....\|4.`...../......q].g..$.M..E..Z.&..:.tO...f.....=0y.....uC...i]Z...B.C...<I=K.1.4....0.@.jt...T.:XI....Z.8k...\....m>}..o..,b8.4..Dz...v.k...$.<..2....Q..]...h.....N...Yea.&f.%8......Z..d..:J......E....1..^.)<.nK.,.Ezs.[e...%.M%8[i.1..."........:R.!h..T..63..k...Ti......m.z...fF..a :.tl.^U.X.E...e.Xc.6s...Fv...,.....{.E7p31w.1.Y.h.....>.`.OC..\...%.m>ji..-..v.e[.D,......:..r..;.....w........Q.vK.'e....C.{..mvd...Lc..

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 500x281, components 3
Category:	dropped
Size (bytes):	21091
Entropy (8bit):	7.9664227661450235
Encrypted:	false
SSDEEP:	384:sCAxATt6kOCnwWksjU4u2hSZmKfpL17U+xkcTxsrBX4LmqjqbZ1401:sHM6BYksw4NhGfpL1wCkr9kZOZD1
MD5:	085564790D4C3007399768670B8F66B0
SHA1:	1689834B9626FD96E03F02B9494209EAB3AE68DF
SHA-256:	A70E38E6CFE8AA46C3D937D7338C396974DE3AC29336FB21B9FC4564190467B2
SHA-512:	4755D5299DF33F920BFE9956BF29809F1213825FF79B124B42537E4F91B6D935B4A4CB6A6C2A07AA74DA660721BBF6E069AA2D8641BF3E06A99A5EF11B729E1E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................&.W.....C$....Z.+.2.f<..=.zC....5\d....GS..4.=..O6.h..-Ym.s#...........%..s.x......j.qv.EW..+..`bu$......I...... ..mcE.."..JI..&.6VU.\&h.o...S...3m..8...McFi#.e{^.\n.....8'O6:..-v.,[I/=5!..qy..M4N..l>..%8.3.a...../....V.g. .S.T.3...K^.ik.....I..F..d-I7..i?..L..a.0....d..5V..n.3.d.....\|4.`...../......q].g..$.M..E..Z.&..:.tO...f.....=0y.....uC...i]Z...B.C...<I=K.1.4....0.@.jt...T.:XI....Z.8k...\....m>}..o..,b8.4..Dz...v.k...$.<..2....Q..]...h.....N...Yea.&f.%8......Z..d..:J......E....1..^.)<.nK.,.Ezs.[e...%.M%8[i.1..."........:R.!h..T..63..k...Ti......m.z...fF..a :.tl.^U.X.E...e.Xc.6s...Fv...,.....{.E7p31w.1.Y.h.....>.`.OC..\...%.m>ji..-..v.e[.D,......:..r..;.....w........Q.vK.'e....C.{..mvd...Lc..

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 550x375, components 3
Category:	dropped
Size (bytes):	89220
Entropy (8bit):	7.976863610809806
Encrypted:	false
SSDEEP:	1536:5B6oAMGRUcG30rBbhGSFoUUd+25SDi4bvdeBrA426+Qi4H2ZdwkwEur7i5:5B6oAMGR9Bbh1UkVuIdms6fHgekL95
MD5:	A0D0EEF9A53DDD6F95F231F504D5F2FF
SHA1:	641EE1F07E2E8AB462091AAE1E668B3BA27AA156
SHA-256:	95625ED3D2C6F3F62235AA2F91A6682B8530617F1366DC64E37615E0C7E3C33C
SHA-512:	2F550403E4D723D89B3B151C71086D4B3F046A398D6A202991232786115547BD1CB528E9A9CA986B705E2F8A7FD365561618C773937013AF4E09AE25AC928889
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..II*.......1.......2...............i.......:.......Google............0220........&...........w...................................................................................................................................................w.&..".........................................O........................!..."12.ABQRab.#qr...3............$C..4S.....%.&Tcs.5................................=......................!..1AQaq..".......2R..#B.b...3r...S$............?.......................{.....".b.TS.i.N6..>.j..S.......I.E.`..ap.+MOZ}...7..........]G.A..W..\.....zya.g....kJ!Zu4=?...W.2..5...n.e..A..v.#......vV.".i.S.N.....,A...+..3...T........5....]X..~./;`...f%.....nd.......@M.h......Z:..CoZ....<.A..[+D.Zi.PV........x...r..F...BhzP.O...W..t).U.t._7.<...t.>I...{......woi................m\..u].9N........!.FO0m5....8.s..\|...&..I+(biv.B.=....J.=..+V..cT`\..!........W..kn..[Rk.k.Z[...6uW.....v..:.......I......v..$j.f.:...u!..>d..Nkl.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	52154
Entropy (8bit):	7.99373996819405
Encrypted:	true
SSDEEP:	768:s6MwQdGtSKWShXfX+4AuS/7ln9dnXj3d2JkFDJ5WdiI1I4ehgLLvBrXje3woiTQo:s6IvKWSVXQBJ9NLDmsIKBu1e3GTQo
MD5:	55555381EB4FF8E1CC90413ED1D3F085
SHA1:	89A352BE55A5A8CF2FA3FCE8473FBDAEBA78CA93
SHA-256:	77E483666B21EE83C79A5DD690F0EA1E02CDA7DF6A5F4358ECE195D5CE59CD3F
SHA-512:	872EA0AAB77E4E1BC481F66804B7046C72D936BBD7871065B600E9D24057AEBCFA50D74FE07621CA4F947CA177B781C11FCDD45A5B22E18C62BC208B4F6484F1
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/eniture.com/wp-content/uploads/2016/09/ups-warehouse-settings.png
Preview:	RIFF....WEBPVP8L..../.D....I......2...u7f.....k.R...w............>..i+..d.n.I.!..<.Q.k....C.......'......xd8....pDB.V8Y.d..@@.!$.PC.$B.Q.m"..R.,.4...(.......A.#...r.....X..!D...B.4IC.Z..".....`..QEF.Y....r.)`.L&b.B[....S.../r;...o.I4..}l.o.K=.M.q..R-<.u.z-.Lh..@...m#...v\..-..Px...fl.4. =.../\|..n.\..@....z..?.lY3.c.O.........w..3.o..J+...O`N..X.X........Nt.u.&...........?.B.....h.....M..L..8..`.$....^[...Se.U...4....U.z.\.L.o...C..")$...KL.<#.Er..E...J...\...@V......;.....K7..~...O...<].V...O.Th..Y..I.A.Hy..,sb..6.3./~....Q.z....1sYRY;^...?t.._..k..;.i...t...'.u......._G>.d.:.......~..V.5...F.[.[.y....C....0q>xw..7.a..#...7].G....gUW..S......+.!..e...O...D.P..7..K.oB..z~..<....{....t.I.Q..`....B..+.<&#..B..wG.G.~..LF..]...A.........w...K.......N._.nF..C.-.UuW}............?,.m6.$.............J..+....D...l.db.L.....$.\|.......... .D@:v.....b...@.JS@..z.*j.?..Z{?.....+..:u....S.>}sND.iA.,.m.9/......@...S...e%^.T._.q.5..-...\|'...~.'.......

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://pixel.nordicdataresources.net/?pid=280413&uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3605
Entropy (8bit):	5.075622390478209
Encrypted:	false
SSDEEP:	24:meRNNE1uyjLGLfh1ADA6V89sOPSejl6kHN4ynxmIvx9riqYniKL/bbzmc:duxLkSs629saW/+9WqQZL/qc
MD5:	F16E89FD08A708A6BD2E69BE50FD30AB
SHA1:	530FEF7EFD42A36908F40C87114A28C1398E1367
SHA-256:	08B479C3EEB1CB4D44354E6BF17322CD7ACD38AE9A33EE5956898447ED43FAB6
SHA-512:	94722AF96B830015C2515BD537E8610A25B61AC7C66C990D41565CD87AB50667E8CBFAB347188E98BA7793EF5AB48F0B3115C40DE55F4791D2CD1B2321405295
Malicious:	false
Reputation:	low
Preview:	[{"id":16472,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"twitter\"]}}","event":"click","behaviorType":"act","template":"Click On Twitter Link"},{"id":16473,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"youtube\"]}}","event":"click","behaviorType":"act","template":"Click On YouTube Link"},{"id":16474,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"hulu\"]}}","event":"click","behaviorType":"act","template":"Click On Hulu Link"},{"id":16475,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"digg.com/submit\"]}}","event":"click","behaviorType":"act","template":"Share Content On Digg"},{"id":16476,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"del.icio.us\"]}}","event":"click","behaviorType":"act","template":"Share Content On Delicious"},{"id":16477,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"facebook\"]}}","event":"click","behaviorType":"act","template":"Click On Facebook Link"},{"id":16478,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[hre

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/e.php?4706781&@Ab&@R3424&@w
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (640), with no line terminators
Category:	dropped
Size (bytes):	640
Entropy (8bit):	5.438479815406905
Encrypted:	false
SSDEEP:	12:+dQOhaBVIQs2SbYKzQlLXUVc7e/0F0yQsJe3WY5e/jeQQoZI8Jk:+dhaB2H2Sb1y8r/06yRqfs/jeQI8G
MD5:	D31B5EF7B62C454E437107AF66F957A4
SHA1:	D74DC54E8417E44F98CE3EEAF846790BEADC9CB7
SHA-256:	233AB04286DC3BC063EF06E736FAD0E4C6770CB240FBD8D78CD6000F5D051932
SHA-512:	BE908AA3CE1CCB010C5E67A0D75105360FB1E331BA9A480DB6A17F648D8C0E9630E30077F06E28CDBF95FECA9F51EC8BCD085491296AF64307A661EA180A8D41
Malicious:	false
Reputation:	low
Preview:	(new Image()).src = "https:\/\/trc.taboola.com\/sg\/eyeota\/1\/cm";(new Image()).src = "https:\/\/ups.analytics.yahoo.com\/ups\/58773\/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/dpm.demdex.net\/ibs:dpid=30064&dpuuid=192575369c2-15090000010f580a&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26referrer_pid%3D51md42u";(new Image()).src = "https:\/\/image6.pubmatic.com\/AdServer\/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID";(new Image()).src = "https:\/\/cm.mgid.com\/m?cdsp=737575&gdpr=0&gdpr_consent=";

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32769)
Category:	dropped
Size (bytes):	94840
Entropy (8bit):	5.372946098601679
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
MD5:	B8D64D0BC142B3F670CC0611B0AEBCAE
SHA1:	ABCD2BA13348F178B17141B445BC99F1917D47AF
SHA-256:	47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
SHA-512:	A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16831)
Category:	dropped
Size (bytes):	16880
Entropy (8bit):	5.168478852854888
Encrypted:	false
SSDEEP:	192:S0S5JcKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+86b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	0606BAC7226F031B1C5354DA4A5D762E
SHA1:	081C9C7B3179C6D0612BC967586455F2A0591D51
SHA-256:	A2FBE256CA07AA3402472AD06098FC56F9E96DE1CB07F2C4E936C77B3F426ED0
SHA-512:	4217C4AB12AD78FB593004566DEC6D29A336D1FDCFC3BE3F2865663226B8165F6B97024FB07FC180344A4136C8E3EBA0B38B9B89CB4B9B4064E92FEB429D4D63
Malicious:	false
Reputation:	low
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/sync?vxii_pid=5003&vxii_pdid=c25ae5b72d8d3274a003b67bfc2dc4ed&vxii_ts=6&_t=1728041981
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0&google_tc=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=458588359a002125fac7aedfa09a88e3
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	7582
Entropy (8bit):	5.1339667156105175
Encrypted:	false
SSDEEP:	192:Jr1qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:nUIhymDAZJFDfRLaOTO3ll7
MD5:	AE58B52747D5E3EBE427074FFA98B0F3
SHA1:	8A691FC84E74FD2E1CC6FF8D0F409A2FB4DAE8B1
SHA-256:	9D42716FDE521E6CFCA9E6A85D2454EF209C7E64AEC07B7B8AF7E52D51350A38
SHA-512:	E9BEE417B1ECBD42EFDF31AEBC60105BED42F547578A8CE62A6782CEAE3E1C3D41D9C79F737F1D9D4AC2FEFE497EF31B51B9DF9A8C32E952EFCC0DA75A28BD0C
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&j=
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "104017280419786B02B01576DFEF6E57";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19280, version 1.0
Category:	downloaded
Size (bytes):	19280
Entropy (8bit):	7.989390751408743
Encrypted:	false
SSDEEP:	384:+nPVE+q20DN1AUNKISRo23yr665dR0bwqwbmPCb7NqrgXl:YVE+V0B1FkISyKyfdNbjbCkl
MD5:	386FB59BE54B2D819064AF98E57CC226
SHA1:	9E2D14D736BE97EC84BFCA3513558450CD6E3249
SHA-256:	B4855CC8EC721CBAF27F3C907345E101B1524858221C14FAA79DF34CB2F84991
SHA-512:	48AFF0E121C618458049B3182246C8F49DEF7BB27B91E77A59E4FEE689CDEF7431637A83A333E3C3F596A5A588123B64A88FE4438E2C01E5C48B3124C9603674
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
Preview:	wOF2......KP....... ..J..............................&..n.`?STATZ..@..8........h.....>..6.$..x. ..\..c....C.........u?.2..=KE.l.@.i....k..1l..CD.E...(>...n....J.@..^,K\|2rSB...I.._.u.mC.........32...T..,<h....wM...6.6p.ox..{...;.C.;d........C..0..q....$. ./.....dr."..d........;?.o..}......>.s.1.......9E...(k.kt.m.hVi..UU.....J.v..s.l..U..Pw.N..9....<..U...^7.i.q..0l...[......~g...Z$.W..^..&_...v.`...Q......T,PA1..I.AQP@E...=..i..\_.n........kW.K.....9D.\.....&..] ...[.-.u.0.P..)}A]....efT.f..d~..R..}`.......4.R.A..w..C,g..74.B.<k.B..'.Deb..uB.uR&.;.W)e[......3...\|I...e.I..8.%8G..i......7...B"4......X..).....3/R.<.^'....e(...}.....\.@....A...0...;,q.$%.....!.....NT..9../..1t.W.].n..(.uw...E.)......o.b..o.......$.2.D.Tj..?.......h)5.....~VCS/g.O,..{...L..\....2....bv.s.XS@@...`....1..R...#.._...7.A&a.1b.q.....!.....)T.b.Zc..b.....b2..?.......?0.M.!`i....s..:)3%...R".:=2<.....@!.c......4.[..@v.@0?..........~....j.{R2w6a........Q.7.......:.....,.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x800, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	39764
Entropy (8bit):	7.994956014143578
Encrypted:	true
SSDEEP:	768:daRj8fPhettAihb3a+ocNcqe3IjsJtbw6pDis8cLL:daRmJu3DNcpo4bbSAL
MD5:	8647131E6F6AC6FB5E835000359E04CA
SHA1:	3F11861B757CFF99CE576B70C7E4FCF0D7989676
SHA-256:	911F270071AF5AA2D39D2D0FDB9309197D39338262A660D857F532CF67A65D9C
SHA-512:	504CD64388227FAFDD19CBBBC13FF4AF3E0D954F6F7EA1A8183349370891479E886A7A9E4873E877362B0D6933F95A652337BE91E1C8D9FD6070A3127A08BBA7
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/peirce.cps.edu/uploads/9/2/4/1/92417616/sandoval-pic-orig_3_orig.jpg
Preview:	RIFFL...WEBPVP8 @...p....X. .>m4.H$".%..J...g@.U.]6+NWs.5....T>+K.#.3...A..}]..^(..z.]..{..K..x.u.O.............b.;.e.=................N...;....Q....}.R..5.V..5J....P...[b...+lC_..m.k.TE..R..5.V..5J......_..@:....Fo.J.-.B.#..C_..m....W...........V..j.(.r.....J.....B.....[..v#.,>...>.[b...........R6..:!c.%.X.E.ol}..r.VQz..lW[..L..m..k.....E2.w........\...5J....[b....k$.N.....R.4.E.....lQ$'qV.va.o..].B.FG{zI;.~....v.X.kS...xI>6K.c2$.]..j..!..ETr......B.=1..c...-18.l..7......w....~. .{l......../.&.Y....nr%6.....y7......v..&....G.......8.-...!...Cn.&<$..3N[+..+JV.....5+.......a....i...[B/..e...{4.....k:'...v~..,....X...5.Z..cV.D.."6....Ync......D.."\@...c..+.\z.F...I..){6...]...t5Q.....N..\|(n2.z.....t...n#...V...`.W....u..9...B.p..c.....1....#n4...b.'...ej.....V.~v....u.E..G.+.C_..m...?.h.4.....[4N....O....Z..H.m...Q.A......L.8.{YMz..r..U2Pq.x....x[v8..cT...\|}5..e,..\fB.....).9.Tc...9W....&...D....(I..]..e.._..T...(yr....&g.3P.p.h.c7N.P......

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x968, components 3
Category:	dropped
Size (bytes):	181581
Entropy (8bit):	7.985591186886468
Encrypted:	false
SSDEEP:	3072:c79hSduPTbDYhzL8XyzCIi5UMZ79mvGT7/fy6iLW6SU6qADktHrSW5aQ:c7hTbDIL8X6Qn99P3iLWY5ADEHWW5aQ
MD5:	F4A9B9E4174A3A779E5563B33CF659E0
SHA1:	EA5FC3E19E9051938AFE1257422F3788AF8DAC26
SHA-256:	3FAED51A8475153AF6255426A07F89FC9DA7B54B2440ED501DB313B9B8EEBAC2
SHA-512:	57F788A54847D5759C8A4E255E29708EE8645BF6E100D3F7DC3B7E5AB5656901C29527E23657F85BCBE8E2B67DB6CF59E978985B5765225B5102BFA14EA09FC7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................".................................................................................M...I...D.HMA.`".b.t..i.0).."h.d.....L ..1.....]1.... .+.N.d&.r.T.#.g.@.R........e...X.V.D.I.....,..&.j.P...`.....U$.I%....Q.aI.......D.-....@.K\|S...N(.Z....MX...b...M.j....`X....P.....R.14.i..0...N.H.kP....8J..6.Bp....m...(...) i..J.].5.j....&.6F.`.%...e..4..%....K8..`'.$. ..r...Q....=q...0.@......@.DX.c.i..Lj...A.P1.......+.@X.m0%...M.!=V.e...D..............B...$!..Sj..M.hqh`.... w$[m!........%i..2-.ZD.M\e.r..I\.I.v.....Q..Zz......%@....`E....F'h0A!FH..........H.(..!....0i.4n2.".X..HI..q.).C1... .!.......d..@H&.X...(.B2lqh.B..j.LD.Q..`X...%.H..p.....k....T0....JJZ5.....+..+....&....D.z.r.@!.$..T ..P...2...4...P...b... ..w..!....8N....R....@.A$..k..5.G.(& C...Z.d..@$c....t..5"......%.@.......n ..M.8bj!..R...@......h.....

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/prussing.cps.edu/uploads/8/5/5/8/85586392/img-4032.jpg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 3989x1927, components 3
Category:	dropped
Size (bytes):	3051950
Entropy (8bit):	7.985011568863572
Encrypted:	false
SSDEEP:	49152:zBgzpRy/5Tap57u4KEhs7ni5BmyZbeCPSNDweaW4k2dDn2HWgf75T:lgz+4phBs7nK0yZa/NDnHsC5V
MD5:	A02B8D79ADA720B32C9345A538AC0F9C
SHA1:	2CBBBAF417561FE8EAC804F183A5602AE313880B
SHA-256:	16BB25AC2B97FE8232755555220F97CCE84DC3A909212ED2AA186DA6A8226960
SHA-512:	78A973683A3C09483CBFB73CEF974E97A8CDBBCD4775B89BF177369B62AF7E89F0E1F52B5F5925C3867A3322C6CC3FC7C29E642F8914EF6CF5B6A5228E992798
Malicious:	false
Reputation:	low
Preview:	....."Exif..MM.......................................................................................................................................................................................;......................................................................._...hU..).....%.B.)..\..."@..."S)...1.."S1..\.. .@..& D...........@.........JE".................. .@..........................................................................................................................R`................ D.................)0......... .".......2..... ......$$+...."..@...".JS'.p.$'..P& .D.)1. @............@............ D...........I........HD......H........ Y..@........................................D.............................................................................................@..........................R..........."..."...".......J$.@....D.H.). ....H.......@....".S&&......@.....................%&.......@........ [.......................................................

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 925 x 1253, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	51317
Entropy (8bit):	7.854199889963831
Encrypted:	false
SSDEEP:	1536:o+xp7VGGKWXYDGKnCY9tY8OHb4tEsm9gnuPX4AFVGgk9mFh:roQXYqKl9tY84MtGge4aG/C
MD5:	CF210893F7C5D1C12B09B1C57BB2FE8B
SHA1:	66DA2A9CFC8B7D50648A0A2B8966E17FF46DF7DF
SHA-256:	F3A9C43F09374B6DD5704D1729BF9E75DDB7A00E64A3A6C6F72E0D2C24261586
SHA-512:	6577D93FCCFAA23384C9EA43F345DFAD5F701C1F012508F4A2CFFF00CDF47BAA1B5593E87EC9EB9CC82C5D5419FBF8FBA326280A948E383EB0D02865ED8341DE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............$GZ...DiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". xmpRights:WebStatement="". photoshop:AuthorsPosition="">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:rights>. <dc:creator>. <rdf:Seq>. <rdf:li>C.Colman</rdf:li>. </rdf:Seq>. </dc:creator>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default">Robert H</rdf:li>. </rdf:Alt>. </dc:title>. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 719x464, components 3
Category:	dropped
Size (bytes):	27498
Entropy (8bit):	7.959239729582051
Encrypted:	false
SSDEEP:	768:txdzhF3Z36NSHoaeRk1kFxptXUP6BX/eL:flt+CeRk12qP6Bu
MD5:	4CB1F45E8B0A4EFB34FEE0E63E9E224D
SHA1:	1C7C9F1FBB23E7BE9C62B4136EE0FA0D9B909069
SHA-256:	DE899946848DA71653879806B83F829A4F69EC401ADEA62B26948ECBD9E5FCCA
SHA-512:	CB6297554A023EA39EE9536C9DBED1E6CD45EEB48B86AB9DC5D644CEAD0722FB42E34F0A94106CD280FA6C23D5FCBE363A318FB675C08BB53D49B01F3EA6D064
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................u..0..7Q#B.BJ.i .#-.L..$QSj...`..h."....6..............B...`.@. (.......1..i....+BJp-#4....VKM...jHMk .i.%.@1..euK.\RnP`.`.......&...H`.BT.0C@......L.`.&.5.J.&.....&..B.....YfM.IB.T..B. .v...y....42..Y\|.c.X.....h...7,`..`.@.....b......`..jRr...v ..X.N.h4D..a56..!....p.4...........k...8...8.wzqtV..W5.h.Lm8@...`...F...).RD.sJYT.@...e.Abr.MX......%.qc..f.f..i..,..\...d.../........K.q.f.x.....<..>.b.]t.?bq...R. ..... l...Y...hV...e&.$....F.&...qE.SM.D7H..Y.T...U7...P>.1.>;9.....u...n.t.r.Y....~^.6[.<.S.\|..z....e.Tv...Ms4..%n]P......=s...H..1..7.Z.(.`.. ..7(.(.%N.4.2.TTS..7:&.2.).b.jR..E..3....=>>..z9...m5.......89.......Nn~..........OW\|.}z.....q...;....;.?...u.N....@'v.y...N}s.d...]%T8....LQrJ....l...`..Zhc=9Y...

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x1132, components 3
Category:	downloaded
Size (bytes):	111691
Entropy (8bit):	7.958457995493825
Encrypted:	false
SSDEEP:	1536:alFvrLLFr/oxDSjFQQQ7pbeRxU46DKzLxwqO+OI8k/2VOgDXYNVLCcwBJW/nZ:QFPpwKo71eE4685KyTKYLCcwGvZ
MD5:	C97958D49F8376147B392D81AC10B57F
SHA1:	11608E05B12DC6A0F951379AE2375F6E7F3E684E
SHA-256:	D98AB51D3B771265F773CF13BD3593F50D1EE9F6099F935B0CC0F1DC5FBC535D
SHA-512:	986FA6491E72D95B27CE696013F2FBA97E899491D5313B7E6E3A07C2FA40E2307232FC942B83B82C80104703334BEC47B43E40FABC0450108863082131720E56
Malicious:	false
Reputation:	low
URL:	https://i.pinimg.com/originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......l. .."...............................................................................@................. .'...I..Iu...}.'..Bu..:.......O..E.^.. !...aW.R............Q-..........}_../...7...0...\.+.E...X........N@.T...W".v.u:.o.~.^..+...b....~.<.rq.........y.U.5b..+6j..........+...F.@..A.,.D....:9.o....)J7.d._.>.@...r.Q=..W!.y...9...=.n[".....y./....6..b.....x.........n......+VP.Z.Y,...f.Y@.....j6....... ..............c....].GF:}7.Jzn.G....\|6{.._g..p........o.=7W.F.0....2.. .........i...K..eW<,..e.\.5w..zX......`W.._.@bXP.}..`@xX.....D...w..I......y.'....\|X..}.'."y..8..hOI...@..\|X..`W.,...].+....D..J........7[$d...r.u..:......oN.?...................xlk...3`3a..l`3`3`3`3`3`3`3`3`3`3`3`3k....L.zd.1^..!.@......j.Y,.{.M...WU.e..5.>.Et.tDb..X...Y.'.\..:G3...O..,..)...x..G\.......pr..M.....R.=

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.9629609263693406
Encrypted:	false
SSDEEP:	3:lcyBmjFVcqeICn:lc5VheIC
MD5:	4FF4EBED4D93633E71D991DE649B394B
SHA1:	662C5B644F8044040644CBFED791208ABA42EF1D
SHA-256:	23663030C710B18965A228D681F516E809797FEEA911243EA706CADBA06A0306
SHA-512:	CFA58A504157F98F22EE962CA554801FB987BAF2E1E805A467A1178080E8B234E06D502455DEF4E3AF12303FFDA6D2F666D97CABFE2140AAFDDBE7DB8FDA6C16
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/d9k3q4j9.stackpathcdn.com/wp-content/uploads/circo-massimo-729x484.jpg
Preview:	Sorry, the parameters you provided were not valid

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63965), with no line terminators
Category:	downloaded
Size (bytes):	63965
Entropy (8bit):	5.415839533934785
Encrypted:	false
SSDEEP:	768:Sa+O7y8yVCWTXTnkbnErQJe+ISMnfI2gpyrJZa6Dx76H1W7XAW2vr3:Sa+ZCkDiEcJe+ISMnxJjDy1EXAj3
MD5:	2AFD7A7856345176E1C9C378191AE043
SHA1:	5E2C23320DDC06A4B00BBD81DC58D9D6A897401D
SHA-256:	3029A59A3EB78E1675C02962B4C2EFA72C770B73C3336F95F14B4C73B7465397
SHA-512:	139CB12A253E234E52C8B0E3F3FD6932E04250D2B8818EDC525939546B06852E26B17C1269AD5967FA2B9DCB965976C79EA9090168B04A457E769E2CC9457158
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt3825_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt3825_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt3825_aa(a)}}var lt3825_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt3825_b; if("function"==typeof Object.setPrototypeOf)lt3825_b=Object.setPrototypeOf;else{var lt3825_c;a:{var lt3825_ca={Vb:!0},lt3825_da={};try{lt38

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x793, components 3
Category:	dropped
Size (bytes):	105326
Entropy (8bit):	7.984934197828136
Encrypted:	false
SSDEEP:	3072:AQ3r7J6FIAAZNtsBZya2J+yIalwP9PpKRJ32ZHjn+olFGI:T3r9nN0RyIxPa2RtlN
MD5:	ED3FF5339CD22744FDB46D8AF9A6BA69
SHA1:	54B5B0F2D9D529638D34CC11967C77EA5AC84C8C
SHA-256:	187ACF5A030FF5B562D2194271A2B21877276006A8C98C695A7600F571738705
SHA-512:	899A1DA35A8C1C8AC7621EA272F4DFB84F3A99FAF438E40BC16036B7BCE0150022D7AB8FBDD34D6D17C401270FC3BC112F90CB3B87B0A74C6D4E45A87E72A66C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}........ .............4....................................................................^X.".D(...s ...H%C.J0.&.dYNO..Ab.J.E.".cB.L.d.f..[`nD....P4.L..b....S6) ..Ve3.l.V.G2... ........J...2 ..`.r.b..T A....".,.[..f. .CR..`...,..,...#.*i...Tl$fC....1.YM.....VU.@@.D.U.V.$..5..Su.&

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.1638713592211536&stid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x968, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	73728
Entropy (8bit):	7.997181555367588
Encrypted:	true
SSDEEP:	1536:zZlZuVVFQZum1vTtfXOjPF4QvXEodpttdBDB78zMSHQv:bICLdOjPOQ/DzBD18YSHQv
MD5:	DF46E3B78E22C7BAD85E8E74E0A88055
SHA1:	C83DA9AD07A0D9C6D4CB6D1B342A6A8A91E31052
SHA-256:	B75C196A878832E077F0B27F23FF2C5FF123D175A2BA35CF2944C1416E689136
SHA-512:	06C489DF15F3BEDEC7AACF90537D8FE963757F513A25C7C92EEB71C2E3CEE5E9EF8A1BFF09F9466C782FAAA7FD63EF1C3670B07A009E73F64136E9BF0F57EB3B
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/grifoneartigliopennaeforchetta.files.wordpress.com/2021/01/akhenathon-e-nefertiti-a.jpg?w=1200
Preview:	RIFF....WEBPVP8 .............>m6.H.#%(#.ya...gkq.\_...N.......d......W......Q........H...c.e..~K>/..l...4.....{.B\|.sb.../...\|..Az..:....7.e...?..`\|._..........O..Y\.....t.z..i..\|.I......w..?.?........v.?.......o..h...W....S?...._..8P+.......9.G..<....R.....1.Gy.as..=]...&..,..e1......'..q.E.(...rT;3.B.W.@.D"...E\|......R.....=.........38..E...x Q{dw/....8.....3.:....#..x.l.s~e.c.}..;..V.$.....8...!..O...)..Jb..P.5.M."....e.9.-INs.........r...%.,.7...)[......9gY./2Y.Q.h.......HD.6.@.....W#?3.0..uM?u........p.-..p:l.6....'.g...y~.=..O.^...[."..(v4.>.@u].d.........A.........fNGj....:.8.7Z....K..z#X.>.a.....?..@.&..Cp..O....;.<.E.....9.CHm,.}M.Q..(..f....\|.FW.*.3..DF.J....F.......F'.^?.K..hCG.....=.R"...x.G\..?....'..;...;X......<&...t.I9...i.{.:c8:.\|...K-..SSj.p3.q.x.s....s.L...B,Y.!....7.Y2^S.B.....>...q7...X.>VL...Z.y...%v,.....f..^q.Q.P...f;.HtQ.d..vs..o...`Hi...u....&...G?....,w./...j._.Y...\|F&...............Yz).wt....o..[..._K..._)..w.:.....J..1

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 719x464, components 3
Category:	downloaded
Size (bytes):	27498
Entropy (8bit):	7.959239729582051
Encrypted:	false
SSDEEP:	768:txdzhF3Z36NSHoaeRk1kFxptXUP6BX/eL:flt+CeRk12qP6Bu
MD5:	4CB1F45E8B0A4EFB34FEE0E63E9E224D
SHA1:	1C7C9F1FBB23E7BE9C62B4136EE0FA0D9B909069
SHA-256:	DE899946848DA71653879806B83F829A4F69EC401ADEA62B26948ECBD9E5FCCA
SHA-512:	CB6297554A023EA39EE9536C9DBED1E6CD45EEB48B86AB9DC5D644CEAD0722FB42E34F0A94106CD280FA6C23D5FCBE363A318FB675C08BB53D49B01F3EA6D064
Malicious:	false
Reputation:	low
URL:	https://i.pinimg.com/736x/48/56/c6/4856c637eab68e55591fba09b11f192b.jpg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................u..0..7Q#B.BJ.i .#-.L..$QSj...`..h."....6..............B...`.@. (.......1..i....+BJp-#4....VKM...jHMk .i.%.@1..euK.\RnP`.`.......&...H`.BT.0C@......L.`.&.5.J.&.....&..B.....YfM.IB.T..B. .v...y....42..Y\|.c.X.....h...7,`..`.@.....b......`..jRr...v ..X.N.h4D..a56..!....p.4...........k...8...8.wzqtV..W5.h.Lm8@...`...F...).RD.sJYT.@...e.Abr.MX......%.qc..f.f..i..,..\...d.../........K.q.f.x.....<..>.b.]t.?bq...R. ..... l...Y...hV...e&.$....F.&...qE.SM.D7H..Y.T...U7...P>.1.>;9.....u...n.t.r.Y....~^.6[.<.S.\|..z....e.Tv...Ms4..%n]P......=s...H..1..7.Z.(.`.. ..7(.(.%N.4.2.TTS..7:&.2.).b.jR..E..3....=>>..z9...m5.......89.......Nn~..........OW\|.}z.....q...;....;.?...u.N....@'v.y...N}s.d...]%T8....LQrJ....l...`..Zhc=9Y...

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3605
Entropy (8bit):	5.075622390478209
Encrypted:	false
SSDEEP:	24:meRNNE1uyjLGLfh1ADA6V89sOPSejl6kHN4ynxmIvx9riqYniKL/bbzmc:duxLkSs629saW/+9WqQZL/qc
MD5:	F16E89FD08A708A6BD2E69BE50FD30AB
SHA1:	530FEF7EFD42A36908F40C87114A28C1398E1367
SHA-256:	08B479C3EEB1CB4D44354E6BF17322CD7ACD38AE9A33EE5956898447ED43FAB6
SHA-512:	94722AF96B830015C2515BD537E8610A25B61AC7C66C990D41565CD87AB50667E8CBFAB347188E98BA7793EF5AB48F0B3115C40DE55F4791D2CD1B2321405295
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/3825/optimus_rules.json
Preview:	[{"id":16472,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"twitter\"]}}","event":"click","behaviorType":"act","template":"Click On Twitter Link"},{"id":16473,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"youtube\"]}}","event":"click","behaviorType":"act","template":"Click On YouTube Link"},{"id":16474,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"hulu\"]}}","event":"click","behaviorType":"act","template":"Click On Hulu Link"},{"id":16475,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"digg.com/submit\"]}}","event":"click","behaviorType":"act","template":"Share Content On Digg"},{"id":16476,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"del.icio.us\"]}}","event":"click","behaviorType":"act","template":"Share Content On Delicious"},{"id":16477,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"facebook\"]}}","event":"click","behaviorType":"act","template":"Click On Facebook Link"},{"id":16478,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[hre

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=m51mhg1&uid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://pixel.onaudience.com/?partner=137085098&mapped=1040172804192949803086BC6CA2270E
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.9629609263693406
Encrypted:	false
SSDEEP:	3:lcyBmjFVcqeICn:lc5VheIC
MD5:	4FF4EBED4D93633E71D991DE649B394B
SHA1:	662C5B644F8044040644CBFED791208ABA42EF1D
SHA-256:	23663030C710B18965A228D681F516E809797FEEA911243EA706CADBA06A0306
SHA-512:	CFA58A504157F98F22EE962CA554801FB987BAF2E1E805A467A1178080E8B234E06D502455DEF4E3AF12303FFDA6D2F666D97CABFE2140AAFDDBE7DB8FDA6C16
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/teknowlogi.com/wp-content/uploads/2020/03/ups-freight-1536x1024.jpg
Preview:	Sorry, the parameters you provided were not valid

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 828x960, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	79398
Entropy (8bit):	7.997556897721123
Encrypted:	true
SSDEEP:	1536:0NVw3nsloLi5D4LQmpyzRr+EkiWSqX+HG5GngXeYUMHV7tFj:0NVKslouD4L/mRCEkiWSquHGI4RUUZtl
MD5:	93AE77B2ED8D3EBC48C25D3E84B6AA07
SHA1:	1ACA33FA61D7E5203C05B13601CDA5816BFDACEE
SHA-256:	A850756B8EA7DF53E85393E2E3C293B46A5B2C6AD7429D0EE487B57FE80C9F06
SHA-512:	548A20E70B1245683C6F0E20E52DFE8F742FE717494EB9D4FA381D4550BAAB7D908B140CAE59DDFED114E8690ED2E068AB020580B8ABF34B16D33ABEF1AA0C3F
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.repstatic.it/content/nazionale/img/2021/06/07/184006560-e7e84ed0-a901-4243-a752-15936bf48386.jpg
Preview:	RIFF.6..WEBPVP8 .6.......<...>.H.I.$#!-......e_A....uc5=........<....5.~.s.._.?.....5o.......7L/.>._9...+....F_.t.../Z.5.........[........7..p....vg...^L.......?.{..C...k...\|.....?....w..z.......?..........c.g.....?.......................=.?y=m.?..CW........ 4...........M..u..<J9.1N..o..`P.<........!..R.-q.e...Q...a]...5..A...J.0....v....uC. .+.5BX.@..m'..U..7.A..&vO...S}.....s...+..!..\....2.<....q.7.+T...6.;...M]....z...bc....$..`}..a.../m;....'...d,.)..(..T..2.nP..+.Q.O....LQ.*....q.O.D.......0f.,..../.zNIhb.ffPi..e...G."..xF,.>3.\|t.....c......r83..D.\|U.$V.PZ.......,.8...Lq....W...i.6-.R...k..........(....`..R.....W..6.tx...S<.M)Z.g...JS.N..[..#>..uw$....D...G..p{>.%8.W.!.%..@. ..-......HT.w....Sp....#..g.3.O...;x.Y->g./...1.{.......[l..!.cM....n...........k...1...%..drM'5.Z9....`.g.<D.....~......>^....e.=.)../.....:Le.9.8_.:.\n..t[..S.A.....1..z..[......4...fR.....A.<...,..Y..n.,..Vt.6..Yp..\|.F.........\|..u.f1.40.U..[..{n.......t..).

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=c9gd69u&uid=217503105025001766403
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	333880
Entropy (8bit):	7.9977725683771625
Encrypted:	true
SSDEEP:	6144:mEGVpwZUuQk7JlPvtpcNjiGZi6NkNLg/9UJ5tLTh2jhdjc5oMF18K6CeI:mEGVgz97JlPvqi6Nk6Et3h2jhNBMF1p3
MD5:	B90FC63859E4BB70BA0D2BD29D166770
SHA1:	A220C8385FA371B71DE185E81546D6E4FC9F3A09
SHA-256:	04A3F79981D93B09744D84D87E0EE83BF544ED800B97CBB7127F57A6AD2823BD
SHA-512:	7710C8A2D9879C630F85AD209BE1E954AE24C5458D3C251BAE35D1320C08C326C741A56D5A3471A10DB2A1BBF5D4956569D2ED7D23E25DD3EFE4CEEC13F27C37
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.cps.edu/globalassets/cps-pages/initiatives/teach-chicago-tomorrow/tctwheel_eng_3000px_resized.png
Preview:	RIFF0...WEBPVP8L$.../.........}..f...qp.?.ff4K~.c.....'....v...3..K..3G..A..=m.J2.G)3s..v...E..3..c.d.c...%.@.=]P...D...W ....`.?hk.......uR\|..m.Sj_EN.-.m.2"......B.M!D.b.or...YW.N........(..Z[....`%....../..6.c...t..U.v..........4......xs.....>e3(.9.%}a.0.{....K...YB.&..4.H..@....@qP.d...B0.T.e.?.>....DC..#..R....-.$T.S.H...@..b_+..SJ..JE..'bi;....Uwcb.UY..S.%..Tx%...%..T.-...N...?.P..{JOJ.J..S...../..+.$.Xk7..#.mQ..;.r...e_..B9....3.{......1.....W4gW..h.P.L....K2..d .$....Z....M._H..t).aj.W.U.S2.e.....H.,..Ak..j.%.2.c.a."..#..P.&dC...$.B.7.g.....;....q..&lt4........I+.&.@.....TC?&8'8'Y..=...U...l..8jwMEO....a.........S!.e.....FZ.+..4..m..b}....f......'9.m;..#.K...WJ.. "&..$.`.....{@..h.d......_..Q$.71.!.. ....o.....N.BI.}_.Z.i..yURz..Ko.2+%.D..+.X...\|........X.-.x.W..W.......V.mt...>..u./.s.....s..Eg...M.1....{.u.ay.....*k0.=...K)..5...s...... ......F.]ac....K.F/[.).V.o............Y.?.mm;.......n0].F~.....+t....

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	39682
Entropy (8bit):	7.988398813407393
Encrypted:	false
SSDEEP:	768:6Q0XLF62928DNlcaNzM7GJoAEIP91Y1eG2jI92rZfYZEB5fkYoOYhyC7e:6Q0XLXJBzM7sEIPunkI81fbDoOYrq
MD5:	B82E4FA60C6E442B715846C4B0D6635D
SHA1:	FF7E23E78C7D43F555B041FD98B64CD7D41D12FF
SHA-256:	8F5E1D44453772EE3932562052097981199452826B63A43D76EC2DF6A28DEA7F
SHA-512:	D67DC0A161F3BC2097C703E8E7B4F49481B8F12698F25188E0CB1985C717193E553AA09E2D40B89FC7E9EDF92D11B9FCFABF693EF46FBFF836574098CCB22C3F
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/du4um9i74kf0n.cloudfront.net/wp-content/uploads/2018/08/ups-ltl-product-settings-3.png
Preview:	RIFF....WEBPVP8L.../.n...7.$GN......}.=.JM...9.e.n@.mI....dIwcSF,...uv..........{.^.sn 7b....K.r....Pd....Q.hP$u...Q$.Q$ .'H.O...E...0..HpR7..L.......}..ER....CD.....=t..S.X/.....u..D&....I.......s7...$.j....H!.MHq#...)F ..$......)$.B...!.$7.V.D........$.3$..H2..%uI..R.$..` .hD.I$..&nD.......F".(.3.I.".MR+..z{.,....+.....>ah...e..Y.C.K..5..u%w....\|....y..97%w979w.t...4..?....6.)\xP.1.0.2.r.(.S.&.M..Kp..y^5..0.2.X...{^[C.!.'...I.....pxkn?.C...".....a....e{.........{.;t..v...?%.;.U.OZ...AQ..R.<~C.............w..&............Q..U.......6.2......7.s..G....O%...df..yG......F5"..z...w....-Z....fE^W..c.....1.....k..%..]{}.U..........o....B.."....v~L.3?b.h.....;.?P(8ADwx...O.....4..0%.d..%........?KF.......b....{.?..2.)......L.fUJ...K.../.........$).....w...g...!.%...]........8[....f..MR..{F."n.E.%.#{..".?..m...^.../.{........`...S& ......._....@.)..\|.5!....A..>.;rU&..=\|oD.'.......Z..r...l.T VK....N...@_.....l.ET.@#*1z........c.:..'..D.'

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728041987684
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 66624, version 4.262
Category:	downloaded
Size (bytes):	66624
Entropy (8bit):	7.996443365254666
Encrypted:	true
SSDEEP:	1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ
MD5:	DB812D8A70A4E88E888744C1C9A27E89
SHA1:	638C652D623280A58144F93E7B552C66D1667A11
SHA-256:	FF82AEED6B9BB6701696C84D1B223D2E682EB78C89117A438CE6CFEA8C498995
SHA-512:	17222F02957B3335849E3FE277B17C21C4AAF0C76CD3DA01A4CA39C035629695D29645913865B78E097066492F9CEE5618AF5159560363D2723BED7C3B9CF2A8
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
Preview:	wOF2.......@...................................?FFTM.. .`..r........5.6.$........ ..... ?webf.[.....@...nC....t.TL...f...t....q...5....?=i.l..\.vl ..T...b.... .1.f..7.T.Q....D.;:...1.l.jv..e....n..E....k5>.d.7Q.l..Ba....u.x].......W.C....$.8.v#..y`..F..1aM.8.....w.=\|'..0..T\|..2/..M.%.b.. .tY$!.....5cb.....(.&.-A/mY......./y..o\........Z=.....5c.k._.n3...(W.........Nag+.....O.R.'...5...=?....m...L......:..._V...........z+zc.1`..Q#j.../.Z0...-..F..i.b.F"2.<EE...;.."u?..........R.Z.HR..D...x.Y,.5.Tt.vb...e..YN..sFND+........1.......`.....D.(.&6baP6(.....X.6gNW.6k..9]..v......$Cf.v.v..x@..-J.`G...w..w[..A.......4.msI>....i.......p..F(2b....~H.]J.]..j....F.f-~.@......gg.B.-..Tx.%..pU.u..me....'........;...@7..t.=pN....../_.U8.....r....s...X=g....H........j..c....d._1l:1i..I..T.r..>.....v{Gb...T1*...f.-.x.-i..{..1..h...>..(..3.3..!.$.:.....j.~....:ugv.......%.....?...d..5+......fU.z...X.X.<.c%@fBHO.8.....i..G...{...[..M#.FZk."_.'.n{.

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1728041947122&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fups-ltl-tracking.html&ct=youruno-chicka%3A%20ups%20ltl%20tracking&t=ups%20ltl%20tracking&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/ttd?uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	584258
Entropy (8bit):	7.9916238462622
Encrypted:	true
SSDEEP:	12288:MRn0KouCfIftS28w/wOV63PPqf56QlggILfoKaq+5yDthqW6:YouNftSF8tnxThChqW6
MD5:	B25C9F19773EB2E1A2714F83D21DEBCE
SHA1:	AAC816531F84CE3B2D0F1050E1D87F6DE81C1E02
SHA-256:	F9F3475D8CC128CBAB10A41D1ACFEC3444EDBDA9FA1EC52A27A749593C6C1ED0
SHA-512:	519606382D5B341E991634BD8C7FDC13F1263EA7B41C9DE03C78451892C87F920BC6B728D8B7D478141ABBA0AECE231379BD45B6769599C1592744B09EA4E83C
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/bateman.cps.edu/uploads/5/0/1/4/50143567/published/sy17-18parentcalendar-english.png?1505493327
Preview:	RIFF:...WEBPVP8L-.../..<.5..F.".....g..Q.....v....M..+...j...HR....U...t.8...`...F.8q.{,T...{HR9.rV.$U$I....Q....!...:.& Z.{.7...B..$..$.".U$)N..-nT....-....7.{.".EAQ..@.$..]>^k.?].i.G..>..U@...s.E-.y.;.....K.G.5vwg........KOk..w.K..N...MVwg....,y\|..k.............6..}....Lo.K...U.r.U.}.7...#...!!!.....BB .....;H.....e..'...<..w.K....`.B..K.S:8.P.8..Ttp.n...4!m..C..C.....".q...B....I.BH.V.:.OG.rps..=...t.....5(..c.+H..!......n..Ok...SHj.B..D..M..$....B..r.=.8.8.C.\|.B..\...q>R...&..(QH.:t<.>...8.H..2...B..!.)5Q.0..&.C.9..ss...P.$7l$U.....u."..m.$I.$...........&D..... ..........5j..A.%.............{.X$w.E.M..j[...f...w7..Q.b...(R$."R.Ca.6..3...\a.q..K..<'.b.....t..!N..!7k.s.....x6......>.1.2'..S0..&.=)g(...L..........pr......=:......Ric.....>....sr...%..i....e....9.~....d..@.4P...6...z..^<..*..iO.v.>..........J..)....$I../.\|...m.A..w........h..........X..._.....~..H.W..%g....N.D.0.@.h4.n.......sF.F'.n4....F.....F#4r...........;7

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (595), with no line terminators
Category:	downloaded
Size (bytes):	595
Entropy (8bit):	5.345774636402666
Encrypted:	false
SSDEEP:	12:+dQQ/N8YQile/iMdy0yQDO5Q8xXHUQVkyrFpeq:+djWYHA/pLyb5J04tBpeq
MD5:	DE64087AA67EC48A12457B0AA16C55FA
SHA1:	5D31596EDE13D449502C44AA4C417C42D6F0AC83
SHA-256:	30B57646E17266C213E70B1BC6AAB5D0FEBE0B25FCD4E6E96AF348A722A25676
SHA-512:	3D9F80B2AED8D58530410FE723278D115B589E57D7B5229DB21D340CB77B8098F596EE86A2293461D0A119C0D3AB28A3CE80B4D978C8499E5DA705A3E02F8658
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0
Preview:	(new Image()).src = "https:\/\/match.adsrvr.org\/track\/cmf\/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/ib.adnxs.com\/getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26referrer_pid%3D51md42u";(new Image()).src = "https:\/\/dmp.adform.net\/serving\/cookie\/match\/?party=1009";(new Image()).src = "https:\/\/sync.srv.stackadapt.com\/sync?nid=eyeota";(new Image()).src = "https:\/\/eyeota-match.dotomi.com\/match\/bounce\/current?networkId=41703&version=1&nuid=22vUU9rUF0KfKYaZudmq6KdIj_n2d20pGT23lb9K80_0&gdpr=0&gdpr_consent=";

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1728041960557&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&ct=youruno-chicka%3A%20cps%20teacher%20directory&t=cps%20teacher%20directory&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, xresolution=196, yresolution=204, resolutionunit=2, datetime=2018:11:02 11:32:18], progressive, precision 8, 5472x3648, components 3
Category:	dropped
Size (bytes):	6173427
Entropy (8bit):	7.992921031777681
Encrypted:	true
SSDEEP:	98304:sXTJmao2Y8jRI/JPMd+3Gz/MUUSZl9xVXac8CDr64lYzhSuSOtNRo9mYcz7wJ+DG:IkeI/Wd7zkOb9heJysowtcJOIFQGP7Dx
MD5:	4F6462B87697D7081CD47938718EE0B6
SHA1:	C066911BFC0BDF43FFBFD21F9F41C808AE4FB410
SHA-256:	2A3BCE26A21E62E888758D37E58D5BEE1A3A87892A2F1D509EE4AF14CAFF4743
SHA-512:	73F352458B19C9AD321A08388660165737D5B3BD780101E4F9AC9FB5D473B02BD7CCD813EBD813C37922B5F1FDD26C8756BF5E1FE03119E1818B1FD564E4CAB2
Malicious:	false
Reputation:	low
Preview:	......JFIF............^8Exif..II...................................................................(...........2...........;...................................i.......h...%........#.....Canon.Canon EOS 6D....................H.......H.......2018:11:02 11:32:18.................................................................................................................................&.........6...........>..."...........'...........0...........2...................0230........F...........Z.......................n...........v...........~.......................................\|...h................!..........43..........43..........43..........0100....................`...........@............"...........#..........$#..............................................................0...........1.......L#..2.......l#..4........#..5........#..........}...........2018:11:02 11:32:18.2018:11:02 11:32:18.................................(.....1...t..............................."...............*.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-PtZnoARE2pyFEhiTtRIMQo36Po2B.O4y0ZE-~A&gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/cdn.thetealmango.com/wp-content/uploads/2021/10/donkey.jpg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 960x473, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	36992
Entropy (8bit):	7.994712241632149
Encrypted:	true
SSDEEP:	768:C8mGTWuY6iZkPw5atYAyXG7TPihpDMdDpZ7vMtuIDG+YOA2iom:C8nYfZko5TXG7mzS7v0TYOA3om
MD5:	A5C4E29344C09E14FD973A71FB993D54
SHA1:	FE276E080D76398C9135E31607251BC0C3428B1E
SHA-256:	B9C00E411FA60A53B7F7C9CCAE8B1AE35074791861A67E3805D2709992471BAC
SHA-512:	F428A18460E773343D24AE31C23C2BE1A36550E4D73DB8DF78E14EBFC0BBD4C677DA382EEB4734D09CEBA8AF0AB769169F6B69302FD9A9E9A54184C56C60A5ED
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.carnegie.cps.edu/img/slides/5.jpg
Preview:	RIFFx...WEBPVP8 l...P........>m4.G.%.)'.:. ..cl..n...[....#.(.u8"kn .....}...'..E...T.j.Y.\...y.r.\|...g...?.>q.?...y.u..Og..=r~....[.o.{...w..T?................'.~./D?//i...?u..?..A\|../.?....o.....8.....y..~.?..a.g..>d.g....K.g...o1/..V.4..z..r..7....p..~._6?..iv7._.>.........I..c.kj4,V1B.A[.......#$.o.v..U..\|..{.+j..h+.z........F.#."...0.`k..E...\8..+;..$..P.v\\|..#.5.....j.T.~./....'.[WPX...7.z.....CH3_...#.b.(.W}.@...S.]);.M...w...f...nk.t....t..4...8.w.g.=0p(........S....`....\f46...9.!=!...A.x.y.....c..,t{`.Y,..;.G.jl...'.......ysD..].S{.Q.=..g..t..A.....0pa..<.b"...w.7.0........Fg.B.>u..B.T.'R.j1..r.g......zG.9R.c...}}.H..(.O........'%0X.....F..1..........K2..+a..rT.d..].=_...TJ3V..............A........^a1._\|..F....!i...<..k.....j...K.#....@.pZZ..E........<.S....._Std-..hq.k4.....s#........U...tI........L...._{@V.].N.S.H..-....s..%.p....\^..Q..ees.U.]..c..=.h.O..].8.)?.......a..^....@....p......7.~............$.*..F....q....=

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.00, resolution (DPI), density 41x23, segment length 16, comment: "LEAD Technologies Inc. V1.01", progressive, precision 8, 694x460, components 3
Category:	dropped
Size (bytes):	53823
Entropy (8bit):	7.856263754061611
Encrypted:	false
SSDEEP:	1536:Z58Roooo2EEEEEEEEEEEEEEEEEEcz+j4EKBPzseBWGzZZaZ:Z5Uoooo2EEEEEEEEEEEEEEEEEE965wyQ
MD5:	DD8363F54576967096AB4AEEF7E5B028
SHA1:	DB9FBE969CD4D0C4D0D6EF87924ECEF71049A4C6
SHA-256:	BB0800A2E07587335E776A0D902EE997A0C10425D0F6E57AD7EEC30ED46A52FF
SHA-512:	993EBC259B41A3A63A62F2DD549659CBE025BB1674115E057D1C38ECCA4FEE17B295F97FACAF657D18A76287F7D08B8EAE1E138BE39A45528D4F3E5ADA8F98B3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....)........LEAD Technologies Inc. V1.01....C.....................................$..."... + "&')))..-0,(0$()'...C...........'...''''''''''''''''''''''''''''''''''''''''''''''''''...........................................................................................}...@..... .......................k.......XeV.@%.../..]........'..,....j.9.U..............................}~.,n....(.-O.7...}{..+..?#..mE5...........................Ys...`...E..a.q.............................y.a.......................................9.................................+u.Nu......V...\..~~m.b......z..).a.3C............@....................x.Kz.:j.h....GI[....=._....g..c..I.n[:Z9k.M....~=o+...m5..%,..z[H....................<g....D......>.W.?*..?7v....~ .j............................<g....@...............................x.Kz.).................................O{.7..w..U.6......2...@............................K..-...^.mZccK..s.'aK.J...O.q4.]O^z...............................z......x

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4706781&@f16&@g0&@h4&@i1&@j1728041976152&@k17499&@l4&@mstoria%20del%20circo%20dall%20antico%20egitto%20a%20oggi&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-167806404&@b3:1728041976&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&@w
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65414)
Category:	dropped
Size (bytes):	101307
Entropy (8bit):	5.216832650816625
Encrypted:	false
SSDEEP:	768:3fKOKEKuhZ4wx/LwwWLZ9kVH32o3PpkEra5HXOC8I3ZoodffexHs:3/hZ4wx/swWLZ9kAoaea53OC8k7
MD5:	C5B940767BB7CDE09ABC7A03EE4A98BD
SHA1:	87E581D0DEDF746D8B6B59D9AB6E8808FE1543CD
SHA-256:	491EB25D8B52DCED54EBE72E1A06B992626E2F494F7A9CF430D94761BCC3DA93
SHA-512:	7BC0046E0FAA92D26D5CE8999F3FD8EAAAB3FCA925011A67BE63BD9C4DDB1FFD4851DB07B1FA55DC9FD9A058724A6DF963C39F0571FE21E0CED161578D3721CC
Malicious:	false
Reputation:	low
Preview:	// API callback.recentpostslist({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"q

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.59361063591946
Encrypted:	false
SSDEEP:	3:QBRgyNq/HG9AikXxMGfwY:IgymGfkeGfwY
MD5:	C25675E32984E9858D57B19A693AB39B
SHA1:	6F56A01676B4D0AF917E561D871B26E7C1D1E626
SHA-256:	48B314CD0FF85B1A7F69DFB3C3F40DB0D79C45CA2E2D1A42A3FF2D727FB05B9C
SHA-512:	E6EE91C04B6F4995B698496079FF902E25746B93CD3316182CFA9D1590703D3CB2C790D0978DFEC5195872EC76DD335EBDAD249FD1671CA1FE9382629D99959E
Malicious:	false
Reputation:	low
Preview:	try{_dtspv.c({"b":"chrome@117"},'1ye1');}catch(e){}

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=9828/tp=ADBE/tpid=73112750750020587081523322233517150305/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	36536
Entropy (8bit):	7.98777380685074
Encrypted:	false
SSDEEP:	768:F9n3OMnyhM0xdd4ia/NeXBmxJflqaoTTj3YQhn8NQ1zCF/IFgT+etoxI/c1ysf:L3pyhM6MH/NeXefRoT33YUfzc/IPyoxN
MD5:	E76EA32D335293604C8018F41C873A7C
SHA1:	8EDF35677399117DB1E396B59F9E3BCC1BE7BC98
SHA-256:	28A7311015F8B12B5CCBB4BDD66240839F982F97C3E6C9E5DF8C3CB45084AB27
SHA-512:	077702039BD3E6EF4C0814C1772506D6C3D23C61E525043B829BED3C759E9316E11AD113EEEF3CD9AC02681FD2FFFE53E9BD3456C69534B7C97A9D78E71D94A3
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/carnegie.cps.edu/pdf1920/2019-20StaffOrganization-2.png
Preview:	RIFF....WEBPVP8L..../..9....$E}......kd..(.l'.s.,.q..$p...$E}.p...FB..V.....&..#Hm.....;....0......c....h..[..EB$DB$..H."D.9..QI-..>.Jjr.....v.......q`y.L.U\..7...8@...m......js)...d.BQ.s&H.D:l..$.?.9.W_F........W...O2.C.%.x.).hKW.o.E.QxO.e.7p .g........-.F$..r7.=...rI.%..]..E.....:W.......'YN,U.f.".%.f.yo\..1?4.J......B.{G.z.O@.Fh....03.....j.......#.o.......~./}..pPc.'x8....v........P^...u..H,YJ....7.)]HE....Cb....5n.r..\M...e....C......G..../l......VY..G...7.,..._.W...9[_}...?.....N....v....ru.0\|...2u........7\|..z.%.........~.,.N.^!.....]...H....J...}s...O..ok..m+..K...U...._D.73{SF...T..'o+.z..}...Z.....G.7...p..a..-X..W_.J..i....W..lk.v....w).:9...........{...b..~.,.p?N..a....K.2J..:..c......@.~.+0...{.......}\|...'?F..~...[.i.....'........)a.AT..D..b..?i._#.5${}}.4%(..d4...@i..........=.&.zVa...oR...]U...............SW....8.C.?#?2N.......}}w..P.Fk.E..}..i...F#,sC/.U...ICu..#...W}..UO........w....g.......(%.. %.8E...v.....68y....[

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 2500x1406, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	112322
Entropy (8bit):	7.998246201934235
Encrypted:	true
SSDEEP:	3072:FjysO/sIwP1MLxd+6tvSUn6DD2L0Ggnt6YqUCBvNEH3EWCN+7:lLO/sIBLxd+6tqTWo16u6m3EvI7
MD5:	B8106D0F3D98F1FEB066C7FFD25C6CB8
SHA1:	9CA37061582669CBACAA3F4570CA8BC7E1A93E13
SHA-256:	088FD8CE9F89A78CD550934C01B7CAD450C21EE4BA85099641C699C00E0B2EEC
SHA-512:	2C1D3F706AF37890798029669FC447C589140997408357F27EE22A0006F375A8157888FCE9DB412B49FC1D4B365E0CF5F0A134F51891E472A8FFE4FAC35E50A0
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.themovieblog.com/wp-content/uploads/2022/10/Super-Mario-Bros-Movie-Trailer-The-Movie-Blog.jpg
Preview:	RIFF....WEBPVP8 .....}.....~.>m4.H$731&......gJ..]...........O......U...M...W........yqto.......................{.y}g.......>.....1._...+...D..........[b.'3............V._.......................?.~......._._....<..R..z.........y.......zn.......<....u...C~V..q.....f...ww.Q.=.\|...}7....1-x}..\...:...[....4.x..L.C.$..]...-...2....R...........GH".X...?d.,..Gv..=.Y...';'$]'~u..JBaS..A.Y.%...8F..........N1....T.....7.....p.T.p9KO....N.=2..AFs..'..%!..?..s....Z..y..4...:^5.M...V7.....}#..,z..M~t9_...I.M...N=g....O.+J....4.....zA...d....7..64....u(YM.GP6.s...CL 2`)..0...3.hpo....?.C...n\.3..e~.....[.E....-..>.T..d.Gq..6.....;(.....x.ct..i.......RA..._bnYi...~e.>gXd.%.$.yRm..d.N..i.^...(.G@...<g.+J.W[.\|.M.Hst.w..+b...V..Yft...z.c2.;a.y....{../3.....L+.L. ...).q.S.=Ms.[./..I.4\|2,.=.lR..T.?.U/.d'mM..V...k".y=..$.x...)..k.....-.s..h..G.t..^....z.,.!Tf>s....1...z@m....A...+>..i.........;..8.[WO....)..P........\.[.10.....+.....W....xA..S..,(.O\.=....'A..

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.17798619393600457&stid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x800, components 3
Category:	dropped
Size (bytes):	99172
Entropy (8bit):	7.982498398848309
Encrypted:	false
SSDEEP:	3072:Ft1tVbkLhtryuWZkkXT7UfI3F6ReJsZYj:P1fKHVrkD7yI3FIbYj
MD5:	860AA9BA5FA1653DEBBDC2C677B54B23
SHA1:	A5F43741FC8DD4684A9440956E81A0BECADA3891
SHA-256:	C0284F95690989D5B9D2701EEDB79EDE4F3E11F1F0486B645754A99C89EAD61F
SHA-512:	FD75A2A89A15C5438FD9FE528742CA63854B4F710FFD1D4892543EE16F0FCD256D2D6DC2CD0FA332B6F146AEBA16040DC81BDE72C0C46E5951A921F85BF84925
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}...... .X.............6......................................................................"..Q@....dm.j.......\.....K.p8,>a.Q....`.:.........0.......!.\...@..........0.YF#....@..y.oN..`...#.`..k-..1.L...*...$.;...pP.`.P.(..B.0.:C.Dj\|........G .....(...B.....).\|.. VsC .,..p.k.84.....`8

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 24732
Category:	downloaded
Size (bytes):	9706
Entropy (8bit):	7.974244330200313
Encrypted:	false
SSDEEP:	192:sdfLzIYp/TqA9pWKOtmld+fBOApnSbGbZAsCQSu98xpZi2:sdffIeecIKameOsnSbeCsCu98xpM2
MD5:	373CEF3A03E2AAB544B1645A96E1557D
SHA1:	789BB2E7E291CE40587D62BDB821934E0F7B736D
SHA-256:	A9DCEB91B28EDD0CE446F678E2117ECE68191D4C2E609B07F4910D2F93F58226
SHA-512:	9DF97EEAC20A806BDDAAC955EA39554040D9B5A38A5C7432C4BC0347FFB4C8C14F1E923082D9B227D6421996AEE238B0A027038FBDC381EA3365616544B94388
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1.1523.23404/a/US/t_.js?cid=c010&cls=C
Preview:	...........m[.8.0.......+."..^mD.R..@y...Q.m".YIKq...5..8.t..=.9...C.i43..H..,y..Z.-.n,..5{I.....g....Z....if26..@...... _..Y..]..z/...Kk.W..I.....Y;.`PG.[k.J...G.%&"........mG.\..>.TZ;...K.\|.d.X^v/.5K.Nj......$...{d.Y.....EY.K}0.._...f.e..!.....5..:...O.H..@p.#...{k..O...w.....:.lZ.U.@..3J./w.......1....[k...66-.,.U.vn.u...bg...uuyn.X#.&.....IW..k/jnVS.&.o...t].{Y.'{...&.........u..h2~...e...;..M.J.U...4.Sj.Y.G...=.......h.....\.....i..O..g~`.X.u.........*..>...........U.u.I._}:..xXr..7\|....Q=.x.s P.....yG^08..#..'kg....U.......N..Z.<w..3.._..O..]r{.&..._...u.U.to"j.^....oA.4....g..g..2.f..Q&uW^.....D.z.....}.o}gm.V...Y.........._76......D.G....b..n.%z..k;.......?.$.D.....:[..:...a.....fk{[........}k....zv...........?.d>...Xcn...\|....^i..k.............n.Y.G.8..9<>..f......a.<.......Ok.:...'K.f...c(8....%<....<........6.<....B..x...3..L.:..3...(...9.6..;....Z.>...j.........A..uz...8>.}..............@....O......H>A..`...p....d....4M..

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	7582
Entropy (8bit):	5.134587434942495
Encrypted:	false
SSDEEP:	192:JF1qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:1UIhymDAZJFDfRLaOTO3ll7
MD5:	D2205E1A33E91DDC7229B9BAAD51E26E
SHA1:	5CD4C3245A0D91498F67985DBE04CFF23DD03B84
SHA-256:	D669573331FD9AFA6301AA92753385AD83A409F9C500E3FC9C09468632B847B5
SHA-512:	89CEF5104FB3821B8FDAD4B1AC9E47E60C2728788FA250108CE6F96070E91C279E6C47B7ED4F1FEDFA664DDF90FE1B5BAAEC0D6F53DB836FB1EA42DF078E2306
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fthe-super-mario-bros-movie-2023-bowser.html&j=
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "10401728041993ACDFC7576803995DB8";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16827)
Category:	downloaded
Size (bytes):	16876
Entropy (8bit):	5.168839586730591
Encrypted:	false
SSDEEP:	192:S0S5GFKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+k6b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	C73884D3A321E7C1E188E9A1121D8426
SHA1:	80AAFA83CF98B44573668F213657BC11672F2CB7
SHA-256:	493183DB12674C2E807248EDEC0772E462C248748859F021FB810B485876EA42
SHA-512:	B60F94037D6CE380577017C281F64E9514EF6F6BCCDBC50BEFB8D2DA42E1BBAD204EE042C25E27B260B5A3FC481EB459CD43B77138D53376F273CF932A72ECED
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/feeds/posts/default/-/dall?alt=json-in-script&callback=readpostlabels&max-results=50
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16831)
Category:	downloaded
Size (bytes):	16880
Entropy (8bit):	5.168510763174177
Encrypted:	false
SSDEEP:	192:S0S5TmKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+06b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	7FFC587B6A79EB66ADC2FC1E4B5ACBBC
SHA1:	38B89DB973AE186A74E6A82E6CA4E53F10F6A9B0
SHA-256:	190E7AB47C448414538C5A4CD52BE93035F260B6D20DC0CD39A1D0BE59F8E39C
SHA-512:	A8B2CD1216AD51AC188135AE32DB2463EF591A92D261BB7B5D8DB6C86B193BB3223C4F95ADD3C6361403737C72B7D65DC865C6A1D648F41EEDC6FA258EC8FBBF
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/feeds/posts/default/-/antico?alt=json-in-script&callback=readpostlabels&max-results=50
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1728041978692&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2023%2F01%2Fstoria-del-circo-dall-antico-egitto-a-oggi.html&ct=youruno-chicka%3A%20storia%20del%20circo%20dall%20antico%20egitto%20a%20oggi&t=storia%20del%20circo%20dall%20antico%20egitto%20a%20oggi&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16831)
Category:	downloaded
Size (bytes):	16880
Entropy (8bit):	5.168543209130913
Encrypted:	false
SSDEEP:	192:S0S5xcKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+o6b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	00428595233E9016ED7107CF6CE26B07
SHA1:	245B5BBB1AD098E52E78C6D92A70D38E604E568F
SHA-256:	06BDBA713671662565B0F5A8B666DE8D8D3AF40D20FFEFB6658C0545031B6A13
SHA-512:	5C85738D7BB198000A5062595D33FD01433918CF8DCD00C99A66A16750F68F0BCDD80A323F8C9BFD52AC16F0487C9085C7FEC0ED86A6C996F0ED5B65005C7F81
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/feeds/posts/default/-/storia?alt=json-in-script&callback=readpostlabels&max-results=50
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 570x368, components 3
Category:	dropped
Size (bytes):	18555
Entropy (8bit):	7.918014102762963
Encrypted:	false
SSDEEP:	384:5KTwjogAevoW+Ip1eqf3DJv5SqH8iXB1U:E2jB+6/3NxH8iXBK
MD5:	9D0B01D2A03CAB8AEADAB82E211A329C
SHA1:	17D781EFE0A85175A15FBD8A0DB9B36E22D06E58
SHA-256:	484680BA74E5143753E763469429E4688C59543319923024B097E93298A862EA
SHA-512:	BFC0927EA0E3A85D9C1CFCA8B40685B0925E21F2992E04B1F24BA7BD9BF32CCE0280FC7016D1624A7A3BC9C2951E020A2D1DBE0A5D30332608CC0E7DE63F805F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................'!..%..."."%()+,+. /3/2'+...C..............*************************************************......p.:.."...............................................................................oG..C..T.....227.dP/P/P/P/P/P/P/P/P/P/P/.q.._..C8..43...C8..43...C8........./.S[......b...b>&?a.>E..>E..._\>E..._\>E..._\>E..._\>E..._\>E..>I..~I...\>G.Z..}p.....}p.....}p.....}p.....}p.....}p.....}p......../.......@g..s..4.BU\.Qz.q/\.pu...\.pu.....{.u....\.s...:y4...........w...$....S\|.ue.(.....,...E..zZ.\.Z.Z.Z.Z.Z...%.Kr.z.whE.............4./.......^...G....}.....I..r\|..9.....S...CY.%.8..]!'I.$.."H."$.."H."$.."H."$.."H.";.....qn..VYQe..6.:...t....h.A....J3..g.f.v6r\|........\.pu...\.pu...\.pu...\.pu....S..~5...B...a.../.DUuV........p..N.../..7$W;..'u....3...&.[F&...zan.am..&.bn.....am...>{.^l...+.+.+.+..d.[]..@..s..K..i........................................5.y.=Nu.....\|=..g}!.'...z..2{X7..]..pP..\.:...2

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 5472x3648, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1099178
Entropy (8bit):	7.999326281761038
Encrypted:	true
SSDEEP:	24576:oe5FSywIzEb0J6pdFoaWcvrH1BxgwZDfwdOXm7L2B:TSRPb0kpPoaWchjZzQOXqLY
MD5:	04E575EAC4B24AAA223643BC7A40FE25
SHA1:	3B69DB11D2E1557FC4C10CA843C6B2CCE95DEBC5
SHA-256:	D1942344EB69EF627271870F39CBAE04D778086DA0049F2581479F480593A9D4
SHA-512:	E7FFE3E57D62083A977CB2EC9326A553CE42174C2E7498308B2CA4F16AEC412A1C5333F1BAB734A5B311115E1ED69EED68584262F863D6CF5E1797A1B923E8FE
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.lanetech.org/wp-content/uploads/2019/11/IMG_0023-1-1.jpg
Preview:	RIFF....WEBPVP8 ....0zY..`.@.>m4.I$".1"s.. ..im[....x...zg.b?..../c...S......+....=....8Tj.].........W.....}....p......yo.w.'.O......../..O...u~/...w.....S..z.........T.y.t...p.%.....?......X....{...L~..i.............m_.<..^....e......{.....3Q..?.........~^w.{..........W.............._....w.......1......?....W.W................_......../..1.....o..............m.......o..........1...o./".......%.{..........~.\|..c...k.k......L.X.L.>R....t.QD..ix.B...dK.q.F....y.`k.2J.Gi...a..JDNA...-2.-.TF..i......0.E0.......R.E.Y...Z./2V....^...].W.6....a.......%W...2dw..(.n.....6......*..V.......u{.4......T...T.8.^.....O-....\|.../K..K!j]...E.x..A.=`PuD} m\.7.8...<.....T...o...O..R_.f......B......}...y....{.:m...N......a.gG...e`.D..5.Y........1.W."j]..gc.~_.......)t.u.e......$C.....@3.fWDof..[....t...........3.K...Rt...K\..+..w.%...e....[.g.H..s...._...2Y...........[V..&..1.y......ed\.i....U.X..;....w.6.YB.Z9..8.O..m.p..8.Tec..{7bKj.S.]T..G.G....lY.v.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	76656
Entropy (8bit):	7.949939971477205
Encrypted:	false
SSDEEP:	1536:W2ZtISxFPUhDJkoiPyVhZkS4VyB/uZ9VZnL3v6KMRGvTSX:zxmfkw3F/uZ/hLmRvX
MD5:	DAE048606BDE0FB70F7607D4695BC60C
SHA1:	39A63EE1DCC02C7840B2C7EBC074DBF81D040EFD
SHA-256:	9E198E95C163CA054AFDFFE5550E64C213680DA86C5A0ADDDDBF425CD6E88A66
SHA-512:	3D837EA71ABCFD92BC2B20A4D8BFCBBD50951CBF8F7831C32BDAD1EEA05D07E27807FD754BC78BC52EC42C34F58C635BFDBCA213FF05967A447C7F5C568AF9F0
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................p...........................!".12AB..#QRaq..b......$36CUr......SVcestuv..........%457DT...........&E..df..'..F.................................>.......................!..1.A."Q.2aq..B....#R.3C....Sr.$b...............?..\....S..i....)LhS%.Ch.,..5.:E:t.(...u..c.QF.c..RF.&WR.(S.".-2..c"u.D.'..AU.L..T.d.S..}J..$..U.\I....b}HB....$...[#G!.\|.....S.i4.5.G._1........m(..3r..+.I.^.........z....$..%-.(l....R..-4...G.i.q.V.......OEI.{L..%TQ...5VP.d.^..J8M=W......@..'6i...H\..B...jEk.h..=......Z.).....Y..9!W5B..N...],i..>VQ..R.V... ..UX..Z...T....D.R..u........$..p....Qv....mMN.Ii.T'$l.....R.. ..).P9.{.)f.KCGs.+0..c$....c../...J..&..h..z...:%...U....EU.^.......u.I(g].G)Q.l..SI .*5h.LYII.2.......N....D.[#.,.:....Q.'.#h...JP..I..HD1.H..)...!..%.O:6.HDg...

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	343
Entropy (8bit):	5.126114190832608
Encrypted:	false
SSDEEP:	6:qTjxO96Ko6J+RRRF7FYKLIYAB3gbQ5IyG5IFHwFYfJWDq/czid0NVaXz:qTjxPKl+3RFBYKLIYM38Q5RG5IFQqfWo
MD5:	46561D0DA55B6E4549B48BFEE1D82F23
SHA1:	279544278D2D63B78F801B146C95117CA236C929
SHA-256:	70170E469D8D05527ACAB7E3335C6FE91E2966DDBB6E9EA6211260B8F717D120
SHA-512:	A7EC69BBF71466264C6AF1F08771F9F03CCD1EE16E5F6CB57C2D21839E438774B3BE15DBE000D7654BCF99680CE0747DACBAA86EE117A887837308AB514E61AD
Malicious:	false
Reputation:	low
URL:	https://cdn-tc.33across.com/lotame-sync.html
Preview:	<!doctype html><html><head></head><body>..<script>.(function() {. var o = (window['lotame_sync_16311'] = {});. o.config = {onProfileReady: function(){}};. o.data = {};. o.cmd = [function(){window.lotame_sync_16311.sync();}];.})();.</script>..<script async src="https://tags.crwdcntrl.net/lt/c/16311/sync.min.js"></script>..</body></html>..

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55950)
Category:	dropped
Size (bytes):	56016
Entropy (8bit):	5.272467689359362
Encrypted:	false
SSDEEP:	384:QUcg6kQAMYTriZXvoDHu+qwnvdnvVWAXBceNZqjtS9g:QUAGbbqwvd1BXwjtQg
MD5:	9C47B1D805F30A70131A4EB58FA86D24
SHA1:	012E63AC74498379C3FDC58149D5165D988F9409
SHA-256:	193C92D0B3972D4F84A9320AFB37B5D67EFB902E5ED0D8393E2682849034B5C6
SHA-512:	3B9FC01D41CC3017A0F72EF18C8A8F98AE0757D43C1DFC4F16AEC19A9B82AA27D08F9312C9117522671A136DA03ACB6D8DC9DDCC57BD1AFFC3B658F40A173F11
Malicious:	false
Reputation:	low
Preview:	// API callback.pageNavi({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"question

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x586, components 3
Category:	dropped
Size (bytes):	59409
Entropy (8bit):	7.958404997847459
Encrypted:	false
SSDEEP:	1536:7WVnErXrIrNfGBbEGk3ZQxEongkHB09fBQwzOCQNCWw:gyX0EBbLGjogEwf6kpP
MD5:	DB5E77565C4813ED9E3A33C8580EAC50
SHA1:	82A1B04A15653241FF24C44051B5AEC053FB07CE
SHA-256:	536618741C85CA1FBA14268B07348DCE3B698A8646C8DE84E91F26B7CB58272C
SHA-512:	3BC6650715AEFC5FC4BAEF1A69EE6F5FB0AF3688E729349527392128EA23804C4C02A120B54923ABAAF2A4504F326CED86A891EB990C662F4513273FE9760380
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......J...."............................................................................aN.j....... . .....D......J..PAJA@..H.J....TT..P..T..Hd......EA..PTQD...R......AHp.... .".H.A..Q..TT..Q.QPPAD@....EEG"..(.(.( ..........u.C.+.fj%.U....t..@..(".....((..(.. ....* ..P......(....(... .. ..............( .&M..5.^.....sO!....Y7p..,P.5....IQ....t.TP...E......QU@A..@.P....P.........P@...........A...1y..Nj.Z...n.-rh..A,....e...U.b...W.4.z.dkq.J.6.(....(@..(.....G .. P.(...........R.@..@..B(...DQ.R.q..)..]<..Z.Un5..v2.....V.j.]!BFX.......+.f.:.J3KaQ`T...DT...U.......D............A@....(...@.P+;..y......Z.......v....qNai^...A.a.j2.5 a.Y.v.b.=)oE..t+.r5_...$........EE.T.A....@T(..QD........."..%(......KL...Y...X<..O%...Vie.:...k.:%."...6c......I....Ti.g)c......s.b.Q.].RX...vD3gB("...TE.Q@....P.......@.AA.@.......

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x901, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	111124
Entropy (8bit):	7.9984201520703815
Encrypted:	true
SSDEEP:	3072:FdkyQmAbCLFVy7dFpsqBi0E+pE7qa0+aS/:HRA+4dRBTEOWqcaS/
MD5:	028F0409B52539980C5F521325A9CDDC
SHA1:	0157D8AE2BAC9C878BB9A63F696A0680CD726101
SHA-256:	3179D7F80476F312B18AFE175B9E7E1446FE7DDB3ECE1F41168ED0C1701F90DE
SHA-512:	205E0372E0812F789696A77FD54F8A582D6EFABC4AA0631FBB197529986EC900B3F64C7DF75D26AB59C5EEE1129F1EAC170F5FB53E0408F896FEB17DE64C20F4
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.looper.com/img/gallery/the-super-mario-bros-movies-first-teaser-has-fans-cheering-for-jack-blacks-bowser/l-intro-1665103332.jpg
Preview:	RIFF....WEBPVP8 .....f...@...>m2.F$#$$.......gk'J_.6.....w..IE./.W..}.....B.._.u....\|.;..\|..K.....g...]..g....0.q.........K....:?x.../..^uU.......w.o.......q.U...O:/..P.....-...?.x{......'......<....?.?...._....B.=.7....D..?.......,....o.......\.#...........^................JL}.Q."4j..&..L'...(.v8s..c..q....dc..(.+.]K...{Fr.G~F..1..:...5...............}...M..;..c=.I..P..7.G`-.x..H.\.$s3.E...T.&)...a.....<.-...Y#..?....................A...b&u.'@.n{.. 8....oD2.Q...Lc.....>.,k..W.y.......H~.....A....$...l...h....+,...)`z.2.&Z...'....v.k.4....d..........D?P-4.@....e..3.6...q.S../....;J.r. ..N^.....o..CV.."<sa..b6..yVy.q.._...6..y.c.....~/3up.v>.?..9K.N.do..N....cS..ZV...(+CK...-..-#........./.....B...\|..M8..>.h..n...`...F.q..k....Mm.X*..~....M...(%.......ql..N....g..l..\_....s4..m.B.x..v.001u..xe.... ....m.F?8.........gr...Uq....3m..sq..e...v..v..B.#b$..2.....l..f..Y.r@B..X..u..a..Z.l....aC!<3...x..........}...s.R..t.....PNK.)u..BI.=U.

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x576, components 3
Category:	dropped
Size (bytes):	35790
Entropy (8bit):	7.935905793178867
Encrypted:	false
SSDEEP:	768:jR0MBRQ8tqyMpSJIACODeRiBfENzwEvyZvETjkdmBDVxkF:jZRFqyM0AODHxDDgkduVxkF
MD5:	2D3AEB7DE5634C27688D73E7BD54A86D
SHA1:	400191A1A6668DB0BA6887E56D673C0D044DA04F
SHA-256:	DEF15300DF1EE5CBD0C1EFC237A4E8D3034F9DC56E6BC11339E33EB056BFA7A0
SHA-512:	3640B26627DB20BDAE71F5D596D64999D54C2FAD2AC5A021ACCC77A1F4EFCA60091D5CCAE160B35DA6B34075EB85DC4888CDA8EF69D334FD54754864FA3C5D6F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................!....'#))'#&%,1?5,.;/%&6J7;ACFGF4MRLDR?EFC...C....... .. C-&-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC......@....".................................................................................................................................\..E<.H....+..3.3.<.H.=#..3.<..<.@..=(.=#.........-.3.<.H.=#..3.O+.<.P..J...3.<.M<.P..H.C.}#...+.+.#..4..+.<.T<.H.=#..-.+.<.H.=#.=P.=Y<.L<.J..H.=(.=....=#..3.<.@..H.=2.........."....d.X.).J"...P..".X..%R(."........(."..MB(.X."..".y"..(...(.2.(.".,4.(."..(.."...k6.(."....."...C-..(.L...3h..(.C"..(."...C-..2..P.".(.3h.C3R.zd.C-#-J.".-...BM+$..P..(.".@..".....(.H.(.b...(...(."....(......~~........\|..>.....V.(.".+L..$.BM..35.7.M.."(.2..(.C*"...."......"..R(..".@...P(.%...(.".T..(...=3.t..K.=.......IV.P(."..2..C-B(.2..w...$."..-...2.".+.......k.?D......?A.>>........>?A.=O.?=O.?O..?O......h.o.O......>......>.......>E>..S.>@....P.....0....>..d...d...zO...s.];

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2944)
Category:	downloaded
Size (bytes):	4338
Entropy (8bit):	5.513875467789769
Encrypted:	false
SSDEEP:	96:1YaGByIWzkOXBB8Z8OyGpn23Up8uEHQ7zqc0QiiWdpvBF:DGByIWzrXBBNOyGp2Ep8uEw72c0QRSpL
MD5:	CA6BC94775AF4A1B46B6D8D765EA015B
SHA1:	687AB6B1ED30DEC25275AAA60CD5CE755F91DD57
SHA-256:	90DB5916E1C5B61D8D30643C93C5724A71D461FD3440B0D2DE7C25BAF6FA3E25
SHA-512:	B414ACDA8C0D5E26916CD95BF38829911CDC4C3AD8CD75C5C1EA830595C18231FA9E0D6DA22A501395315B192D144ADD1F627F9A345F95AFEAF40791949D19D1
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/pixels?src=LTJS&s=31%2C92%2C49%2C136%2C135%2C148%2C7%2C33%2C78%2C121%2C26%2C22%2C67%2C116%2C61%2C106%2C104%2C8%2C54%2C41%2C3%2C2%2C94&c=3825&ch=%7B%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D
Preview:	<html><body><div><img src="https://token.rubiconproject.com/token?pid=7&puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0" height="1" width="1" /><img src="https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:c25ae5b72d8d3274a003b67bfc2dc4ed" width="1" height="1" /><img src="https://ps.eyeota.net/match?bid=51mdg9u&uid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0" width="1" height="1"/><img src="https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0" height="1" width="1"><img src="https://id5-sync.com/s/19/9.gif?puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0" width="0" height="0" /><img src="https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0" width="1" height="1"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0" height="1" w

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.29599364292840113&stid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2444
Entropy (8bit):	4.674959509701474
Encrypted:	false
SSDEEP:	48:Gun1i4KtlT+YU9MpRa/zcFhxpLKiu/lHpegj5y72a4ukvzLx:L1i4KtlTla/szp6yqaIvzLx
MD5:	8D7AA851E6958F2F4F402E35011A8581
SHA1:	1ABAF1D915445B5CE18F310391617A1EA0804BDC
SHA-256:	03298401519D95AA4F83D8E70F93E6E9B5CEA1C3CB79D5893676B83869122132
SHA-512:	C5D1415205CED23603A23A3D7868FF01342B0AB4542507B811D130D220C78E5D0057602D832A363DCEBB548E755377CD27715E90FA7099A57788BC610AB363DC
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout
Preview:	(function () {. try {.. // set up our pixel. var fcmp = typeof __cmp == 'function';. var fcmpv2 = typeof __tcfapi == 'function';. var rnd = Math.random();. var img = document.createElement('img');. var exptid = encodeURIComponent('ZH0ACGb/08oAAAAIVAOoAw==');. var url = window.top.location === window.location ? window.location.toString() : document.referrer;. var img_src = 'https://pd.sharethis.com/pd/dtscout?_t_=px&url=' + encodeURIComponent(url) + '&event_source=dtscout' + '&rnd=' + rnd + '&exptid=' + exptid + '&fcmp=' + fcmp;. img.async = true;.. // set up the aqfer script. var pxscrpt = document.createElement('script');. pxscrpt.id = 'pxscrpt';. pxscrpt.async = true;. var pxscrpt_src = 'https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=' + rnd + '&stid=' + exptid;.. var done = false;. function load() {. img.src = img_src;. document.body.appendChild(img);. pxscrpt.src = pxscrpt_src;. document.body.appendChild(pxs

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728041988737
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2500x1406, components 3
Category:	dropped
Size (bytes):	291938
Entropy (8bit):	7.969509053655569
Encrypted:	false
SSDEEP:	6144:Ny+kWh9R4ICzKorJCM8yQpVC6aJwWqMfgrlifXq9:NV7h9RBMKokM8lVDaJF+mXs
MD5:	79BBCDC9DCB4979C6408868883569F41
SHA1:	C142891BCE6EA50E8DFB71E24D7CA47BD7638661
SHA-256:	4123CFFA8231C21FF0DFA8409430F96524ACD76C646A2C47F98E87D78A2B2AFC
SHA-512:	4D5DE0120687F0463EDFF143F68339694E8FE47688A95FC3359082E04148BD677CDF6A56F0150BEAFD744A2A5E25011559D89C4127EF1F675C988E6C23CBAD02
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................~....".........................................O........................"..2..1B.#ARabq.!...$3QSrs.4C....%T.5ct..D..&....6U...................................4........................"..2..B!#1R.3.ACb.$QS%4Dr.............?..B...n.H.2~.....w...?..-..P.......3*i..hO........S..u'.b.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	579922
Entropy (8bit):	7.991020606353449
Encrypted:	true
SSDEEP:	12288:/+GZoAo5UE1g/jSODQB5SFYEP5UgOBQgZCHrErARsDf9tXo5:WUojUEUeuQvqjgZEEksT9G
MD5:	8819B48922C52E57BD15631143FB8FCB
SHA1:	82759F8110110DE28C24289A658594B7DACDC012
SHA-256:	EEB75EAC5DA4EF95165CE762AA5FAABC214A05E483C6FBEA020266B092A10850
SHA-512:	6DCCB8DC3C36618404E1D6A549010AD7054A94F91F1EDAC3AA75CB2AB4D069DCEA423CFF8C63EC62D9F736D38C11B176492BD8DFED2264A7C82C5FEB19A22964
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/bateman.cps.edu/uploads/5/0/1/4/50143567/published/sy18-19calendar-english.png?1532366082
Preview:	RIFFJ...WEBPVP8L=.../..<..H.$.$.\|....Wu.@.......&?D...G.V..1.Q......\.k...^. ...<...%.T...zR........p.\.:.Q..MAe....L......D/.m....T IA+..$.$..p..K.6.6.I...../=\|.......WT.,.q+{.z^"Y......(.(K.>.._.m..%..(.. ....<..p(o..nS.....[.......-?........./....m$9.h..o.B...{....Irl[....x9...o.+..a..I.$M._...m..F......!..........\|....5....g...._..kV..>]};.`.A.<,+.a.~..k..f..&.aLQ.... .....b..!.../& .....C.s......a..7-.Oy...9.>.^..s#..7.,.....n..n..4....L.p..i......h..@....@..H .......0...Y..z.u3..4.M..9y...b...!<...,....#.\|....4.:.....7.L. *N.}...K.w9....4....x.ah.Y.w...X....L.P@....1.<.Q...f......!.&..X....C...n3o.a1......,"....).......(.3.c.. ..F....`..e"<..?............3..;........".). ..0.B.K#B(.p3.S.S.B,.B....0`nB..0K0...\.S.!.D.F.Q.c.(.sa..2....F.E0C.0.f)..7.&4E1."...%X...0MS.#DQ..6.b..1..Q1.P.P.7M.E..i."D....M..1.4..fX..4.0...H..(L....Ea.)n..y0b.A3.EQ..(..).. .P..L......`..c..Ec.1..`.....b~g.....1.yXL....e....7a...?.... IR....3sw..D.....;../b{..a..$i9...,o.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://track2.securedvisit.com/sync/1540_03681?id=JcJ7AQZHKDhG8sisRA-6jmw7
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-01-768x396.jpg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 609 x 833, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	101924
Entropy (8bit):	7.993797925688249
Encrypted:	true
SSDEEP:	3072:4Ssn+31u/9EJX+fKRzDPqooI3DfYkjL2xwaiB+Gyl:PJ0GJufKJDPXoIzj2Ca9t
MD5:	CB44B92E0057D2CAA067AB35F3CD4CFC
SHA1:	69EAF7AA3A2CC5A90D207F58368D5F3C84D045D6
SHA-256:	10D32FEA243B56CAECDC1BE2EDB2B64E3F65CCCF1BC0D1A98C90B0B9C640275D
SHA-512:	86356A9E2B3275DC4A4FF8A7BEFC00C8945E2E745E0F9FB0F679C329C5990FDAD3EBEA7139CCCD7314FAF9548292B1479FA8CDDA08BCD04F4D89109D51D932EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...a...A............gAMA......a.....sRGB.........iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <exif:PixelXDimension>609</exif:PixelXDimension>. <exif:PixelYDimension>833</exif:PixelYDimension>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..._.....PLTE................................. .................&%%...........................................................fed..................,*LKK............................................................................kjj......................xww................................?<=.....z.............._R.........t......................XVY..g\..........u....pp...............{......a........E....931.r..c...wT.....A..O.....l......`~....UJ`3.....VB.i

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 700x700, components 3
Category:	dropped
Size (bytes):	25422
Entropy (8bit):	7.785083179568335
Encrypted:	false
SSDEEP:	384:BqbMmHYRyBKgXUvTzd3OToCsAOzLE9Lk+H+A8oj2t4pQSg6Iphneb4M5:8B4RyBOeTox3E9k+H+A8ojNKcJb4M5
MD5:	E81E6F0E9B14D8D0C9E540D9587B761E
SHA1:	00AF77D8553549BE43F2637D97D3CBD68D35C734
SHA-256:	F42760F105FABD2FEBE1E20B622FD03CA9D40E3CEE84078B6FC4D76C6D197AAC
SHA-512:	F47B9DC0EEB511143D9A3B8F59C24A31C8712D1C286F2474A4188F3B8A4961ADD9B1C90EB61D00928486C846D77C43146D207B08B07F54B82D9708C6B61B90DB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C............................................................................"................................................................................H...........................................................................................................................................................................................................................................................................................................................................................................(..`5...~6._....`5...]}...8F.j..k....m...6.U.i..(.mwM..a...mi.6.U.&.k....l6....x..j...k....l6......k....l6.......j.mF.......k....l..;4.~]...`5...~6._........0\....8...1...0..q..9....`..0..0..,....2r8_g)3.Y..a.....7.'.}.1O\.e.Y..a..af.Y..7?...g...L,..0....g[.@........%..'M.t.......1.'..X.......qr....c....}....

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=430, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=818], progressive, precision 8, 850x450, components 3
Category:	dropped
Size (bytes):	122894
Entropy (8bit):	7.971868650600371
Encrypted:	false
SSDEEP:	3072:6uaXRWJPf3b6tcQrT8HE4yHRu5LgLIq7N/nv9y/xf5m:beAPf30JUHE4yiLLqqi
MD5:	AC6E72C12A18225826BE01189B90DF9C
SHA1:	1A313B4980981146B3ACB96459C774B4BCE15DA0
SHA-256:	3793F02F039B878843F542A723891D0474136426D1E7609DD2C8D70B1AFC3FAD
SHA-512:	C2C1A94B1E25644E213036D62DDAF8DE2F0BCD25683570C68A120A7F50C87BA7C9D9DAFE3909957181918E8128E471F488652866DC2D78AF934A2CFD45A2336F
Malicious:	false
Reputation:	low
Preview:	......JFIF............._Exif..MM................2.......................................................................................(...........1.....$.....2..........i.............$............'.......'.Adobe Photoshop CC 2019 (Macintosh).2020:01:10 10:39:36...........0221.......................R...........................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................U...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..n}O.......i>$i..3w.....)3.`8...L.......4..xj..D...0.m

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F2022%2F12%2Fcps-teacher-directory.html&event_source=dtscout&rnd=0.4328040925871892&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2806390622295662
Encrypted:	false
SSDEEP:	3:2LGffo:2LGXo
MD5:	1B9BFBE209FD6BDB0DAE667C8956FA63
SHA1:	309E9A6B919D5CD697834855382244FC06E21A55
SHA-256:	2C6F0C2E544B26A69E4BCE070D3EAB8647CAF5C92770E2596C14CD28E1AA3F05
SHA-512:	4A4A78CCFF839AE4916AF4715D315947BED1798C8C9A1A558305050D0A68FA507EF7E760379394F5207445F5C672D28EE5F32183934142AB47B0267394F0199C
Malicious:	false
Reputation:	low
Preview:	(function(){})()

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.234633279684939
Encrypted:	false
SSDEEP:	6:51b9Hvhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bZ513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	0613B696B49DF9CF2F5667F3835D9257
SHA1:	BEEDDB7ECDBA23741DE63FC9A3CEBDC0981EABC1
SHA-256:	C2732FC9AD0158A3A877C764EA3D77ECB85E5143248241946975055F65894BBB
SHA-512:	75052E9624C4A35AA55967868D965DB8F5E8B00B83D8C0D6721F378479D663832690A7A335A7C0A13853F2B01E17614177D52891020129716363671761A4F91D
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=143";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/external-preview.redd.it/dCbpHY7rlr-_hPnobDE-ACO6ZtMp7kWneS1ohT62SF8.jpg?auto=webp&s=157cb93735a077579f41bbac8562c8e460d82a5a
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2683)
Category:	downloaded
Size (bytes):	75102
Entropy (8bit):	5.455604919288442
Encrypted:	false
SSDEEP:	1536:/RXZpocbeVw+QgUy/rWukbhnlBBULag4X4xl1FcZhwKnj4Vj4JLZ1fNJUB:ZpowoUy/rWukbhnlBBRo1CsKnw0vNJUB
MD5:	EE45BD880ECBECB8639CAC69F4C110D9
SHA1:	75397F1078F9DA9A9A4859601D4974F37AD0CDBE
SHA-256:	C0B2E1F29EFE7092606A5B87CE3B4880953F83E5C0A2D21CA6C50AC2EA9FC142
SHA-512:	ED27FBA47CDACF298D934BCEEC860D88C7F4C213CE8D70567086783A61E44057C4BE6352F762DD68DF9890D6FC45E8A8D2D59B909AEA17B76D83CC62D649F8EC
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/2022/12/cps-teacher-directory.html
Preview:	<!DOCTYPE html>.<html lang='en' xml:lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>. Meta title by GianMR -->.<title>cps teacher directory</title>. All Meta by GianMR -->.<meta content='blogger' name='generator'/>.<meta charset='UTF-8'/>.<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>. [if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]-->.<meta content='Zero Unnamed' name='author'/>.<meta content='follow, all' name='alexabot'/>.<meta content='-5;120' name='geo.position'/>.<meta content='2021, DDR' name='copyright'/>.<meta content='en' name='language'/>.<meta content='United States' name='geo.placename'/>.<meta content='global' name='target'/>.<meta content='United States' name='geo.country'/>.<meta content='all, follow' name='robots'/>.<meta content='all' name='g

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 570x368, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8988
Entropy (8bit):	7.977023497405828
Encrypted:	false
SSDEEP:	192:BaxN8kB8wrMh3NXPYcoCKFPnhzqHoJ6JeUrGBDuriHWM:A8Agh+co9pnhzCSU3Ox
MD5:	774EDABC1D65643BEDA17270834A911C
SHA1:	8907299B9E92BFBC9874E23EDBE58F550F18EC69
SHA-256:	E25F773470AA8BA173A268CCA4A9163EE62CFDFA3563F4906BCEB99D40875388
SHA-512:	350C8A898A017FE442DEF547A3FF2402E65EA23B4B2DF92D29E5550F8812C86D43740FA4158A33FF56A7E446273A712F313581692A5C027845CE091D47D4DADE
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/zmodulez.files.wordpress.com/2010/07/ups-freight-checkout.jpg?w=570
Preview:	RIFF.#..WEBPVP8 .#..p....:.p.>u4.I....".....gn.d6.Q.c.^:....G..6{..-..e.=.....G......K/.{..3.O....'.}N;.....\|Y.........^.......~..^...........>N.[...g.....o....~]}6.y.....O.?....q...3.....g......f..e[..pwe..y......../U.."..#.yn....H.^[.F....t.......k...."A...\.h')..i.F.M...W.BB.....[..T..aT....."..{.R.'....zE.A?.U6Z..P-B..>.'.=......\|>.....].E.r?U..m.AO`n.L.~.8/.Z..../....A..e..R/w.0...~..._.._".',....e3Yx.......nu.P.H.... q.'V#....._.....k..W..:.<.H.B.O......GcGw.........'.io....uCH..1...g.D....m.2..r...O......w..l........0..V.C.r.gH...DX.W..T...P.....u......k..vE...w........V;3.+....by...I.....UO.....k.~..y......g\Vf.N+3^....$.=q......Q}..8G....Tvp.Y.:.6.?.......L..C.0.>X.#s..,....Y.....0A.\....a.@X.k... .w.w....4..K...F.]d..R.B..ww.....P.+....Y.9.X.HE..J...6.=..F..LD.+.&.O.......kx.U...=6..8.Ep...'SS.xm..q=...mf..~.,./.1&Hx.k..Ep.p..@.......6...5..r.."..s..w..!..........Q3.9.r...O...z...........0.8B..[..X.]........<...C.{..Z.^..u+...>

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", progressive, precision 8, 1024x577, components 3
Category:	dropped
Size (bytes):	136672
Entropy (8bit):	7.9865626093675175
Encrypted:	false
SSDEEP:	3072:MVodZ25ONrCWvFA6YD56ByfxQZB3YaXKEiXl33px1vpERS2dD9TBPV:NXv3AR5wUm3F6/l3pxB8rxBN
MD5:	3767B822280C5FB8145BF7A33D9F1A4D
SHA1:	8926295CFDD923BDF0B4479B56DA764CE3B14642
SHA-256:	C1C6537EBB7BAD79401ACF3580BDC1B9DC4237780B0C7BEE55C1E80D079E4783
SHA-512:	E4231181AF8C797D89678E5283081C46038C5C2885D193BC446CF07722D5D56A1072AA3C0F8D7151E92B9104FB76EDB9E799CE36D99311C35296ADD3F428D231
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......A....".................................................................................zB%...+....N..CE...v..z...0.aZ..hVGG...z.z..R..v......Y#\|....X.;a...ir.;.X.........1....\dO'+S...}.,..G.lI.B.G..r..%jb..F..@.Sh.{g_rO?..(..S"..\.i....H.{...\.\|..M.5.C......$.".......CP.`PM-.......e.....2...4JY..Z_..}../...(V.D:]g...T...H.,..o...tT.B...x....m%.......#......v..j...w..V..g..I~....,..g......}<...E>./.yjlc.....!.;q.\..".Fv............x.[..]e..../7....N...Lkv./..e..7(W.4.k..po.........u6GEO..G.`...B&.....b..n....)8Z..w5.......qP....'Q.@l1z&..D..T....q.o...f.?7Q..;.....Z...]-U.WBi./]Z...!.B..][.kuL...\\${..........z. X........6*b.>G..A......^Wms.{.%{u7Re.z...{G.I.<..%a...?5.&..u.j.sU..%}.m....Bk..S..V.S..O-.....G%;#.....m.yE...w..z

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 638x425, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	82068
Entropy (8bit):	7.997701599677354
Encrypted:	true
SSDEEP:	1536:ef5rQkffMzdxfDGvA5+NT5AwFdl9r1iMclwmzey7S0b2QnuZjxT:e7ffMzdxLqA5g9bFXxMVFzPBBnGjR
MD5:	61347A15E50AEA054D3EFC580F22E8B2
SHA1:	0FBD3CC0AF2168F1A8B1CF2BEBE198D86A1D71FE
SHA-256:	91CA43932E7F1B025FFB84D24F6D1DC06CAB090F43D0067536F8099BF6348C11
SHA-512:	3BC93865A0857F7480E951069E28E4B374525F18DE3A8A8B6DCDC78C43CA6A4481E299D1FCE4DA5C22B64D072CAA0582C388C5AAC6E95C74DA8670789DD4BDDB
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/static.fanpage.it/wp-content/uploads/sites/2/2016/11/come-doveva-essere-il-circo-massimo.jpg
Preview:	RIFF.@..WEBPVP8 .@..0Q...~...>i(.E."..._.@....V...... .\|9...........3..........!.............}....G....../.....}4.....>.....O...a....7......m.....>....._..f......?.......GZ...u.'......+......_..........?......?.=..G._.>...}..o.;...zA....`/..?..1.................w._.?p>..d:..N.{R..5.....nrp.....h.)`G.F...'l].u.)](.....c...F.[x.5T...F...w.1\v$...1.M!.,EY...?.-.R.H..p{.n...E.[...l)..\|.:.R.?~.....e..{..M51.Z_....:.D.)....q...p.....x*KK..n.Ng.._T .(`.......K4..#.!............[E..1."....t8..YP....j.}6.....I..R.Y;.p..Y...bGR..u.....Y.!..V...+.@6....Nc/...m......)..b.A;\|._..A<..W.....).k.n.'W.Be..`..Q...ky...v...E.~.6Z..)......QW.7c.2...U%...q.).S...;...EJ...I.\B\|....T.......#-M.~ fOo..B.k.sG.(5...PD....&Pt.$..k.q..k..>C...8.]...k.......-...B..K..A.<..QI.o..Z.........k....{.MGp.2..N.^@....2^.]..v.2..3...Q...:..(.B.....#A2.@;..P.a+.^~..[..i.....pHE.xjq...u.G3_....6.9L.b.._.Q.DK4.N........X......K...p.[..TP]..L9S..n..d...v.L.MYD&$...9..F.;...ad..

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16829)
Category:	dropped
Size (bytes):	16878
Entropy (8bit):	5.168663089296055
Encrypted:	false
SSDEEP:	192:S0S5VYKzKMT0Db6EiF/0O64vCZGQ8u9wQTJfHfM2pPe1dQN58NG5bYzhxbcNiDYl:+g6b64GnKq5MGrcrYlcEihWgY7eD8
MD5:	152B42FB1328A6F44801ED77320C288A
SHA1:	5C3C7D923F4E05ACF29B2BCD11DE3EC3D301A8A2
SHA-256:	08BD237262A9DEA7DFC687EEDB1A8E675D7AA62A2FDB90CAA2814B2A32460C59
SHA-512:	230B6C636805A073B178942992D3392635CC03C92419BA29BE24BC640A907F161655298C387FF0E0A4725F770B99ABC134F0691BC114D3BA959CBECA0459878C
Malicious:	false
Reputation:	low
Preview:	// API callback.readpostlabels({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"qu

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	7582
Entropy (8bit):	5.134164144585829
Encrypted:	false
SSDEEP:	192:J21qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:oUIhymDAZJFDfRLaOTO3ll7
MD5:	1129F13152B67297C8AFD1E9D588E46D
SHA1:	164EF6BBB109711F9D18655E2F5C2AC09438903D
SHA-256:	32FAD9948A2F6F165C2801AE0E235A39EAEA6E8A8D2E50E06C054591FA020E91
SHA-512:	5C0A867ABAAE87C928555D9BDC03DE3564D9C1D9CE828DF4519CF77C886A0024B9CEF4BB18F6E8CD84239D7A533142F50A6231783EC9D36BE3BCDE2C8D99B45A
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "1040172804192949803086BC6CA2270E";. var su = "10401728041995B026EAA1F0DD88F3E7";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2683)
Category:	downloaded
Size (bytes):	80294
Entropy (8bit):	5.426928305125081
Encrypted:	false
SSDEEP:	1536:h9DZpocbeVw+QgUy/rWukbhnlBBULag4X4xl1mR9Q/xChwSnj4Vj4JLZ1fkJMB:71owoUy/rWukbhnlBBRo1mR9Q/xJSnwe
MD5:	08A935B62EBFE807E0722ADDECEE7177
SHA1:	101A63215A6A1CF361603AC3A02893EFC6C6A7A9
SHA-256:	707933CF5494B30EE088CBF5DE023EEA3BD35BA7DD85970D7F6AA00CF635A1F1
SHA-512:	2414FBF38337D5D8D01E54B8720BC1653799EBB02C1D4660CAC6D291943CA13BB65481C729DA637FC4D2DFD3BAE31F55B9FC0CA4C9E11DB1BC34275F0E8D0564
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/2023/01/storia-del-circo-dall-antico-egitto-a-oggi.html
Preview:	<!DOCTYPE html>.<html lang='en' xml:lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>. Meta title by GianMR -->.<title>storia del circo dall antico egitto a oggi</title>. All Meta by GianMR -->.<meta content='blogger' name='generator'/>.<meta charset='UTF-8'/>.<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>. [if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]-->.<meta content='Zero Unnamed' name='author'/>.<meta content='follow, all' name='alexabot'/>.<meta content='-5;120' name='geo.position'/>.<meta content='2021, DDR' name='copyright'/>.<meta content='en' name='language'/>.<meta content='United States' name='geo.placename'/>.<meta content='global' name='target'/>.<meta content='United States' name='geo.country'/>.<meta content='all, follow' name='robots'/>.<meta

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	3.925246814895001
Encrypted:	false
SSDEEP:	3:JO8KI8y7cRjACyREwnYAFD01:JV8qcRjDyR9nYAO1
MD5:	E7E8C3A0C8AF5F8FF44EB089EB34A8C1
SHA1:	C17601BEF241C041E3EC3EE6BCA08F769713D03C
SHA-256:	3A90C56BBC2EA3FAE7E089CC529BC02869C5035EE31C3111D829B9AE974CF42D
SHA-512:	3D3B83CCFC1D9625C7322045EFD6B64749B7360249C0DDD3852A230A62701097ED444FBF07F1C4ADE7B5E67AAABD09BE86605926F0D24A2B76002B9299E5A30D
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-10-768x664.jpg
Preview:	We cannot complete this request, remote data could not be fetched

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2302), with no line terminators
Category:	downloaded
Size (bytes):	2302
Entropy (8bit):	5.24451023097325
Encrypted:	false
SSDEEP:	48:q+WXAFEcCYHX/UCDMnvbRgXK8DHXBiCgrn:q6DPPsRgX/2
MD5:	43B17C7B81B6281CA01991A2E5CAE3A7
SHA1:	53C5AFCE279E067ED8C78A08A1A80ED2AC1AC27A
SHA-256:	A865904878986BA6CAF73C5416DB4B7E04B947546446E04F0BE94C2308A9A275
SHA-512:	1C0DA777D0163874117680B29BBD2C2229E20D6EFC0521A4C019E7CF34FBB001C2AEA07EBFBA742C420FC0C43AA83A1637A2AB48CA43B89E802DD0787D332A71
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Preview:	<div style="background-color:transparent; width: 100%; text-align: center;"> <script type="text/javascript"> var ltIframe;function ltIframea(a){return"[object Array]"===Object.prototype.toString.call(a)}function ltIframeb(a,d){if("undefined"!==typeof d){var b=!1,e;for(e in d)b?a+="\x26":(a+="?",b=!0),a+=e+"\x3d"+encodeURIComponent(""+d[e])}return a} function ltIframec(a){var d="https://"+(a.bcpPrefix+".crwdcntrl.net")+"/pixels",b={src:"LTJS"};ltIframea(a.syncPixels)&&0<a.syncPixels.length&&(b.s=a.syncPixels);ltIframea(a.exportBeacons)&&0<a.exportBeacons.length&&(b.b=a.exportBeacons);a.tcString&&(b.db=a.tcString);var e="lt_3p_px_";"undefined"===typeof a.clientId\|\|isNaN(parseInt(a.clientId,10))?e+=(new Date).getTime():(e+=parseInt(a.clientId,10),b.c=a.clientId);a.clientHints&&(b.ch=JSON.stringify(a.clientHints));var c=document.createElement("iframe"); c.setAttribute("id",e);c.setAttribute("src",ltIframeb(d,b));c.setAttribute("title","empty");c.setAttribute("tabindex","-1");c.setAttribute

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1350
Entropy (8bit):	4.45198998064372
Encrypted:	false
SSDEEP:	24:koJjGgYlojGdY2ydFpLclLSxtio5/6LKdaLZuCqLLZ5QaLZq8LZRcnZvD0lfyqE:+VU755qRmiGzuZvQty3
MD5:	E919668A6BD415E0DABAAFA1677FEF7B
SHA1:	0CBE1CEFCD335D16A4302142F0E8B5526F83C2B2
SHA-256:	3603BF8DA06845EAF180D501600B8E9AC02EC6B7FFE5714652AC3B69F5A83A0B
SHA-512:	E8F5A21E7D40B5AC40395E17982B1E2D0E3759292588089C3EC38D08D7BB67076C08527F74063858081683452F30A4BE73EA8BF019FF91C8338FAE1E24B614F8
Malicious:	false
Reputation:	low
URL:	https://t.dtscout.com/idg/?su=1040172804192949803086BC6CA2270E
Preview:	<html><head></head><body><script>.window.onload = function() {. var uid_g = '1040172804192949803086BC6CA2270E'; . var uid_s = '10401728041930445C963AE479D4F2BB'; . var uid_su = '1040172804192949803086BC6CA2270E';.. var debug = {};. var pass_uid = false;. var method = false;.. if(uid_g && uid_g.length > 0) {. method = "got";. pass_uid = uid_g;. } else if(uid_su && uid_su.length > 0) {. method = "setu";. pass_uid = uid_su;. } else if(uid_s.length > 0) {. method = "set";. pass_uid = uid_s;. }.. debug.pass_method = method;. debug.pass_uid = pass_uid;.. var ls_uid = null;. try {. var ls_uid = localStorage.getItem('uid');. debug.ls_uid = ls_uid;.. var uid = false. if(method == 'got') {. uid = pass_uid;. debug.uid_src = 'got';. } else if(ls_uid) {. uid = ls_uid;. debug.uid_src = 'ls';. } else {. uid = pass_uid;.

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65414)
Category:	downloaded
Size (bytes):	101307
Entropy (8bit):	5.216832650816625
Encrypted:	false
SSDEEP:	768:3fKOKEKuhZ4wx/LwwWLZ9kVH32o3PpkEra5HXOC8I3ZoodffexHs:3/hZ4wx/swWLZ9kAoaea53OC8k7
MD5:	C5B940767BB7CDE09ABC7A03EE4A98BD
SHA1:	87E581D0DEDF746D8B6B59D9AB6E8808FE1543CD
SHA-256:	491EB25D8B52DCED54EBE72E1A06B992626E2F494F7A9CF430D94761BCC3DA93
SHA-512:	7BC0046E0FAA92D26D5CE8999F3FD8EAAAB3FCA925011A67BE63BD9C4DDB1FFD4851DB07B1FA55DC9FD9A058724A6DF963C39F0571FE21E0CED161578D3721CC
Malicious:	false
Reputation:	low
URL:	https://youruno-chicka.blogspot.com/feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist
Preview:	// API callback.recentpostslist({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345"},"updated":{"$t":"2024-08-30T00:20:22.833-07:00"},"category":[{"term":"2014"},{"term":"2013"},{"term":"answers"},{"term":"antico"},{"term":"applied"},{"term":"avery"},{"term":"berkel"},{"term":"board"},{"term":"chttagong"},{"term":"circo"},{"term":"colouring"},{"term":"combined"},{"term":"dall"},{"term":"drilling"},{"term":"economic"},{"term":"egitto"},{"term":"engineering"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"q

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	16920
Entropy (8bit):	7.988240683163521
Encrypted:	false
SSDEEP:	384:S8PtMQMO4PY3nyMhs473H+9+PI3YIPisrXup6LwLq0t5R5Vy:xPo45s4KVRPiA7et5R5
MD5:	2DBDAA85A1F6BC25CDCADBF7331D4795
SHA1:	81F17FDCBAAD5F616F393C1B213BA1891FC3E19F
SHA-256:	17A6456A5B794C243F62B2B2E2E9C4977DE26333AA93870C626B7EA9ADB413BF
SHA-512:	FDE2398ACE3E5D1C61E4CA133B907C2C09F13345CB8125E638ED3F08B02FF09FD14E8F734DA990B8E81B5365D830E8711436F06D4B56708C8B04E7E0995583D1
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/www.fortementein.com/wp-content/uploads/2020/03/tut-real-exp-4k-021019-0-00-36-05_49614444902_o.jpg
Preview:	RIFF.B..WEBPVP8 .B...9.....@.>.R.L.9.0..9.@..gnP.7W.......O/....Q.].9?.. Gp.g..t.........=..........`.O.~.w...fj.4.....&..MP..jX.@Jj./.R.=..ST1~.1......`.x.]..qU\|..........In...{.C.~[...g...(............. d.U_..~z.....H/e.....Ei5dZ:.g.....ss.MF..S4..^>U.....(V...q.......qc.c?VS.%..2..v.......s..9..N.......i....;........{J.!.n.^p..X.E....#.I:.......c...,.\|...`dM.Mr.u]....P..PW61....ml..p}L.J...P(M..i.......l3.M.L. 4.G.....X....6.F..1... >..b.&.s..3...4.}?r{.2.,wy.R=}..5.g...eF.5..t.)...d"...RgCI0.r=....3...)..A+..E.....&h.8...Tk..f.I..o....r.a........"....n..;.!..F.m1.>=.W..~.'...P..&..c....P.........m.:....k.......d.aJ.0=V.t.}d.A.B.n.0C.#W...._X.iV^...p.Z.w.W.H.`..)..7V.X.."N..1.8.).....,..:...^..I..KSc4M.'.>EU......pT.U)...j.V..N. ..4....u}.\|...._..L.U#..p.K..p...3...G..\|X.Y..&T.3..Y....VX...-....=.......O,%.q.6.F.')...}.6.~..`...q....`..~...5RJ...O....c... .]S........RE.v..H..[..-Ol&.Z>..R!.............)......%4...;.x..^.....

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 430, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	40407
Entropy (8bit):	7.9811772992771575
Encrypted:	false
SSDEEP:	768:geqHH7RGRzrWtWEjn91NFl4JjjMk0vvvwejx6+LjBmtbbb27ZMWq+n/b8PvnQefI:ynti+N9xGjjMPv3hxRLjBmtbbb27Zxtn
MD5:	D0B6E8B28B856D61A80E5357D544C4A6
SHA1:	B0CA8CDA11E3839BBA828F75CE10223F0B020345
SHA-256:	4AFC86434D8751DBBF1E931C0006FCC63F9278080ACEE2DE370A6441204D30F4
SHA-512:	E87C481A137DD6380CFD1F283986D3C99F3C631FFB8CD32B9E93BF77F446AE5DDFECCDC474B8046B0B03B56AF34241988790F0B17E89FBE4AB6DBCD93CA4C8E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4......gAMA......a.....sRGB........(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:19362971901D11E8A35EEED1F0E5E315" xmpMM:DocumentID="xmp.did:19362972901D11E8A35EEED1F0E5E315"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1936296F901D11E8A35EEED1F0E5E315" stRef:documentID="xmp.did:19362970901D11E8A35EEED1F0E5E315"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........tEXtSoftware.Adobe ImageReadyq.e<....PLTE....$\.......#`G....K...CF...N..Z....!^..L:................>Dy)/jBH\|....

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 13:38:43.619719982 CEST	192.168.2.5	1.1.1.1	0xfad3	Standard query (0)	youruno-chicka.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:43.620034933 CEST	192.168.2.5	1.1.1.1	0x2f74	Standard query (0)	youruno-chicka.blogspot.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:44.877906084 CEST	192.168.2.5	1.1.1.1	0x1c70	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.878710985 CEST	192.168.2.5	1.1.1.1	0xd258	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:44.880209923 CEST	192.168.2.5	1.1.1.1	0x7f83	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.880876064 CEST	192.168.2.5	1.1.1.1	0x109b	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:44.882174015 CEST	192.168.2.5	1.1.1.1	0x64c7	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.882745981 CEST	192.168.2.5	1.1.1.1	0x900e	Standard query (0)	book5download.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:44.910958052 CEST	192.168.2.5	1.1.1.1	0x770c	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:45.602108955 CEST	192.168.2.5	1.1.1.1	0x4a32	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:45.602593899 CEST	192.168.2.5	1.1.1.1	0xef36	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:46.307405949 CEST	192.168.2.5	1.1.1.1	0xa856	Standard query (0)	i2.wp.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:46.308007002 CEST	192.168.2.5	1.1.1.1	0xd70c	Standard query (0)	i2.wp.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:46.416136980 CEST	192.168.2.5	1.1.1.1	0xc0dd	Standard query (0)	s10.histats.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:46.416488886 CEST	192.168.2.5	1.1.1.1	0x730c	Standard query (0)	s10.histats.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:46.926673889 CEST	192.168.2.5	1.1.1.1	0x2ac0	Standard query (0)	i.pinimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:46.927310944 CEST	192.168.2.5	1.1.1.1	0xd5b	Standard query (0)	i.pinimg.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:47.553050041 CEST	192.168.2.5	1.1.1.1	0x2e01	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.553352118 CEST	192.168.2.5	1.1.1.1	0xe4d2	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:47.557898045 CEST	192.168.2.5	1.1.1.1	0xedb2	Standard query (0)	youruno-chicka.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.558867931 CEST	192.168.2.5	1.1.1.1	0x5e31	Standard query (0)	youruno-chicka.blogspot.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:47.563740969 CEST	192.168.2.5	1.1.1.1	0x5a94	Standard query (0)	i2.wp.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.564011097 CEST	192.168.2.5	1.1.1.1	0xd93c	Standard query (0)	i2.wp.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:47.567539930 CEST	192.168.2.5	1.1.1.1	0x29ca	Standard query (0)	s10.histats.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.567933083 CEST	192.168.2.5	1.1.1.1	0x1cd5	Standard query (0)	s10.histats.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:47.984462976 CEST	192.168.2.5	1.1.1.1	0x1b8b	Standard query (0)	s4.histats.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.985308886 CEST	192.168.2.5	1.1.1.1	0xe08e	Standard query (0)	s4.histats.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:48.802000999 CEST	192.168.2.5	1.1.1.1	0xd4f5	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.802227974 CEST	192.168.2.5	1.1.1.1	0xd32	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:48.808373928 CEST	192.168.2.5	1.1.1.1	0x9495	Standard query (0)	i.pinimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.808553934 CEST	192.168.2.5	1.1.1.1	0x60af	Standard query (0)	i.pinimg.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:48.841145992 CEST	192.168.2.5	1.1.1.1	0x6852	Standard query (0)	s4.histats.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.841669083 CEST	192.168.2.5	1.1.1.1	0xd30c	Standard query (0)	s4.histats.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:49.858968019 CEST	192.168.2.5	1.1.1.1	0x32ac	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.859185934 CEST	192.168.2.5	1.1.1.1	0x3207	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:49.859865904 CEST	192.168.2.5	1.1.1.1	0xf7d1	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.860227108 CEST	192.168.2.5	1.1.1.1	0x5e79	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:49.860868931 CEST	192.168.2.5	1.1.1.1	0x31aa	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.861227036 CEST	192.168.2.5	1.1.1.1	0xde4	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:49.861860991 CEST	192.168.2.5	1.1.1.1	0xaa16	Standard query (0)	cdn.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.862217903 CEST	192.168.2.5	1.1.1.1	0xf09f	Standard query (0)	cdn.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:49.862852097 CEST	192.168.2.5	1.1.1.1	0x3c34	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.863219023 CEST	192.168.2.5	1.1.1.1	0xe281	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:49.863883972 CEST	192.168.2.5	1.1.1.1	0xeb7	Standard query (0)	dtsedge.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.864264011 CEST	192.168.2.5	1.1.1.1	0x9615	Standard query (0)	dtsedge.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:49.896358013 CEST	192.168.2.5	1.1.1.1	0xd268	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.896610022 CEST	192.168.2.5	1.1.1.1	0xb84	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.594683886 CEST	192.168.2.5	1.1.1.1	0x311f	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.595026016 CEST	192.168.2.5	1.1.1.1	0xb1be	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.595226049 CEST	192.168.2.5	1.1.1.1	0x734a	Standard query (0)	cdn.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.595413923 CEST	192.168.2.5	1.1.1.1	0x5b62	Standard query (0)	cdn.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.616188049 CEST	192.168.2.5	1.1.1.1	0x7ec3	Standard query (0)	ic.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.616379023 CEST	192.168.2.5	1.1.1.1	0xe232	Standard query (0)	ic.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.621743917 CEST	192.168.2.5	1.1.1.1	0xbb3	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.621887922 CEST	192.168.2.5	1.1.1.1	0xfdc3	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.622594118 CEST	192.168.2.5	1.1.1.1	0x5e5c	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.622966051 CEST	192.168.2.5	1.1.1.1	0x5d6	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.623986006 CEST	192.168.2.5	1.1.1.1	0xe37d	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.624351978 CEST	192.168.2.5	1.1.1.1	0xf4c6	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.895044088 CEST	192.168.2.5	1.1.1.1	0x3c52	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.895256996 CEST	192.168.2.5	1.1.1.1	0x17c2	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.895840883 CEST	192.168.2.5	1.1.1.1	0xcca2	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.895840883 CEST	192.168.2.5	1.1.1.1	0x1de5	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:50.901643991 CEST	192.168.2.5	1.1.1.1	0xb5ab	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.901920080 CEST	192.168.2.5	1.1.1.1	0x4a53	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.259192944 CEST	192.168.2.5	1.1.1.1	0xaa04	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.259664059 CEST	192.168.2.5	1.1.1.1	0x853	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.304658890 CEST	192.168.2.5	1.1.1.1	0xd9c8	Standard query (0)	dtsedge.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.304836035 CEST	192.168.2.5	1.1.1.1	0x810c	Standard query (0)	dtsedge.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.306355953 CEST	192.168.2.5	1.1.1.1	0x69f9	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.306519985 CEST	192.168.2.5	1.1.1.1	0xe00a	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.372006893 CEST	192.168.2.5	1.1.1.1	0xaa4d	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.372174978 CEST	192.168.2.5	1.1.1.1	0x4f7	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.394570112 CEST	192.168.2.5	1.1.1.1	0xa624	Standard query (0)	ic.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.394778967 CEST	192.168.2.5	1.1.1.1	0x61df	Standard query (0)	ic.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.569107056 CEST	192.168.2.5	1.1.1.1	0x8c43	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.569502115 CEST	192.168.2.5	1.1.1.1	0x98c8	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.592544079 CEST	192.168.2.5	1.1.1.1	0x1fb2	Standard query (0)	cdn-tc.33across.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.592799902 CEST	192.168.2.5	1.1.1.1	0xe580	Standard query (0)	cdn-tc.33across.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.593313932 CEST	192.168.2.5	1.1.1.1	0xd990	Standard query (0)	i.simpli.fi	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.593646049 CEST	192.168.2.5	1.1.1.1	0x631d	Standard query (0)	i.simpli.fi	65	IN (0x0001)	false
Oct 4, 2024 13:38:51.846611977 CEST	192.168.2.5	1.1.1.1	0x9956	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.846792936 CEST	192.168.2.5	1.1.1.1	0xe894	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Oct 4, 2024 13:38:52.256876945 CEST	192.168.2.5	1.1.1.1	0x33a1	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.257759094 CEST	192.168.2.5	1.1.1.1	0x1188	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Oct 4, 2024 13:38:52.312453032 CEST	192.168.2.5	1.1.1.1	0x5e03	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.312880993 CEST	192.168.2.5	1.1.1.1	0xdb9c	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:52.313556910 CEST	192.168.2.5	1.1.1.1	0xace1	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.313882113 CEST	192.168.2.5	1.1.1.1	0x52c8	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:52.496495008 CEST	192.168.2.5	1.1.1.1	0xcea6	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.497258902 CEST	192.168.2.5	1.1.1.1	0xb63b	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:54.691422939 CEST	192.168.2.5	1.1.1.1	0xa44b	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.692151070 CEST	192.168.2.5	1.1.1.1	0x8ee9	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Oct 4, 2024 13:38:56.198148012 CEST	192.168.2.5	1.1.1.1	0x8b59	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.198528051 CEST	192.168.2.5	1.1.1.1	0x68fe	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Oct 4, 2024 13:38:56.324687958 CEST	192.168.2.5	1.1.1.1	0xa1e1	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.324891090 CEST	192.168.2.5	1.1.1.1	0x531	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Oct 4, 2024 13:38:56.351726055 CEST	192.168.2.5	1.1.1.1	0xd48f	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.352185011 CEST	192.168.2.5	1.1.1.1	0xfde3	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 4, 2024 13:38:56.357393026 CEST	192.168.2.5	1.1.1.1	0xd7fe	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.357917070 CEST	192.168.2.5	1.1.1.1	0xbf50	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:56.358629942 CEST	192.168.2.5	1.1.1.1	0x496c	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.358908892 CEST	192.168.2.5	1.1.1.1	0xddd4	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Oct 4, 2024 13:38:56.359975100 CEST	192.168.2.5	1.1.1.1	0xf1c3	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.360523939 CEST	192.168.2.5	1.1.1.1	0xd5d2	Standard query (0)	ml314.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:57.531313896 CEST	192.168.2.5	1.1.1.1	0x9e3c	Standard query (0)	a.dtssrv.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:57.531584024 CEST	192.168.2.5	1.1.1.1	0x3449	Standard query (0)	a.dtssrv.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:58.997036934 CEST	192.168.2.5	1.1.1.1	0xe24f	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:58.997581959 CEST	192.168.2.5	1.1.1.1	0x2fb9	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.885504961 CEST	192.168.2.5	1.1.1.1	0xd485	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.885694027 CEST	192.168.2.5	1.1.1.1	0xce07	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.886224985 CEST	192.168.2.5	1.1.1.1	0xf345	Standard query (0)	c.cintnetworks.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.886357069 CEST	192.168.2.5	1.1.1.1	0x820c	Standard query (0)	c.cintnetworks.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.886815071 CEST	192.168.2.5	1.1.1.1	0x56de	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.886951923 CEST	192.168.2.5	1.1.1.1	0x9347	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.887769938 CEST	192.168.2.5	1.1.1.1	0x36ec	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.888031006 CEST	192.168.2.5	1.1.1.1	0x9df0	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.888365984 CEST	192.168.2.5	1.1.1.1	0xa41a	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.888628006 CEST	192.168.2.5	1.1.1.1	0x1d65	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.889111042 CEST	192.168.2.5	1.1.1.1	0x5910	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.889260054 CEST	192.168.2.5	1.1.1.1	0x1a41	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.889611959 CEST	192.168.2.5	1.1.1.1	0x991f	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.889743090 CEST	192.168.2.5	1.1.1.1	0x7c27	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.890094042 CEST	192.168.2.5	1.1.1.1	0x5d97	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.890250921 CEST	192.168.2.5	1.1.1.1	0x925f	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.890672922 CEST	192.168.2.5	1.1.1.1	0xadeb	Standard query (0)	global.ib-ibi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.890810966 CEST	192.168.2.5	1.1.1.1	0xdbc9	Standard query (0)	global.ib-ibi.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:59.891479969 CEST	192.168.2.5	1.1.1.1	0x5ceb	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.891700029 CEST	192.168.2.5	1.1.1.1	0xf806	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:00.333652973 CEST	192.168.2.5	1.1.1.1	0xbc83	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.334376097 CEST	192.168.2.5	1.1.1.1	0xfe81	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:00.459484100 CEST	192.168.2.5	1.1.1.1	0x4937	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.459800005 CEST	192.168.2.5	1.1.1.1	0x6099	Standard query (0)	ml314.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:00.853789091 CEST	192.168.2.5	1.1.1.1	0x9a65	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.854233027 CEST	192.168.2.5	1.1.1.1	0xe824	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:00.879358053 CEST	192.168.2.5	1.1.1.1	0x2bbb	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.879754066 CEST	192.168.2.5	1.1.1.1	0xe157	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Oct 4, 2024 13:39:00.896878958 CEST	192.168.2.5	1.1.1.1	0x8986	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.897104025 CEST	192.168.2.5	1.1.1.1	0x8203	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:00.957364082 CEST	192.168.2.5	1.1.1.1	0x7621	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.957952976 CEST	192.168.2.5	1.1.1.1	0xb91d	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:00.976871014 CEST	192.168.2.5	1.1.1.1	0xfcbd	Standard query (0)	c.cintnetworks.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.977124929 CEST	192.168.2.5	1.1.1.1	0x3226	Standard query (0)	c.cintnetworks.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:01.697514057 CEST	192.168.2.5	1.1.1.1	0x77d	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.697691917 CEST	192.168.2.5	1.1.1.1	0x57ac	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:01.704241991 CEST	192.168.2.5	1.1.1.1	0x6ffb	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.704428911 CEST	192.168.2.5	1.1.1.1	0xb	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:01.907766104 CEST	192.168.2.5	1.1.1.1	0x7f55	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.908008099 CEST	192.168.2.5	1.1.1.1	0x93c1	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:02.060636997 CEST	192.168.2.5	1.1.1.1	0xbf7e	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.060792923 CEST	192.168.2.5	1.1.1.1	0x3bfe	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:02.061610937 CEST	192.168.2.5	1.1.1.1	0xa28a	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.061791897 CEST	192.168.2.5	1.1.1.1	0x276	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:02.417150974 CEST	192.168.2.5	1.1.1.1	0x4584	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.417402029 CEST	192.168.2.5	1.1.1.1	0x360f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:02.426147938 CEST	192.168.2.5	1.1.1.1	0x447c	Standard query (0)	dmp.truoptik.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.426311970 CEST	192.168.2.5	1.1.1.1	0x2efa	Standard query (0)	dmp.truoptik.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:02.434253931 CEST	192.168.2.5	1.1.1.1	0x2bd8	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.434604883 CEST	192.168.2.5	1.1.1.1	0xa9c1	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:02.598382950 CEST	192.168.2.5	1.1.1.1	0x8d0e	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.598649979 CEST	192.168.2.5	1.1.1.1	0x7f47	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:02.820677996 CEST	192.168.2.5	1.1.1.1	0x695f	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.821115971 CEST	192.168.2.5	1.1.1.1	0x6a2a	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.112113953 CEST	192.168.2.5	1.1.1.1	0xb70d	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.112363100 CEST	192.168.2.5	1.1.1.1	0xe5e1	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.156404018 CEST	192.168.2.5	1.1.1.1	0x97e7	Standard query (0)	api.intentiq.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.156625032 CEST	192.168.2.5	1.1.1.1	0x75ac	Standard query (0)	api.intentiq.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.182542086 CEST	192.168.2.5	1.1.1.1	0xf16c	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.182713032 CEST	192.168.2.5	1.1.1.1	0x28db	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.183948994 CEST	192.168.2.5	1.1.1.1	0x261	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.184504986 CEST	192.168.2.5	1.1.1.1	0xa3c	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.184813976 CEST	192.168.2.5	1.1.1.1	0x9d01	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.184813976 CEST	192.168.2.5	1.1.1.1	0xffb	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.186552048 CEST	192.168.2.5	1.1.1.1	0x31d2	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.186837912 CEST	192.168.2.5	1.1.1.1	0xf5f5	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.187037945 CEST	192.168.2.5	1.1.1.1	0xbf95	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.187037945 CEST	192.168.2.5	1.1.1.1	0x297c	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.192780972 CEST	192.168.2.5	1.1.1.1	0x5db0	Standard query (0)	aqfer.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.193187952 CEST	192.168.2.5	1.1.1.1	0x435	Standard query (0)	aqfer.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.884140968 CEST	192.168.2.5	1.1.1.1	0xf94a	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.884423971 CEST	192.168.2.5	1.1.1.1	0xb983	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.972899914 CEST	192.168.2.5	1.1.1.1	0xc192	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.973026037 CEST	192.168.2.5	1.1.1.1	0xa75c	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:04.319250107 CEST	192.168.2.5	1.1.1.1	0xba10	Standard query (0)	agent.intentiq.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.319619894 CEST	192.168.2.5	1.1.1.1	0x4c5e	Standard query (0)	agent.intentiq.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:04.503865957 CEST	192.168.2.5	1.1.1.1	0x52c	Standard query (0)	aqfer.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.503999949 CEST	192.168.2.5	1.1.1.1	0x6698	Standard query (0)	aqfer.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:04.522162914 CEST	192.168.2.5	1.1.1.1	0x5042	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.522392988 CEST	192.168.2.5	1.1.1.1	0x72b8	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:04.562320948 CEST	192.168.2.5	1.1.1.1	0x8bab	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.562779903 CEST	192.168.2.5	1.1.1.1	0xc373	Standard query (0)	loadm.exelator.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:04.804112911 CEST	192.168.2.5	1.1.1.1	0x32a5	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.804497957 CEST	192.168.2.5	1.1.1.1	0xe2bd	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:05.504519939 CEST	192.168.2.5	1.1.1.1	0xb270	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.505109072 CEST	192.168.2.5	1.1.1.1	0xc726	Standard query (0)	book5download.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:05.648042917 CEST	192.168.2.5	1.1.1.1	0x5691	Standard query (0)	agent.intentiq.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.648207903 CEST	192.168.2.5	1.1.1.1	0xc1db	Standard query (0)	agent.intentiq.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:05.657459021 CEST	192.168.2.5	1.1.1.1	0x6943	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.657797098 CEST	192.168.2.5	1.1.1.1	0xbe82	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:05.681263924 CEST	192.168.2.5	1.1.1.1	0x84cf	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.100197077 CEST	192.168.2.5	1.1.1.1	0x4624	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.100474119 CEST	192.168.2.5	1.1.1.1	0xae3a	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:06.105011940 CEST	192.168.2.5	1.1.1.1	0x5e1	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.105305910 CEST	192.168.2.5	1.1.1.1	0x6b1c	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:06.441339970 CEST	192.168.2.5	1.1.1.1	0x1005	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.441339970 CEST	192.168.2.5	1.1.1.1	0xad3c	Standard query (0)	i.w55c.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:08.800915956 CEST	192.168.2.5	1.1.1.1	0xe4b4	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.801590919 CEST	192.168.2.5	1.1.1.1	0x839d	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:09.448786020 CEST	192.168.2.5	1.1.1.1	0x4f70	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.449011087 CEST	192.168.2.5	1.1.1.1	0x1fcb	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:09.566020012 CEST	192.168.2.5	1.1.1.1	0xcb50	Standard query (0)	dp2.33across.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.567003965 CEST	192.168.2.5	1.1.1.1	0xce14	Standard query (0)	dp2.33across.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:09.567003965 CEST	192.168.2.5	1.1.1.1	0xac6d	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.567428112 CEST	192.168.2.5	1.1.1.1	0xa6ca	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:09.568423986 CEST	192.168.2.5	1.1.1.1	0x1334	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.568871975 CEST	192.168.2.5	1.1.1.1	0x79ca	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:09.569478989 CEST	192.168.2.5	1.1.1.1	0x6ca	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.570153952 CEST	192.168.2.5	1.1.1.1	0x58e1	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:09.649454117 CEST	192.168.2.5	1.1.1.1	0xb5f0	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.650012970 CEST	192.168.2.5	1.1.1.1	0xe24c	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:10.472634077 CEST	192.168.2.5	1.1.1.1	0x8d17	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.473198891 CEST	192.168.2.5	1.1.1.1	0xbe0d	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:10.600789070 CEST	192.168.2.5	1.1.1.1	0xfaf9	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.601568937 CEST	192.168.2.5	1.1.1.1	0xe02	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:10.791676998 CEST	192.168.2.5	1.1.1.1	0xb29e	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.792099953 CEST	192.168.2.5	1.1.1.1	0x618e	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:10.799181938 CEST	192.168.2.5	1.1.1.1	0x7b3d	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.799609900 CEST	192.168.2.5	1.1.1.1	0x9833	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:10.848617077 CEST	192.168.2.5	1.1.1.1	0xee5f	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.849396944 CEST	192.168.2.5	1.1.1.1	0xb8aa	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:10.923928976 CEST	192.168.2.5	1.1.1.1	0x5bc1	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.924702883 CEST	192.168.2.5	1.1.1.1	0x85ca	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:11.501210928 CEST	192.168.2.5	1.1.1.1	0x9507	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:11.501858950 CEST	192.168.2.5	1.1.1.1	0xd273	Standard query (0)	pippio.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:13.812305927 CEST	192.168.2.5	1.1.1.1	0x49e1	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.812735081 CEST	192.168.2.5	1.1.1.1	0xd9eb	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:15.476018906 CEST	192.168.2.5	1.1.1.1	0x5e2a	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:15.476289034 CEST	192.168.2.5	1.1.1.1	0x7495	Standard query (0)	pippio.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:17.946505070 CEST	192.168.2.5	1.1.1.1	0x9bd1	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:17.946715117 CEST	192.168.2.5	1.1.1.1	0x91f8	Standard query (0)	book5download.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:17.975224972 CEST	192.168.2.5	1.1.1.1	0x30b5	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:19.539364100 CEST	192.168.2.5	1.1.1.1	0x52aa	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:19.539700985 CEST	192.168.2.5	1.1.1.1	0xb7d	Standard query (0)	book5download.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:19.882076979 CEST	192.168.2.5	1.1.1.1	0x905a	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:19.883008003 CEST	192.168.2.5	1.1.1.1	0x1d21	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Oct 4, 2024 13:39:22.181765079 CEST	192.168.2.5	1.1.1.1	0x8f93	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:22.182293892 CEST	192.168.2.5	1.1.1.1	0xe9d8	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:23.519800901 CEST	192.168.2.5	1.1.1.1	0x18ba	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:23.520251036 CEST	192.168.2.5	1.1.1.1	0x3c47	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:24.051404953 CEST	192.168.2.5	1.1.1.1	0x2588	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:24.052011967 CEST	192.168.2.5	1.1.1.1	0xe76	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:24.843362093 CEST	192.168.2.5	1.1.1.1	0x396	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:24.843744993 CEST	192.168.2.5	1.1.1.1	0x1172	Standard query (0)	ml314.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:24.848925114 CEST	192.168.2.5	1.1.1.1	0x723d	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:24.852535009 CEST	192.168.2.5	1.1.1.1	0x95c2	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:26.561320066 CEST	192.168.2.5	1.1.1.1	0xc643	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.561552048 CEST	192.168.2.5	1.1.1.1	0x347a	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:27.276175976 CEST	192.168.2.5	1.1.1.1	0x6b5c	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.276402950 CEST	192.168.2.5	1.1.1.1	0x83ce	Standard query (0)	pippio.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:27.403107882 CEST	192.168.2.5	1.1.1.1	0xcfd3	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.403305054 CEST	192.168.2.5	1.1.1.1	0xef83	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:27.538214922 CEST	192.168.2.5	1.1.1.1	0xe3cd	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.538360119 CEST	192.168.2.5	1.1.1.1	0xcec8	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:31.269510984 CEST	192.168.2.5	1.1.1.1	0xa309	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.927690983 CEST	192.168.2.5	1.1.1.1	0x6eb4	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.929656982 CEST	192.168.2.5	1.1.1.1	0xcc4a	Standard query (0)	book5download.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:31.952718973 CEST	192.168.2.5	1.1.1.1	0x67b7	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:33.363730907 CEST	192.168.2.5	1.1.1.1	0xef88	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:33.366553068 CEST	192.168.2.5	1.1.1.1	0xabfd	Standard query (0)	book5download.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:34.925365925 CEST	192.168.2.5	1.1.1.1	0x240e	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:34.925889969 CEST	192.168.2.5	1.1.1.1	0xa9a4	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:37.866513014 CEST	192.168.2.5	1.1.1.1	0xa469	Standard query (0)	1.bp.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:37.895561934 CEST	192.168.2.5	1.1.1.1	0x36d1	Standard query (0)	1.bp.blogspot.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:38.258021116 CEST	192.168.2.5	1.1.1.1	0xcf1b	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:38.258217096 CEST	192.168.2.5	1.1.1.1	0xf6a9	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 4, 2024 13:39:39.163157940 CEST	192.168.2.5	1.1.1.1	0x24c4	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:39.163439989 CEST	192.168.2.5	1.1.1.1	0x4e03	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:39.624604940 CEST	192.168.2.5	1.1.1.1	0x5d9c	Standard query (0)	1.bp.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:39.625081062 CEST	192.168.2.5	1.1.1.1	0x3f21	Standard query (0)	1.bp.blogspot.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:40.023597956 CEST	192.168.2.5	1.1.1.1	0xd968	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:40.023683071 CEST	192.168.2.5	1.1.1.1	0xeb71	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:40.594630957 CEST	192.168.2.5	1.1.1.1	0x3672	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:40.594768047 CEST	192.168.2.5	1.1.1.1	0x124c	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:40.716980934 CEST	192.168.2.5	1.1.1.1	0xe08a	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:40.717113972 CEST	192.168.2.5	1.1.1.1	0x2fd7	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:41.057564974 CEST	192.168.2.5	1.1.1.1	0xd3be	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.057717085 CEST	192.168.2.5	1.1.1.1	0x8b53	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:41.301405907 CEST	192.168.2.5	1.1.1.1	0xfa44	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.302056074 CEST	192.168.2.5	1.1.1.1	0xaa0b	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:41.794461966 CEST	192.168.2.5	1.1.1.1	0xe93d	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.795027971 CEST	192.168.2.5	1.1.1.1	0x1f1d	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:41.870203018 CEST	192.168.2.5	1.1.1.1	0xd64c	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.870203018 CEST	192.168.2.5	1.1.1.1	0xdb8	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:42.209358931 CEST	192.168.2.5	1.1.1.1	0xabdb	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.209708929 CEST	192.168.2.5	1.1.1.1	0x5a16	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:42.211308956 CEST	192.168.2.5	1.1.1.1	0xb614	Standard query (0)	ads.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.211735010 CEST	192.168.2.5	1.1.1.1	0xceb0	Standard query (0)	ads.scorecardresearch.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:42.226596117 CEST	192.168.2.5	1.1.1.1	0x2b4a	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.226922035 CEST	192.168.2.5	1.1.1.1	0xd20e	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:42.282267094 CEST	192.168.2.5	1.1.1.1	0xb341	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.282461882 CEST	192.168.2.5	1.1.1.1	0x82a6	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:42.415515900 CEST	192.168.2.5	1.1.1.1	0x2bc8	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.415668011 CEST	192.168.2.5	1.1.1.1	0xdeef	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:43.103243113 CEST	192.168.2.5	1.1.1.1	0x68ee	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.103801012 CEST	192.168.2.5	1.1.1.1	0x52db	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:43.160841942 CEST	192.168.2.5	1.1.1.1	0xf9fd	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.161014080 CEST	192.168.2.5	1.1.1.1	0xc5d9	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:43.162949085 CEST	192.168.2.5	1.1.1.1	0x67c6	Standard query (0)	pixel.nordicdataresources.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.163168907 CEST	192.168.2.5	1.1.1.1	0x80b	Standard query (0)	pixel.nordicdataresources.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:43.190165043 CEST	192.168.2.5	1.1.1.1	0xdace	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.190320969 CEST	192.168.2.5	1.1.1.1	0x2723	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:43.933957100 CEST	192.168.2.5	1.1.1.1	0x9cfd	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.934140921 CEST	192.168.2.5	1.1.1.1	0xb3f5	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 4, 2024 13:39:44.671405077 CEST	192.168.2.5	1.1.1.1	0x4f0d	Standard query (0)	dis.eu.criteo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:44.671688080 CEST	192.168.2.5	1.1.1.1	0xeb6f	Standard query (0)	dis.eu.criteo.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:45.220153093 CEST	192.168.2.5	1.1.1.1	0x98a	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.220424891 CEST	192.168.2.5	1.1.1.1	0x7da5	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:45.708915949 CEST	192.168.2.5	1.1.1.1	0xaee7	Standard query (0)	pixel.nordicdataresources.net	65	IN (0x0001)	false
Oct 4, 2024 13:39:45.708915949 CEST	192.168.2.5	1.1.1.1	0x3a22	Standard query (0)	pixel.nordicdataresources.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.900266886 CEST	192.168.2.5	1.1.1.1	0x961b	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.900268078 CEST	192.168.2.5	1.1.1.1	0xb9f5	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:47.031353951 CEST	192.168.2.5	1.1.1.1	0xe1be	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.031503916 CEST	192.168.2.5	1.1.1.1	0xe00	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:47.588354111 CEST	192.168.2.5	1.1.1.1	0x27b2	Standard query (0)	idsync.reson8.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.588582039 CEST	192.168.2.5	1.1.1.1	0xdd52	Standard query (0)	idsync.reson8.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:47.919007063 CEST	192.168.2.5	1.1.1.1	0xf212	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.919141054 CEST	192.168.2.5	1.1.1.1	0xea87	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:47.919302940 CEST	192.168.2.5	1.1.1.1	0x39cd	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.919439077 CEST	192.168.2.5	1.1.1.1	0xfcf3	Standard query (0)	book5download.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:47.922493935 CEST	192.168.2.5	1.1.1.1	0x9534	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.922641993 CEST	192.168.2.5	1.1.1.1	0xc0f7	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:47.933990955 CEST	192.168.2.5	1.1.1.1	0x34e2	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:49.504662991 CEST	192.168.2.5	1.1.1.1	0x360e	Standard query (0)	book5download.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:49.504846096 CEST	192.168.2.5	1.1.1.1	0x3538	Standard query (0)	book5download.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:50.091639042 CEST	192.168.2.5	1.1.1.1	0xfb85	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.091761112 CEST	192.168.2.5	1.1.1.1	0x24c	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:50.117835045 CEST	192.168.2.5	1.1.1.1	0x2748	Standard query (0)	i.pinimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.118007898 CEST	192.168.2.5	1.1.1.1	0xba60	Standard query (0)	i.pinimg.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:50.570436954 CEST	192.168.2.5	1.1.1.1	0xa3d0	Standard query (0)	youruno-chicka.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.570836067 CEST	192.168.2.5	1.1.1.1	0x42e9	Standard query (0)	youruno-chicka.blogspot.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:50.886159897 CEST	192.168.2.5	1.1.1.1	0xb5c0	Standard query (0)	i.pinimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.886672974 CEST	192.168.2.5	1.1.1.1	0x1716	Standard query (0)	i.pinimg.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:52.968127966 CEST	192.168.2.5	1.1.1.1	0xb100	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:52.968327999 CEST	192.168.2.5	1.1.1.1	0xcad3	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:53.006448030 CEST	192.168.2.5	1.1.1.1	0x80f2	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.006977081 CEST	192.168.2.5	1.1.1.1	0x2d81	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:53.224292994 CEST	192.168.2.5	1.1.1.1	0x8233	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.224292994 CEST	192.168.2.5	1.1.1.1	0x8361	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:53.226780891 CEST	192.168.2.5	1.1.1.1	0xc395	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.226780891 CEST	192.168.2.5	1.1.1.1	0x64da	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:53.294982910 CEST	192.168.2.5	1.1.1.1	0x73c	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.295475006 CEST	192.168.2.5	1.1.1.1	0xdceb	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:53.354526043 CEST	192.168.2.5	1.1.1.1	0x4c77	Standard query (0)	ic.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.355395079 CEST	192.168.2.5	1.1.1.1	0x7ab5	Standard query (0)	ic.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:53.571655035 CEST	192.168.2.5	1.1.1.1	0xb8ca	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.572256088 CEST	192.168.2.5	1.1.1.1	0xc14c	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:54.881336927 CEST	192.168.2.5	1.1.1.1	0x98b0	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:54.881763935 CEST	192.168.2.5	1.1.1.1	0xa799	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:54.980658054 CEST	192.168.2.5	1.1.1.1	0xdfbe	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:54.980983973 CEST	192.168.2.5	1.1.1.1	0x43ac	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:55.009382963 CEST	192.168.2.5	1.1.1.1	0xea1d	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.009860039 CEST	192.168.2.5	1.1.1.1	0xddba	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:55.010823965 CEST	192.168.2.5	1.1.1.1	0xcdb0	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.011302948 CEST	192.168.2.5	1.1.1.1	0x3001	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:55.017148972 CEST	192.168.2.5	1.1.1.1	0x4cc5	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.017575979 CEST	192.168.2.5	1.1.1.1	0x6ca3	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:55.057436943 CEST	192.168.2.5	1.1.1.1	0xf979	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.058125973 CEST	192.168.2.5	1.1.1.1	0x70db	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:56.269944906 CEST	192.168.2.5	1.1.1.1	0xbab9	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.270291090 CEST	192.168.2.5	1.1.1.1	0x4c52	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:56.502623081 CEST	192.168.2.5	1.1.1.1	0xf1db	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.503062963 CEST	192.168.2.5	1.1.1.1	0xf52b	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:56.522726059 CEST	192.168.2.5	1.1.1.1	0x9370	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.523001909 CEST	192.168.2.5	1.1.1.1	0x21db	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:56.593936920 CEST	192.168.2.5	1.1.1.1	0xca92	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.594180107 CEST	192.168.2.5	1.1.1.1	0xca8	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:56.598170042 CEST	192.168.2.5	1.1.1.1	0xe4eb	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.598413944 CEST	192.168.2.5	1.1.1.1	0xf74f	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:56.776607037 CEST	192.168.2.5	1.1.1.1	0x3e09	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.777025938 CEST	192.168.2.5	1.1.1.1	0x941d	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:56.791304111 CEST	192.168.2.5	1.1.1.1	0x7ede	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.791500092 CEST	192.168.2.5	1.1.1.1	0x4749	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:56.988683939 CEST	192.168.2.5	1.1.1.1	0xd387	Standard query (0)	thrtl.redinuid.imrworldwide.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.989118099 CEST	192.168.2.5	1.1.1.1	0x4940	Standard query (0)	thrtl.redinuid.imrworldwide.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:58.164210081 CEST	192.168.2.5	1.1.1.1	0x8dd3	Standard query (0)	secure.insightexpressai.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.164442062 CEST	192.168.2.5	1.1.1.1	0xafbc	Standard query (0)	secure.insightexpressai.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:58.167798042 CEST	192.168.2.5	1.1.1.1	0xa640	Standard query (0)	nlsn.thrtle.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.167953968 CEST	192.168.2.5	1.1.1.1	0x9861	Standard query (0)	nlsn.thrtle.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:59.162817001 CEST	192.168.2.5	1.1.1.1	0x14a4	Standard query (0)	api.retargetly.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:59.163300991 CEST	192.168.2.5	1.1.1.1	0x9001	Standard query (0)	api.retargetly.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:00.133379936 CEST	192.168.2.5	1.1.1.1	0x2e07	Standard query (0)	eyeota.ck-ie.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:00.133558035 CEST	192.168.2.5	1.1.1.1	0x22ef	Standard query (0)	eyeota.ck-ie.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:01.109261036 CEST	192.168.2.5	1.1.1.1	0x6742	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:01.109615088 CEST	192.168.2.5	1.1.1.1	0xd18e	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:01.689836979 CEST	192.168.2.5	1.1.1.1	0x858f	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:01.690160990 CEST	192.168.2.5	1.1.1.1	0xb7af	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:02.287885904 CEST	192.168.2.5	1.1.1.1	0x7c67	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:02.288048983 CEST	192.168.2.5	1.1.1.1	0xbca3	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:04.270347118 CEST	192.168.2.5	1.1.1.1	0x7a4d	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:04.271068096 CEST	192.168.2.5	1.1.1.1	0x1e3	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:06.131467104 CEST	192.168.2.5	1.1.1.1	0x3243	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.131792068 CEST	192.168.2.5	1.1.1.1	0xf94c	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:06.399926901 CEST	192.168.2.5	1.1.1.1	0x89f0	Standard query (0)	api.intentiq.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.400432110 CEST	192.168.2.5	1.1.1.1	0x97c9	Standard query (0)	api.intentiq.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:06.424735069 CEST	192.168.2.5	1.1.1.1	0x9d6f	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.424995899 CEST	192.168.2.5	1.1.1.1	0xc7ba	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:06.434154987 CEST	192.168.2.5	1.1.1.1	0x2e4a	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.434577942 CEST	192.168.2.5	1.1.1.1	0x34b7	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:06.439457893 CEST	192.168.2.5	1.1.1.1	0xcd45	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.439858913 CEST	192.168.2.5	1.1.1.1	0xf468	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:07.062154055 CEST	192.168.2.5	1.1.1.1	0x384	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.062421083 CEST	192.168.2.5	1.1.1.1	0xb7e7	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:07.583235025 CEST	192.168.2.5	1.1.1.1	0xca4c	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.583784103 CEST	192.168.2.5	1.1.1.1	0xe5a1	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Oct 4, 2024 13:40:07.586867094 CEST	192.168.2.5	1.1.1.1	0x1748	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.587373972 CEST	192.168.2.5	1.1.1.1	0x1a18	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:07.638452053 CEST	192.168.2.5	1.1.1.1	0xc7cf	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.638988972 CEST	192.168.2.5	1.1.1.1	0x472d	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:08.643985033 CEST	192.168.2.5	1.1.1.1	0xb031	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.644319057 CEST	192.168.2.5	1.1.1.1	0xd0cd	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:09.957199097 CEST	192.168.2.5	1.1.1.1	0x1581	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:09.957379103 CEST	192.168.2.5	1.1.1.1	0x69f8	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 13:38:43.631267071 CEST	1.1.1.1	192.168.2.5	0xfad3	No error (0)	youruno-chicka.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:43.631267071 CEST	1.1.1.1	192.168.2.5	0xfad3	No error (0)	blogspot.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:43.646610022 CEST	1.1.1.1	192.168.2.5	0x2f74	No error (0)	youruno-chicka.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:44.885035992 CEST	1.1.1.1	192.168.2.5	0x1c70	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.885035992 CEST	1.1.1.1	192.168.2.5	0x1c70	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.885423899 CEST	1.1.1.1	192.168.2.5	0xd258	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:44.887164116 CEST	1.1.1.1	192.168.2.5	0x7f83	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.887164116 CEST	1.1.1.1	192.168.2.5	0x7f83	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.887164116 CEST	1.1.1.1	192.168.2.5	0x7f83	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.887164116 CEST	1.1.1.1	192.168.2.5	0x7f83	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.892484903 CEST	1.1.1.1	192.168.2.5	0x64c7	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:44.913538933 CEST	1.1.1.1	192.168.2.5	0x900e	Name error (3)	book5download.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:38:44.922148943 CEST	1.1.1.1	192.168.2.5	0x770c	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:45.616734028 CEST	1.1.1.1	192.168.2.5	0x4a32	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:45.617000103 CEST	1.1.1.1	192.168.2.5	0xef36	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:46.314230919 CEST	1.1.1.1	192.168.2.5	0xa856	No error (0)	i2.wp.com		192.0.77.2	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:46.423197031 CEST	1.1.1.1	192.168.2.5	0xc0dd	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:46.424549103 CEST	1.1.1.1	192.168.2.5	0x730c	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:46.940733910 CEST	1.1.1.1	192.168.2.5	0x2ac0	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:46.940733910 CEST	1.1.1.1	192.168.2.5	0x2ac0	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:46.940733910 CEST	1.1.1.1	192.168.2.5	0x2ac0	No error (0)	dualstack.pinterest.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:46.940733910 CEST	1.1.1.1	192.168.2.5	0x2ac0	No error (0)	dualstack.pinterest.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:46.940733910 CEST	1.1.1.1	192.168.2.5	0x2ac0	No error (0)	dualstack.pinterest.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:46.940733910 CEST	1.1.1.1	192.168.2.5	0x2ac0	No error (0)	dualstack.pinterest.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:46.941334009 CEST	1.1.1.1	192.168.2.5	0xd5b	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:46.941334009 CEST	1.1.1.1	192.168.2.5	0xd5b	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:47.560049057 CEST	1.1.1.1	192.168.2.5	0x2e01	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.560049057 CEST	1.1.1.1	192.168.2.5	0x2e01	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.560049057 CEST	1.1.1.1	192.168.2.5	0x2e01	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.560049057 CEST	1.1.1.1	192.168.2.5	0x2e01	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.570239067 CEST	1.1.1.1	192.168.2.5	0x5e31	No error (0)	youruno-chicka.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:47.570765018 CEST	1.1.1.1	192.168.2.5	0x5a94	No error (0)	i2.wp.com		192.0.77.2	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.574332952 CEST	1.1.1.1	192.168.2.5	0x29ca	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:47.575227976 CEST	1.1.1.1	192.168.2.5	0x1cd5	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:47.588709116 CEST	1.1.1.1	192.168.2.5	0xedb2	No error (0)	youruno-chicka.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:47.588709116 CEST	1.1.1.1	192.168.2.5	0xedb2	No error (0)	blogspot.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		54.39.128.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		149.56.240.129	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		149.56.240.27	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		54.39.156.32	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		142.4.219.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		149.56.240.131	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		149.56.240.127	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		149.56.240.130	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		149.56.240.132	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		54.39.128.162	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		158.69.254.144	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		149.56.240.31	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:47.991377115 CEST	1.1.1.1	192.168.2.5	0x1b8b	No error (0)	s4.histats.com		149.56.240.128	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.809050083 CEST	1.1.1.1	192.168.2.5	0xd4f5	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.809050083 CEST	1.1.1.1	192.168.2.5	0xd4f5	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.809848070 CEST	1.1.1.1	192.168.2.5	0xd32	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:48.815433025 CEST	1.1.1.1	192.168.2.5	0x60af	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:48.815433025 CEST	1.1.1.1	192.168.2.5	0x60af	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:48.815732956 CEST	1.1.1.1	192.168.2.5	0x9495	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:48.815732956 CEST	1.1.1.1	192.168.2.5	0x9495	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:48.815732956 CEST	1.1.1.1	192.168.2.5	0x9495	No error (0)	dualstack.pinterest.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.815732956 CEST	1.1.1.1	192.168.2.5	0x9495	No error (0)	dualstack.pinterest.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.815732956 CEST	1.1.1.1	192.168.2.5	0x9495	No error (0)	dualstack.pinterest.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.815732956 CEST	1.1.1.1	192.168.2.5	0x9495	No error (0)	dualstack.pinterest.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		149.56.240.131	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		54.39.156.32	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		149.56.240.27	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		158.69.254.144	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		149.56.240.127	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		149.56.240.130	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		149.56.240.128	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		149.56.240.132	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		142.4.219.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		54.39.128.162	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		149.56.240.129	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		149.56.240.31	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:48.848066092 CEST	1.1.1.1	192.168.2.5	0x6852	No error (0)	s4.histats.com		54.39.128.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.866049051 CEST	1.1.1.1	192.168.2.5	0x32ac	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.866049051 CEST	1.1.1.1	192.168.2.5	0x32ac	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.866293907 CEST	1.1.1.1	192.168.2.5	0x3207	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:49.867031097 CEST	1.1.1.1	192.168.2.5	0xf7d1	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:49.867439032 CEST	1.1.1.1	192.168.2.5	0x5e79	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:49.868736029 CEST	1.1.1.1	192.168.2.5	0xaa16	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:49.869153976 CEST	1.1.1.1	192.168.2.5	0xde4	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:49.870285988 CEST	1.1.1.1	192.168.2.5	0xe281	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:49.870443106 CEST	1.1.1.1	192.168.2.5	0x3c34	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.870443106 CEST	1.1.1.1	192.168.2.5	0x3c34	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.870882988 CEST	1.1.1.1	192.168.2.5	0xf09f	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:49.871265888 CEST	1.1.1.1	192.168.2.5	0x9615	No error (0)	dtsedge.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:49.871438980 CEST	1.1.1.1	192.168.2.5	0xeb7	No error (0)	dtsedge.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.871438980 CEST	1.1.1.1	192.168.2.5	0xeb7	No error (0)	dtsedge.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.882917881 CEST	1.1.1.1	192.168.2.5	0x31aa	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:49.882917881 CEST	1.1.1.1	192.168.2.5	0x31aa	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		35.157.251.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.882917881 CEST	1.1.1.1	192.168.2.5	0x31aa	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.73.6.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.882917881 CEST	1.1.1.1	192.168.2.5	0x31aa	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.120.162.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.903045893 CEST	1.1.1.1	192.168.2.5	0xd268	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.903045893 CEST	1.1.1.1	192.168.2.5	0xd268	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:49.903721094 CEST	1.1.1.1	192.168.2.5	0xb84	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:50.602662086 CEST	1.1.1.1	192.168.2.5	0x311f	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.602662086 CEST	1.1.1.1	192.168.2.5	0x311f	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.602956057 CEST	1.1.1.1	192.168.2.5	0x734a	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:50.603579044 CEST	1.1.1.1	192.168.2.5	0xb1be	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:50.603615046 CEST	1.1.1.1	192.168.2.5	0x5b62	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:50.625751019 CEST	1.1.1.1	192.168.2.5	0x7ec3	No error (0)	ic.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.625751019 CEST	1.1.1.1	192.168.2.5	0x7ec3	No error (0)	ic.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.629924059 CEST	1.1.1.1	192.168.2.5	0xbb3	No error (0)	tags.crwdcntrl.net		65.9.66.68	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.629924059 CEST	1.1.1.1	192.168.2.5	0xbb3	No error (0)	tags.crwdcntrl.net		65.9.66.97	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.629924059 CEST	1.1.1.1	192.168.2.5	0xbb3	No error (0)	tags.crwdcntrl.net		65.9.66.122	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.629924059 CEST	1.1.1.1	192.168.2.5	0xbb3	No error (0)	tags.crwdcntrl.net		65.9.66.104	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.631681919 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.631681919 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.631681919 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.631691933 CEST	1.1.1.1	192.168.2.5	0x5d6	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.632281065 CEST	1.1.1.1	192.168.2.5	0xe37d	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.902596951 CEST	1.1.1.1	192.168.2.5	0x17c2	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:50.902609110 CEST	1.1.1.1	192.168.2.5	0xcca2	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.902609110 CEST	1.1.1.1	192.168.2.5	0xcca2	No error (0)	de.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:50.902618885 CEST	1.1.1.1	192.168.2.5	0x3c52	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:50.909698963 CEST	1.1.1.1	192.168.2.5	0x4a53	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:50.909719944 CEST	1.1.1.1	192.168.2.5	0xb5ab	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:51.273777962 CEST	1.1.1.1	192.168.2.5	0xaa04	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:51.283062935 CEST	1.1.1.1	192.168.2.5	0x853	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:51.314753056 CEST	1.1.1.1	192.168.2.5	0xd9c8	No error (0)	dtsedge.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.314753056 CEST	1.1.1.1	192.168.2.5	0xd9c8	No error (0)	dtsedge.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.316108942 CEST	1.1.1.1	192.168.2.5	0x810c	No error (0)	dtsedge.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:51.316287041 CEST	1.1.1.1	192.168.2.5	0xe00a	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:51.316998959 CEST	1.1.1.1	192.168.2.5	0x69f9	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:51.316998959 CEST	1.1.1.1	192.168.2.5	0x69f9	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.120.162.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.316998959 CEST	1.1.1.1	192.168.2.5	0x69f9	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.73.6.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.316998959 CEST	1.1.1.1	192.168.2.5	0x69f9	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		35.157.251.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.381217957 CEST	1.1.1.1	192.168.2.5	0xaa4d	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.381217957 CEST	1.1.1.1	192.168.2.5	0xaa4d	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.381217957 CEST	1.1.1.1	192.168.2.5	0xaa4d	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.383105040 CEST	1.1.1.1	192.168.2.5	0x4f7	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:51.404069901 CEST	1.1.1.1	192.168.2.5	0xa624	No error (0)	ic.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.404069901 CEST	1.1.1.1	192.168.2.5	0xa624	No error (0)	ic.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.585001945 CEST	1.1.1.1	192.168.2.5	0x8c43	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.585001945 CEST	1.1.1.1	192.168.2.5	0x8c43	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.610702991 CEST	1.1.1.1	192.168.2.5	0xd990	No error (0)	i.simpli.fi		35.234.162.151	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.610702991 CEST	1.1.1.1	192.168.2.5	0xd990	No error (0)	i.simpli.fi		35.204.89.238	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.611865044 CEST	1.1.1.1	192.168.2.5	0xe580	No error (0)	cdn-tc.33across.com	cdn-tc.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:51.613672972 CEST	1.1.1.1	192.168.2.5	0x1fb2	No error (0)	cdn-tc.33across.com	cdn-tc.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:51.853954077 CEST	1.1.1.1	192.168.2.5	0x9956	No error (0)	tags.crwdcntrl.net		65.9.66.122	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.853954077 CEST	1.1.1.1	192.168.2.5	0x9956	No error (0)	tags.crwdcntrl.net		65.9.66.97	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.853954077 CEST	1.1.1.1	192.168.2.5	0x9956	No error (0)	tags.crwdcntrl.net		65.9.66.68	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:51.853954077 CEST	1.1.1.1	192.168.2.5	0x9956	No error (0)	tags.crwdcntrl.net		65.9.66.104	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.270181894 CEST	1.1.1.1	192.168.2.5	0x33a1	No error (0)	tags.crwdcntrl.net		65.9.66.104	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.270181894 CEST	1.1.1.1	192.168.2.5	0x33a1	No error (0)	tags.crwdcntrl.net		65.9.66.122	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.270181894 CEST	1.1.1.1	192.168.2.5	0x33a1	No error (0)	tags.crwdcntrl.net		65.9.66.68	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.270181894 CEST	1.1.1.1	192.168.2.5	0x33a1	No error (0)	tags.crwdcntrl.net		65.9.66.97	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:52.325176001 CEST	1.1.1.1	192.168.2.5	0x5e03	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:52.325511932 CEST	1.1.1.1	192.168.2.5	0xace1	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:52.329668045 CEST	1.1.1.1	192.168.2.5	0xdb9c	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:52.333169937 CEST	1.1.1.1	192.168.2.5	0x52c8	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:52.515466928 CEST	1.1.1.1	192.168.2.5	0xcea6	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:52.515481949 CEST	1.1.1.1	192.168.2.5	0xb63b	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:54.550219059 CEST	1.1.1.1	192.168.2.5	0x1ac2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:54.550219059 CEST	1.1.1.1	192.168.2.5	0x1ac2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.702024937 CEST	1.1.1.1	192.168.2.5	0xa44b	No error (0)	bcp.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.702024937 CEST	1.1.1.1	192.168.2.5	0xa44b	No error (0)	bcp.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.702024937 CEST	1.1.1.1	192.168.2.5	0xa44b	No error (0)	bcp.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.702024937 CEST	1.1.1.1	192.168.2.5	0xa44b	No error (0)	bcp.crwdcntrl.net		54.76.113.237	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.702024937 CEST	1.1.1.1	192.168.2.5	0xa44b	No error (0)	bcp.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.702024937 CEST	1.1.1.1	192.168.2.5	0xa44b	No error (0)	bcp.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.702024937 CEST	1.1.1.1	192.168.2.5	0xa44b	No error (0)	bcp.crwdcntrl.net		52.48.114.218	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:54.702024937 CEST	1.1.1.1	192.168.2.5	0xa44b	No error (0)	bcp.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.207648039 CEST	1.1.1.1	192.168.2.5	0x8b59	No error (0)	bcp.crwdcntrl.net		54.76.113.237	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.207648039 CEST	1.1.1.1	192.168.2.5	0x8b59	No error (0)	bcp.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.207648039 CEST	1.1.1.1	192.168.2.5	0x8b59	No error (0)	bcp.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.207648039 CEST	1.1.1.1	192.168.2.5	0x8b59	No error (0)	bcp.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.207648039 CEST	1.1.1.1	192.168.2.5	0x8b59	No error (0)	bcp.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.207648039 CEST	1.1.1.1	192.168.2.5	0x8b59	No error (0)	bcp.crwdcntrl.net		52.48.114.218	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.207648039 CEST	1.1.1.1	192.168.2.5	0x8b59	No error (0)	bcp.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.207648039 CEST	1.1.1.1	192.168.2.5	0x8b59	No error (0)	bcp.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.333122015 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	bcp.crwdcntrl.net		52.48.114.218	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.333122015 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	bcp.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.333122015 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	bcp.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.333122015 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	bcp.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.333122015 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	bcp.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.333122015 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	bcp.crwdcntrl.net		54.76.113.237	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.333122015 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	bcp.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.333122015 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	bcp.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.366322041 CEST	1.1.1.1	192.168.2.5	0xd48f	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.366322041 CEST	1.1.1.1	192.168.2.5	0xd48f	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.366322041 CEST	1.1.1.1	192.168.2.5	0xd48f	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.366322041 CEST	1.1.1.1	192.168.2.5	0xd48f	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.372764111 CEST	1.1.1.1	192.168.2.5	0xd7fe	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.373267889 CEST	1.1.1.1	192.168.2.5	0x496c	No error (0)	ps.eyeota.net		3.127.178.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:56.373277903 CEST	1.1.1.1	192.168.2.5	0xf1c3	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:57.538690090 CEST	1.1.1.1	192.168.2.5	0x3449	No error (0)	a.dtssrv.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:57.538697004 CEST	1.1.1.1	192.168.2.5	0x9e3c	No error (0)	a.dtssrv.com		172.67.163.146	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:57.538697004 CEST	1.1.1.1	192.168.2.5	0x9e3c	No error (0)	a.dtssrv.com		104.21.34.180	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:58.843825102 CEST	1.1.1.1	192.168.2.5	0x7d0c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:58.843825102 CEST	1.1.1.1	192.168.2.5	0x7d0c	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:58.843825102 CEST	1.1.1.1	192.168.2.5	0x7d0c	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.004337072 CEST	1.1.1.1	192.168.2.5	0x2fb9	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.004431009 CEST	1.1.1.1	192.168.2.5	0xe24f	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.004431009 CEST	1.1.1.1	192.168.2.5	0xe24f	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.156.126.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.004431009 CEST	1.1.1.1	192.168.2.5	0xe24f	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.75.152.14	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.004431009 CEST	1.1.1.1	192.168.2.5	0xe24f	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.66.133.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.892760992 CEST	1.1.1.1	192.168.2.5	0xd485	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.893208027 CEST	1.1.1.1	192.168.2.5	0xce07	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.893934965 CEST	1.1.1.1	192.168.2.5	0x56de	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.893934965 CEST	1.1.1.1	192.168.2.5	0x56de	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.197.252.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.893934965 CEST	1.1.1.1	192.168.2.5	0x56de	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		52.58.104.46	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.893946886 CEST	1.1.1.1	192.168.2.5	0x820c	No error (0)	c.cintnetworks.com	collector-main.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.893946886 CEST	1.1.1.1	192.168.2.5	0x820c	No error (0)	cint-collector-euw.azurewebsites.net	waws-prod-am2-241.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.893946886 CEST	1.1.1.1	192.168.2.5	0x820c	No error (0)	waws-prod-am2-241.sip.azurewebsites.windows.net	waws-prod-am2-241.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.894212008 CEST	1.1.1.1	192.168.2.5	0xf345	No error (0)	c.cintnetworks.com	collector-main.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.894212008 CEST	1.1.1.1	192.168.2.5	0xf345	No error (0)	cint-collector-euw.azurewebsites.net	waws-prod-am2-241.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.894212008 CEST	1.1.1.1	192.168.2.5	0xf345	No error (0)	waws-prod-am2-241.sip.azurewebsites.windows.net	waws-prod-am2-241.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.894782066 CEST	1.1.1.1	192.168.2.5	0x36ec	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.894782066 CEST	1.1.1.1	192.168.2.5	0x36ec	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.894782066 CEST	1.1.1.1	192.168.2.5	0x36ec	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.895066023 CEST	1.1.1.1	192.168.2.5	0x9df0	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.895066023 CEST	1.1.1.1	192.168.2.5	0x9df0	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.895076990 CEST	1.1.1.1	192.168.2.5	0x9347	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896058083 CEST	1.1.1.1	192.168.2.5	0xa41a	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896069050 CEST	1.1.1.1	192.168.2.5	0x5910	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.896603107 CEST	1.1.1.1	192.168.2.5	0x991f	No error (0)	cm.g.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897044897 CEST	1.1.1.1	192.168.2.5	0x1a41	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897044897 CEST	1.1.1.1	192.168.2.5	0x1a41	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897330046 CEST	1.1.1.1	192.168.2.5	0x5d97	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897660017 CEST	1.1.1.1	192.168.2.5	0xadeb	No error (0)	global.ib-ibi.com		64.58.232.179	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897660017 CEST	1.1.1.1	192.168.2.5	0xadeb	No error (0)	global.ib-ibi.com		216.46.185.183	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897660017 CEST	1.1.1.1	192.168.2.5	0xadeb	No error (0)	global.ib-ibi.com		69.169.85.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897660017 CEST	1.1.1.1	192.168.2.5	0xadeb	No error (0)	global.ib-ibi.com		64.58.232.176	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897660017 CEST	1.1.1.1	192.168.2.5	0xadeb	No error (0)	global.ib-ibi.com		69.169.86.38	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897660017 CEST	1.1.1.1	192.168.2.5	0xadeb	No error (0)	global.ib-ibi.com		216.46.185.182	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.897660017 CEST	1.1.1.1	192.168.2.5	0xadeb	No error (0)	global.ib-ibi.com		54.94.182.41	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.898175955 CEST	1.1.1.1	192.168.2.5	0x5ceb	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:38:59.898175955 CEST	1.1.1.1	192.168.2.5	0x5ceb	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:59.898849010 CEST	1.1.1.1	192.168.2.5	0xf806	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.341610909 CEST	1.1.1.1	192.168.2.5	0xfe81	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.341773033 CEST	1.1.1.1	192.168.2.5	0xbc83	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.341773033 CEST	1.1.1.1	192.168.2.5	0xbc83	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.66.133.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.341773033 CEST	1.1.1.1	192.168.2.5	0xbc83	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.75.152.14	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.341773033 CEST	1.1.1.1	192.168.2.5	0xbc83	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.156.126.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.468952894 CEST	1.1.1.1	192.168.2.5	0x4937	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.860675097 CEST	1.1.1.1	192.168.2.5	0x9a65	No error (0)	sync.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.860675097 CEST	1.1.1.1	192.168.2.5	0x9a65	No error (0)	sync.crwdcntrl.net		52.48.114.218	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.860675097 CEST	1.1.1.1	192.168.2.5	0x9a65	No error (0)	sync.crwdcntrl.net		54.76.113.237	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.860675097 CEST	1.1.1.1	192.168.2.5	0x9a65	No error (0)	sync.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.860675097 CEST	1.1.1.1	192.168.2.5	0x9a65	No error (0)	sync.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.860675097 CEST	1.1.1.1	192.168.2.5	0x9a65	No error (0)	sync.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.860675097 CEST	1.1.1.1	192.168.2.5	0x9a65	No error (0)	sync.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.860675097 CEST	1.1.1.1	192.168.2.5	0x9a65	No error (0)	sync.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.886714935 CEST	1.1.1.1	192.168.2.5	0x2bbb	No error (0)	match.prod.bidr.io		46.137.57.71	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.886714935 CEST	1.1.1.1	192.168.2.5	0x2bbb	No error (0)	match.prod.bidr.io		34.252.4.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.886714935 CEST	1.1.1.1	192.168.2.5	0x2bbb	No error (0)	match.prod.bidr.io		34.252.67.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.886714935 CEST	1.1.1.1	192.168.2.5	0x2bbb	No error (0)	match.prod.bidr.io		52.31.14.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.886714935 CEST	1.1.1.1	192.168.2.5	0x2bbb	No error (0)	match.prod.bidr.io		34.243.210.180	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.886714935 CEST	1.1.1.1	192.168.2.5	0x2bbb	No error (0)	match.prod.bidr.io		52.213.102.87	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.886714935 CEST	1.1.1.1	192.168.2.5	0x2bbb	No error (0)	match.prod.bidr.io		52.210.235.15	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.903723001 CEST	1.1.1.1	192.168.2.5	0x8986	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.903723001 CEST	1.1.1.1	192.168.2.5	0x8986	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.209.249.174	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.903723001 CEST	1.1.1.1	192.168.2.5	0x8986	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.49.76.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:00.904601097 CEST	1.1.1.1	192.168.2.5	0x8203	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.965187073 CEST	1.1.1.1	192.168.2.5	0x7621	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.965187073 CEST	1.1.1.1	192.168.2.5	0x7621	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.965187073 CEST	1.1.1.1	192.168.2.5	0x7621	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.965213060 CEST	1.1.1.1	192.168.2.5	0xb91d	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.965213060 CEST	1.1.1.1	192.168.2.5	0xb91d	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.965213060 CEST	1.1.1.1	192.168.2.5	0xb91d	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.983830929 CEST	1.1.1.1	192.168.2.5	0xfcbd	No error (0)	c.cintnetworks.com	collector-main.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.983830929 CEST	1.1.1.1	192.168.2.5	0xfcbd	No error (0)	cint-collector-euw.azurewebsites.net	waws-prod-am2-241.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:00.983830929 CEST	1.1.1.1	192.168.2.5	0xfcbd	No error (0)	waws-prod-am2-241.sip.azurewebsites.windows.net	waws-prod-am2-241.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:01.013809919 CEST	1.1.1.1	192.168.2.5	0x3226	No error (0)	c.cintnetworks.com	collector-main.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:01.013809919 CEST	1.1.1.1	192.168.2.5	0x3226	No error (0)	cint-collector-euw.azurewebsites.net	waws-prod-am2-241.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:01.013809919 CEST	1.1.1.1	192.168.2.5	0x3226	No error (0)	waws-prod-am2-241.sip.azurewebsites.windows.net	waws-prod-am2-241.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:01.712052107 CEST	1.1.1.1	192.168.2.5	0x77d	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.712052107 CEST	1.1.1.1	192.168.2.5	0x77d	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.712069988 CEST	1.1.1.1	192.168.2.5	0x57ac	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.714704990 CEST	1.1.1.1	192.168.2.5	0x6ffb	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:01.715933084 CEST	1.1.1.1	192.168.2.5	0xb	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:01.715933084 CEST	1.1.1.1	192.168.2.5	0xb	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:01.917999983 CEST	1.1.1.1	192.168.2.5	0x7f55	No error (0)	cm.g.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.067286968 CEST	1.1.1.1	192.168.2.5	0xbf7e	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.068628073 CEST	1.1.1.1	192.168.2.5	0xa28a	No error (0)	sync.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.068628073 CEST	1.1.1.1	192.168.2.5	0xa28a	No error (0)	sync.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.068628073 CEST	1.1.1.1	192.168.2.5	0xa28a	No error (0)	sync.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.068628073 CEST	1.1.1.1	192.168.2.5	0xa28a	No error (0)	sync.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.068628073 CEST	1.1.1.1	192.168.2.5	0xa28a	No error (0)	sync.crwdcntrl.net		54.76.113.237	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.068628073 CEST	1.1.1.1	192.168.2.5	0xa28a	No error (0)	sync.crwdcntrl.net		52.48.114.218	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.068628073 CEST	1.1.1.1	192.168.2.5	0xa28a	No error (0)	sync.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.068628073 CEST	1.1.1.1	192.168.2.5	0xa28a	No error (0)	sync.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.424108982 CEST	1.1.1.1	192.168.2.5	0x4584	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.435864925 CEST	1.1.1.1	192.168.2.5	0x447c	No error (0)	dmp.truoptik.com		104.18.80.52	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.435864925 CEST	1.1.1.1	192.168.2.5	0x447c	No error (0)	dmp.truoptik.com		104.17.111.254	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.435864925 CEST	1.1.1.1	192.168.2.5	0x447c	No error (0)	dmp.truoptik.com		104.16.192.58	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.435864925 CEST	1.1.1.1	192.168.2.5	0x447c	No error (0)	dmp.truoptik.com		104.17.127.254	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.435864925 CEST	1.1.1.1	192.168.2.5	0x447c	No error (0)	dmp.truoptik.com		104.17.208.58	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.435882092 CEST	1.1.1.1	192.168.2.5	0x2efa	No error (0)	dmp.truoptik.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:02.441348076 CEST	1.1.1.1	192.168.2.5	0x2bd8	No error (0)	sync.srv.stackadapt.com		54.147.101.158	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.441348076 CEST	1.1.1.1	192.168.2.5	0x2bd8	No error (0)	sync.srv.stackadapt.com		54.175.124.176	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.441348076 CEST	1.1.1.1	192.168.2.5	0x2bd8	No error (0)	sync.srv.stackadapt.com		52.7.204.214	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.441348076 CEST	1.1.1.1	192.168.2.5	0x2bd8	No error (0)	sync.srv.stackadapt.com		54.209.225.147	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.441348076 CEST	1.1.1.1	192.168.2.5	0x2bd8	No error (0)	sync.srv.stackadapt.com		54.157.181.253	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.441348076 CEST	1.1.1.1	192.168.2.5	0x2bd8	No error (0)	sync.srv.stackadapt.com		54.146.2.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.441348076 CEST	1.1.1.1	192.168.2.5	0x2bd8	No error (0)	sync.srv.stackadapt.com		54.174.109.41	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.441348076 CEST	1.1.1.1	192.168.2.5	0x2bd8	No error (0)	sync.srv.stackadapt.com		54.211.170.55	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610640049 CEST	1.1.1.1	192.168.2.5	0x8d0e	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610640049 CEST	1.1.1.1	192.168.2.5	0x8d0e	No error (0)	dcs-ups.g03.yahoodns.net	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610640049 CEST	1.1.1.1	192.168.2.5	0x8d0e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610640049 CEST	1.1.1.1	192.168.2.5	0x8d0e	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610640049 CEST	1.1.1.1	192.168.2.5	0x8d0e	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610640049 CEST	1.1.1.1	192.168.2.5	0x8d0e	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610856056 CEST	1.1.1.1	192.168.2.5	0x7f47	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610856056 CEST	1.1.1.1	192.168.2.5	0x7f47	No error (0)	dcs-ups.g03.yahoodns.net	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610856056 CEST	1.1.1.1	192.168.2.5	0x7f47	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.610856056 CEST	1.1.1.1	192.168.2.5	0x7f47	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.828391075 CEST	1.1.1.1	192.168.2.5	0x695f	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:02.828391075 CEST	1.1.1.1	192.168.2.5	0x695f	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.828391075 CEST	1.1.1.1	192.168.2.5	0x695f	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.828391075 CEST	1.1.1.1	192.168.2.5	0x695f	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.828391075 CEST	1.1.1.1	192.168.2.5	0x695f	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.828391075 CEST	1.1.1.1	192.168.2.5	0x695f	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.828391075 CEST	1.1.1.1	192.168.2.5	0x695f	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.828391075 CEST	1.1.1.1	192.168.2.5	0x695f	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.22.163	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.106.111	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.64.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		46.137.24.228	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.182.207	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.124434948 CEST	1.1.1.1	192.168.2.5	0xb70d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.175.1	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.125673056 CEST	1.1.1.1	192.168.2.5	0xe5e1	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.125673056 CEST	1.1.1.1	192.168.2.5	0xe5e1	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.125673056 CEST	1.1.1.1	192.168.2.5	0xe5e1	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.168612957 CEST	1.1.1.1	192.168.2.5	0x97e7	No error (0)	api.intentiq.com		13.32.121.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.168612957 CEST	1.1.1.1	192.168.2.5	0x97e7	No error (0)	api.intentiq.com		13.32.121.106	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.168612957 CEST	1.1.1.1	192.168.2.5	0x97e7	No error (0)	api.intentiq.com		13.32.121.27	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.168612957 CEST	1.1.1.1	192.168.2.5	0x97e7	No error (0)	api.intentiq.com		13.32.121.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.190202951 CEST	1.1.1.1	192.168.2.5	0xf16c	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.190202951 CEST	1.1.1.1	192.168.2.5	0xf16c	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.192228079 CEST	1.1.1.1	192.168.2.5	0x28db	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.192228079 CEST	1.1.1.1	192.168.2.5	0x28db	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	idaas-ext.cph.liveintent.com		54.237.59.39	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	idaas-ext.cph.liveintent.com		3.228.139.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	idaas-ext.cph.liveintent.com		52.206.177.113	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	idaas-ext.cph.liveintent.com		44.215.250.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	idaas-ext.cph.liveintent.com		18.205.228.210	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	idaas-ext.cph.liveintent.com		44.194.57.235	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	idaas-ext.cph.liveintent.com		3.226.114.200	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195255041 CEST	1.1.1.1	192.168.2.5	0x9d01	No error (0)	idaas-ext.cph.liveintent.com		34.199.159.169	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195388079 CEST	1.1.1.1	192.168.2.5	0x261	No error (0)	track2.securedvisit.com		107.23.180.140	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195388079 CEST	1.1.1.1	192.168.2.5	0x261	No error (0)	track2.securedvisit.com		34.238.214.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195820093 CEST	1.1.1.1	192.168.2.5	0xbf95	No error (0)	thrtle.com		18.208.90.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195820093 CEST	1.1.1.1	192.168.2.5	0xbf95	No error (0)	thrtle.com		34.197.201.22	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195820093 CEST	1.1.1.1	192.168.2.5	0xbf95	No error (0)	thrtle.com		3.225.169.158	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195820093 CEST	1.1.1.1	192.168.2.5	0xbf95	No error (0)	thrtle.com		52.205.20.252	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195820093 CEST	1.1.1.1	192.168.2.5	0xbf95	No error (0)	thrtle.com		54.82.142.25	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195820093 CEST	1.1.1.1	192.168.2.5	0xbf95	No error (0)	thrtle.com		35.172.6.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195820093 CEST	1.1.1.1	192.168.2.5	0xbf95	No error (0)	thrtle.com		34.198.51.190	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195820093 CEST	1.1.1.1	192.168.2.5	0xbf95	No error (0)	thrtle.com		44.213.213.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195830107 CEST	1.1.1.1	192.168.2.5	0xffb	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195838928 CEST	1.1.1.1	192.168.2.5	0x31d2	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195838928 CEST	1.1.1.1	192.168.2.5	0x31d2	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195858002 CEST	1.1.1.1	192.168.2.5	0xf5f5	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.195858002 CEST	1.1.1.1	192.168.2.5	0xf5f5	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.203497887 CEST	1.1.1.1	192.168.2.5	0x435	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.203867912 CEST	1.1.1.1	192.168.2.5	0x5db0	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.132.164	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.49.236.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.21.147	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.119.100	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.207.89	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.50.135	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.220.80.179	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894239902 CEST	1.1.1.1	192.168.2.5	0xf94a	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.34.192.5	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894257069 CEST	1.1.1.1	192.168.2.5	0xb983	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.894257069 CEST	1.1.1.1	192.168.2.5	0xb983	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.981118917 CEST	1.1.1.1	192.168.2.5	0xc192	No error (0)	track2.securedvisit.com		107.23.180.140	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.981118917 CEST	1.1.1.1	192.168.2.5	0xc192	No error (0)	track2.securedvisit.com		34.238.214.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.332639933 CEST	1.1.1.1	192.168.2.5	0x4c5e	No error (0)	agent.intentiq.com	agent.intentiq.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.333962917 CEST	1.1.1.1	192.168.2.5	0xba10	No error (0)	agent.intentiq.com	agent.intentiq.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.511426926 CEST	1.1.1.1	192.168.2.5	0x6698	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.513674021 CEST	1.1.1.1	192.168.2.5	0x52c	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.529444933 CEST	1.1.1.1	192.168.2.5	0x5042	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.529444933 CEST	1.1.1.1	192.168.2.5	0x5042	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.529444933 CEST	1.1.1.1	192.168.2.5	0x5042	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.529444933 CEST	1.1.1.1	192.168.2.5	0x5042	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.529444933 CEST	1.1.1.1	192.168.2.5	0x5042	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.529444933 CEST	1.1.1.1	192.168.2.5	0x5042	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.529444933 CEST	1.1.1.1	192.168.2.5	0x5042	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.529444933 CEST	1.1.1.1	192.168.2.5	0x5042	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.570045948 CEST	1.1.1.1	192.168.2.5	0x8bab	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.570045948 CEST	1.1.1.1	192.168.2.5	0x8bab	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.570045948 CEST	1.1.1.1	192.168.2.5	0x8bab	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.570045948 CEST	1.1.1.1	192.168.2.5	0x8bab	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.570705891 CEST	1.1.1.1	192.168.2.5	0xc373	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.570705891 CEST	1.1.1.1	192.168.2.5	0xc373	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.570705891 CEST	1.1.1.1	192.168.2.5	0xc373	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.811794996 CEST	1.1.1.1	192.168.2.5	0x32a5	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.811794996 CEST	1.1.1.1	192.168.2.5	0x32a5	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.813359022 CEST	1.1.1.1	192.168.2.5	0xe2bd	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.813359022 CEST	1.1.1.1	192.168.2.5	0xe2bd	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:05.516007900 CEST	1.1.1.1	192.168.2.5	0xc726	Name error (3)	book5download.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:39:05.657083988 CEST	1.1.1.1	192.168.2.5	0xc1db	No error (0)	agent.intentiq.com	agent.intentiq.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:05.657794952 CEST	1.1.1.1	192.168.2.5	0x5691	No error (0)	agent.intentiq.com	agent.intentiq.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:05.665587902 CEST	1.1.1.1	192.168.2.5	0x6943	No error (0)	sync.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.665587902 CEST	1.1.1.1	192.168.2.5	0x6943	No error (0)	sync.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.665587902 CEST	1.1.1.1	192.168.2.5	0x6943	No error (0)	sync.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.665587902 CEST	1.1.1.1	192.168.2.5	0x6943	No error (0)	sync.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.680392027 CEST	1.1.1.1	192.168.2.5	0xb270	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.692343950 CEST	1.1.1.1	192.168.2.5	0x84cf	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.111918926 CEST	1.1.1.1	192.168.2.5	0x4624	No error (0)	ps.eyeota.net		18.184.216.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.220.80.179	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.51.253	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.132.164	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.94.23	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.101.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.34.192.5	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.50.135	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115314007 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.96.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115940094 CEST	1.1.1.1	192.168.2.5	0x6b1c	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:06.115940094 CEST	1.1.1.1	192.168.2.5	0x6b1c	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:06.452485085 CEST	1.1.1.1	192.168.2.5	0x1005	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:06.452485085 CEST	1.1.1.1	192.168.2.5	0x1005	No error (0)	cdn.w55c.net		52.57.67.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.452485085 CEST	1.1.1.1	192.168.2.5	0x1005	No error (0)	cdn.w55c.net		3.77.232.241	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.452485085 CEST	1.1.1.1	192.168.2.5	0x1005	No error (0)	cdn.w55c.net		3.66.251.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.452485085 CEST	1.1.1.1	192.168.2.5	0x1005	No error (0)	cdn.w55c.net		3.122.36.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.452756882 CEST	1.1.1.1	192.168.2.5	0xad3c	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:08.808748007 CEST	1.1.1.1	192.168.2.5	0xe4b4	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.455760002 CEST	1.1.1.1	192.168.2.5	0x4f70	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:09.455760002 CEST	1.1.1.1	192.168.2.5	0x4f70	No error (0)	cdn.w55c.net		52.57.67.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.455760002 CEST	1.1.1.1	192.168.2.5	0x4f70	No error (0)	cdn.w55c.net		3.77.232.241	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.455760002 CEST	1.1.1.1	192.168.2.5	0x4f70	No error (0)	cdn.w55c.net		3.122.36.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.455760002 CEST	1.1.1.1	192.168.2.5	0x4f70	No error (0)	cdn.w55c.net		3.66.251.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.457828999 CEST	1.1.1.1	192.168.2.5	0x1fcb	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:09.574050903 CEST	1.1.1.1	192.168.2.5	0xac6d	No error (0)	ps.eyeota.net		3.124.210.90	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.575508118 CEST	1.1.1.1	192.168.2.5	0xcb50	No error (0)	dp2.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.575508118 CEST	1.1.1.1	192.168.2.5	0xcb50	No error (0)	dp2.33across.com		67.202.105.24	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.575608969 CEST	1.1.1.1	192.168.2.5	0x1334	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:09.575608969 CEST	1.1.1.1	192.168.2.5	0x1334	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:09.575762033 CEST	1.1.1.1	192.168.2.5	0x79ca	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:09.575762033 CEST	1.1.1.1	192.168.2.5	0x79ca	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:09.576992035 CEST	1.1.1.1	192.168.2.5	0x6ca	No error (0)	live.rezync.com		13.32.27.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.576992035 CEST	1.1.1.1	192.168.2.5	0x6ca	No error (0)	live.rezync.com		13.32.27.99	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.576992035 CEST	1.1.1.1	192.168.2.5	0x6ca	No error (0)	live.rezync.com		13.32.27.113	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.576992035 CEST	1.1.1.1	192.168.2.5	0x6ca	No error (0)	live.rezync.com		13.32.27.28	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.657541990 CEST	1.1.1.1	192.168.2.5	0xb5f0	No error (0)	sync.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.657541990 CEST	1.1.1.1	192.168.2.5	0xb5f0	No error (0)	sync.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.657541990 CEST	1.1.1.1	192.168.2.5	0xb5f0	No error (0)	sync.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.657541990 CEST	1.1.1.1	192.168.2.5	0xb5f0	No error (0)	sync.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.486310005 CEST	1.1.1.1	192.168.2.5	0xbe0d	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.487024069 CEST	1.1.1.1	192.168.2.5	0x8d17	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.612750053 CEST	1.1.1.1	192.168.2.5	0xfaf9	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.613929987 CEST	1.1.1.1	192.168.2.5	0xe02	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.804639101 CEST	1.1.1.1	192.168.2.5	0xb29e	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.804639101 CEST	1.1.1.1	192.168.2.5	0xb29e	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.805270910 CEST	1.1.1.1	192.168.2.5	0x618e	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.805270910 CEST	1.1.1.1	192.168.2.5	0x618e	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.813146114 CEST	1.1.1.1	192.168.2.5	0x7b3d	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.855403900 CEST	1.1.1.1	192.168.2.5	0xee5f	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:10.932163954 CEST	1.1.1.1	192.168.2.5	0x5bc1	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.932163954 CEST	1.1.1.1	192.168.2.5	0x5bc1	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.932305098 CEST	1.1.1.1	192.168.2.5	0x85ca	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:10.932305098 CEST	1.1.1.1	192.168.2.5	0x85ca	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:11.516061068 CEST	1.1.1.1	192.168.2.5	0x9507	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	idaas-ext.cph.liveintent.com		18.215.102.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	idaas-ext.cph.liveintent.com		35.168.171.63	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	idaas-ext.cph.liveintent.com		34.196.27.159	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	idaas-ext.cph.liveintent.com		3.215.157.212	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	idaas-ext.cph.liveintent.com		3.226.114.200	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	idaas-ext.cph.liveintent.com		52.206.177.113	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	idaas-ext.cph.liveintent.com		44.194.57.235	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.820858002 CEST	1.1.1.1	192.168.2.5	0x49e1	No error (0)	idaas-ext.cph.liveintent.com		18.205.228.210	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:13.821240902 CEST	1.1.1.1	192.168.2.5	0xd9eb	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:15.483455896 CEST	1.1.1.1	192.168.2.5	0x5e2a	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:17.955938101 CEST	1.1.1.1	192.168.2.5	0x9bd1	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:17.984556913 CEST	1.1.1.1	192.168.2.5	0x30b5	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:18.123528957 CEST	1.1.1.1	192.168.2.5	0x91f8	Name error (3)	book5download.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:39:19.550082922 CEST	1.1.1.1	192.168.2.5	0xb7d	Name error (3)	book5download.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:39:19.552210093 CEST	1.1.1.1	192.168.2.5	0x52aa	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:19.888638020 CEST	1.1.1.1	192.168.2.5	0x905a	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:19.888638020 CEST	1.1.1.1	192.168.2.5	0x905a	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:19.888638020 CEST	1.1.1.1	192.168.2.5	0x905a	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:22.189064980 CEST	1.1.1.1	192.168.2.5	0x8f93	No error (0)	live.rezync.com		13.32.27.113	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:22.189064980 CEST	1.1.1.1	192.168.2.5	0x8f93	No error (0)	live.rezync.com		13.32.27.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:22.189064980 CEST	1.1.1.1	192.168.2.5	0x8f93	No error (0)	live.rezync.com		13.32.27.99	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:22.189064980 CEST	1.1.1.1	192.168.2.5	0x8f93	No error (0)	live.rezync.com		13.32.27.28	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:23.526495934 CEST	1.1.1.1	192.168.2.5	0x18ba	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:23.526495934 CEST	1.1.1.1	192.168.2.5	0x18ba	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:23.526936054 CEST	1.1.1.1	192.168.2.5	0x3c47	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:23.526936054 CEST	1.1.1.1	192.168.2.5	0x3c47	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:24.061140060 CEST	1.1.1.1	192.168.2.5	0x2588	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:24.062319994 CEST	1.1.1.1	192.168.2.5	0xe76	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:24.850605011 CEST	1.1.1.1	192.168.2.5	0x396	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:24.856456995 CEST	1.1.1.1	192.168.2.5	0x723d	No error (0)	crb.kargo.com		18.158.122.115	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:24.856456995 CEST	1.1.1.1	192.168.2.5	0x723d	No error (0)	crb.kargo.com		18.196.164.227	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:24.856456995 CEST	1.1.1.1	192.168.2.5	0x723d	No error (0)	crb.kargo.com		18.193.235.168	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.568775892 CEST	1.1.1.1	192.168.2.5	0xc643	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:26.568775892 CEST	1.1.1.1	192.168.2.5	0xc643	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.49.76.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.568775892 CEST	1.1.1.1	192.168.2.5	0xc643	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.209.249.174	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.569675922 CEST	1.1.1.1	192.168.2.5	0x347a	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:27.283471107 CEST	1.1.1.1	192.168.2.5	0x6b5c	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.410446882 CEST	1.1.1.1	192.168.2.5	0xcfd3	No error (0)	crb.kargo.com		18.196.164.227	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.410446882 CEST	1.1.1.1	192.168.2.5	0xcfd3	No error (0)	crb.kargo.com		18.193.235.168	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.410446882 CEST	1.1.1.1	192.168.2.5	0xcfd3	No error (0)	crb.kargo.com		18.158.122.115	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.545603991 CEST	1.1.1.1	192.168.2.5	0xe3cd	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:27.545603991 CEST	1.1.1.1	192.168.2.5	0xe3cd	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:27.545603991 CEST	1.1.1.1	192.168.2.5	0xe3cd	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.75.156.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.545603991 CEST	1.1.1.1	192.168.2.5	0xe3cd	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.158.74.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:27.546675920 CEST	1.1.1.1	192.168.2.5	0xcec8	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:27.546675920 CEST	1.1.1.1	192.168.2.5	0xcec8	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:31.306962013 CEST	1.1.1.1	192.168.2.5	0xa309	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.946683884 CEST	1.1.1.1	192.168.2.5	0x6eb4	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.948568106 CEST	1.1.1.1	192.168.2.5	0xcc4a	Name error (3)	book5download.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:39:31.970082045 CEST	1.1.1.1	192.168.2.5	0x67b7	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:33.386715889 CEST	1.1.1.1	192.168.2.5	0xabfd	Name error (3)	book5download.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:39:33.402698994 CEST	1.1.1.1	192.168.2.5	0xef88	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:34.933681965 CEST	1.1.1.1	192.168.2.5	0x240e	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:34.933681965 CEST	1.1.1.1	192.168.2.5	0x240e	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:34.933835030 CEST	1.1.1.1	192.168.2.5	0xa9a4	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:37.873430014 CEST	1.1.1.1	192.168.2.5	0xa469	No error (0)	1.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:37.873430014 CEST	1.1.1.1	192.168.2.5	0xa469	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:37.903942108 CEST	1.1.1.1	192.168.2.5	0x36d1	No error (0)	1.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:38.272978067 CEST	1.1.1.1	192.168.2.5	0xcf1b	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:38.272978067 CEST	1.1.1.1	192.168.2.5	0xcf1b	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:38.272978067 CEST	1.1.1.1	192.168.2.5	0xcf1b	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:38.272978067 CEST	1.1.1.1	192.168.2.5	0xcf1b	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:39.176176071 CEST	1.1.1.1	192.168.2.5	0x4e03	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:39.176176071 CEST	1.1.1.1	192.168.2.5	0x4e03	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:39.176176071 CEST	1.1.1.1	192.168.2.5	0x4e03	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:39.176718950 CEST	1.1.1.1	192.168.2.5	0x24c4	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:39.176718950 CEST	1.1.1.1	192.168.2.5	0x24c4	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:39.176718950 CEST	1.1.1.1	192.168.2.5	0x24c4	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:39.176718950 CEST	1.1.1.1	192.168.2.5	0x24c4	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:39.176718950 CEST	1.1.1.1	192.168.2.5	0x24c4	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:39.632925987 CEST	1.1.1.1	192.168.2.5	0x5d9c	No error (0)	1.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:39.632925987 CEST	1.1.1.1	192.168.2.5	0x5d9c	No error (0)	photos-ugc.l.googleusercontent.com		216.58.206.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:39.634526014 CEST	1.1.1.1	192.168.2.5	0x3f21	No error (0)	1.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:40.033632994 CEST	1.1.1.1	192.168.2.5	0xd968	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:40.033632994 CEST	1.1.1.1	192.168.2.5	0xd968	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:40.033632994 CEST	1.1.1.1	192.168.2.5	0xd968	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:40.033632994 CEST	1.1.1.1	192.168.2.5	0xd968	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:40.033632994 CEST	1.1.1.1	192.168.2.5	0xd968	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:40.034893036 CEST	1.1.1.1	192.168.2.5	0xeb71	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:40.034893036 CEST	1.1.1.1	192.168.2.5	0xeb71	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:40.034893036 CEST	1.1.1.1	192.168.2.5	0xeb71	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:40.602497101 CEST	1.1.1.1	192.168.2.5	0x3672	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:40.602497101 CEST	1.1.1.1	192.168.2.5	0x3672	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:40.602497101 CEST	1.1.1.1	192.168.2.5	0x3672	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:40.603136063 CEST	1.1.1.1	192.168.2.5	0x124c	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:40.724965096 CEST	1.1.1.1	192.168.2.5	0xe08a	No error (0)	s.amazon-adsystem.com		98.82.154.76	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.074497938 CEST	1.1.1.1	192.168.2.5	0xd3be	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.074497938 CEST	1.1.1.1	192.168.2.5	0xd3be	No error (0)	dcs-ups.g03.yahoodns.net	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.074497938 CEST	1.1.1.1	192.168.2.5	0xd3be	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.074497938 CEST	1.1.1.1	192.168.2.5	0xd3be	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.074497938 CEST	1.1.1.1	192.168.2.5	0xd3be	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.074497938 CEST	1.1.1.1	192.168.2.5	0xd3be	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.075284004 CEST	1.1.1.1	192.168.2.5	0x8b53	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.075284004 CEST	1.1.1.1	192.168.2.5	0x8b53	No error (0)	dcs-ups.g03.yahoodns.net	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.075284004 CEST	1.1.1.1	192.168.2.5	0x8b53	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.075284004 CEST	1.1.1.1	192.168.2.5	0x8b53	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.308139086 CEST	1.1.1.1	192.168.2.5	0xfa44	No error (0)	cm.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.805490971 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.34.192.5	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.220.80.179	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.96.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.51.253	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.101.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.49.236.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.50.135	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.883160114 CEST	1.1.1.1	192.168.2.5	0xd64c	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.94.23	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:41.884041071 CEST	1.1.1.1	192.168.2.5	0xdb8	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:41.884041071 CEST	1.1.1.1	192.168.2.5	0xdb8	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:42.216952085 CEST	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ums.acuityplatform.com		154.59.122.79	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.218689919 CEST	1.1.1.1	192.168.2.5	0xb614	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:42.218689919 CEST	1.1.1.1	192.168.2.5	0xb614	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.244.18.27	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.218689919 CEST	1.1.1.1	192.168.2.5	0xb614	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.244.18.122	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.218689919 CEST	1.1.1.1	192.168.2.5	0xb614	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.244.18.32	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.218689919 CEST	1.1.1.1	192.168.2.5	0xb614	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.244.18.38	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.220930099 CEST	1.1.1.1	192.168.2.5	0xceb0	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:42.233243942 CEST	1.1.1.1	192.168.2.5	0x2b4a	No error (0)	s.amazon-adsystem.com		98.82.157.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.291801929 CEST	1.1.1.1	192.168.2.5	0x82a6	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:42.300436020 CEST	1.1.1.1	192.168.2.5	0xb341	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:42.300436020 CEST	1.1.1.1	192.168.2.5	0xb341	No error (0)	idaas6.cph.liveintent.com		34.194.53.2	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.300436020 CEST	1.1.1.1	192.168.2.5	0xb341	No error (0)	idaas6.cph.liveintent.com		107.22.90.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.300436020 CEST	1.1.1.1	192.168.2.5	0xb341	No error (0)	idaas6.cph.liveintent.com		54.235.191.9	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.451978922 CEST	1.1.1.1	192.168.2.5	0xdeef	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:42.451997995 CEST	1.1.1.1	192.168.2.5	0x2bc8	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.451997995 CEST	1.1.1.1	192.168.2.5	0x2bc8	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:42.451997995 CEST	1.1.1.1	192.168.2.5	0x2bc8	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.110375881 CEST	1.1.1.1	192.168.2.5	0x68ee	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:43.110375881 CEST	1.1.1.1	192.168.2.5	0x68ee	No error (0)	idaas6.cph.liveintent.com		54.235.191.9	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.110375881 CEST	1.1.1.1	192.168.2.5	0x68ee	No error (0)	idaas6.cph.liveintent.com		34.194.53.2	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.110375881 CEST	1.1.1.1	192.168.2.5	0x68ee	No error (0)	idaas6.cph.liveintent.com		107.22.90.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.111573935 CEST	1.1.1.1	192.168.2.5	0x52db	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:43.169102907 CEST	1.1.1.1	192.168.2.5	0xf9fd	No error (0)	thrtle.com		35.172.6.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.169102907 CEST	1.1.1.1	192.168.2.5	0xf9fd	No error (0)	thrtle.com		34.198.51.190	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.169102907 CEST	1.1.1.1	192.168.2.5	0xf9fd	No error (0)	thrtle.com		44.193.146.248	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.169102907 CEST	1.1.1.1	192.168.2.5	0xf9fd	No error (0)	thrtle.com		44.223.158.28	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.169102907 CEST	1.1.1.1	192.168.2.5	0xf9fd	No error (0)	thrtle.com		52.205.20.252	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.169102907 CEST	1.1.1.1	192.168.2.5	0xf9fd	No error (0)	thrtle.com		44.213.213.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.169102907 CEST	1.1.1.1	192.168.2.5	0xf9fd	No error (0)	thrtle.com		54.82.142.25	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.169102907 CEST	1.1.1.1	192.168.2.5	0xf9fd	No error (0)	thrtle.com		34.197.201.22	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.170659065 CEST	1.1.1.1	192.168.2.5	0x67c6	No error (0)	pixel.nordicdataresources.net		57.128.187.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.197734118 CEST	1.1.1.1	192.168.2.5	0xdace	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.197734118 CEST	1.1.1.1	192.168.2.5	0xdace	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.197734118 CEST	1.1.1.1	192.168.2.5	0xdace	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.198754072 CEST	1.1.1.1	192.168.2.5	0x2723	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:43.941142082 CEST	1.1.1.1	192.168.2.5	0x9cfd	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.941142082 CEST	1.1.1.1	192.168.2.5	0x9cfd	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.941142082 CEST	1.1.1.1	192.168.2.5	0x9cfd	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:43.941142082 CEST	1.1.1.1	192.168.2.5	0x9cfd	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:44.679574966 CEST	1.1.1.1	192.168.2.5	0x4f0d	No error (0)	dis.eu.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:44.679574966 CEST	1.1.1.1	192.168.2.5	0x4f0d	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:44.679605007 CEST	1.1.1.1	192.168.2.5	0xeb6f	No error (0)	dis.eu.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:45.227025986 CEST	1.1.1.1	192.168.2.5	0x98a	No error (0)	a.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.227025986 CEST	1.1.1.1	192.168.2.5	0x98a	No error (0)	a.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.227901936 CEST	1.1.1.1	192.168.2.5	0x7da5	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:45.725744963 CEST	1.1.1.1	192.168.2.5	0x3a22	No error (0)	pixel.nordicdataresources.net		57.128.187.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.907157898 CEST	1.1.1.1	192.168.2.5	0x961b	No error (0)	s.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.907157898 CEST	1.1.1.1	192.168.2.5	0x961b	No error (0)	s.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.907432079 CEST	1.1.1.1	192.168.2.5	0xb9f5	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	euw-ice.360yield.com		52.19.36.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	euw-ice.360yield.com		108.128.59.229	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	euw-ice.360yield.com		54.194.234.1	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	euw-ice.360yield.com		52.17.223.119	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	euw-ice.360yield.com		52.30.160.207	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	euw-ice.360yield.com		54.74.240.94	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	euw-ice.360yield.com		52.31.28.169	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038152933 CEST	1.1.1.1	192.168.2.5	0xe1be	No error (0)	euw-ice.360yield.com		34.251.142.61	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.038878918 CEST	1.1.1.1	192.168.2.5	0xe00	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:47.599363089 CEST	1.1.1.1	192.168.2.5	0x27b2	No error (0)	idsync.reson8.com	idsync.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:47.603795052 CEST	1.1.1.1	192.168.2.5	0xdd52	No error (0)	idsync.reson8.com	idsync.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:47.930007935 CEST	1.1.1.1	192.168.2.5	0xf212	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.930007935 CEST	1.1.1.1	192.168.2.5	0xf212	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.930007935 CEST	1.1.1.1	192.168.2.5	0xf212	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.930007935 CEST	1.1.1.1	192.168.2.5	0xf212	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.930814981 CEST	1.1.1.1	192.168.2.5	0xfcf3	Name error (3)	book5download.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:39:47.933192968 CEST	1.1.1.1	192.168.2.5	0x39cd	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.933501005 CEST	1.1.1.1	192.168.2.5	0xc0f7	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:47.933832884 CEST	1.1.1.1	192.168.2.5	0x9534	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.933832884 CEST	1.1.1.1	192.168.2.5	0x9534	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:47.946026087 CEST	1.1.1.1	192.168.2.5	0x34e2	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:49.513119936 CEST	1.1.1.1	192.168.2.5	0x3538	Name error (3)	book5download.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:39:49.514169931 CEST	1.1.1.1	192.168.2.5	0x360e	Name error (3)	book5download.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.100980997 CEST	1.1.1.1	192.168.2.5	0xfb85	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.100980997 CEST	1.1.1.1	192.168.2.5	0xfb85	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.100980997 CEST	1.1.1.1	192.168.2.5	0xfb85	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.100980997 CEST	1.1.1.1	192.168.2.5	0xfb85	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.100980997 CEST	1.1.1.1	192.168.2.5	0xfb85	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.101284981 CEST	1.1.1.1	192.168.2.5	0x24c	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.129302025 CEST	1.1.1.1	192.168.2.5	0x2748	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.129302025 CEST	1.1.1.1	192.168.2.5	0x2748	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.129302025 CEST	1.1.1.1	192.168.2.5	0x2748	No error (0)	dualstack.pinterest.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.129302025 CEST	1.1.1.1	192.168.2.5	0x2748	No error (0)	dualstack.pinterest.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.129302025 CEST	1.1.1.1	192.168.2.5	0x2748	No error (0)	dualstack.pinterest.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.129302025 CEST	1.1.1.1	192.168.2.5	0x2748	No error (0)	dualstack.pinterest.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.131515980 CEST	1.1.1.1	192.168.2.5	0xba60	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.131515980 CEST	1.1.1.1	192.168.2.5	0xba60	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.597760916 CEST	1.1.1.1	192.168.2.5	0xa3d0	No error (0)	youruno-chicka.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.597760916 CEST	1.1.1.1	192.168.2.5	0xa3d0	No error (0)	blogspot.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.606411934 CEST	1.1.1.1	192.168.2.5	0x42e9	No error (0)	youruno-chicka.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.893460989 CEST	1.1.1.1	192.168.2.5	0xb5c0	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.893460989 CEST	1.1.1.1	192.168.2.5	0xb5c0	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.893460989 CEST	1.1.1.1	192.168.2.5	0xb5c0	No error (0)	dualstack.pinterest.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.893460989 CEST	1.1.1.1	192.168.2.5	0xb5c0	No error (0)	dualstack.pinterest.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.893460989 CEST	1.1.1.1	192.168.2.5	0xb5c0	No error (0)	dualstack.pinterest.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.893460989 CEST	1.1.1.1	192.168.2.5	0xb5c0	No error (0)	dualstack.pinterest.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:50.895359039 CEST	1.1.1.1	192.168.2.5	0x1716	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:50.895359039 CEST	1.1.1.1	192.168.2.5	0x1716	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:52.975003958 CEST	1.1.1.1	192.168.2.5	0xcad3	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:52.975656986 CEST	1.1.1.1	192.168.2.5	0xb100	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:53.014427900 CEST	1.1.1.1	192.168.2.5	0x80f2	No error (0)	sync.ipredictive.com		52.73.131.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.014427900 CEST	1.1.1.1	192.168.2.5	0x80f2	No error (0)	sync.ipredictive.com		52.21.216.149	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.014427900 CEST	1.1.1.1	192.168.2.5	0x80f2	No error (0)	sync.ipredictive.com		54.156.4.88	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.014427900 CEST	1.1.1.1	192.168.2.5	0x80f2	No error (0)	sync.ipredictive.com		52.54.109.89	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.014427900 CEST	1.1.1.1	192.168.2.5	0x80f2	No error (0)	sync.ipredictive.com		54.160.189.7	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.014427900 CEST	1.1.1.1	192.168.2.5	0x80f2	No error (0)	sync.ipredictive.com		54.145.9.27	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.014427900 CEST	1.1.1.1	192.168.2.5	0x80f2	No error (0)	sync.ipredictive.com		54.156.110.156	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.014427900 CEST	1.1.1.1	192.168.2.5	0x80f2	No error (0)	sync.ipredictive.com		54.152.57.193	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.231333017 CEST	1.1.1.1	192.168.2.5	0x8233	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.231333017 CEST	1.1.1.1	192.168.2.5	0x8233	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.231333017 CEST	1.1.1.1	192.168.2.5	0x8233	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.231769085 CEST	1.1.1.1	192.168.2.5	0x8361	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:53.234201908 CEST	1.1.1.1	192.168.2.5	0x64da	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:53.234402895 CEST	1.1.1.1	192.168.2.5	0xc395	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:53.234402895 CEST	1.1.1.1	192.168.2.5	0xc395	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		35.157.251.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.234402895 CEST	1.1.1.1	192.168.2.5	0xc395	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.73.6.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.234402895 CEST	1.1.1.1	192.168.2.5	0xc395	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.120.162.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.302093983 CEST	1.1.1.1	192.168.2.5	0x73c	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.361483097 CEST	1.1.1.1	192.168.2.5	0x4c77	No error (0)	ic.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.361483097 CEST	1.1.1.1	192.168.2.5	0x4c77	No error (0)	ic.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.580547094 CEST	1.1.1.1	192.168.2.5	0xb8ca	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:53.580547094 CEST	1.1.1.1	192.168.2.5	0xb8ca	No error (0)	de.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:54.889763117 CEST	1.1.1.1	192.168.2.5	0x98b0	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:54.905272961 CEST	1.1.1.1	192.168.2.5	0xa799	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:54.988682032 CEST	1.1.1.1	192.168.2.5	0xdfbe	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:54.988682032 CEST	1.1.1.1	192.168.2.5	0xdfbe	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:54.988682032 CEST	1.1.1.1	192.168.2.5	0xdfbe	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:54.989644051 CEST	1.1.1.1	192.168.2.5	0x43ac	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018218040 CEST	1.1.1.1	192.168.2.5	0xcdb0	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018233061 CEST	1.1.1.1	192.168.2.5	0xea1d	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.018233061 CEST	1.1.1.1	192.168.2.5	0xea1d	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.025455952 CEST	1.1.1.1	192.168.2.5	0x6ca3	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:55.025474072 CEST	1.1.1.1	192.168.2.5	0x4cc5	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:55.025474072 CEST	1.1.1.1	192.168.2.5	0x4cc5	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		35.157.251.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.025474072 CEST	1.1.1.1	192.168.2.5	0x4cc5	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.73.6.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.025474072 CEST	1.1.1.1	192.168.2.5	0x4cc5	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.120.162.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.064594984 CEST	1.1.1.1	192.168.2.5	0xf979	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:55.064594984 CEST	1.1.1.1	192.168.2.5	0xf979	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.064594984 CEST	1.1.1.1	192.168.2.5	0xf979	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.064594984 CEST	1.1.1.1	192.168.2.5	0xf979	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.066049099 CEST	1.1.1.1	192.168.2.5	0x70db	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.285501003 CEST	1.1.1.1	192.168.2.5	0xbab9	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.286103010 CEST	1.1.1.1	192.168.2.5	0x4c52	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.286103010 CEST	1.1.1.1	192.168.2.5	0x4c52	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.520273924 CEST	1.1.1.1	192.168.2.5	0xf1db	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.520410061 CEST	1.1.1.1	192.168.2.5	0xf52b	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	idaas-ext.cph.liveintent.com		3.215.157.212	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	idaas-ext.cph.liveintent.com		54.227.194.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	idaas-ext.cph.liveintent.com		44.215.250.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	idaas-ext.cph.liveintent.com		23.21.150.78	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	idaas-ext.cph.liveintent.com		35.168.171.63	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	idaas-ext.cph.liveintent.com		44.194.57.235	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	idaas-ext.cph.liveintent.com		3.233.209.230	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.531864882 CEST	1.1.1.1	192.168.2.5	0x9370	No error (0)	idaas-ext.cph.liveintent.com		3.228.139.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.532262087 CEST	1.1.1.1	192.168.2.5	0x21db	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.828649998 CEST	1.1.1.1	192.168.2.5	0xca92	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.828649998 CEST	1.1.1.1	192.168.2.5	0xca92	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.828649998 CEST	1.1.1.1	192.168.2.5	0xca92	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.828649998 CEST	1.1.1.1	192.168.2.5	0xca92	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.829385042 CEST	1.1.1.1	192.168.2.5	0xe4eb	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.829412937 CEST	1.1.1.1	192.168.2.5	0xca8	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.829494953 CEST	1.1.1.1	192.168.2.5	0x941d	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.829693079 CEST	1.1.1.1	192.168.2.5	0xf74f	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.829758883 CEST	1.1.1.1	192.168.2.5	0x3e09	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.829758883 CEST	1.1.1.1	192.168.2.5	0x3e09	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.829758883 CEST	1.1.1.1	192.168.2.5	0x3e09	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.829758883 CEST	1.1.1.1	192.168.2.5	0x3e09	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.837783098 CEST	1.1.1.1	192.168.2.5	0x7ede	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.837848902 CEST	1.1.1.1	192.168.2.5	0x4749	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.997838020 CEST	1.1.1.1	192.168.2.5	0xd387	No error (0)	thrtl.redinuid.imrworldwide.com	simple-redirect.redinuid.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.997838020 CEST	1.1.1.1	192.168.2.5	0xd387	No error (0)	simple-redirect.redinuid.sre.nielsen.com	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:56.997838020 CEST	1.1.1.1	192.168.2.5	0xd387	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		52.208.21.139	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.997838020 CEST	1.1.1.1	192.168.2.5	0xd387	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		52.51.127.222	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:56.997838020 CEST	1.1.1.1	192.168.2.5	0xd387	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		63.32.181.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:57.006293058 CEST	1.1.1.1	192.168.2.5	0x4940	No error (0)	thrtl.redinuid.imrworldwide.com	simple-redirect.redinuid.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:57.006293058 CEST	1.1.1.1	192.168.2.5	0x4940	No error (0)	simple-redirect.redinuid.sre.nielsen.com	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:58.175888062 CEST	1.1.1.1	192.168.2.5	0x8dd3	No error (0)	secure.insightexpressai.com	global-wildcard.insightexpressai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:58.176384926 CEST	1.1.1.1	192.168.2.5	0xafbc	No error (0)	secure.insightexpressai.com	global-wildcard.insightexpressai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:58.194478989 CEST	1.1.1.1	192.168.2.5	0xa640	No error (0)	nlsn.thrtle.com		54.82.142.25	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.194478989 CEST	1.1.1.1	192.168.2.5	0xa640	No error (0)	nlsn.thrtle.com		34.197.201.22	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.194478989 CEST	1.1.1.1	192.168.2.5	0xa640	No error (0)	nlsn.thrtle.com		44.193.146.248	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.194478989 CEST	1.1.1.1	192.168.2.5	0xa640	No error (0)	nlsn.thrtle.com		44.213.213.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.194478989 CEST	1.1.1.1	192.168.2.5	0xa640	No error (0)	nlsn.thrtle.com		3.225.169.158	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.194478989 CEST	1.1.1.1	192.168.2.5	0xa640	No error (0)	nlsn.thrtle.com		35.172.6.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.194478989 CEST	1.1.1.1	192.168.2.5	0xa640	No error (0)	nlsn.thrtle.com		18.208.90.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:58.194478989 CEST	1.1.1.1	192.168.2.5	0xa640	No error (0)	nlsn.thrtle.com		52.205.20.252	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:59.171227932 CEST	1.1.1.1	192.168.2.5	0x14a4	No error (0)	api.retargetly.com		104.22.17.141	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:59.171227932 CEST	1.1.1.1	192.168.2.5	0x14a4	No error (0)	api.retargetly.com		172.67.8.244	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:59.171227932 CEST	1.1.1.1	192.168.2.5	0x14a4	No error (0)	api.retargetly.com		104.22.16.141	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:59.171241045 CEST	1.1.1.1	192.168.2.5	0x9001	No error (0)	api.retargetly.com			65	IN (0x0001)	false
Oct 4, 2024 13:40:00.141618013 CEST	1.1.1.1	192.168.2.5	0x2e07	No error (0)	eyeota.ck-ie.com		80.77.85.29	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:01.116956949 CEST	1.1.1.1	192.168.2.5	0xd18e	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:01.116956949 CEST	1.1.1.1	192.168.2.5	0xd18e	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:01.117433071 CEST	1.1.1.1	192.168.2.5	0x6742	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:01.117433071 CEST	1.1.1.1	192.168.2.5	0x6742	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:01.117433071 CEST	1.1.1.1	192.168.2.5	0x6742	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:01.698175907 CEST	1.1.1.1	192.168.2.5	0x858f	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:02.295098066 CEST	1.1.1.1	192.168.2.5	0x7c67	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:02.295098066 CEST	1.1.1.1	192.168.2.5	0x7c67	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:02.295098066 CEST	1.1.1.1	192.168.2.5	0x7c67	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:02.295098066 CEST	1.1.1.1	192.168.2.5	0x7c67	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:02.295098066 CEST	1.1.1.1	192.168.2.5	0x7c67	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:02.295098066 CEST	1.1.1.1	192.168.2.5	0x7c67	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:02.295098066 CEST	1.1.1.1	192.168.2.5	0x7c67	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:02.295098066 CEST	1.1.1.1	192.168.2.5	0x7c67	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:04.279067993 CEST	1.1.1.1	192.168.2.5	0x7a4d	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.138608932 CEST	1.1.1.1	192.168.2.5	0x3243	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.407026052 CEST	1.1.1.1	192.168.2.5	0x89f0	No error (0)	api.intentiq.com		13.32.121.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.407026052 CEST	1.1.1.1	192.168.2.5	0x89f0	No error (0)	api.intentiq.com		13.32.121.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.407026052 CEST	1.1.1.1	192.168.2.5	0x89f0	No error (0)	api.intentiq.com		13.32.121.27	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.407026052 CEST	1.1.1.1	192.168.2.5	0x89f0	No error (0)	api.intentiq.com		13.32.121.106	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	idaas-ext.cph.liveintent.com		44.215.250.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	idaas-ext.cph.liveintent.com		18.205.228.210	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	idaas-ext.cph.liveintent.com		54.227.194.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	idaas-ext.cph.liveintent.com		54.237.59.39	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	idaas-ext.cph.liveintent.com		3.233.209.230	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	idaas-ext.cph.liveintent.com		18.215.102.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	idaas-ext.cph.liveintent.com		3.215.157.212	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.442064047 CEST	1.1.1.1	192.168.2.5	0x2e4a	No error (0)	idaas-ext.cph.liveintent.com		3.226.114.200	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.443618059 CEST	1.1.1.1	192.168.2.5	0x34b7	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:06.444396973 CEST	1.1.1.1	192.168.2.5	0x9d6f	No error (0)	track2.securedvisit.com		107.23.180.140	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.444396973 CEST	1.1.1.1	192.168.2.5	0x9d6f	No error (0)	track2.securedvisit.com		34.238.214.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.447134018 CEST	1.1.1.1	192.168.2.5	0xcd45	No error (0)	thrtle.com		54.82.142.25	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.447134018 CEST	1.1.1.1	192.168.2.5	0xcd45	No error (0)	thrtle.com		44.193.146.248	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.447134018 CEST	1.1.1.1	192.168.2.5	0xcd45	No error (0)	thrtle.com		44.223.158.28	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.447134018 CEST	1.1.1.1	192.168.2.5	0xcd45	No error (0)	thrtle.com		3.225.169.158	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.447134018 CEST	1.1.1.1	192.168.2.5	0xcd45	No error (0)	thrtle.com		35.172.6.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.447134018 CEST	1.1.1.1	192.168.2.5	0xcd45	No error (0)	thrtle.com		34.197.201.22	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.447134018 CEST	1.1.1.1	192.168.2.5	0xcd45	No error (0)	thrtle.com		18.208.90.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:06.447134018 CEST	1.1.1.1	192.168.2.5	0xcd45	No error (0)	thrtle.com		44.213.213.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.079566002 CEST	1.1.1.1	192.168.2.5	0x384	No error (0)	track2.securedvisit.com		107.23.180.140	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.079566002 CEST	1.1.1.1	192.168.2.5	0x384	No error (0)	track2.securedvisit.com		34.238.214.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.590042114 CEST	1.1.1.1	192.168.2.5	0xca4c	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.590042114 CEST	1.1.1.1	192.168.2.5	0xca4c	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.590042114 CEST	1.1.1.1	192.168.2.5	0xca4c	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.591778040 CEST	1.1.1.1	192.168.2.5	0xe5a1	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.591778040 CEST	1.1.1.1	192.168.2.5	0xe5a1	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.591778040 CEST	1.1.1.1	192.168.2.5	0xe5a1	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.119.100	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.34.192.5	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.94.23	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.21.147	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.132.164	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.50.135	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.207.89	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.593439102 CEST	1.1.1.1	192.168.2.5	0x1748	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.51.253	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:07.594908953 CEST	1.1.1.1	192.168.2.5	0x1a18	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.594908953 CEST	1.1.1.1	192.168.2.5	0x1a18	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.645303965 CEST	1.1.1.1	192.168.2.5	0xc7cf	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.645303965 CEST	1.1.1.1	192.168.2.5	0xc7cf	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.645883083 CEST	1.1.1.1	192.168.2.5	0x472d	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:07.645883083 CEST	1.1.1.1	192.168.2.5	0x472d	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.49.236.173	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.119.100	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.96.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.101.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.207.89	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.220.80.179	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.132.164	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.652806044 CEST	1.1.1.1	192.168.2.5	0xb031	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.21.147	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:08.653584003 CEST	1.1.1.1	192.168.2.5	0xd0cd	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:08.653584003 CEST	1.1.1.1	192.168.2.5	0xd0cd	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:09.963994980 CEST	1.1.1.1	192.168.2.5	0x1581	No error (0)	rtb.adentifi.com		3.208.227.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:09.963994980 CEST	1.1.1.1	192.168.2.5	0x1581	No error (0)	rtb.adentifi.com		44.206.32.49	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:09.963994980 CEST	1.1.1.1	192.168.2.5	0x1581	No error (0)	rtb.adentifi.com		3.220.154.123	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:09.963994980 CEST	1.1.1.1	192.168.2.5	0x1581	No error (0)	rtb.adentifi.com		54.165.51.215	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:09.963994980 CEST	1.1.1.1	192.168.2.5	0x1581	No error (0)	rtb.adentifi.com		44.218.170.50	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:09.963994980 CEST	1.1.1.1	192.168.2.5	0x1581	No error (0)	rtb.adentifi.com		52.200.121.93	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49713	199.232.210.172	80

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 13:38:31.513506889 CEST	199	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 04 Oct 2024 11:38:31 GMT Via: 1.1 varnish X-Varnish: 30152506 Cache-Control: public,max-age=900 ETag: "746787a3f0d91:0" Age: 766

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49712	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:31 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-04 11:38:31 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-04 11:38:31 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 04 Oct 2024 11:37:31 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C531_SN1 x-ms-request-id: d879b2e1-442e-4efe-85cb-44f84751be2c PPServer: PPV: 30 H: SN1PEPF0002F038 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 04 Oct 2024 11:38:30 GMT Connection: close Content-Length: 11389
2024-10-04 11:38:31 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49714	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:32 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-04 11:38:32 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-04 11:38:32 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 04 Oct 2024 11:37:32 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BL2 x-ms-request-id: bd201038-b449-4457-84ad-ae7a9e93a481 PPServer: PPV: 30 H: BL02EPF0001D771 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 04 Oct 2024 11:38:31 GMT Connection: close Content-Length: 1918
2024-10-04 11:38:32 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49715	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:33 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-04 11:38:33 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-04 11:38:34 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 04 Oct 2024 11:37:33 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BAY x-ms-request-id: 76aacb39-4d51-48c0-9c7d-bb92c4bf2558 PPServer: PPV: 30 H: PH1PEPF00012034 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 04 Oct 2024 11:38:33 GMT Connection: close Content-Length: 1918
2024-10-04 11:38:34 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49716	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:33 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-04 11:38:33 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-04 11:38:34 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 04 Oct 2024 11:37:33 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C531_SN1 x-ms-request-id: 342f86ba-f80e-4230-ba33-b93ba83bdd0c PPServer: PPV: 30 H: SN1PEPF0003FB3E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 04 Oct 2024 11:38:33 GMT Connection: close Content-Length: 11409
2024-10-04 11:38:34 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49717	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:35 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-04 11:38:35 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-04 11:38:35 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 04 Oct 2024 11:37:35 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30374.3 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C531_SN1 x-ms-request-id: 92d99986-2b21-47bb-99a0-dc873620ac9c PPServer: PPV: 30 H: SN1PEPF0002F8E9 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 04 Oct 2024 11:38:34 GMT Connection: close Content-Length: 11409
2024-10-04 11:38:35 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49718	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:37 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-04 11:38:37 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-04 11:38:37 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 04 Oct 2024 11:37:37 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C531_SN1 x-ms-request-id: 675a414a-eec4-4614-9026-e634738f1086 PPServer: PPV: 30 H: SN1PEPF0002FA62 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 04 Oct 2024 11:38:37 GMT Connection: close Content-Length: 11409
2024-10-04 11:38:37 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49719	20.42.65.92	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:39 UTC	178	OUT	POST /Telemetry.Request HTTP/1.1 Connection: Keep-Alive User-Agent: MSDW MSA_DeviceTicket_Error: 0x80004004 Content-Length: 5110 Host: umwatson.events.data.microsoft.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49725	142.250.185.161	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:44 UTC	670	OUT	GET / HTTP/1.1 Host: youruno-chicka.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:44 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Fri, 04 Oct 2024 11:38:44 GMT Date: Fri, 04 Oct 2024 11:38:44 GMT Cache-Control: private, max-age=0 Last-Modified: Fri, 30 Aug 2024 07:20:22 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:38:44 UTC	946	IN	Data Raw: 33 35 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 27 20 78 6d 6c 3a 6c 61 6e 67 3d 27 65 6e 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 21 2d 2d 20 4d 65 74 61 20 74 69 74 6c 65 20 62 Data Ascii: 350a<!DOCTYPE html><html lang='en' xml:lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head>... Meta title b
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 2c 20 66 6f 6c 6c 6f 77 27 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 61 6c 6c 27 20 6e 61 6d 65 3d 27 67 6f 6f 67 6c 65 62 6f 74 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 61 6c 6c 27 20 6e 61 6d 65 3d 27 6d 73 6e 62 6f 74 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 61 6c 6c 27 20 6e 61 6d 65 3d 27 47 6f 6f 67 6c 65 62 6f 74 2d 49 6d 61 67 65 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 61 6c 6c 27 20 6e 61 6d 65 3d 27 53 6c 75 72 70 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 61 6c 6c 27 20 6e 61 6d 65 3d 27 5a 79 42 6f 72 67 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 61 6c 6c 27 20 6e 61 6d 65 3d 27 53 63 6f 6f 74 65 72 27 2f 3e 0a 3c Data Ascii: , follow' name='robots'/><meta content='all' name='googlebot'/><meta content='all' name='msnbot'/><meta content='all' name='Googlebot-Image'/><meta content='all' name='Slurp'/><meta content='all' name='ZyBorg'/><meta content='all' name='Scooter'/><
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 27 20 72 65 6c 3d 27 61 6c 74 65 72 6e 61 74 65 27 20 74 69 74 6c 65 3d 27 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 20 2d 20 41 74 6f 6d 27 20 74 79 70 65 3d 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 27 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 3f 61 6c 74 3d 72 73 73 27 20 72 65 6c 3d 27 61 6c 74 65 72 6e 61 74 65 27 20 74 69 74 6c 65 3d 27 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 20 2d 20 52 53 53 27 20 74 79 70 65 3d 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 27 2f 3e 0a 3c 6c 69 6e Data Ascii: om/feeds/posts/default' rel='alternate' title='youruno-chicka - Atom' type='application/atom+xml'/><link href='https://youruno-chicka.blogspot.com/feeds/posts/default?alt=rss' rel='alternate' title='youruno-chicka - RSS' type='application/rss+xml'/><lin
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 63 6f 6d 2f 70 2f 74 65 72 6d 73 2d 6f 66 2d 75 73 65 2e 68 74 6d 6c 23 74 65 6d 70 6c 61 74 65 2d 6c 69 63 65 6e 73 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 20 56 61 72 69 61 62 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 3c 56 61 72 69 61 62 6c 65 20 6e 61 6d 65 3d 22 63 6f 6c 6f 72 73 63 68 65 6d 65 22 20 64 65 73 63 72 69 70 74 69 6f 6e 3d 22 47 65 6e 65 72 61 6c 20 43 6f 6c 6f 72 22 20 74 79 70 65 3d 22 63 6f 6c 6f 72 22 20 64 65 66 61 75 6c 74 3d 22 23 33 34 39 38 44 42 22 2f 3e 0a 3c 56 61 72 69 61 62 6c 65 20 6e 61 6d 65 3d 22 74 65 78 74 63 6f 6c 6f 72 22 20 64 Data Ascii: com/p/terms-of-use.html#template-license----------------------------------------------- // Variable definitions====================<Variable name="colorscheme" description="General Color" type="color" default="#3498DB"/><Variable name="textcolor" d
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 68 65 69 67 68 74 3a 30 7d 70 72 65 2c 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d Data Ascii: height:0}pre,textarea{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-transform:none}button,html input[type=
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 68 7d 0a 2e 67 6d 72 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 0a 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 31 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 31 30 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 31 31 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 31 32 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 32 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 33 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 34 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 35 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 36 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 37 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 38 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 2d 39 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 30 2d 31 32 2c 2e 67 6d 72 2d 63 6f 6c 2d 31 31 2d 31 32 2c 2e 67 6d 72 2d 63 6f 6c 2d 32 2d 31 32 2c 2e 67 Data Ascii: h}.gmr-row{margin-right:-15px;margin-left:-15px}.gmr-col-1-1,.gmr-col-1-10,.gmr-col-1-11,.gmr-col-1-12,.gmr-col-1-2,.gmr-col-1-3,.gmr-col-1-4,.gmr-col-1-5,.gmr-col-1-6,.gmr-col-1-7,.gmr-col-1-8,.gmr-col-1-9,.gmr-col-10-12,.gmr-col-11-12,.gmr-col-2-12,.g
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 67 68 74 3a 31 2e 36 3b 63 6f 6c 6f 72 3a 23 33 33 33 33 33 33 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 34 70 78 20 22 4f 70 65 6e 20 53 61 6e 73 22 2c 20 56 65 72 64 61 6e 61 2c 20 47 65 6e 65 76 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 7d 0a 61 7b 63 6f 6c 6f 72 3a 23 31 31 31 31 31 31 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0a 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 34 39 38 44 42 3b 7d 0a 61 20 69 6d 67 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 7d 0a 2e 67 6d 72 2d 69 74 65 6d 2d 70 6f 73 74 20 61 7b 63 6f 6c 6f 72 3a 23 33 34 39 38 44 42 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 0a 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 0a 2e 67 6d Data Ascii: ght:1.6;color:#333333;font:normal normal 14px "Open Sans", Verdana, Geneva, sans-serif;}a{color:#111111;text-decoration:none;}a:hover{color:#3498DB;}a img{border-width:0}.gmr-item-post a{color:#3498DB;text-decoration:underline;}h1,h2,h3,h4,h5,h6,.gm
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 7d 0a 2e 74 61 62 6c 65 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 7d 0a 2e 74 61 62 6c 65 20 61 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 68 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 68 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 68 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 64 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 2c 0a 2e 74 61 62 6c 65 Data Ascii: t-align: left;}.table {width: 100%;max-width: 100%;margin-bottom: 20px;}.table a {text-decoration: none !important;}.table > thead > tr > th,.table > tbody > tr > th,.table > tfoot > tr > th,.table > thead > tr > td,.table > tbody > tr > td,.table
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 63 66 30 66 31 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 3a 66 6f 63 75 73 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 3a 66 6f 63 75 73 2c 0a 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 34 39 38 44 42 3b 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2c 0a 2e 67 6d 72 2d 62 74 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 34 39 38 44 42 3b 62 6f 78 2d Data Ascii: rder-color:#ecf0f1;padding-left: 10px;padding-right: 10px;margin-bottom: 15px;}input[type="text"]:focus,input[type="email"]:focus,textarea:focus{border-color:#3498DB;}input[type="button"],input[type="submit"],.gmr-btn {background-color: #3498DB;box-
2024-10-04 11:38:44 UTC	1390	IN	Data Raw: 30 70 78 20 36 70 78 20 23 44 31 42 33 35 38 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 36 70 78 20 23 44 31 42 33 35 38 3b 7d 0a 2e 67 6d 72 2d 62 74 6e 2d 79 65 6c 6c 6f 77 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 23 44 31 42 33 35 38 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 23 44 31 42 33 35 38 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 23 44 31 42 33 35 38 3b 7d 0a 2e 67 6d 72 2d 62 74 6e 2d 67 72 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 39 35 61 35 61 36 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 36 70 78 20 23 37 66 38 63 38 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d Data Ascii: 0px 6px #D1B358;-webkit-box-shadow: 0px 6px #D1B358;}.gmr-btn-yellow:hover{box-shadow: 0px 2px #D1B358;-moz-box-shadow: 0px 2px #D1B358;-webkit-box-shadow: 0px 2px #D1B358;}.gmr-btn-gray{background-color: #95a5a6;box-shadow: 0px 6px #7f8c8d;-webkit-box-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49729	151.101.66.137	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:45 UTC	545	OUT	GET /jquery-1.7.2.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:45 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 94840 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-17278" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2519425 Date: Fri, 04 Oct 2024 11:38:45 GMT X-Served-By: cache-lga21955-LGA, cache-ewr-kewr1740050-EWR X-Cache: HIT, HIT X-Cache-Hits: 43, 0 X-Timer: S1728041926.651375,VS0,VE1 Vary: Accept-Encoding
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e=
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 69 6f 6e 20 66 72 6f 6d 20 22 2b 6d 2e 72 65 70 6c 61 63 65 28 22 20 22 2c 22 20 74 6f 20 22 29 29 2c 6e 21 3d 3d 21 30 26 26 28 63 3d 6e 3f 6e 28 63 29 3a 70 28 6f 28 63 29 29 29 7d 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 61 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 61 2e 63 6f 6e 74 65 6e 74 73 2c 66 3d 61 2e 64 61 74 61 54 79 70 65 73 2c 67 3d 61 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 2c 68 2c 69 2c 6a 2c 6b 3b 66 6f 72 28 69 20 69 6e 20 67 29 69 20 69 6e 20 64 26 26 28 63 5b 67 5b 69 5d 5d 3d 64 5b 69 5d 29 3b 77 68 69 6c 65 28 66 5b 30 5d 3d 3d 3d 22 2a 22 29 66 2e 73 68 69 66 74 28 29 2c 68 3d 3d 3d 62 26 26 28 68 3d 61 2e 6d 69 6d 65 54 79 70 65 7c 7c 63 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 63 6f 6e Data Ascii: ion from "+m.replace(" "," to ")),n!==!0&&(c=n?n(c):p(o(c)))}}return c}function ca(a,c,d){var e=a.contents,f=a.dataTypes,g=a.responseFields,h,i,j,k;for(i in g)i in d&&(c[g[i]]=d[i]);while(f[0]==="*")f.shift(),h===b&&(h=a.mimeType\|\|c.getResponseHeader("con
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 69 67 68 74 2c 65 3d 62 3d 3d 3d 22 77 69 64 74 68 22 3f 31 3a 30 2c 67 3d 34 3b 69 66 28 64 3e 30 29 7b 69 66 28 63 21 3d 3d 22 62 6f 72 64 65 72 22 29 66 6f 72 28 3b 65 3c 67 3b 65 2b 3d 32 29 63 7c 7c 28 64 2d 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 22 70 61 64 64 69 6e 67 22 2b 62 78 5b 65 5d 29 29 7c 7c 30 29 2c 63 3d 3d 3d 22 6d 61 72 67 69 6e 22 3f 64 2b 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 63 2b 62 78 5b 65 5d 29 29 7c 7c 30 3a 64 2d 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 22 62 6f 72 64 65 72 22 2b 62 78 5b 65 5d 2b 22 57 69 64 74 68 22 29 29 7c 7c 30 3b 72 65 74 75 72 6e 20 64 2b 22 70 78 22 7d 64 3d 62 79 28 61 2c 62 29 3b 69 66 28 64 3c 30 7c 7c 64 3d 3d 6e 75 6c 6c 29 64 3d 61 2e Data Ascii: ight,e=b==="width"?1:0,g=4;if(d>0){if(c!=="border")for(;e<g;e+=2)c\|\|(d-=parseFloat(f.css(a,"padding"+bx[e]))\|\|0),c==="margin"?d+=parseFloat(f.css(a,c+bx[e]))\|\|0:d-=parseFloat(f.css(a,"border"+bx[e]+"Width"))\|\|0;return d+"px"}d=by(a,b);if(d<0\|\|d==null)d=a.
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 74 65 78 74 26 26 28 62 2e 74 65 78 74 3d 61 2e 74 65 78 74 29 3a 28 61 2e 63 68 65 63 6b 65 64 26 26 28 62 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 62 2e 63 68 65 63 6b 65 64 3d 61 2e 63 68 65 63 6b 65 64 29 2c 62 2e 76 61 6c 75 65 21 3d 3d 61 2e 76 61 6c 75 65 26 26 28 62 2e 76 61 6c 75 65 3d 61 2e 76 61 6c 75 65 29 29 2c 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 66 2e 65 78 70 61 6e 64 6f 29 2c 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 5f 73 75 62 6d 69 74 5f 61 74 74 61 63 68 65 64 22 29 2c 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 5f 63 68 61 6e 67 65 5f 61 74 74 61 63 68 65 64 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 6a 28 61 2c 62 29 7b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 21 21 Data Ascii: text&&(b.text=a.text):(a.checked&&(b.defaultChecked=b.checked=a.checked),b.value!==a.value&&(b.value=a.value)),b.removeAttribute(f.expando),b.removeAttribute("_submit_attached"),b.removeAttribute("_change_attached"))}function bj(a,b){if(b.nodeType===1&&!!
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 67 29 26 26 28 66 2e 72 65 6d 6f 76 65 44 61 74 61 28 61 2c 64 2c 21 30 29 2c 68 2e 66 69 72 65 28 29 29 7d 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 7b 69 66 28 62 3d 3d 3d 22 64 61 74 61 22 26 26 66 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 61 5b 62 5d 29 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 62 21 3d 3d 22 74 6f 4a 53 4f 4e 22 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 63 2c 64 29 7b 69 66 28 64 3d 3d 3d 62 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 65 3d 22 64 61 74 61 2d 22 2b 63 2e 72 65 70 6c 61 63 65 28 6b 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 64 3d 61 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: g)&&(f.removeData(a,d,!0),h.fire())},0)}function m(a){for(var b in a){if(b==="data"&&f.isEmptyObject(a[b]))continue;if(b!=="toJSON")return!1}return!0}function l(a,c,d){if(d===b&&a.nodeType===1){var e="data-"+c.replace(k,"-$1").toLowerCase();d=a.getAttribu
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 2c 49 3d 7b 7d 3b 65 2e 66 6e 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 65 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 66 29 7b 76 61 72 20 67 2c 68 2c 6a 2c 6b 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 61 2e 6e 6f 64 65 54 79 70 65 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 5b 30 5d 3d 61 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 61 3d 3d 3d 22 62 6f 64 79 22 26 26 21 64 26 26 63 2e 62 6f 64 79 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 5b 30 5d 3d 63 2e 62 6f 64 79 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 Data Ascii: ,I={};e.fn=e.prototype={constructor:e,init:function(a,d,f){var g,h,j,k;if(!a)return this;if(a.nodeType){this.context=this[0]=a,this.length=1;return this}if(a==="body"&&!d&&c.body){this.context=c,this[0]=c.body,this.selector=a,this.length=1;return this}if(
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 29 2b 63 3a 62 26 26 28 64 2e 73 65 6c 65 63 74 6f 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 22 2e 22 2b 62 2b 22 28 22 2b 63 2b 22 29 22 29 3b 72 65 74 75 72 6e 20 64 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 65 2e 65 61 63 68 28 74 68 69 73 2c 61 2c 62 29 7d 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 65 2e 62 69 6e 64 52 65 61 64 79 28 29 2c 41 2e 61 64 64 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 2b 61 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 2d 31 3f 74 68 69 73 2e 73 6c 69 63 65 28 61 29 3a 74 68 69 73 2e 73 6c 69 63 65 28 61 2c 61 2b 31 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 Data Ascii: )+c:b&&(d.selector=this.selector+"."+b+"("+c+")");return d},each:function(a,b){return e.each(this,a,b)},ready:function(a){e.bindReady(),A.add(a);return this},eq:function(a){a=+a;return a===-1?this.slice(a):this.slice(a,a+1)},first:function(){return this.e
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 66 69 72 65 57 69 74 68 28 63 2c 5b 65 5d 29 2c 65 2e 66 6e 2e 74 72 69 67 67 65 72 26 26 65 28 63 29 2e 74 72 69 67 67 65 72 28 22 72 65 61 64 79 22 29 2e 6f 66 66 28 22 72 65 61 64 79 22 29 7d 7d 2c 62 69 6e 64 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 41 29 7b 41 3d 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 3b 69 66 28 63 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 65 2e 72 65 61 64 79 2c 31 29 3b 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 2c 21 31 29 2c 61 2e 61 64 64 45 76 Data Ascii: fireWith(c,[e]),e.fn.trigger&&e(c).trigger("ready").off("ready")}},bindReady:function(){if(!A){A=e.Callbacks("once memory");if(c.readyState==="complete")return setTimeout(e.ready,1);if(c.addEventListener)c.addEventListener("DOMContentLoaded",B,!1),a.addEv
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 7b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 73 74 72 69 6e 67 22 7c 7c 21 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 64 2c 66 3b 74 72 79 7b 61 2e 44 4f 4d 50 61 72 73 65 72 3f 28 66 3d 6e 65 77 20 44 4f 4d 50 61 72 73 65 72 2c 64 3d 66 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 63 2c 22 74 65 78 74 2f 78 6d 6c 22 29 29 3a 28 64 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 44 4f 4d 22 29 2c 64 2e 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 2c 64 2e 6c 6f 61 64 58 4d 4c 28 63 29 29 7d 63 61 74 63 68 28 67 29 7b 64 3d 62 7d 28 21 64 7c 7c 21 64 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 Data Ascii: {if(typeof c!="string"\|\|!c)return null;var d,f;try{a.DOMParser?(f=new DOMParser,d=f.parseFromString(c,"text/xml")):(d=new ActiveXObject("Microsoft.XMLDOM"),d.async="false",d.loadXML(c))}catch(g){d=b}(!d\|\|!d.documentElement\|\|d.getElementsByTagName("parsere
2024-10-04 11:38:45 UTC	1378	IN	Data Raw: 2b 29 61 5b 64 2b 2b 5d 3d 63 5b 65 5d 3b 65 6c 73 65 20 77 68 69 6c 65 28 63 5b 65 5d 21 3d 3d 62 29 61 5b 64 2b 2b 5d 3d 63 5b 65 2b 2b 5d 3b 61 2e 6c 65 6e 67 74 68 3d 64 3b 72 65 74 75 72 6e 20 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3b 63 3d 21 21 63 3b 66 6f 72 28 76 61 72 20 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 3b 66 3c 67 3b 66 2b 2b 29 65 3d 21 21 62 28 61 5b 66 5d 2c 66 29 2c 63 21 3d 3d 65 26 26 64 2e 70 75 73 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 76 61 72 20 66 2c 67 2c 68 3d 5b 5d 2c 69 3d 30 2c 6a 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 7c 7c 6a 21 3d 3d 62 26 26 Data Ascii: +)a[d++]=c[e];else while(c[e]!==b)a[d++]=c[e++];a.length=d;return a},grep:function(a,b,c){var d=[],e;c=!!c;for(var f=0,g=a.length;f<g;f++)e=!!b(a[f],f),c!==e&&d.push(a[f]);return d},map:function(a,c,d){var f,g,h=[],i=0,j=a.length,k=a instanceof e\|\|j!==b&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49730	104.18.11.207	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:45 UTC	591	OUT	GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:45 UTC	924	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:45 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"4fbd15cb6047af93373f4f895639c8bf" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:10:08 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 08e05320f24d8e808a4ef38c6a818369 CDN-Cache: HIT CF-Cache-Status: HIT Age: 10170 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cd4e3350f420cb4-EWR
2024-10-04 11:38:45 UTC	445	IN	Data Raw: 36 62 34 61 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 35 Data Ascii: 6b4a/! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 74 2e 77 6f 66 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 35 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e Data Ascii: t.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal n
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 66 69 6c 74 65 72 3a 70 72 Data Ascii: deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{filter:pr
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 33 22 7d 2e 66 61 2d 68 65 61 72 74 3a 62 65 66 6f 72 65 7b Data Ascii: ext-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"\f003"}.fa-heart:before{
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d 2e 66 61 2d 74 61 67 73 3a Data Ascii: adphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{content:"\f02b"}.fa-tags:
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 31 22 7d 2e 66 61 Data Ascii: 49"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:before{content:"\f051"}.fa
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 37 Data Ascii: fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:before{content:"\f077
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 7d 2e 66 61 2d 63 72 65 64 Data Ascii: "\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{content:"\f09c"}.fa-cred
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 64 22 7d Data Ascii: 7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline:before{content:"\f0cd"}
2024-10-04 11:38:45 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 31 22 7d 2e 66 61 2d Data Ascii: ore{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:before{content:"\f0f1"}.fa-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49726	142.250.185.161	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:46 UTC	634	OUT	GET /feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist HTTP/1.1 Host: youruno-chicka.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:46 UTC	575	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Server: Blogger Render Server 1.0 X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 04 Oct 2024 11:38:46 GMT Expires: Fri, 04 Oct 2024 10:56:33 GMT Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Last-Modified: Fri, 30 Aug 2024 07:20:22 GMT Content-Type: text/javascript; charset=UTF-8 Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:38:46 UTC	815	IN	Data Raw: 38 30 30 30 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 72 65 63 65 6e 74 70 6f 73 74 73 6c 69 73 74 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 67 65 72 2f 32 30 30 38 22 2c 22 78 6d 6c 6e 73 24 67 65 6f 72 73 73 22 3a 22 68 Data Ascii: 8000// API callbackrecentpostslist({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"h
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 6e 67 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 6e 67 6c 61 6e 64 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 78 61 6d 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 78 65 72 63 69 73 65 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 66 72 61 63 74 69 6f 6e 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 68 6f 6d 6d 65 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6c 33 33 36 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6e 66 68 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6f 67 67 69 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 70 61 70 65 72 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 70 6f 70 61 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 71 75 65 73 74 69 6f 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 65 76 65 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 6f 6c 75 74 69 6f 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 74 61 74 69 6f 6e 73 Data Ascii: ng"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"question"},{"term":"seven"},{"term":"solution"},{"term":"stations
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 6c 65 2e 63 6f 6d 2f 67 2f 32 30 30 35 23 74 68 75 6d 62 6e 61 69 6c 22 2c 22 77 69 64 74 68 22 3a 22 31 36 22 2c 22 68 65 69 67 68 74 22 3a 22 31 36 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6d 67 31 2e 62 6c 6f 67 62 6c 6f 67 2e 63 6f 6d 5c 2f 69 6d 67 5c 2f 62 31 36 2d 72 6f 75 6e 64 65 64 2e 67 69 66 22 7d 7d 5d 2c 22 67 65 6e 65 72 61 74 6f 72 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 30 30 22 2c 22 75 72 69 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 22 2c 22 24 74 22 3a 22 42 6c 6f 67 67 65 72 22 7d 2c 22 6f 70 65 6e 53 65 61 72 63 68 24 74 6f 74 61 6c 52 65 73 75 6c 74 73 22 3a 7b 22 24 74 22 3a 22 32 38 22 7d 2c 22 6f 70 65 6e 53 65 61 72 63 68 24 73 74 61 72 74 49 6e 64 65 78 22 3a 7b 22 24 Data Ascii: le.com/g/2005#thumbnail","width":"16","height":"16","src":"https:\/\/img1.blogblog.com\/img\/b16-rounded.gif"}}],"generator":{"version":"7.00","uri":"http://www.blogger.com","$t":"Blogger"},"openSearch$totalResults":{"$t":"28"},"openSearch$startIndex":{"$
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 61 6e 69 6c 6c 61 6d 61 67 61 7a 69 6e 65 2e 69 74 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 75 70 6c 6f 61 64 73 5c 2f 32 30 32 30 5c 2f 31 30 5c 2f 43 69 72 63 6f 6e 63 69 73 69 6f 6e 65 2d 43 6f 70 65 72 74 69 6e 61 2e 6a 70 67 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 5c 22 41 6d 61 7a 6f 6e 2e 63 6f 6d 3a 20 53 74 6f 72 69 61 20 64 65 6c 20 43 69 72 63 6f 3a 20 44 61 6c 6c 27 61 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 61 20 6f 67 67 69 2e 5c 22 20 77 69 64 74 68 3d 5c 22 36 34 30 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3d 5c 22 33 36 30 5c 22 20 5c 2f 5c 75 30 30 33 45 5c 75 30 30 33 43 5c 2f 6e 6f 73 63 72 69 70 74 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: anillamagazine.it\/wp-content\/uploads\/2020\/10\/Circoncisione-Copertina.jpg\"\n alt=\"Amazon.com: Storia del Circo: Dall'antico Egitto a oggi.\" width=\"640\"\n height=\"360\" \/\u003E\u003C\/noscript\u003E\n
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 75 30 30 33 45 5c 75 30 30 33 43 5c 2f 73 6d 61 6c 6c 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 70 5c 75 30 30 33 45 46 61 72 65 20 69 6c 20 43 69 72 63 6f 2c 20 6c 65 20 6f 72 69 67 69 6e 69 20 64 65 6c 20 43 69 72 63 6f 2c 20 69 6c 20 43 69 72 63 6f 20 6e 65 6c 6c 61 20 52 6f 6d 61 20 69 6d 70 65 72 69 61 6c 65 2c 20 6c 61 20 63 72 69 73 69 20 63 69 72 63 65 6e 73 65 20 64 65 6c 20 4d 65 64 69 6f 65 76 6f 2c 20 69 6c 20 43 69 72 63 6f 20 6e 65 6c 6c e2 80 99 65 74 c3 a0 20 6d 6f 64 65 72 6e 61 2c 20 69 6c 20 43 69 72 63 6f 20 69 74 61 6c 69 61 6e 6f 2c 20 69 20 6e 75 6d 65 72 69 20 74 72 61 64 69 7a 69 6f 6e 61 6c 69 2c 20 69 6c 20 43 69 72 63 6f 20 64 65 6c 20 66 75 74 75 72 6f 2c 20 43 69 72 71 75 65 20 64 75 20 53 6f 6c 65 69 Data Ascii: u003E\u003C\/small\u003E\n \u003Cp\u003EFare il Circo, le origini del Circo, il Circo nella Roma imperiale, la crisi circense del Medioevo, il Circo nellet moderna, il Circo italiano, i numeri tradizionali, il Circo del futuro, Cirque du Solei
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 65 6c 6c 27 61 6e 74 69 63 6f 20 45 67 69 74 74 6f 2c 20 6f 76 76 65 72 6f 20 64 65 6c 6c 61 20 63 69 76 69 6c 74 c3 a0 20 64 65 6c 6c 27 41 66 72 69 63 61 20 73 65 74 74 65 6e 74 72 69 6f 6e 61 6c 65 20 73 76 69 6c 75 70 70 61 74 61 73 69 20 6c 75 6e 67 6f 20 6c 65 20 72 69 76 65 20 64 65 6c 20 66 69 75 6d 65 20 4e 69 6c 6f 20 5b 4e 20 31 5d 2c 20 61 6c 6c 61 20 66 6f 63 65 2c 20 61 20 64 65 6c 74 61 2c 20 6e 65 6c 20 4d 61 72 20 4d 65 64 69 74 65 72 72 61 6e 65 6f 2c 20 70 65 72 20 75 6e 27 65 73 74 65 6e 73 69 6f 6e 65 20 63 6f 6d 70 6c 65 73 73 69 76 61 20 64 69 2e 5c 75 30 30 33 43 5c 2f 70 5c 75 30 30 33 45 5c 6e 20 20 20 20 5c 75 30 30 33 43 5c 2f 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 Data Ascii: ell'antico Egitto, ovvero della civilt dell'Africa settentrionale sviluppatasi lungo le rive del fiume Nilo [N 1], alla foce, a delta, nel Mar Mediterraneo, per un'estensione complessiva di.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u00
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 74 61 6c 69 61 6e 20 45 64 69 74 69 6f 6e 29 20 65 42 6f 6f 6b 20 3a 20 52 69 63 63 61 72 64 6f 20 52 6f 76 65 72 73 69 3a 20 41 6d 61 7a 6f 6e 2e 63 61 3a 20 4b 69 6e 64 6c 65 20 53 74 6f 72 65 5c 75 30 30 33 43 5c 2f 70 5c 75 30 30 33 45 5c 6e 20 20 20 20 5c 75 30 30 33 43 5c 2f 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 69 6d 67 20 61 6c 74 3d 5c 22 41 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 57 69 6b 69 70 65 64 69 61 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 77 70 2e 63 6f 6d 5c 2f 70 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 5c 2f 6d 65 64 69 61 5c 2f 44 77 5a 77 65 30 74 58 67 41 41 Data Ascii: talian Edition) eBook : Riccardo Roversi: Amazon.ca: Kindle Store\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"Antico Egitto Wikipedia\"\n src=\"https:\/\/i2.wp.com\/pbs.twimg.com\/media\/DwZwe0tXgAA
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 2f 70 5c 75 30 30 33 45 5c 6e 20 20 20 20 5c 75 30 30 33 43 5c 2f 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 69 6d 67 20 61 6c 74 3d 5c 22 53 74 6f 72 69 61 20 64 65 6c 20 63 69 72 63 6f 2e 20 44 61 6c 6c 27 61 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 61 20 6f 67 67 69 20 52 6f 76 65 72 73 69 2c 2e 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 77 70 2e 63 6f 6d 5c 2f 31 2e 62 70 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 2d 74 33 42 70 6d 66 76 59 45 6a 51 5c 2f 55 79 58 4b 73 6b 77 74 6b 65 49 5c 2f 41 41 41 41 41 41 41 41 53 6c 41 5c 2f 62 49 63 55 59 55 41 30 50 62 30 5c 2f 73 31 36 Data Ascii: /p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"Storia del circo. Dall'antico Egitto a oggi Roversi,.\"\n src=\"https:\/\/i2.wp.com\/1.bp.blogspot.com\/-t3BpmfvYEjQ\/UyXKskwtkeI\/AAAAAAAASlA\/bIcUYUA0Pb0\/s16
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 68 65 2e 5c 75 30 30 33 43 5c 2f 70 5c 75 30 30 33 45 5c 6e 20 20 20 20 5c 75 30 30 33 43 5c 2f 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 69 6d 67 20 61 6c 74 3d 5c 22 53 74 6f 72 69 61 20 64 65 6c 20 43 69 72 63 6f 3a 20 44 61 6c 6c 5c 5c 27 61 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 61 20 6f 67 67 69 20 5a 6f 62 6f 6b 6f 2e 63 6f 6d 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 77 70 2e 63 6f 6d 5c 2f 64 39 6b 33 71 34 6a 39 2e 73 74 61 63 6b 70 61 74 68 63 64 6e 2e 63 6f 6d 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 75 70 6c 6f 61 64 73 5c 2f 63 69 72 63 6f 2d 6d 61 73 73 69 6d 6f 2d Data Ascii: he.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"Storia del Circo: Dall\\'antico Egitto a oggi Zoboko.com\"\n src=\"https:\/\/i2.wp.com\/d9k3q4j9.stackpathcdn.com\/wp-content\/uploads\/circo-massimo-
2024-10-04 11:38:46 UTC	1390	IN	Data Raw: 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 69 6d 67 20 61 6c 74 3d 5c 22 53 74 6f 72 69 61 20 44 65 6c 20 43 69 72 63 6f 20 44 61 6c 6c 20 41 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 41 20 4f 67 67 69 20 3f 20 31 39 38 2e 35 38 2e 31 30 36 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 77 70 2e 63 6f 6d 5c 2f 69 2e 70 69 6e 69 6d 67 2e 63 6f 6d 5c 2f 6f 72 69 67 69 6e 61 6c 73 5c 2f 32 32 5c 2f 36 38 5c 2f 66 39 5c 2f 32 32 36 38 66 39 33 32 33 32 62 61 39 30 38 61 64 33 64 65 65 38 62 66 33 66 31 34 63 62 33 37 2e 6a 70 67 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3d 5c 22 31 30 30 25 5c 22 20 73 74 79 Data Ascii: n\n \u003Caside\u003E\n \u003Cimg alt=\"Storia Del Circo Dall Antico Egitto A Oggi ? 198.58.106\"\n src=\"https:\/\/i2.wp.com\/i.pinimg.com\/originals\/22\/68\/f9\/2268f93232ba908ad3dee8bf3f14cb37.jpg\"\n width=\"100%\" sty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49736	192.0.77.2	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:46 UTC	657	OUT	GET /www.vanillamagazine.it/wp-content/uploads/2020/10/Circoncisione-Copertina.jpg HTTP/1.1 Host: i2.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:47 UTC	221	IN	HTTP/1.1 404 File Not Found Server: nginx Date: Fri, 04 Oct 2024 11:38:47 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-nc: EXPIRED jfk 4 Alt-Svc: h3=":443"; ma=86400
2024-10-04 11:38:47 UTC	76	IN	Data Raw: 34 31 0d 0a 57 65 20 63 61 6e 6e 6f 74 20 63 6f 6d 70 6c 65 74 65 20 74 68 69 73 20 72 65 71 75 65 73 74 2c 20 72 65 6d 6f 74 65 20 64 61 74 61 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 65 74 63 68 65 64 0d 0a 30 0d 0a 0d 0a Data Ascii: 41We cannot complete this request, remote data could not be fetched0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49737	192.0.77.2	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:46 UTC	648	OUT	GET /i.pinimg.com/originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg HTTP/1.1 Host: i2.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:46 UTC	387	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 04 Oct 2024 11:38:46 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://i.pinimg.com/originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg X-nc: EXPIRED jfk 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-10-04 11:38:46 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49738	192.0.77.2	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:46 UTC	636	OUT	GET /i.ebayimg.com/thumbs/images/g/1SIAAOSwpE1if-TG/s-l96.jpg HTTP/1.1 Host: i2.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:46 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 04 Oct 2024 11:38:46 GMT Content-Type: image/webp Content-Length: 630 Connection: close Last-Modified: Fri, 04 Oct 2024 11:19:48 GMT Expires: Sun, 04 Oct 2026 23:19:48 GMT Cache-Control: public, max-age=63115200 Link: <http://i.ebayimg.com/thumbs/images/g/1SIAAOSwpE1if-TG/s-l96.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "5055deda63bf0679" Vary: Accept X-nc: HIT jfk 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-10-04 11:38:46 UTC	630	IN	Data Raw: 52 49 46 46 6e 02 00 00 57 45 42 50 56 50 38 20 62 02 00 00 d0 0c 00 9d 01 2a 50 00 50 00 3e 65 28 91 45 a4 22 a1 9b 8b 1e 48 40 06 44 b4 80 09 f0 1a bb 9c 8b be d9 5b 30 57 4a 53 48 9b 8b f7 c5 19 02 a3 4a d8 8f 33 fd be e8 4e 3c 3d d5 ef 53 6e ae 68 5b d9 c4 8d aa 3b 5a 46 2d ab cd a1 f6 98 25 6a 2a c7 3e d3 57 22 ea 9d 75 af ad b3 df fb 0d cb 8d c5 34 09 96 82 e4 d8 1c dd 8f ff 68 39 f0 00 fe fc a8 2a de 1b d3 f6 81 92 1c 0f 89 ef f3 2e b4 30 b8 9e 4a d9 50 8b 6b d0 a5 85 71 5f 16 ea 87 e5 5d b5 6d 05 80 82 53 6c f2 bc 80 3e df 6f d3 c2 2c cd cd 57 50 58 bc 4a 15 a5 39 e7 ca 94 fa 75 32 be cd 1b f5 d1 f4 49 f1 e1 6b c4 2c 19 18 1e 5c c0 07 ea 79 44 55 7e c0 82 a4 71 db ff 85 dd 5c 1f ad e6 a9 2a d9 1c 92 7a 77 4d ff fb d7 5f e3 fb 6c ab 55 3e 46 c9 29 Data Ascii: RIFFnWEBPVP8 bPP>e(E"H@D[0WJSHJ3N<=Snh[;ZF-%j>W"u4h9.0JPkq_]mSl>o,WPXJ9u2Ik,\yDU~q\zwM_lU>F)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49739	142.250.185.161	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:47 UTC	613	OUT	GET /feeds/posts/summary?alt=json-in-script&callback=pageNavi&max-results=99999 HTTP/1.1 Host: youruno-chicka.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:47 UTC	575	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Server: Blogger Render Server 1.0 X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 04 Oct 2024 11:38:47 GMT Expires: Fri, 04 Oct 2024 10:56:34 GMT Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Last-Modified: Fri, 30 Aug 2024 07:20:22 GMT Content-Type: text/javascript; charset=UTF-8 Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:38:47 UTC	815	IN	Data Raw: 38 30 30 30 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 70 61 67 65 4e 61 76 69 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 67 65 72 2f 32 30 30 38 22 2c 22 78 6d 6c 6e 73 24 67 65 6f 72 73 73 22 3a 22 68 74 74 70 3a 2f 2f 77 Data Ascii: 8000// API callbackpageNavi({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://w
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 74 65 72 6d 22 3a 22 65 6e 67 6c 61 6e 64 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 78 61 6d 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 78 65 72 63 69 73 65 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 66 72 61 63 74 69 6f 6e 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 68 6f 6d 6d 65 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6c 33 33 36 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6e 66 68 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6f 67 67 69 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 70 61 70 65 72 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 70 6f 70 61 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 71 75 65 73 74 69 6f 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 65 76 65 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 6f 6c 75 74 69 6f 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 74 61 74 69 6f 6e 73 22 7d 2c 7b 22 74 65 Data Ascii: term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"question"},{"term":"seven"},{"term":"solution"},{"term":"stations"},{"te
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 70 65 6e 53 65 61 72 63 68 24 73 74 61 72 74 49 6e 64 65 78 22 3a 7b 22 24 74 22 3a 22 31 22 7d 2c 22 6f 70 65 6e 53 65 61 72 63 68 24 69 74 65 6d 73 50 65 72 50 61 67 65 22 3a 7b 22 24 74 22 3a 22 39 39 39 39 39 22 7d 2c 22 65 6e 74 72 79 22 3a 5b 7b 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 32 35 39 31 37 39 33 38 35 35 34 30 31 38 39 32 33 34 35 2e 70 6f 73 74 2d 35 33 37 34 36 37 37 34 36 36 35 33 33 39 31 39 37 32 35 22 7d 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 33 2d 30 31 2d 32 31 54 32 32 3a 35 30 3a 30 30 2e 30 30 32 2d 30 38 3a 30 30 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 33 2d 30 31 2d 32 34 54 32 32 3a 35 30 3a 31 Data Ascii: penSearch$startIndex":{"$t":"1"},"openSearch$itemsPerPage":{"$t":"99999"},"entry":[{"id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345.post-5374677466533919725"},"published":{"$t":"2023-01-21T22:50:00.002-08:00"},"updated":{"$t":"2023-01-24T22:50:1
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 32 30 32 33 5c 2f 30 31 5c 2f 73 74 6f 72 69 61 2d 64 65 6c 2d 63 69 72 63 6f 2d 64 61 6c 6c 2d 61 6e 74 69 63 6f 2d 65 67 69 74 74 6f 2d 61 2d 6f 67 67 69 2e 68 74 6d 6c 23 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 22 2c 22 74 69 74 6c 65 22 3a 22 30 20 43 6f 6d 6d 65 6e 74 73 22 7d 2c 7b 22 72 65 6c 22 3a 22 65 64 69 74 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 32 35 39 31 37 39 33 38 35 35 34 30 31 38 39 32 33 34 35 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 35 33 37 34 36 37 37 34 36 36 35 33 33 39 31 39 37 32 Data Ascii: hicka.blogspot.com\/2023\/01\/storia-del-circo-dall-antico-egitto-a-oggi.html#comment-form","title":"0 Comments"},{"rel":"edit","type":"application/atom+xml","href":"https:\/\/www.blogger.com\/feeds\/2591793855401892345\/posts\/default\/537467746653391972
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 61 74 6f 6d 2f 6e 73 23 22 2c 22 74 65 72 6d 22 3a 22 70 61 70 65 72 22 7d 2c 7b 22 73 63 68 65 6d 65 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 61 74 6f 6d 2f 6e 73 23 22 2c 22 74 65 72 6d 22 3a 22 71 75 65 73 74 69 6f 6e 22 7d 5d 2c 22 74 69 74 6c 65 22 3a 7b 22 74 79 70 65 22 3a 22 74 65 78 74 22 2c 22 24 74 22 3a 22 63 68 74 74 61 67 6f 6e 67 20 62 6f 61 72 64 20 68 73 63 20 32 30 31 34 20 65 63 6f 6e 6f 6d 69 63 20 71 75 65 73 74 69 6f 6e 20 70 61 70 65 72 22 7d 2c 22 73 75 6d 6d 61 72 79 22 3a 7b 22 74 79 70 65 22 3a 22 74 65 78 74 22 2c 22 24 74 22 3a 22 5c 6e 5c 6e 20 20 20 20 43 68 74 74 61 67 6f 6e 67 20 42 6f 61 72 64 20 48 73 63 20 32 30 31 34 20 45 63 6f 6e Data Ascii: /www.blogger.com/atom/ns#","term":"paper"},{"scheme":"http://www.blogger.com/atom/ns#","term":"question"}],"title":{"type":"text","$t":"chttagong board hsc 2014 economic question paper"},"summary":{"type":"text","$t":"\n\n Chttagong Board Hsc 2014 Econ
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 31 34 2d 65 63 6f 6e 6f 6d 69 63 2d 71 75 65 73 74 69 6f 6e 2d 70 61 70 65 72 2e 68 74 6d 6c 22 2c 22 74 69 74 6c 65 22 3a 22 63 68 74 74 61 67 6f 6e 67 20 62 6f 61 72 64 20 68 73 63 20 32 30 31 34 20 65 63 6f 6e 6f 6d 69 63 20 71 75 65 73 74 69 6f 6e 20 70 61 70 65 72 22 7d 5d 2c 22 61 75 74 68 6f 72 22 3a 5b 7b 22 6e 61 6d 65 22 3a 7b 22 24 74 22 3a 22 65 72 72 61 74 69 63 63 6f 77 61 72 64 35 36 22 7d 2c 22 75 72 69 22 3a 7b 22 24 74 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 5c 2f 70 72 6f 66 69 6c 65 5c 2f 30 34 30 39 34 38 38 35 34 34 32 32 32 39 39 34 32 33 31 37 22 7d 2c 22 65 6d 61 69 6c 22 3a 7b 22 24 74 22 3a 22 6e 6f 72 65 70 6c 79 40 62 6c 6f 67 67 65 72 2e 63 6f 6d 22 7d 2c 22 67 64 24 69 6d 61 67 65 22 Data Ascii: 14-economic-question-paper.html","title":"chttagong board hsc 2014 economic question paper"}],"author":[{"name":{"$t":"erraticcoward56"},"uri":{"$t":"http:\/\/www.blogger.com\/profile\/04094885442229942317"},"email":{"$t":"noreply@blogger.com"},"gd$image"
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 61 6e 64 20 69 6e 20 74 68 65 20 53 65 76 65 6e 20 59 65 61 72 73 27 20 57 61 72 3b 20 61 20 73 74 75 64 79 20 69 6e 20 63 6f 6d 62 69 6e 65 64 20 73 74 72 61 74 65 67 79 20 62 79 20 43 6f 72 62 65 74 74 2c 20 4a 75 6c 69 61 6e 20 53 74 61 66 66 6f 72 64 2c 2e 5c 6e 5c 6e 5c 6e 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 53 6f 75 72 63 65 3a 20 22 7d 2c 22 6c 69 6e 6b 22 3a 5b 7b 22 72 65 6c 22 3a 22 72 65 70 6c 69 65 73 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 37 34 39 33 32 32 36 36 30 34 31 32 39 31 30 38 35 30 Data Ascii: and in the Seven Years' War; a study in combined strategy by Corbett, Julian Stafford,.\n\n\n \n \n Source: "},"link":[{"rel":"replies","type":"application/atom+xml","href":"https:\/\/youruno-chicka.blogspot.com\/feeds\/749322660412910850
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 32 35 39 31 37 39 33 38 35 35 34 30 31 38 39 32 33 34 35 2e 70 6f 73 74 2d 38 33 34 37 36 39 38 37 34 39 38 37 30 38 36 36 38 35 37 22 7d 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 33 2d 30 31 2d 31 38 54 32 32 3a 30 33 3a 30 30 2e 30 30 32 2d 30 38 3a 30 30 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 33 2d 30 31 2d 32 31 54 32 32 3a 30 33 3a 30 36 2e 36 35 31 2d 30 38 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 73 63 68 65 6d 65 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 61 74 6f 6d 2f 6e 73 23 22 2c 22 74 65 72 6d 22 3a 22 73 74 72 61 6e 75 22 7d 2c 7b 22 73 63 68 65 6d 65 22 3a 22 68 74 74 70 3a 2f 2f 77 77 Data Ascii: .com,1999:blog-2591793855401892345.post-8347698749870866857"},"published":{"$t":"2023-01-18T22:03:00.002-08:00"},"updated":{"$t":"2023-01-21T22:03:06.651-08:00"},"category":[{"scheme":"http://www.blogger.com/atom/ns#","term":"stranu"},{"scheme":"http://ww
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 2f 38 33 34 37 36 39 38 37 34 39 38 37 30 38 36 36 38 35 37 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 32 30 32 33 5c 2f 30 31 5c 2f 73 2d 6f 6e 75 2d 73 74 72 61 6e 75 2d 7a 72 63 61 6c 61 2e 68 74 6d 6c 22 2c 22 74 69 74 6c 65 22 3a 22 73 20 6f 6e 75 20 73 74 72 61 6e 75 20 7a 72 63 61 6c 61 22 7d 5d 2c 22 61 75 74 68 6f 72 22 3a 5b 7b 22 6e 61 6d 65 22 3a 7b 22 24 74 22 3a 22 65 72 72 61 74 69 63 63 6f 77 61 72 64 35 36 22 7d 2c 22 75 72 69 22 3a 7b 22 24 74 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f Data Ascii: /8347698749870866857"},{"rel":"alternate","type":"text/html","href":"https:\/\/youruno-chicka.blogspot.com\/2023\/01\/s-onu-stranu-zrcala.html","title":"s onu stranu zrcala"}],"author":[{"name":{"$t":"erraticcoward56"},"uri":{"$t":"http:\/\/www.blogger.co
2024-10-04 11:38:47 UTC	1390	IN	Data Raw: 66 2c 20 61 7a 77 2c 20 6d 6f 62 69 20 61 6e 64 20 6d 6f 72 65 2e 5c 6e 5c 6e 5c 6e 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 53 6f 75 72 63 65 3a 20 64 32 30 6f 68 6b 61 6c 6f 79 6d 65 34 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 5c 6e 20 20 20 20 20 20 20 20 44 6f 77 6e 6c 6f 61 64 20 22 7d 2c 22 6c 69 6e 6b 22 3a 5b 7b 22 72 65 6c 22 3a 22 72 65 70 6c 69 65 73 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 35 35 38 32 36 36 33 35 37 35 35 31 33 33 32 36 39 31 37 5c 2f 63 6f 6d 6d 65 6e 74 73 5c 2f 64 65 66 61 Data Ascii: f, azw, mobi and more.\n\n\n \n \n Source: d20ohkaloyme4g.cloudfront.net\n Download "},"link":[{"rel":"replies","type":"application/atom+xml","href":"https:\/\/youruno-chicka.blogspot.com\/feeds\/5582663575513326917\/comments\/defa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49741	151.101.192.84	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:47 UTC	638	OUT	GET /originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg HTTP/1.1 Host: i.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:47 UTC	289	IN	HTTP/1.1 200 OK Connection: close Content-Length: 111691 ETag: "c97958d49f8376147b392d81ac10b57f" Content-Type: image/jpeg Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Vary: Origin X-CDN: fastly alt-svc: h3=":443";ma=600 date: Fri, 04 Oct 2024 11:38:47 GMT
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 04 6c 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 02 03 04 01 07 ff c4 00 15 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fa a0 00 01 e7 a3 cf 40 00 00 00 00 Data Ascii: JFIFHHC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((l "@
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 3e 80 13 e8 0f 49 e4 16 44 da 0f c2 75 03 e9 3b 59 e8 d6 58 80 00 00 00 02 b9 63 ac 96 68 a9 58 73 64 a4 6c 90 00 00 00 00 00 00 ab da 2b 25 9b 97 ab 90 8b 9f 80 9f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 9b 35 64 b3 43 4c c2 9d 32 3c 3d c0 03 c3 d6 39 00 00 00 00 2a f6 8a c9 66 e4 eb e4 22 e7 e0 67 80 00 00 00 00 00 06 39 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e 7a 00 00 00 00 55 ed 15 92 cd 09 37 08 48 75 f2 f5 00 00 00 00 00 00 0a d5 96 b4 59 78 fb 38 c8 f9 c8 39 c0 00 00 00 00 00 00 00 20 f9 f9 34 16 4e 75 5c b2 49 74 51 89 ec f9 e1 4b 47 90 75 c2 f7 21 09 5a 2d 52 1d bf 38 2d 72 95 bd 04 ff 00 94 eb 81 cb 39 f3 ad a5 9b ae 47 88 d3 ed 1e e8 4e 71 76 d3 0b 77 07 94 92 ed ed 43 32 df 23 4c b8 99 00 Data Ascii: >IDu;YXchXsdl+%5dCL2<=9*f"g9zU7HuYx89 4Nu\ItQKGu!Z-R8-r9GNqvwC2#L
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 6c e0 32 d5 c9 ca 4e f5 57 2c 60 f0 e7 e0 a6 d8 09 09 aa c5 88 da ab 6d 2c 88 48 c2 dc ad e8 2c bb ab be 96 15 4b b8 9f 56 ac 46 6a de 25 99 01 91 3a 8d d0 4c ab fc e5 a1 5b d0 5a d5 fd a4 a6 98 3d a5 91 07 e1 3a ac f6 13 48 e9 10 00 00 d5 b4 00 79 ef 11 ef 8f 4f 7a e2 fb cd b8 e4 23 77 f4 f0 12 2e 4e b1 a7 70 e4 ea d1 e1 d2 00 00 00 00 00 00 00 00 af 4a 76 8a 8f 2d e0 53 f8 af a3 44 35 80 2b b6 2d 46 30 53 c2 bd 67 d1 bc 57 2c 7c 05 67 ba c7 b0 ac c9 c9 8f 9f 4d 48 4b 94 9e bb 58 a7 f5 d9 45 57 5d b8 55 f5 db 05 66 5a 40 51 a6 6c 02 b1 29 26 2b d9 cf 0a 9f 45 90 54 39 ee d1 47 3c 3d d8 54 76 5a 85 6f 65 80 42 c6 d8 bc 39 e4 c0 00 00 01 e7 be 1c fa f0 c4 92 79 e9 a3 8e 4f 41 96 d8 ce e3 6e 39 08 fe dc c0 1e 72 f5 e0 61 bb 8f a8 c8 00 00 00 00 00 00 00 00 Data Ascii: l2NW,`m,H,KVFj%:L[Z=:HyOz#w.NpJv-SD5+-F0SgW,\|gMHKXEW]UfZ@Ql)&+ET9G<=TvZoeB9yOAn9ra
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 72 0e 36 d7 06 6f e9 db 28 44 f0 4f e2 57 b0 b1 e8 8b 15 0b e8 35 7a d1 97 56 f8 af 6f 94 c8 88 df 2d aa ab d2 9b 7b 08 f8 fb 0e e2 17 c9 7d 11 c7 d5 d5 1d 5c dd 3c 53 65 73 a6 7b 02 b9 ec cf a5 86 af 65 86 2b 56 8e 69 02 48 1e 7a 1c bb b4 ee 36 00 0c 2a 36 ca 62 68 c6 5f b4 82 df 2b 0c 5d c2 80 e5 ea e0 3b d1 ba 0d fa bb ba 4e 5e a0 03 0e 7e 9e 53 b1 54 94 25 d0 99 93 08 e8 22 dc 8d d2 4b fb 5d ec 25 9a e9 e5 d1 c3 a8 93 56 24 49 64 76 04 a3 96 1c b1 29 56 a3 ad c3 d0 6e 44 6d 24 b8 f0 c4 77 40 f1 16 e4 26 d2 5a 37 1e 42 7b d8 de 93 56 bd be 9d 39 ea da 0c 4c 80 3c 3d 00 00 00 00 18 e4 00 1e 7a 00 00 00 72 ee d3 0c 58 d5 2e f2 79 0d 32 00 00 00 00 e4 eb 1c 3d c0 00 00 38 bb 79 4a ef 93 f8 95 e8 2b f7 39 0f c9 6a f0 87 88 b7 64 57 70 b4 f3 9d 35 fb 54 79 Data Ascii: r6o(DOW5zVo-{}\<Ses{e+ViHz6*6bh_+];N^~ST%"K]%V$Idv)VnDm$w@&Z7B{V9L<=zrX.y2=8yJ+9jdWp5Ty
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 78 cb de 59 2a 61 ee a3 47 7f 5c 54 5a e0 27 eb 95 c9 d9 8e b3 8b b6 1e 60 e5 92 e5 11 3b b0 96 2c 5c 5d 7c a4 47 6c 76 45 a8 00 00 00 00 00 00 00 00 00 00 72 6d dc 38 7b 7d 00 01 cc e8 e6 3a 9c dd 21 e7 a3 4b 8c 87 b3 61 bc 00 00 00 00 03 ce 02 40 07 07 78 34 9b 9c 1d e0 00 00 00 00 43 ca 6c 00 44 76 f5 00 00 1a cf 34 6b ed 32 f4 00 6a db ce 74 01 e7 a0 00 00 00 00 00 00 0f 3d 00 1a b6 80 00 00 c2 08 b0 79 19 81 da 8a de 4b fb 5b e9 26 91 dc 64 f2 2c 4a 20 ba c9 24 46 04 d2 3b 9c 99 89 ed d0 55 64 37 74 15 b9 9d 12 86 10 93 3c c7 2f 76 dd a7 2f 17 6e 44 4f 5e de 83 de 6e ec 48 49 1d bd 24 c2 3a 44 00 00 1e 7b e1 e8 00 00 01 88 e5 f3 a0 f7 60 00 03 9b a7 98 e9 00 00 00 00 00 00 00 00 00 00 00 00 01 8c 19 3c 82 95 3a 3c e7 f4 f3 cd f0 25 83 de 3c 8e a6 bc Data Ascii: xY*aG\TZ'`;,\]\|GlvErm8{}:!Ka@x4ClDv4k2jt=yK[&d,J $F;Ud7t</v/nDO^nHI$:D{`<:<%<
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 51 f2 51 b3 9b 76 ba 93 e6 e7 e5 89 6d 95 de 83 b2 cb 53 b6 54 67 37 1e b3 bf c8 ee 62 5b 6c 27 61 27 9d 76 68 9e ab da 2a 67 6f 7d 77 a8 b4 00 00 00 3c f4 00 f3 d0 00 07 87 a0 00 00 23 a4 42 3a 44 00 35 c7 12 a0 11 84 98 06 93 73 87 b8 38 b7 9b 8d 46 d4 7c 80 00 00 00 79 e8 04 56 32 e0 06 39 00 00 85 9a 00 00 00 00 00 88 d7 36 00 79 e8 af 77 49 80 31 c9 89 90 00 00 07 9e 80 00 00 00 00 00 00 00 00 0a d7 14 f4 41 b6 36 53 9c b3 d7 6c 51 64 7f 1c ac 41 df b3 56 44 55 de 95 70 23 f9 7a b4 9d 92 90 53 a5 07 b3 76 e3 ba 62 bf da 49 a3 b8 c9 d4 76 24 9a 17 a8 90 45 eb 26 1c 1a 49 54 56 e3 bd 11 b4 92 47 68 26 1c 18 92 28 7e 93 bd 17 89 2c 47 92 00 03 0c c0 06 39 00 00 00 00 06 06 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 49 80 00 00 00 00 00 Data Ascii: QQvmSTg7b[l'a'vh*go}w<#B:D5s8F\|yV296ywI1A6SlQdAVDUp#zSvbIv$E&ITVGh&(~,G9`FI
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 7a 3e 62 bc 38 48 5e e3 d0 d8 67 47 61 90 2d 86 48 9f 9c 14 5e a3 a9 39 f5 6c d8 73 89 98 c3 67 f0 d7 f3 be 03 b5 51 d6 05 6b 8f 4f ae ba e1 01 d8 ee 62 a4 f1 db af c4 44 a7 5a b3 16 8e 21 2e c7 5e b9 13 da 0a f0 be fc 04 ad 98 66 39 82 ec 50 1b 1d 95 c7 3b bd 6d b9 36 8a c0 8e 4d 83 42 3e ba c3 9a a2 b1 46 c0 7d 37 df 4d f6 37 5f c4 f6 17 fa bf ab 9f c4 d4 fd 33 d8 d2 7b c3 ec 7e 1e fe 17 b1 7f fe 87 ee 39 6b 33 15 88 ce 4a f3 72 53 39 2b 39 f2 f6 ee 33 75 ba 06 e1 d1 62 6b f8 70 77 ab bf 02 e3 a5 eb 34 ac e7 48 79 d3 af 1e 4a f1 e4 af 1a c4 56 20 43 8b 70 f7 90 74 24 4d 6b 35 a0 eb 48 e9 52 73 a0 2e 3c b1 c2 42 39 8e 9d 33 92 b1 15 a5 6b eb bd fa 7f b1 ba fe 3f b0 b7 d5 bd 5d f7 27 aa f7 6b 7d 8d 17 f1 fd 8f c3 ff 00 c0 f6 2f ff 00 d0 ff 00 69 ff 00 7f Data Ascii: z>b8H^gGa-H^9lsgQkObDZ!.^f9P;m6MB>F}7M7_3{~9k3JrS9+93ubkpw4HyJV Cpt$Mk5HRs.<B93k?]'k}/i
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 07 f6 7d 36 d1 3e 5b f1 35 a2 13 47 b7 52 37 05 82 69 13 e3 d9 fa 6c 3e a3 9b 0f e0 ea be 9b f6 5b 7f e4 61 bd c2 d5 bf 21 d7 f9 5b 67 95 b6 79 59 cf 2b 39 e5 67 3c ae 46 d6 71 d7 a5 85 45 b1 9a 0b ca cf 0f 2b 39 e5 6d 9e 56 71 46 ee 03 f9 5c f2 b9 e5 72 db 3e 6a eb 47 70 a1 f0 58 45 66 49 e2 52 cf 12 9e 78 94 f3 c4 a7 9e 29 3c f1 49 e7 8a 53 16 54 2b 7a e9 3f 8b eb c6 38 ee 7d fb 3c 79 8e d5 5f 3f 4c 01 3a a1 cd 97 d7 af 5e 7a 5b 44 1e 55 7a da fd 8b 5a b0 b2 67 f5 c4 4e da e2 d8 c9 7a 83 eb fe 9b df a5 0b f6 f8 7b f1 f5 61 90 d4 55 3d 7b 35 b8 b2 b5 9a 67 d5 f8 e3 b3 cd 87 f0 75 5f 4d fb 2d bf f2 30 df b5 a2 fa 4f f4 fa 6f e2 fa 94 04 5b 73 20 be c7 65 97 ad 6f 5e d1 6c ac 44 41 2f c9 56 ea 72 6c aa 4e a0 96 d8 3d 4b d4 17 6d e7 99 79 76 8c 43 6c 16 00 Data Ascii: }6>[5GR7il>[a![gyY+9g<FqE+9mVqF\r>jGpXEfIRx)<IST+z?8}<y_?L:^z[DUzZgNz{aU={5gu_M-0Oo[s eo^lDA/VrlN=KmyvCl
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 6e ae 53 f7 8b f7 18 ab 03 64 7b 1e ac 0f 54 43 15 2d e9 8c bd f6 37 38 5e bb cb 06 dd f2 dc 7d 89 9e 19 37 f4 8a 64 47 0f 86 a1 ee cb 00 70 86 db 5b df 02 71 bb ac 07 a9 29 4b 21 80 85 b0 1a c1 6c 06 ca b0 36 c7 af 67 ba 5b db 9a e4 d6 7d 22 fe ae cd aa ae ad d2 5a ba c6 5a 61 da 36 0b 97 bd 5f 84 4f 18 d9 49 6a aa 2f de fa dd 33 0c 1a c1 68 26 b4 3a b5 a7 5a dd b9 2c e2 f4 9c 11 86 5b 6e 9a 22 a1 b6 c0 a0 aa 6d 1a 1f c8 fa fe 7e 22 fa 6f d9 b9 f5 9c da fd 37 5b f4 f3 c1 a7 79 b4 19 6f b2 28 0f 68 5c 25 8d 8a 68 9a b3 6f d3 a9 ac d5 57 c9 6e a6 a5 6b aa bf e2 01 19 8b b8 b7 2b d6 0d 8b bd 61 53 43 ab 94 f7 3f a4 df 3e 79 14 c8 8e 1f 17 58 1b db 5e a2 cc 8f 6d 69 e5 ae ad 3e 6b bc 3b f7 f7 14 87 56 08 1b 35 0a f7 b0 b5 42 28 cd a4 8e 31 f0 66 38 e4 d7 d2 Data Ascii: nSd{TC-78^}7dGp[q)K!l6g[}"ZZa6_OIj/3h&:Z,[n"m~"o7[yo(h\%hoWnk+aSC?>yX^mi>k;V5B(1f8
2024-10-04 11:38:47 UTC	1378	IN	Data Raw: 05 5c 11 0b b5 04 5c 65 f8 7d 5f f7 70 e2 5f 42 53 8e 7c a6 96 e6 f5 98 e3 13 49 89 ac 70 8f 59 8e 13 49 fb fb d6 2d 5a 56 29 4b c7 35 44 3a 08 7e 9c 66 72 91 c2 3d 7b 2a 4b 9f 69 45 22 ad fb 47 14 18 41 0d 43 5f 87 3e fc bd 79 66 27 84 fa 92 9c 73 e5 34 b7 37 c0 b4 71 8c 89 e3 1f d1 12 72 b1 c6 7f ae 9f 7e 5e bc b2 3b f0 f6 09 4e 39 f2 9a 5b 9a 3d bb c6 52 78 4f de da d1 58 52 6c ed b6 20 32 d5 d9 db a4 3c 9f 9f ca 9a 81 cb 2b 2e d4 ac e5 1c 5e f6 23 80 15 c6 ea c4 25 98 15 32 97 a9 28 fe c0 4a 49 58 10 6b 66 97 2a ba 32 8a 8b 1a 95 36 f0 ce 00 12 66 42 1b 52 d1 7a ba 7e dd 75 03 d0 01 ce 20 42 e5 0d b6 48 db fc 51 b8 b9 6c 47 17 1d e5 d5 63 06 61 92 fd fa b3 6b 36 08 bc ba bc 08 cc 84 19 4b 45 eb dc 07 af 73 8a 99 b7 9e aa e1 60 04 bd db 05 0d dc 83 9e Data Ascii: \\e}_p_BS\|IpYI-ZV)K5D:~fr={KiE"GAC_>yf's47qr~^;N9[=RxOXRl 2<+.^#%2(JIXkf26fBRz~u BHQlGcak6KEs`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49744	151.101.66.137	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:48 UTC	358	OUT	GET /jquery-1.7.2.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:48 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 94840 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-17278" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 454140 Date: Fri, 04 Oct 2024 11:38:48 GMT X-Served-By: cache-lga21955-LGA, cache-nyc-kteb1890087-NYC X-Cache: HIT, HIT X-Cache-Hits: 626, 0 X-Timer: S1728041928.083783,VS0,VE1 Vary: Accept-Encoding
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e=
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 69 6f 6e 20 66 72 6f 6d 20 22 2b 6d 2e 72 65 70 6c 61 63 65 28 22 20 22 2c 22 20 74 6f 20 22 29 29 2c 6e 21 3d 3d 21 30 26 26 28 63 3d 6e 3f 6e 28 63 29 3a 70 28 6f 28 63 29 29 29 7d 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 61 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 61 2e 63 6f 6e 74 65 6e 74 73 2c 66 3d 61 2e 64 61 74 61 54 79 70 65 73 2c 67 3d 61 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 2c 68 2c 69 2c 6a 2c 6b 3b 66 6f 72 28 69 20 69 6e 20 67 29 69 20 69 6e 20 64 26 26 28 63 5b 67 5b 69 5d 5d 3d 64 5b 69 5d 29 3b 77 68 69 6c 65 28 66 5b 30 5d 3d 3d 3d 22 2a 22 29 66 2e 73 68 69 66 74 28 29 2c 68 3d 3d 3d 62 26 26 28 68 3d 61 2e 6d 69 6d 65 54 79 70 65 7c 7c 63 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 63 6f 6e Data Ascii: ion from "+m.replace(" "," to ")),n!==!0&&(c=n?n(c):p(o(c)))}}return c}function ca(a,c,d){var e=a.contents,f=a.dataTypes,g=a.responseFields,h,i,j,k;for(i in g)i in d&&(c[g[i]]=d[i]);while(f[0]==="*")f.shift(),h===b&&(h=a.mimeType\|\|c.getResponseHeader("con
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 69 67 68 74 2c 65 3d 62 3d 3d 3d 22 77 69 64 74 68 22 3f 31 3a 30 2c 67 3d 34 3b 69 66 28 64 3e 30 29 7b 69 66 28 63 21 3d 3d 22 62 6f 72 64 65 72 22 29 66 6f 72 28 3b 65 3c 67 3b 65 2b 3d 32 29 63 7c 7c 28 64 2d 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 22 70 61 64 64 69 6e 67 22 2b 62 78 5b 65 5d 29 29 7c 7c 30 29 2c 63 3d 3d 3d 22 6d 61 72 67 69 6e 22 3f 64 2b 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 63 2b 62 78 5b 65 5d 29 29 7c 7c 30 3a 64 2d 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 22 62 6f 72 64 65 72 22 2b 62 78 5b 65 5d 2b 22 57 69 64 74 68 22 29 29 7c 7c 30 3b 72 65 74 75 72 6e 20 64 2b 22 70 78 22 7d 64 3d 62 79 28 61 2c 62 29 3b 69 66 28 64 3c 30 7c 7c 64 3d 3d 6e 75 6c 6c 29 64 3d 61 2e Data Ascii: ight,e=b==="width"?1:0,g=4;if(d>0){if(c!=="border")for(;e<g;e+=2)c\|\|(d-=parseFloat(f.css(a,"padding"+bx[e]))\|\|0),c==="margin"?d+=parseFloat(f.css(a,c+bx[e]))\|\|0:d-=parseFloat(f.css(a,"border"+bx[e]+"Width"))\|\|0;return d+"px"}d=by(a,b);if(d<0\|\|d==null)d=a.
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 74 65 78 74 26 26 28 62 2e 74 65 78 74 3d 61 2e 74 65 78 74 29 3a 28 61 2e 63 68 65 63 6b 65 64 26 26 28 62 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 62 2e 63 68 65 63 6b 65 64 3d 61 2e 63 68 65 63 6b 65 64 29 2c 62 2e 76 61 6c 75 65 21 3d 3d 61 2e 76 61 6c 75 65 26 26 28 62 2e 76 61 6c 75 65 3d 61 2e 76 61 6c 75 65 29 29 2c 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 66 2e 65 78 70 61 6e 64 6f 29 2c 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 5f 73 75 62 6d 69 74 5f 61 74 74 61 63 68 65 64 22 29 2c 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 5f 63 68 61 6e 67 65 5f 61 74 74 61 63 68 65 64 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 6a 28 61 2c 62 29 7b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 21 21 Data Ascii: text&&(b.text=a.text):(a.checked&&(b.defaultChecked=b.checked=a.checked),b.value!==a.value&&(b.value=a.value)),b.removeAttribute(f.expando),b.removeAttribute("_submit_attached"),b.removeAttribute("_change_attached"))}function bj(a,b){if(b.nodeType===1&&!!
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 67 29 26 26 28 66 2e 72 65 6d 6f 76 65 44 61 74 61 28 61 2c 64 2c 21 30 29 2c 68 2e 66 69 72 65 28 29 29 7d 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 7b 69 66 28 62 3d 3d 3d 22 64 61 74 61 22 26 26 66 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 61 5b 62 5d 29 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 62 21 3d 3d 22 74 6f 4a 53 4f 4e 22 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 63 2c 64 29 7b 69 66 28 64 3d 3d 3d 62 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 65 3d 22 64 61 74 61 2d 22 2b 63 2e 72 65 70 6c 61 63 65 28 6b 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 64 3d 61 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: g)&&(f.removeData(a,d,!0),h.fire())},0)}function m(a){for(var b in a){if(b==="data"&&f.isEmptyObject(a[b]))continue;if(b!=="toJSON")return!1}return!0}function l(a,c,d){if(d===b&&a.nodeType===1){var e="data-"+c.replace(k,"-$1").toLowerCase();d=a.getAttribu
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 2c 49 3d 7b 7d 3b 65 2e 66 6e 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 65 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 66 29 7b 76 61 72 20 67 2c 68 2c 6a 2c 6b 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 61 2e 6e 6f 64 65 54 79 70 65 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 5b 30 5d 3d 61 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 61 3d 3d 3d 22 62 6f 64 79 22 26 26 21 64 26 26 63 2e 62 6f 64 79 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 5b 30 5d 3d 63 2e 62 6f 64 79 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 Data Ascii: ,I={};e.fn=e.prototype={constructor:e,init:function(a,d,f){var g,h,j,k;if(!a)return this;if(a.nodeType){this.context=this[0]=a,this.length=1;return this}if(a==="body"&&!d&&c.body){this.context=c,this[0]=c.body,this.selector=a,this.length=1;return this}if(
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 29 2b 63 3a 62 26 26 28 64 2e 73 65 6c 65 63 74 6f 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 22 2e 22 2b 62 2b 22 28 22 2b 63 2b 22 29 22 29 3b 72 65 74 75 72 6e 20 64 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 65 2e 65 61 63 68 28 74 68 69 73 2c 61 2c 62 29 7d 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 65 2e 62 69 6e 64 52 65 61 64 79 28 29 2c 41 2e 61 64 64 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 2b 61 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 2d 31 3f 74 68 69 73 2e 73 6c 69 63 65 28 61 29 3a 74 68 69 73 2e 73 6c 69 63 65 28 61 2c 61 2b 31 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 Data Ascii: )+c:b&&(d.selector=this.selector+"."+b+"("+c+")");return d},each:function(a,b){return e.each(this,a,b)},ready:function(a){e.bindReady(),A.add(a);return this},eq:function(a){a=+a;return a===-1?this.slice(a):this.slice(a,a+1)},first:function(){return this.e
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 66 69 72 65 57 69 74 68 28 63 2c 5b 65 5d 29 2c 65 2e 66 6e 2e 74 72 69 67 67 65 72 26 26 65 28 63 29 2e 74 72 69 67 67 65 72 28 22 72 65 61 64 79 22 29 2e 6f 66 66 28 22 72 65 61 64 79 22 29 7d 7d 2c 62 69 6e 64 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 41 29 7b 41 3d 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 3b 69 66 28 63 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 65 2e 72 65 61 64 79 2c 31 29 3b 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 2c 21 31 29 2c 61 2e 61 64 64 45 76 Data Ascii: fireWith(c,[e]),e.fn.trigger&&e(c).trigger("ready").off("ready")}},bindReady:function(){if(!A){A=e.Callbacks("once memory");if(c.readyState==="complete")return setTimeout(e.ready,1);if(c.addEventListener)c.addEventListener("DOMContentLoaded",B,!1),a.addEv
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 7b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 73 74 72 69 6e 67 22 7c 7c 21 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 64 2c 66 3b 74 72 79 7b 61 2e 44 4f 4d 50 61 72 73 65 72 3f 28 66 3d 6e 65 77 20 44 4f 4d 50 61 72 73 65 72 2c 64 3d 66 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 63 2c 22 74 65 78 74 2f 78 6d 6c 22 29 29 3a 28 64 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 44 4f 4d 22 29 2c 64 2e 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 2c 64 2e 6c 6f 61 64 58 4d 4c 28 63 29 29 7d 63 61 74 63 68 28 67 29 7b 64 3d 62 7d 28 21 64 7c 7c 21 64 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 Data Ascii: {if(typeof c!="string"\|\|!c)return null;var d,f;try{a.DOMParser?(f=new DOMParser,d=f.parseFromString(c,"text/xml")):(d=new ActiveXObject("Microsoft.XMLDOM"),d.async="false",d.loadXML(c))}catch(g){d=b}(!d\|\|!d.documentElement\|\|d.getElementsByTagName("parsere
2024-10-04 11:38:48 UTC	1378	IN	Data Raw: 2b 29 61 5b 64 2b 2b 5d 3d 63 5b 65 5d 3b 65 6c 73 65 20 77 68 69 6c 65 28 63 5b 65 5d 21 3d 3d 62 29 61 5b 64 2b 2b 5d 3d 63 5b 65 2b 2b 5d 3b 61 2e 6c 65 6e 67 74 68 3d 64 3b 72 65 74 75 72 6e 20 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3b 63 3d 21 21 63 3b 66 6f 72 28 76 61 72 20 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 3b 66 3c 67 3b 66 2b 2b 29 65 3d 21 21 62 28 61 5b 66 5d 2c 66 29 2c 63 21 3d 3d 65 26 26 64 2e 70 75 73 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 76 61 72 20 66 2c 67 2c 68 3d 5b 5d 2c 69 3d 30 2c 6a 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 7c 7c 6a 21 3d 3d 62 26 26 Data Ascii: +)a[d++]=c[e];else while(c[e]!==b)a[d++]=c[e++];a.length=d;return a},grep:function(a,b,c){var d=[],e;c=!!c;for(var f=0,g=a.length;f<g;f++)e=!!b(a[f],f),c!==e&&d.push(a[f]);return d},map:function(a,c,d){var f,g,h=[],i=0,j=a.length,k=a instanceof e\|\|j!==b&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49745	192.0.77.2	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:48 UTC	389	OUT	GET /i.ebayimg.com/thumbs/images/g/1SIAAOSwpE1if-TG/s-l96.jpg HTTP/1.1 Host: i2.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:48 UTC	573	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 04 Oct 2024 11:38:48 GMT Content-Type: image/jpeg Content-Length: 1359 Connection: close Last-Modified: Fri, 04 Oct 2024 11:38:48 GMT Expires: Sun, 04 Oct 2026 23:38:48 GMT Cache-Control: public, max-age=63115200 Link: <http://i.ebayimg.com/thumbs/images/g/1SIAAOSwpE1if-TG/s-l96.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "fc485cd0530e5d15" Vary: Accept X-nc: MISS jfk 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-10-04 11:38:48 UTC	796	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 20 20 20 20 20 20 20 20 20 20 ff db 00 43 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 01 02 04 06 07 03 08 ff c4 00 3c 10 00 01 03 03 01 04 05 07 0a 07 00 00 00 00 00 00 01 02 03 04 00 05 11 12 06 13 21 31 07 22 32 91 a1 34 41 42 51 61 71 81 14 15 17 Data Ascii: JFIFHHC C PP<!1"24ABQaq
2024-10-04 11:38:48 UTC	563	IN	Data Raw: a1 bc 7c e5 a7 3a cd 9f 70 c0 ef a0 e2 f4 0a 05 02 81 41 d5 76 46 57 cf 1d 1c 3d 10 9c c9 b1 3c 74 f1 fa 87 72 e2 49 f8 ef 00 a0 eb 1b 37 e4 f6 ef c2 e3 7e d4 13 d4 0a 0d 73 6b ac a9 bb 5b 6e 36 a2 3f a9 45 21 a2 7f c8 67 ac d9 ef c7 75 07 cb 0a 4a 92 a2 95 0c 28 70 20 f3 06 82 94 0a 05 07 b4 48 73 26 3c 18 88 c3 92 1f 57 65 a6 92 56 a3 ee 4a 72 68 3a e7 45 1b 0b b6 16 d9 b2 df b8 43 f9 2d ba 6c 65 34 b4 3c a0 17 ac 10 a6 d5 bb 19 3c 08 c7 5b 1c e8 3a 8d 95 a4 34 a8 ac a0 ea 4b 50 19 6c 13 cf a8 74 f1 ee a0 98 a0 50 62 5c c1 0c 26 42 7b 51 d4 1c e0 38 e0 76 87 c4 50 7c d5 d2 95 97 e6 9d b6 b8 36 84 e2 3c a5 7c ae 3e 39 14 bf d6 38 f6 05 ea 14 10 36 cb 2d de ea ee ea db 0d e9 6e 79 c3 28 52 f1 ef 23 80 f8 d0 6f 76 4e 82 76 b6 6e 95 dc 5c 66 d8 d1 e6 14 77 Data Ascii: \|:pAvFW=<trI7~sk[n6?E!guJ(p Hs&<WeVJrh:EC-le4<<[:4KPltPb\&B{Q8vP\|6<\|>986-ny(R#ovNvn\fw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49747	142.250.185.161	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:48 UTC	607	OUT	GET /feeds/posts/default?orderby=published&max-results=7&alt=json-in-script&callback=recentpostslist HTTP/1.1 Host: youruno-chicka.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1
2024-10-04 11:38:48 UTC	575	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Server: Blogger Render Server 1.0 X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 04 Oct 2024 11:38:48 GMT Expires: Fri, 04 Oct 2024 10:56:33 GMT Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Last-Modified: Fri, 30 Aug 2024 07:20:22 GMT Content-Type: text/javascript; charset=UTF-8 Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:38:48 UTC	815	IN	Data Raw: 38 30 30 30 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 72 65 63 65 6e 74 70 6f 73 74 73 6c 69 73 74 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 67 65 72 2f 32 30 30 38 22 2c 22 78 6d 6c 6e 73 24 67 65 6f 72 73 73 22 3a 22 68 Data Ascii: 8000// API callbackrecentpostslist({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"h
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 6e 67 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 6e 67 6c 61 6e 64 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 78 61 6d 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 78 65 72 63 69 73 65 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 66 72 61 63 74 69 6f 6e 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 68 6f 6d 6d 65 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6c 33 33 36 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6e 66 68 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6f 67 67 69 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 70 61 70 65 72 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 70 6f 70 61 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 71 75 65 73 74 69 6f 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 65 76 65 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 6f 6c 75 74 69 6f 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 74 61 74 69 6f 6e 73 Data Ascii: ng"},{"term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"question"},{"term":"seven"},{"term":"solution"},{"term":"stations
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 6c 65 2e 63 6f 6d 2f 67 2f 32 30 30 35 23 74 68 75 6d 62 6e 61 69 6c 22 2c 22 77 69 64 74 68 22 3a 22 31 36 22 2c 22 68 65 69 67 68 74 22 3a 22 31 36 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6d 67 31 2e 62 6c 6f 67 62 6c 6f 67 2e 63 6f 6d 5c 2f 69 6d 67 5c 2f 62 31 36 2d 72 6f 75 6e 64 65 64 2e 67 69 66 22 7d 7d 5d 2c 22 67 65 6e 65 72 61 74 6f 72 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 30 30 22 2c 22 75 72 69 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 22 2c 22 24 74 22 3a 22 42 6c 6f 67 67 65 72 22 7d 2c 22 6f 70 65 6e 53 65 61 72 63 68 24 74 6f 74 61 6c 52 65 73 75 6c 74 73 22 3a 7b 22 24 74 22 3a 22 32 38 22 7d 2c 22 6f 70 65 6e 53 65 61 72 63 68 24 73 74 61 72 74 49 6e 64 65 78 22 3a 7b 22 24 Data Ascii: le.com/g/2005#thumbnail","width":"16","height":"16","src":"https:\/\/img1.blogblog.com\/img\/b16-rounded.gif"}}],"generator":{"version":"7.00","uri":"http://www.blogger.com","$t":"Blogger"},"openSearch$totalResults":{"$t":"28"},"openSearch$startIndex":{"$
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 61 6e 69 6c 6c 61 6d 61 67 61 7a 69 6e 65 2e 69 74 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 75 70 6c 6f 61 64 73 5c 2f 32 30 32 30 5c 2f 31 30 5c 2f 43 69 72 63 6f 6e 63 69 73 69 6f 6e 65 2d 43 6f 70 65 72 74 69 6e 61 2e 6a 70 67 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 5c 22 41 6d 61 7a 6f 6e 2e 63 6f 6d 3a 20 53 74 6f 72 69 61 20 64 65 6c 20 43 69 72 63 6f 3a 20 44 61 6c 6c 27 61 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 61 20 6f 67 67 69 2e 5c 22 20 77 69 64 74 68 3d 5c 22 36 34 30 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3d 5c 22 33 36 30 5c 22 20 5c 2f 5c 75 30 30 33 45 5c 75 30 30 33 43 5c 2f 6e 6f 73 63 72 69 70 74 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: anillamagazine.it\/wp-content\/uploads\/2020\/10\/Circoncisione-Copertina.jpg\"\n alt=\"Amazon.com: Storia del Circo: Dall'antico Egitto a oggi.\" width=\"640\"\n height=\"360\" \/\u003E\u003C\/noscript\u003E\n
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 75 30 30 33 45 5c 75 30 30 33 43 5c 2f 73 6d 61 6c 6c 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 70 5c 75 30 30 33 45 46 61 72 65 20 69 6c 20 43 69 72 63 6f 2c 20 6c 65 20 6f 72 69 67 69 6e 69 20 64 65 6c 20 43 69 72 63 6f 2c 20 69 6c 20 43 69 72 63 6f 20 6e 65 6c 6c 61 20 52 6f 6d 61 20 69 6d 70 65 72 69 61 6c 65 2c 20 6c 61 20 63 72 69 73 69 20 63 69 72 63 65 6e 73 65 20 64 65 6c 20 4d 65 64 69 6f 65 76 6f 2c 20 69 6c 20 43 69 72 63 6f 20 6e 65 6c 6c e2 80 99 65 74 c3 a0 20 6d 6f 64 65 72 6e 61 2c 20 69 6c 20 43 69 72 63 6f 20 69 74 61 6c 69 61 6e 6f 2c 20 69 20 6e 75 6d 65 72 69 20 74 72 61 64 69 7a 69 6f 6e 61 6c 69 2c 20 69 6c 20 43 69 72 63 6f 20 64 65 6c 20 66 75 74 75 72 6f 2c 20 43 69 72 71 75 65 20 64 75 20 53 6f 6c 65 69 Data Ascii: u003E\u003C\/small\u003E\n \u003Cp\u003EFare il Circo, le origini del Circo, il Circo nella Roma imperiale, la crisi circense del Medioevo, il Circo nellet moderna, il Circo italiano, i numeri tradizionali, il Circo del futuro, Cirque du Solei
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 65 6c 6c 27 61 6e 74 69 63 6f 20 45 67 69 74 74 6f 2c 20 6f 76 76 65 72 6f 20 64 65 6c 6c 61 20 63 69 76 69 6c 74 c3 a0 20 64 65 6c 6c 27 41 66 72 69 63 61 20 73 65 74 74 65 6e 74 72 69 6f 6e 61 6c 65 20 73 76 69 6c 75 70 70 61 74 61 73 69 20 6c 75 6e 67 6f 20 6c 65 20 72 69 76 65 20 64 65 6c 20 66 69 75 6d 65 20 4e 69 6c 6f 20 5b 4e 20 31 5d 2c 20 61 6c 6c 61 20 66 6f 63 65 2c 20 61 20 64 65 6c 74 61 2c 20 6e 65 6c 20 4d 61 72 20 4d 65 64 69 74 65 72 72 61 6e 65 6f 2c 20 70 65 72 20 75 6e 27 65 73 74 65 6e 73 69 6f 6e 65 20 63 6f 6d 70 6c 65 73 73 69 76 61 20 64 69 2e 5c 75 30 30 33 43 5c 2f 70 5c 75 30 30 33 45 5c 6e 20 20 20 20 5c 75 30 30 33 43 5c 2f 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 Data Ascii: ell'antico Egitto, ovvero della civilt dell'Africa settentrionale sviluppatasi lungo le rive del fiume Nilo [N 1], alla foce, a delta, nel Mar Mediterraneo, per un'estensione complessiva di.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u00
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 74 61 6c 69 61 6e 20 45 64 69 74 69 6f 6e 29 20 65 42 6f 6f 6b 20 3a 20 52 69 63 63 61 72 64 6f 20 52 6f 76 65 72 73 69 3a 20 41 6d 61 7a 6f 6e 2e 63 61 3a 20 4b 69 6e 64 6c 65 20 53 74 6f 72 65 5c 75 30 30 33 43 5c 2f 70 5c 75 30 30 33 45 5c 6e 20 20 20 20 5c 75 30 30 33 43 5c 2f 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 69 6d 67 20 61 6c 74 3d 5c 22 41 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 57 69 6b 69 70 65 64 69 61 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 77 70 2e 63 6f 6d 5c 2f 70 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 5c 2f 6d 65 64 69 61 5c 2f 44 77 5a 77 65 30 74 58 67 41 41 Data Ascii: talian Edition) eBook : Riccardo Roversi: Amazon.ca: Kindle Store\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"Antico Egitto Wikipedia\"\n src=\"https:\/\/i2.wp.com\/pbs.twimg.com\/media\/DwZwe0tXgAA
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 2f 70 5c 75 30 30 33 45 5c 6e 20 20 20 20 5c 75 30 30 33 43 5c 2f 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 69 6d 67 20 61 6c 74 3d 5c 22 53 74 6f 72 69 61 20 64 65 6c 20 63 69 72 63 6f 2e 20 44 61 6c 6c 27 61 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 61 20 6f 67 67 69 20 52 6f 76 65 72 73 69 2c 2e 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 77 70 2e 63 6f 6d 5c 2f 31 2e 62 70 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 2d 74 33 42 70 6d 66 76 59 45 6a 51 5c 2f 55 79 58 4b 73 6b 77 74 6b 65 49 5c 2f 41 41 41 41 41 41 41 41 53 6c 41 5c 2f 62 49 63 55 59 55 41 30 50 62 30 5c 2f 73 31 36 Data Ascii: /p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"Storia del circo. Dall'antico Egitto a oggi Roversi,.\"\n src=\"https:\/\/i2.wp.com\/1.bp.blogspot.com\/-t3BpmfvYEjQ\/UyXKskwtkeI\/AAAAAAAASlA\/bIcUYUA0Pb0\/s16
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 68 65 2e 5c 75 30 30 33 43 5c 2f 70 5c 75 30 30 33 45 5c 6e 20 20 20 20 5c 75 30 30 33 43 5c 2f 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 69 6d 67 20 61 6c 74 3d 5c 22 53 74 6f 72 69 61 20 64 65 6c 20 43 69 72 63 6f 3a 20 44 61 6c 6c 5c 5c 27 61 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 61 20 6f 67 67 69 20 5a 6f 62 6f 6b 6f 2e 63 6f 6d 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 77 70 2e 63 6f 6d 5c 2f 64 39 6b 33 71 34 6a 39 2e 73 74 61 63 6b 70 61 74 68 63 64 6e 2e 63 6f 6d 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 75 70 6c 6f 61 64 73 5c 2f 63 69 72 63 6f 2d 6d 61 73 73 69 6d 6f 2d Data Ascii: he.\u003C\/p\u003E\n \u003C\/aside\u003E\n\n \u003Caside\u003E\n \u003Cimg alt=\"Storia del Circo: Dall\\'antico Egitto a oggi Zoboko.com\"\n src=\"https:\/\/i2.wp.com\/d9k3q4j9.stackpathcdn.com\/wp-content\/uploads\/circo-massimo-
2024-10-04 11:38:48 UTC	1390	IN	Data Raw: 6e 5c 6e 20 20 20 20 5c 75 30 30 33 43 61 73 69 64 65 5c 75 30 30 33 45 5c 6e 20 20 20 20 20 20 20 20 5c 75 30 30 33 43 69 6d 67 20 61 6c 74 3d 5c 22 53 74 6f 72 69 61 20 44 65 6c 20 43 69 72 63 6f 20 44 61 6c 6c 20 41 6e 74 69 63 6f 20 45 67 69 74 74 6f 20 41 20 4f 67 67 69 20 3f 20 31 39 38 2e 35 38 2e 31 30 36 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 77 70 2e 63 6f 6d 5c 2f 69 2e 70 69 6e 69 6d 67 2e 63 6f 6d 5c 2f 6f 72 69 67 69 6e 61 6c 73 5c 2f 32 32 5c 2f 36 38 5c 2f 66 39 5c 2f 32 32 36 38 66 39 33 32 33 32 62 61 39 30 38 61 64 33 64 65 65 38 62 66 33 66 31 34 63 62 33 37 2e 6a 70 67 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3d 5c 22 31 30 30 25 5c 22 20 73 74 79 Data Ascii: n\n \u003Caside\u003E\n \u003Cimg alt=\"Storia Del Circo Dall Antico Egitto A Oggi ? 198.58.106\"\n src=\"https:\/\/i2.wp.com\/i.pinimg.com\/originals\/22\/68\/f9\/2268f93232ba908ad3dee8bf3f14cb37.jpg\"\n width=\"100%\" sty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49748	54.39.128.117	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:48 UTC	753	OUT	GET /stats/0.php?4706781&@f16&@g1&@h1&@i1&@j1728041926449&@k0&@l1&@myouruno-chicka&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-10621084&@b3:1728041926&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:48 UTC	135	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:28 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 379 Connection: close
2024-10-04 11:38:48 UTC	379	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 31 34 32 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 73 79 Data Ascii: _HST_cntval="#3Vis. today=142";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="asy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 11:38:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=191185 Date: Fri, 04 Oct 2024 11:38:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49749	104.18.11.207	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:49 UTC	671	OUT	GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://youruno-chicka.blogspot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:49 UTC	899	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:49 GMT Content-Type: font/woff2 Content-Length: 66624 Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: "db812d8a70a4e88e888744c1c9a27e89" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 09/26/2024 12:23:56 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: ad019c03aeaeb502099e6ede0b1dcb05 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1141 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cd4e349ab24429a-EWR
2024-10-04 11:38:49 UTC	470	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 04 40 00 0e 00 00 00 02 2a e8 00 01 03 e0 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 87 f6 1c 86 b0 35 01 36 02 24 03 94 0a 0b 8a 10 00 04 20 05 87 08 07 b0 20 3f 77 65 62 66 06 5b fc c1 91 80 d6 40 d6 8c 17 e5 a6 6e 43 80 c7 cb 9c e5 74 01 54 4c b7 c9 a1 f4 66 05 88 d6 74 1d a1 c8 c8 b0 71 00 c6 e8 a9 35 fb ff ff ff 3f 3d 69 88 6c e5 d2 91 5c db 76 6c 20 82 03 54 ff 83 ec 90 62 16 d2 15 d9 20 f4 31 07 66 c3 ba 9e 37 d4 54 87 51 d3 0a 8a 82 44 13 3b 3a bf d0 ae 12 31 95 6c d7 be 6a 76 88 af 65 d2 07 ec d2 6e 93 0f 45 89 a8 07 df a0 6b 35 3e ef a3 64 0f 37 51 a9 6c 8a 7f 42 61 94 dc 0a 92 75 e2 78 5d 2e f9 85 8b d6 f9 c0 57 92 43 b5 86 91 c8 24 ae 38 Data Ascii: wOF2@*?FFTM `r56$ ?webf[@nCtTLftq5?=il\vl Tb 1f7TQD;:1ljvenEk5>d7QlBaux].WC$8
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 5a 30 a2 b6 11 2d 95 c2 46 95 12 69 81 62 05 46 22 32 cf 3c 45 45 c5 a8 13 ed 3b eb f4 22 75 3f d1 9c fd db d9 dd 14 0e 1a 82 d4 52 d9 81 5a ea 48 52 b1 1d 44 d3 fb b7 78 aa 59 2c 0d 35 82 54 74 a6 76 62 14 aa 9c 65 cf bc e6 59 4e 7f eb a9 73 46 4e 44 2b 03 ff fa f3 b7 f6 f4 b6 ef b7 31 08 09 08 87 95 18 cf a4 60 80 b6 d9 01 da 44 0b 28 92 26 36 62 61 50 36 28 a0 80 d5 18 11 58 b3 36 67 4e 57 c6 36 6b 2e d5 39 5d ba a8 76 1d 1f eb a1 9a ea ff ac 24 43 66 b4 76 c0 76 fa 10 78 40 10 b0 2d 4a b8 60 47 b0 97 d9 77 d4 fe 77 5b 10 d8 41 83 c0 14 13 04 b8 e5 34 03 6d 73 49 3e 00 c5 ff cf 69 ef d9 cf 13 f3 18 1e 70 05 c3 80 46 28 32 62 b5 bb da 18 7e 48 c9 5d 4a 95 5d 94 b1 6a dd b9 ad dc d4 46 cd 66 2d 7e 0b 40 fc c7 f3 c5 1a fa 67 67 0f 42 a0 2d a0 05 54 78 ee Data Ascii: Z0-FibF"2<EE;"u?RZHRDxY,5TtvbeYNsFND+1`D(&6baP6(X6gNW6k.9]v$Cfvvx@-J`Gww[A4msI>ipF(2b~H]J]jFf-~@ggB-Tx
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 26 41 27 fb 46 00 47 b8 fd 93 63 15 54 35 3a c6 8a 60 71 52 aa c6 4f c9 89 ad de 90 ec 55 0e 51 c3 d4 b1 e5 d9 5e 28 08 e6 ec 9c 54 c3 56 61 03 c6 6d bf 89 35 90 a4 76 b3 ec 50 1d 25 d4 5e 29 4a 11 89 15 2c 66 2b e9 52 1a 4a 46 b2 b9 2c ca f0 80 cc 9c f1 d3 a1 d4 fe cc ae 14 41 ac d5 78 08 01 28 0c ad 48 9e 8c 8f b7 7d cb 5c 89 e1 c7 c2 69 05 83 8b 0d 86 16 22 1c 82 07 18 13 f1 6c e1 ca 44 6f bb 50 d5 24 e3 d4 44 af 11 e8 7d 11 15 5c a8 8b b0 5a 28 69 31 c7 25 87 84 d7 77 65 1a 36 41 d2 d5 95 bc 07 ac 8d 4a 5d 16 4d 34 65 b4 88 20 c3 67 b8 92 c4 c8 e5 62 f1 94 3e 6a 40 91 14 a6 dc 65 55 77 0a 75 a7 4e ea 53 33 15 40 7d 08 a2 b7 33 41 ee 99 58 c3 ca 3f 64 b5 9b 7a ac 38 69 1e 14 43 2f d5 c1 c9 9b c4 00 e5 4a 4b 45 00 af 96 c4 27 26 85 c4 5d e1 10 3d cf 7a Data Ascii: &A'FGcT5:`qROUQ^(TVam5vP%^)J,f+RJF,Ax(H}\i"lDoP$D}\Z(i1%we6AJ]M4e gb>j@eUwuNS3@}3AX?dz8iC/JKE'&]=z
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 0b 31 15 81 12 21 b0 aa 32 fa 17 ad 48 27 3a d6 49 1a 5f 66 15 ca 2c d5 43 03 62 a4 01 99 9a 6a a3 41 5c a3 ce 88 b2 f5 4c e1 94 af 31 20 29 d9 c8 48 92 b9 02 61 98 99 15 b6 09 82 3d ae eb 9d e9 4e 28 55 c9 3b 0e 9b b8 b3 71 b0 be 9e 95 f5 6c 71 e3 ce e1 d1 92 64 3b 68 b0 db d1 33 60 67 07 ac 6b 7a 10 8e 22 ad 25 e5 85 d6 e7 bc cb 28 ec f3 38 fd 02 90 58 58 d0 8c cc 4a 6b 05 5f af 77 b3 6f 5d d3 9e a4 1e 20 0f 02 bc b7 1a 4a e9 38 61 34 da 36 a4 26 d7 30 33 33 3d d5 06 05 39 9e 05 29 ca 76 cc 9e ae f5 be 26 d2 da cd 4a 50 56 de fd cc 1a cb a2 30 fa db 5c 98 71 ac 24 ae b6 a9 48 ea e9 59 10 88 31 69 b6 be 39 ff 1e 2f 99 69 a3 7d ab b7 34 2c 7f 72 a4 d3 70 d5 bb 80 a6 72 cd 57 c7 75 62 cf 15 88 f9 69 dc 9d 13 b3 46 b7 23 a3 0b 1b 5d c0 ee 17 95 da b1 29 62 Data Ascii: 1!2H':I_f,CbjA\L1 )Ha=N(U;qlqd;h3`gkz"%(8XXJk_wo] J8a46&033=9)v&JPV0\q$HY1i9/i}4,rprWubiF#])b
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: c4 ae 6c 5c 67 85 05 66 77 94 50 4b 7c a3 72 10 af 9e 28 30 dc c3 4a 23 23 72 50 b9 3c b5 2e b7 c1 3d 24 a8 8c 56 0a f3 d3 ad 7d 6b aa 80 cd 0a 22 6c 57 c1 6d 94 74 76 2e 14 1a f5 e6 95 41 37 e6 ec 2d c8 5f 08 e2 68 a4 50 ad e0 f5 2c a7 75 65 09 2d 7c b1 3a 89 f8 78 16 a9 6b d9 56 4f e2 6e 2f d7 65 70 5d 13 de 1d 5e 1c f2 df 74 b2 8f 32 09 9d 6e 28 7c 99 72 a5 08 47 3c 06 04 80 db 72 ca 78 f2 34 d3 20 ce aa 02 ca a1 68 24 81 e8 e0 44 b1 a4 b8 94 17 a9 ff eb 49 e1 f9 ed 50 31 87 52 75 a9 6e 36 cd 8f de 3c 5b 78 f8 38 52 77 8a 71 19 e3 e3 74 51 49 9c a4 9e 61 20 0a be 32 c2 5f 55 fb 5a 98 93 89 24 ee 56 20 98 f1 1e 5e 58 47 72 e7 0e 03 3d 0b 98 9e 77 9c 44 df 75 4a 7a b0 01 da 1c 6b 33 bb ac 9c 50 45 00 76 ae 60 9e 8b 2e 4f 52 38 5d 05 19 64 01 af 8b 24 46 Data Ascii: l\gfwPK\|r(0J##rP<.=$V}k"lWmtv.A7-_hP,ue-\|:xkVOn/ep]^t2n(\|rG<rx4 h$DIP1Run6<[x8RwqtQIa 2_UZ$V ^XGr=wDuJzk3PEv`.OR8]d$F
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 40 bb 34 bf ce e6 6b 73 bc a9 6f 78 84 87 e9 b3 74 6f b8 c0 7a 2d 0d 04 31 75 76 e0 d0 13 a7 62 ef 2a c8 c1 c6 62 f7 61 5b f2 7f 95 05 17 5c f0 51 85 36 86 21 51 43 08 f8 ec de 9e f7 a0 36 e7 b9 ea 1f fa 32 30 dc f6 1c c4 bd 72 b9 26 90 52 13 68 5b c0 35 b0 80 a5 52 09 3b 96 a8 5f 93 3a 20 54 3a 83 f8 2b 4d 7e ac 3a b7 db bc 52 de 1d 3f c2 15 31 d6 ae 84 9a cf 08 17 f5 20 e1 5c de e9 1b 21 10 dc 8e 60 30 ef d1 ab 65 e5 8b 56 ce ae 88 d4 7b 1e 44 46 6e 2d 8f 24 f9 2b 3c 77 a0 5f 19 11 e3 c1 d0 fa 07 a4 b1 5f 29 21 91 78 6c 27 98 4c 45 d2 3f f0 6d c4 e0 3c 47 ce 5b e3 54 ff 8f 2a 31 f6 d7 09 31 e7 db ac 27 ff 36 ce 4f b3 24 c0 e7 99 de fc 71 e9 e9 e3 82 f8 88 f5 14 75 cd f7 34 94 61 7c 39 3d 99 ad 16 f5 1f 17 2b 35 9b 9b 15 bd bd 9c b0 dc f8 86 bf ea 1a 13 Data Ascii: @4ksoxtoz-1uvbba[\Q6!QC620r&Rh[5R;_: T:+M~:R?1 \!`0eV{DFn-$+<w__)!xl'LE?m<G[T11'6O$qu4a\|9=+5
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: b7 8d d3 05 4b ce 94 77 30 87 af 3b fc d5 57 6f f0 25 3b 3e a3 72 4a 02 8e 7c 21 21 02 ea c6 4d c3 66 05 f1 f8 08 04 c7 30 fb 88 43 90 65 a2 37 0a 86 7b 55 14 21 fe b7 06 0e 11 8f 73 09 c9 d7 dd a9 1f 42 0f 09 11 10 b5 0d 7e 88 1f fa a9 1e 22 b6 8b c5 42 31 71 9c 2a 4e f2 b8 fc 6a 84 2b 37 5e 37 5e 26 d4 44 43 85 cf 9e 3e 70 14 42 d7 5b a6 69 5b 97 49 b5 4a f7 e7 7b a5 18 70 55 0f 86 5b 2f 54 12 25 70 6f 36 94 c2 5a b3 23 6a d6 c7 12 27 cf c1 6c 9a 1f 32 46 09 ce 3b 78 c6 45 c6 07 7d 6f 77 8e 91 cc f0 73 48 b7 25 9f 6d fe b9 9f 4f 17 d5 4d 98 0e a7 25 95 a3 81 78 42 20 ea 57 ce 62 c4 f3 d2 b8 cb 6a f9 30 e2 ab eb 04 19 8e 01 f9 89 8e 03 dd c1 f1 de 15 17 4c 18 99 e6 04 f3 40 e5 e8 3a 49 cf e0 39 aa 8a 70 8a 74 e5 b0 0d f9 b4 04 5d a6 78 55 db 54 2a 67 b4 Data Ascii: Kw0;Wo%;>rJ\|!!Mf0Ce7{U!sB~"B1qNj+7^7^&DC>pB[i[IJ{pU[/T%po6Z#j'l2F;xE}owsH%mOM%xB Wbj0L@:I9pt]xUTg
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 6a 4a 68 8d d5 20 b6 63 6c c2 74 f5 95 5c 17 5b a7 db df 2d 6c 10 65 33 1f 60 2d 63 51 a5 1c 94 c5 ad ff 07 83 c9 26 51 85 a1 d3 47 27 20 99 90 ad 2c 11 85 78 c2 6a 10 f3 77 31 78 03 05 fb 8a 6f 84 81 15 7b 96 e5 32 7c 94 49 2b 0c 13 88 06 1e 84 bb 98 4f f7 ae 7e dc 08 93 80 27 33 c0 ea bd 99 47 19 05 9a a6 3c 8b 5d e1 42 93 d0 e9 16 94 d4 36 35 1e 40 c8 42 7a 5d 32 e2 22 5f 31 9e 2a 81 8f 3f e4 89 e4 39 31 14 9b bc 93 f5 52 b8 ca 84 22 7c 72 9b 72 49 b5 4f db e5 35 ee 06 42 2f ab 62 7d 41 0c ff c4 7e fa d1 53 b0 8e 90 3c 7d 1a e0 fe cb 36 2f 7e ac c8 52 64 d6 de d5 66 36 c4 4c 49 6b 84 f1 b8 29 36 67 47 af a2 1a d3 8b d3 e6 9e 3a ed 5c 18 36 75 95 a8 21 3d a7 a8 a2 2f 30 0f 32 d4 4a 9d 22 47 1d f5 f6 78 5a 3a 53 bb 98 c5 fb 6d 79 fb fd 33 ad 52 32 cb 91 Data Ascii: jJh clt\[-le3`-cQ&QG' ,xjw1xo{2\|I+O~'3G<]B65@Bz]2"_1*?91R"\|rrIO5B/b}A~S<}6/~Rdf6LIk)6gG:\6u!=/02J"GxZ:Smy3R2
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 47 cc e6 34 32 68 e9 d2 39 d9 18 72 69 d3 0a 6c 23 83 33 f1 36 d5 be 22 4b be 0c 9d 21 4e 23 16 a7 67 aa 6d e7 52 79 04 77 33 ea 08 03 a1 ea 77 55 0c 76 23 86 e6 8b d5 fd c1 b5 b8 d7 42 5c 83 18 02 5e 0d 8b 04 12 0d d0 cf 89 e8 60 cf 1a 19 1a e2 42 f1 a0 55 22 5e 90 91 26 8e 15 c3 66 0f cf 5b b1 71 03 98 b6 f8 6e 1e e1 34 78 95 73 6f f9 9c ee 2f 46 52 b3 5e 85 e0 ca c6 39 1b 0e 50 cd 90 04 d0 14 f1 df fe cc 0c dd 32 b8 94 9b 10 e8 41 aa f7 9c b4 a5 7c bb e8 7f 12 6d dd a5 7c e4 b5 dc 55 cf a0 69 f7 16 cd 8f 58 b1 b5 c4 5e fd b7 ca b9 e3 9c f1 e1 ba d6 71 1a d6 93 bb 90 98 4a 87 15 02 b1 cb b2 0f 9a 02 e9 7e c3 6e 26 6b 69 0c a7 60 13 3b 18 bd 63 bb 40 62 4a 62 b2 32 a2 21 09 9e cd 85 83 0c 4d 0b 76 51 d4 18 45 73 c2 c5 24 f6 cb 39 c7 b3 f4 ef 8a 72 7b 55 Data Ascii: G42h9ril#36"K!N#gmRyw3wUv#B\^`BU"^&f[qn4xso/FR^9P2A\|m\|UiX^qJ~n&ki`;c@bJb2!MvQEs$9r{U
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 4e 64 f2 b9 dc 1d 71 a4 b7 46 3f 18 81 87 b1 7a d3 34 d2 a0 e4 11 af 63 49 75 2f 64 86 f8 14 ac be 6a 21 f4 f5 c3 23 ee 60 da d0 85 96 3d 96 ba 74 c3 9f c6 b5 9c 93 c6 38 6f 3c 14 fc 21 13 fd ae 54 6b 57 95 92 4c 9c e8 01 24 af cc 87 e7 8d 90 13 ce af c8 70 35 2c 20 01 8d 77 e5 c1 73 69 88 5e a1 fe 11 16 e6 f1 71 4b 50 e0 a6 b7 cc 15 ad 92 c9 b4 13 b2 60 68 48 f4 8a a5 d1 c1 0b a3 13 73 05 08 69 e2 f7 be 25 99 7d 8c b4 ac 40 4e ad 57 f7 74 b6 72 c6 81 a8 bd e4 9c 43 de 8f da a8 50 97 d8 e7 50 2e 41 c9 d2 87 b2 39 05 3b 70 c0 f9 ff b7 69 e3 9d e1 b2 5a 5d cb a8 cb 9b d9 15 8d bd 29 85 eb ae 9c e3 79 f7 46 4a c2 4a 1c 2d e2 2f 29 b6 fb 60 2f 4c 7e 2d d8 1e 42 b8 74 b8 27 cf 5a 85 13 a7 ac f3 ea 85 67 93 66 3a 94 4a ee 4d ee 63 7b b1 83 66 c8 99 3d e9 54 38 Data Ascii: NdqF?z4cIu/dj!#`=t8o<!TkWL$p5, wsi^qKP`hHsi%}@NWtrCPP.A9;piZ])yFJJ-/)`/L~-Bt'Zgf:JMc{f=T8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49752	151.101.192.84	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:49 UTC	391	OUT	GET /originals/2e/d7/0f/2ed70fefde377b461f235d08a7b8dc49.jpg HTTP/1.1 Host: i.pinimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:49 UTC	289	IN	HTTP/1.1 200 OK Connection: close Content-Length: 111691 ETag: "c97958d49f8376147b392d81ac10b57f" Content-Type: image/jpeg Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Vary: Origin X-CDN: fastly alt-svc: h3=":443";ma=600 date: Fri, 04 Oct 2024 11:38:49 GMT
2024-10-04 11:38:49 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 04 6c 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 02 03 04 01 07 ff c4 00 15 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fa a0 00 01 e7 a3 cf 40 00 00 00 00 Data Ascii: JFIFHHC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((l "@
2024-10-04 11:38:49 UTC	16384	IN	Data Raw: 56 91 5f ea 6d f2 fb e2 46 53 e7 ec 51 88 16 be d7 54 8b 93 ae 64 55 95 58 30 1b a8 74 fa bb c5 f5 fb 18 9b a0 62 d1 bd 46 d4 72 31 24 2e 8a f9 57 c5 60 db 60 2a 8f ba a7 7b 47 c5 60 4b a3 e5 86 07 dd f9 00 59 72 b6 31 d6 8e 52 1c ae c0 36 0d df 0d 03 dd 0f bc ab c2 b0 ec f8 aa b7 74 3e f2 af 0a d4 bb c2 a2 f2 d5 21 c5 da a1 ef 8b b3 43 97 e0 f1 fb 62 65 23 df f7 7f f7 93 1c 63 23 df 1e d9 a2 72 b6 e5 98 9e 31 92 b3 04 66 c4 99 ce 39 42 7a 93 f4 0f f5 fa 17 f5 da 9c 26 95 e5 8e 19 c3 d3 87 af 0f e9 2d 3f ee a7 cb ec e7 e1 de 3d e3 9f 82 4a 65 6d cb 31 3c 60 d3 94 a7 1c e9 d7 2f 5e 5c 1d f9 7d 66 38 4d 09 93 78 8c fd 56 fe ae de e8 8f 7c fd fd a3 8c 64 4f 18 f4 09 08 e5 f5 2f 14 8c 6d da b2 cb 2a 49 aa 75 30 af 48 30 ad 36 20 c9 9a b6 f9 42 72 52 b8 6b f3 Data Ascii: V_mFSQTdUX0tbFr1$.W``{G`KYr1R6t>!Cbe#c#r1f9Bz&-?=Jem1<`/^\}f8MxV\|dO/mIu0H06 BrRk
2024-10-04 11:38:49 UTC	16384	IN	Data Raw: 7a 49 b8 d8 ef d6 a3 97 6a f9 96 f9 ba de f5 2f 38 b3 48 e5 d8 d4 92 43 89 92 15 93 57 55 03 5f 6e ea 59 20 99 a3 65 4c 9a 8c dc 6f c6 96 28 ef 61 d7 c4 d4 5e 51 90 c6 f9 f4 a8 e5 86 42 92 a2 e4 b9 e7 5d 7b 69 df 33 3c cf d2 91 b7 9a 92 3b 91 9c 11 71 51 40 65 76 54 60 c6 fc 6d c3 ba a1 94 c8 c3 65 7e 68 e3 52 3c 18 a9 22 49 0e 67 45 03 7f 65 e8 22 de c3 af 5a 18 92 c4 95 4c 81 7a bb 69 13 39 4c ae 1f 41 d5 4d 87 49 36 7e 2f 63 cf e7 67 36 e2 3a ab 13 85 91 a3 05 46 5d ac 5b b5 ec eb a8 f0 aa c5 11 72 ee 1d 55 14 db 57 e6 2e 5b 75 fa f9 26 c4 6d 5b 34 9c 2d bb 4f df 4d 83 ce 79 c2 c5 f8 9b ef a8 5e 29 de 39 63 5c 99 ec 0d c5 34 ca ef a8 17 1d 67 ac 9a 96 07 91 9d 64 bf 65 b5 bd 29 9f 10 f3 64 e8 02 00 b7 ce 9e 3d bc 87 0e c4 9d 95 80 df db 51 40 27 71 b3 Data Ascii: zIj/8HCWU_nY eLo(a^QB]{i3<;qQ@evT`me~hR<"IgEe"ZLzi9LAMI6~/cg6:F][rUW.[u&m[4-OMy^)9c\4gde)d=Q@'q
2024-10-04 11:38:49 UTC	16384	IN	Data Raw: ce 5a 40 aa 9b 0b 73 8f 1b d4 f9 92 3c c0 9d 96 bb fb ea 12 a9 16 d4 91 b4 17 d0 0e ce 45 f1 74 46 39 b5 cc 6d a7 f7 29 71 0e 80 ca bb 89 fd 61 ec fe f2 0e ff 00 d4 6d 25 ae dd 15 1d 66 99 e6 7d 77 bb 9f b4 69 e0 3b 44 7c bd 06 05 4d ba c5 46 b2 16 d1 8e 62 01 21 75 e2 78 52 e6 b9 66 e8 aa 8b 96 a7 94 35 95 3a 79 b4 2b df 48 a4 4a bb 42 02 16 42 03 77 54 d1 00 db 48 b5 2b 6a 69 83 15 8d 4d 8e 61 6b 1a 28 33 ac 9b f2 c8 a5 4d a9 8a 79 c8 fc a2 f7 8d 69 5d 7a 2c 2e 2a ee 77 e8 00 17 24 f6 0a c4 b2 e7 d6 25 36 7b e8 7d 74 ab 76 0a c6 cb 21 53 94 9e fa 92 3c c4 ba 6f 50 a6 fe ae ba 12 07 2c a7 f6 54 9b 77 f5 52 5c 96 2f d1 08 2e 5a 9e 5c c4 2a 68 f7 06 ea 7b 45 46 b9 fc e6 80 d8 da fd 57 eb a5 56 cc ce db 91 05 cd 63 8a 33 32 ed 78 de fb bb 68 c9 23 65 41 bc Data Ascii: Z@s<EtF9m)qam%f}wi;D\|MFb!uxRf5:y+HJBBwTH+jiMak(3Myi]z,.w$%6{}tv!S<oP,TwR\/.Z\h{EFWVc32xh#eA
2024-10-04 11:38:49 UTC	16384	IN	Data Raw: 46 98 63 77 af 4f 07 4b c0 01 8c ac 0c 98 e8 cb 4c 48 06 d5 15 f3 cc 90 53 04 10 a1 1c 14 87 94 d0 88 41 c6 81 d5 06 46 24 de 61 a8 a4 1a a0 60 2e ac 50 10 50 ca b0 8c 22 8b b4 56 a1 84 4d 00 0f 78 41 6c 73 69 83 c0 60 7a e1 32 b3 c4 02 49 00 86 2e 34 94 80 f9 ea 4d 9d bf f4 46 a4 23 e6 82 01 16 3d ab 54 0d 2c 98 72 56 a6 c4 c6 35 50 23 c4 4a 0b 43 1a db 41 de 8a 13 03 35 92 9d 44 a2 2b b8 11 a3 70 cc b8 2d 97 8e 83 18 40 45 06 43 80 7a 44 1f 81 41 e8 9e 38 89 4a 86 0e 9b f2 80 22 01 1d 0d 85 cf 41 08 51 27 f0 98 fd 13 40 41 30 08 d7 13 24 6c 82 05 c2 85 45 1e bb 42 c4 65 07 a0 02 80 33 d5 11 ba 0e ce 65 b6 18 56 14 01 71 03 a0 c2 84 ae 67 08 52 54 5b 5d 66 46 93 b5 40 4c 0c 48 5b 4d 91 86 14 e8 01 01 ba cf 24 3c e8 aa 67 bf 2c c3 13 89 89 ec 3a 7b 47 f6 Data Ascii: FcwOKLHSAF$a`.PP"VMxAlsi`z2I.4MF#=T,rV5P#JCA5D+p-@ECzDA8J"AQ'@A0$lEBe3eVqgRT[]fF@LH[M$<g,:{G
2024-10-04 11:38:49 UTC	16384	IN	Data Raw: 09 8d d5 69 af b2 76 7f 1e f9 c0 f2 13 cc f6 d5 2f ac 08 0d d2 73 e5 40 5f 9b 8a 4c 15 97 3c 5d 50 ea b8 ed a4 74 55 14 4e f6 6b c5 7c e0 56 cd 4c 7b 31 ed 45 1e 87 a9 c8 7a 10 cf 78 52 cb ca bb 5f 6e 03 40 3c 05 96 23 3b f1 98 5a f7 b7 00 07 e6 19 1a 30 a8 0a 80 c1 85 99 2f 36 bb 51 4a 96 d7 73 2d 0c e2 9b 7d fc de 6e 18 4c 87 07 dd ef bb 87 fd 91 1a 06 db ec 47 de 58 f8 b4 a9 e5 75 f7 15 c0 e2 e2 2b de fb 12 f6 97 c4 c8 8e 65 e1 38 af 5e 88 1d 18 f1 8a ab 9a e3 49 3d e4 2f 55 6f 38 6d 04 20 68 98 d3 80 a6 a6 33 53 93 10 02 06 f5 3e 23 f9 70 71 d0 a8 03 80 0e 0c 22 54 b7 91 5a 77 26 8e 2a 73 fb 64 f7 87 48 a8 3e b6 7d 35 db 29 73 cf 46 7f aa f0 fd 05 3f 4c d3 2a de 7a c0 ce 9f 3f f6 b0 42 ff 00 49 ff 00 8c 2d 7c 7d 40 d8 a0 51 1e 44 c0 ec c9 a0 34 00 70 Data Ascii: iv/s@_L<]PtUNk\|VL{1EzxR_n@<#;Z0/6QJs-}nLGXu+e8^I=/Uo8m h3S>#pq"TZw&sdH>}5)sF?Lz?BI-\|}@QD4p
2024-10-04 11:38:49 UTC	13387	IN	Data Raw: 2f 2b 84 07 7d e2 84 bd e7 c4 3d 3b f3 85 bf 66 c6 c9 d4 fd c2 b0 01 3b fa 1a 2e f1 15 1d 23 92 de f8 73 8e 29 66 a6 bb a2 45 6d 55 7a 7a 5b 1c 4d a9 08 e9 32 d6 ce 70 60 98 14 00 01 10 21 08 3c 4c be 9e 27 ae 6c b4 6b 83 5e b2 74 7d aa 99 ad 13 a2 c9 7b b8 19 68 d0 ab c8 0b a3 5c 10 ca 3d 97 5f 72 cb 47 e3 d7 8c 9a e6 09 73 c9 e5 df 9e ee 29 f6 57 4e f7 4e d3 d5 9e b1 b4 35 da 83 dc 4d 36 10 7b c1 95 aa dd 1f 5d 3d 70 62 43 0d 4a 03 82 bb c0 f0 84 2a 20 1c 4d 88 83 85 ab e2 22 7c a1 c6 b6 ea 1d 7f 35 07 d8 5c bb 40 13 c8 b7 5f f1 ac d9 59 99 a1 79 57 67 b5 0f 18 6b 48 5f 5d 62 18 05 53 6d 6e f0 7b 18 8a 80 56 8a a9 66 c5 c3 cb 89 7e ae 46 71 13 9f 97 97 bb 84 1b 44 bb 1c ec 87 a0 1f 78 ee 0f c9 6e 6c 72 7b 79 7b c1 4c 32 e1 b1 b7 2c 26 a6 da 35 bc d5 5c Data Ascii: /+}=;f;.#s)fEmUzz[M2p`!<L'lk^t}{h\=_rGs)WNN5M6{]=pbCJ* M"\|5\@_YyWgkH_]bSmn{Vf~FqDxnlr{y{L2,&5\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49753	149.56.240.131	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:49 UTC	566	OUT	GET /stats/0.php?4706781&@f16&@g1&@h1&@i1&@j1728041926449&@k0&@l1&@myouruno-chicka&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-10621084&@b3:1728041926&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fyouruno-chicka.blogspot.com%2F&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:49 UTC	135	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:49 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 379 Connection: close
2024-10-04 11:38:49 UTC	379	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 31 34 32 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 73 79 Data Ascii: _HST_cntval="#3Vis. today=142";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="asy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49750	142.250.185.161	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:49 UTC	586	OUT	GET /feeds/posts/summary?alt=json-in-script&callback=pageNavi&max-results=99999 HTTP/1.1 Host: youruno-chicka.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1
2024-10-04 11:38:50 UTC	575	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Server: Blogger Render Server 1.0 X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 04 Oct 2024 11:38:50 GMT Expires: Fri, 04 Oct 2024 10:56:34 GMT Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Last-Modified: Fri, 30 Aug 2024 07:20:22 GMT Content-Type: text/javascript; charset=UTF-8 Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:38:50 UTC	815	IN	Data Raw: 38 30 30 30 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 70 61 67 65 4e 61 76 69 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 67 65 72 2f 32 30 30 38 22 2c 22 78 6d 6c 6e 73 24 67 65 6f 72 73 73 22 3a 22 68 74 74 70 3a 2f 2f 77 Data Ascii: 8000// API callbackpageNavi({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://w
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 74 65 72 6d 22 3a 22 65 6e 67 6c 61 6e 64 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 78 61 6d 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 65 78 65 72 63 69 73 65 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 66 72 61 63 74 69 6f 6e 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 68 6f 6d 6d 65 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6c 33 33 36 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6e 66 68 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 6f 67 67 69 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 70 61 70 65 72 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 70 6f 70 61 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 71 75 65 73 74 69 6f 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 65 76 65 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 6f 6c 75 74 69 6f 6e 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 73 74 61 74 69 6f 6e 73 22 7d 2c 7b 22 74 65 Data Ascii: term":"england"},{"term":"exam"},{"term":"exercises"},{"term":"fractions"},{"term":"hommes"},{"term":"l336"},{"term":"nfhs"},{"term":"oggi"},{"term":"paper"},{"term":"popa"},{"term":"question"},{"term":"seven"},{"term":"solution"},{"term":"stations"},{"te
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 70 65 6e 53 65 61 72 63 68 24 73 74 61 72 74 49 6e 64 65 78 22 3a 7b 22 24 74 22 3a 22 31 22 7d 2c 22 6f 70 65 6e 53 65 61 72 63 68 24 69 74 65 6d 73 50 65 72 50 61 67 65 22 3a 7b 22 24 74 22 3a 22 39 39 39 39 39 22 7d 2c 22 65 6e 74 72 79 22 3a 5b 7b 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 32 35 39 31 37 39 33 38 35 35 34 30 31 38 39 32 33 34 35 2e 70 6f 73 74 2d 35 33 37 34 36 37 37 34 36 36 35 33 33 39 31 39 37 32 35 22 7d 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 33 2d 30 31 2d 32 31 54 32 32 3a 35 30 3a 30 30 2e 30 30 32 2d 30 38 3a 30 30 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 33 2d 30 31 2d 32 34 54 32 32 3a 35 30 3a 31 Data Ascii: penSearch$startIndex":{"$t":"1"},"openSearch$itemsPerPage":{"$t":"99999"},"entry":[{"id":{"$t":"tag:blogger.com,1999:blog-2591793855401892345.post-5374677466533919725"},"published":{"$t":"2023-01-21T22:50:00.002-08:00"},"updated":{"$t":"2023-01-24T22:50:1
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 32 30 32 33 5c 2f 30 31 5c 2f 73 74 6f 72 69 61 2d 64 65 6c 2d 63 69 72 63 6f 2d 64 61 6c 6c 2d 61 6e 74 69 63 6f 2d 65 67 69 74 74 6f 2d 61 2d 6f 67 67 69 2e 68 74 6d 6c 23 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 22 2c 22 74 69 74 6c 65 22 3a 22 30 20 43 6f 6d 6d 65 6e 74 73 22 7d 2c 7b 22 72 65 6c 22 3a 22 65 64 69 74 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 32 35 39 31 37 39 33 38 35 35 34 30 31 38 39 32 33 34 35 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 35 33 37 34 36 37 37 34 36 36 35 33 33 39 31 39 37 32 Data Ascii: hicka.blogspot.com\/2023\/01\/storia-del-circo-dall-antico-egitto-a-oggi.html#comment-form","title":"0 Comments"},{"rel":"edit","type":"application/atom+xml","href":"https:\/\/www.blogger.com\/feeds\/2591793855401892345\/posts\/default\/537467746653391972
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 61 74 6f 6d 2f 6e 73 23 22 2c 22 74 65 72 6d 22 3a 22 70 61 70 65 72 22 7d 2c 7b 22 73 63 68 65 6d 65 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 61 74 6f 6d 2f 6e 73 23 22 2c 22 74 65 72 6d 22 3a 22 71 75 65 73 74 69 6f 6e 22 7d 5d 2c 22 74 69 74 6c 65 22 3a 7b 22 74 79 70 65 22 3a 22 74 65 78 74 22 2c 22 24 74 22 3a 22 63 68 74 74 61 67 6f 6e 67 20 62 6f 61 72 64 20 68 73 63 20 32 30 31 34 20 65 63 6f 6e 6f 6d 69 63 20 71 75 65 73 74 69 6f 6e 20 70 61 70 65 72 22 7d 2c 22 73 75 6d 6d 61 72 79 22 3a 7b 22 74 79 70 65 22 3a 22 74 65 78 74 22 2c 22 24 74 22 3a 22 5c 6e 5c 6e 20 20 20 20 43 68 74 74 61 67 6f 6e 67 20 42 6f 61 72 64 20 48 73 63 20 32 30 31 34 20 45 63 6f 6e Data Ascii: /www.blogger.com/atom/ns#","term":"paper"},{"scheme":"http://www.blogger.com/atom/ns#","term":"question"}],"title":{"type":"text","$t":"chttagong board hsc 2014 economic question paper"},"summary":{"type":"text","$t":"\n\n Chttagong Board Hsc 2014 Econ
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 31 34 2d 65 63 6f 6e 6f 6d 69 63 2d 71 75 65 73 74 69 6f 6e 2d 70 61 70 65 72 2e 68 74 6d 6c 22 2c 22 74 69 74 6c 65 22 3a 22 63 68 74 74 61 67 6f 6e 67 20 62 6f 61 72 64 20 68 73 63 20 32 30 31 34 20 65 63 6f 6e 6f 6d 69 63 20 71 75 65 73 74 69 6f 6e 20 70 61 70 65 72 22 7d 5d 2c 22 61 75 74 68 6f 72 22 3a 5b 7b 22 6e 61 6d 65 22 3a 7b 22 24 74 22 3a 22 65 72 72 61 74 69 63 63 6f 77 61 72 64 35 36 22 7d 2c 22 75 72 69 22 3a 7b 22 24 74 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 5c 2f 70 72 6f 66 69 6c 65 5c 2f 30 34 30 39 34 38 38 35 34 34 32 32 32 39 39 34 32 33 31 37 22 7d 2c 22 65 6d 61 69 6c 22 3a 7b 22 24 74 22 3a 22 6e 6f 72 65 70 6c 79 40 62 6c 6f 67 67 65 72 2e 63 6f 6d 22 7d 2c 22 67 64 24 69 6d 61 67 65 22 Data Ascii: 14-economic-question-paper.html","title":"chttagong board hsc 2014 economic question paper"}],"author":[{"name":{"$t":"erraticcoward56"},"uri":{"$t":"http:\/\/www.blogger.com\/profile\/04094885442229942317"},"email":{"$t":"noreply@blogger.com"},"gd$image"
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 61 6e 64 20 69 6e 20 74 68 65 20 53 65 76 65 6e 20 59 65 61 72 73 27 20 57 61 72 3b 20 61 20 73 74 75 64 79 20 69 6e 20 63 6f 6d 62 69 6e 65 64 20 73 74 72 61 74 65 67 79 20 62 79 20 43 6f 72 62 65 74 74 2c 20 4a 75 6c 69 61 6e 20 53 74 61 66 66 6f 72 64 2c 2e 5c 6e 5c 6e 5c 6e 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 53 6f 75 72 63 65 3a 20 22 7d 2c 22 6c 69 6e 6b 22 3a 5b 7b 22 72 65 6c 22 3a 22 72 65 70 6c 69 65 73 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 37 34 39 33 32 32 36 36 30 34 31 32 39 31 30 38 35 30 Data Ascii: and in the Seven Years' War; a study in combined strategy by Corbett, Julian Stafford,.\n\n\n \n \n Source: "},"link":[{"rel":"replies","type":"application/atom+xml","href":"https:\/\/youruno-chicka.blogspot.com\/feeds\/749322660412910850
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 32 35 39 31 37 39 33 38 35 35 34 30 31 38 39 32 33 34 35 2e 70 6f 73 74 2d 38 33 34 37 36 39 38 37 34 39 38 37 30 38 36 36 38 35 37 22 7d 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 33 2d 30 31 2d 31 38 54 32 32 3a 30 33 3a 30 30 2e 30 30 32 2d 30 38 3a 30 30 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 33 2d 30 31 2d 32 31 54 32 32 3a 30 33 3a 30 36 2e 36 35 31 2d 30 38 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 73 63 68 65 6d 65 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 61 74 6f 6d 2f 6e 73 23 22 2c 22 74 65 72 6d 22 3a 22 73 74 72 61 6e 75 22 7d 2c 7b 22 73 63 68 65 6d 65 22 3a 22 68 74 74 70 3a 2f 2f 77 77 Data Ascii: .com,1999:blog-2591793855401892345.post-8347698749870866857"},"published":{"$t":"2023-01-18T22:03:00.002-08:00"},"updated":{"$t":"2023-01-21T22:03:06.651-08:00"},"category":[{"scheme":"http://www.blogger.com/atom/ns#","term":"stranu"},{"scheme":"http://ww
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 2f 38 33 34 37 36 39 38 37 34 39 38 37 30 38 36 36 38 35 37 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 32 30 32 33 5c 2f 30 31 5c 2f 73 2d 6f 6e 75 2d 73 74 72 61 6e 75 2d 7a 72 63 61 6c 61 2e 68 74 6d 6c 22 2c 22 74 69 74 6c 65 22 3a 22 73 20 6f 6e 75 20 73 74 72 61 6e 75 20 7a 72 63 61 6c 61 22 7d 5d 2c 22 61 75 74 68 6f 72 22 3a 5b 7b 22 6e 61 6d 65 22 3a 7b 22 24 74 22 3a 22 65 72 72 61 74 69 63 63 6f 77 61 72 64 35 36 22 7d 2c 22 75 72 69 22 3a 7b 22 24 74 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f Data Ascii: /8347698749870866857"},{"rel":"alternate","type":"text/html","href":"https:\/\/youruno-chicka.blogspot.com\/2023\/01\/s-onu-stranu-zrcala.html","title":"s onu stranu zrcala"}],"author":[{"name":{"$t":"erraticcoward56"},"uri":{"$t":"http:\/\/www.blogger.co
2024-10-04 11:38:50 UTC	1390	IN	Data Raw: 66 2c 20 61 7a 77 2c 20 6d 6f 62 69 20 61 6e 64 20 6d 6f 72 65 2e 5c 6e 5c 6e 5c 6e 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 53 6f 75 72 63 65 3a 20 64 32 30 6f 68 6b 61 6c 6f 79 6d 65 34 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 5c 6e 20 20 20 20 20 20 20 20 44 6f 77 6e 6c 6f 61 64 20 22 7d 2c 22 6c 69 6e 6b 22 3a 5b 7b 22 72 65 6c 22 3a 22 72 65 70 6c 69 65 73 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 35 35 38 32 36 36 33 35 37 35 35 31 33 33 32 36 39 31 37 5c 2f 63 6f 6d 6d 65 6e 74 73 5c 2f 64 65 66 61 Data Ascii: f, azw, mobi and more.\n\n\n \n \n Source: d20ohkaloyme4g.cloudfront.net\n Download "},"link":[{"rel":"replies","type":"application/atom+xml","href":"https:\/\/youruno-chicka.blogspot.com\/feeds\/5582663575513326917\/comments\/defa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49751	141.101.120.11	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:49 UTC	597	OUT	GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&j= HTTP/1.1 Host: e.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:49 UTC	1160	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-S: mtl2 Set-Cookie: m=1; Domain=dtscout.com; Expires=Fri, 04-Oct-2024 13:02:09 GMT; Max-Age=5000; Path=/; SameSite=None; Secure Set-Cookie: st=1; Domain=dtscout.com; Expires=Fri, 04-Oct-2024 12:38:49 GMT; Max-Age=3600; Path=/; SameSite=None; Secure Set-Cookie: df=1728041929; Domain=dtscout.com; Expires=Sun, 12-Jan-2025 11:38:49 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure Set-Cookie: l=1040172804192949803086BC6CA2270E; Domain=dtscout.com; Expires=Wed, 01-Jan-2025 11:38:49 GMT; Max-Age=7689600; Path=/; SameSite=None; Secure X-T: 0.304 Expires: Fri, 04 Oct 2024 11:38:48 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IGpkoam8AvfkyebewRxIuvIN%2BV5U9lDMoWdozlT2PPb5%2BQA%2FB8uSk1DPpxJoTM3uxK6AI8EVWf21bxOAVdd7lsQsWmPXuAXuZI6799lrQJQvhOVX%2BjFOxkV46ZkNOsQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e34be813429b-EWR
2024-10-04 11:38:49 UTC	209	IN	Data Raw: 32 31 33 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 64 63 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 67 75 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 73 75 20 3d 20 22 31 30 34 30 31 37 32 38 30 34 31 39 32 39 34 39 38 30 33 30 38 36 42 43 36 43 41 32 32 37 30 45 22 3b 0a 20 20 20 20 76 61 72 20 67 6d 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 63 6e 20 3d 20 22 5f 5f 64 74 73 75 22 3b 0a 20 20 20 20 76 61 72 20 6c 67 20 3d 20 7b 63 76 3a 22 55 53 22 2c 63 73 3a 22 43 22 2c 72 76 3a 22 4e 59 22 2c 72 73 3a 22 43 22 7d 3b 0a 0a 20 20 20 20 53 74 72 69 6e 67 2e 70 72 Data Ascii: 2133(function() { var dc = {}; var gu = false; var su = "1040172804192949803086BC6CA2270E"; var gm = false; var cn = "__dtsu"; var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"}; String.pr
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 61 73 68 3d 30 3b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3d 3d 30 29 72 65 74 75 72 6e 20 68 61 73 68 3b 66 6f 72 28 69 3d 30 3b 69 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 63 68 61 72 3d 74 68 69 73 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 68 61 73 68 3d 28 28 68 61 73 68 3c 3c 35 29 2d 68 61 73 68 29 2b 63 68 61 72 3b 68 61 73 68 3d 68 61 73 68 26 68 61 73 68 7d 20 72 65 74 75 72 6e 20 68 61 73 68 3b 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 64 74 73 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 20 61 2e 68 72 65 66 20 Data Ascii: ototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;}; function _dtsi() { a = document.createElement("a"), a.href
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 66 72 61 6d 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 74 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 69 64 67 2f 3f 73 75 3d 22 2b 73 75 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 77 69 64 74 68 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 68 65 69 67 68 74 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 Data Ascii: } } }); try { var i = document.createElement('iframe'); i.src = "https://t.dtscout.com/idg/?su="+su; i.width = 0; i.height = 0; i.style.display = 'none';
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 74 61 72 67 65 74 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 7d 29 28 29 3b 76 61 72 20 64 74 73 5f 70 69 5f 73 74 72 3d 22 22 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 64 74 73 5f 70 69 5f 73 74 72 2b 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 5b 69 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 7d 64 74 73 5f 70 69 5f 73 74 72 3d 64 74 73 5f 70 69 5f 73 74 72 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 28 29 3b 76 61 72 20 64 74 73 5f 64 3d 6e 65 77 20 44 61 74 65 28 29 3b 76 61 72 20 64 74 73 5f 74 7a 5f 6f 66 66 73 65 74 3d 64 74 73 5f 64 2e 67 65 74 54 69 6d 65 Data Ascii: target.parentNode.removeChild(e.target);}catch(e){}}}})();var dts_pi_str="";for(var i=0;i<navigator.plugins.length;i++){dts_pi_str+=navigator.plugins[i].description}dts_pi_str=dts_pi_str.dts_hash_code();var dts_d=new Date();var dts_tz_offset=dts_d.getTime
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 20 2d 20 32 3b 20 69 20 3e 3d 20 30 3b 20 69 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 68 20 3d 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 73 6c 69 63 65 28 69 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 63 69 28 6e 2c 76 2c 64 2c 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 6e 2b 27 3d 27 2b 76 29 20 21 3d 3d 20 2d 31 29 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 Data Ascii: ostname.split('.'); for (var i = splitHostname.length - 2; i >= 0; i--) { var ch = splitHostname.slice(i).join('.'); __sci(n,v,d,ch); if (document.cookie.indexOf(n+'='+v) !== -1) break; } } func
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 3b 73 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 64 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 70 64 2f 64 74 73 63 6f 75 74 22 3b 73 2e 69 64 3d 22 73 74 70 64 2d 64 74 73 63 6f 75 74 22 3b 73 2e 61 73 79 6e 63 3d 74 72 75 65 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 73 2c 77 3d 77 69 6e 64 6f 77 2e 74 6f 70 3b 77 2e 54 79 6e 74 3d 77 2e 54 79 6e 74 7c 7c 5b 5d 3b 77 2e 54 79 6e 74 2e 70 75 73 68 28 22 77 75 21 22 29 3b 73 3d 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 Data Ascii: ;s.src="https://pd.sharethis.com/pd/dtscout";s.id="stpd-dtscout";s.async=true;document.getElementsByTagName("body")[0].appendChild(s);}catch(e){}})();(function(){try{var s,w=window.top;w.Tynt=w.Tynt\|\|[];w.Tynt.push("wu!");s=w.document.createElement("scrip
2024-10-04 11:38:49 UTC	1369	IN	Data Raw: 30 2c 6e 2e 73 72 63 3d 69 2b 22 3f 22 2b 65 2c 6e 2e 69 64 3d 22 64 74 73 70 76 5f 22 2b 74 2e 63 62 69 64 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 75 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 64 74 73 70 76 2e 75 28 29 7d 29 2c 74 2e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 68 28 74 29 2c 21 31 21 3d 3d 65 29 74 72 79 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 74 73 70 76 5f 22 2b 65 29 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 28 74 29 7b Data Ascii: 0,n.src=i+"?"+e,n.id="dtspv_"+t.cbid,o.appendChild(n)}catch(t){}}(u),window.addEventListener("beforeunload",function(){window._dtspv.u()}),t.c=function(t,e){if(h(t),!1!==e)try{var n=document.getElementById("dtspv_"+e);n.parentNode.removeChild(n)}catch(t){
2024-10-04 11:38:49 UTC	84	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b 0a 20 20 20 20 7d 29 28 29 3b 0d 0a Data Ascii: document.getElementsByTagName("script")[0].appendChild(t)}catch(e){}}(); })();
2024-10-04 11:38:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 11:38:49 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=191259 Date: Fri, 04 Oct 2024 11:38:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 11:38:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49755	141.101.120.11	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:50 UTC	797	OUT	GET /idg/?su=1040172804192949803086BC6CA2270E HTTP/1.1 Host: t.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1728041929; l=1040172804192949803086BC6CA2270E
2024-10-04 11:38:50 UTC	609	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 04 Oct 2024 11:38:49 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2FThI1%2Bfv9RMxmahuJxgb06RaVGm3MAETrIkWEIfi9A36c%2F3YlpplQzOqFhQkaoe1HYsS2IXPdqEvrCGnGnjxRha7NGrHgCB7NKBeQL%2FVtoIgxdHryux%2BxsnzN2c3ss%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e350fd9743b6-EWR
2024-10-04 11:38:50 UTC	760	IN	Data Raw: 35 34 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 0a 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 75 69 64 5f 67 20 20 3d 20 27 31 30 34 30 31 37 32 38 30 34 31 39 32 39 34 39 38 30 33 30 38 36 42 43 36 43 41 32 32 37 30 45 27 3b 20 0a 20 20 20 20 76 61 72 20 75 69 64 5f 73 20 20 3d 20 27 31 30 34 30 31 37 32 38 30 34 31 39 33 30 34 34 35 43 39 36 33 41 45 34 37 39 44 34 46 32 42 42 27 3b 20 0a 20 20 20 20 76 61 72 20 75 69 64 5f 73 75 20 3d 20 27 31 30 34 30 31 37 32 38 30 34 31 39 32 39 34 39 38 30 33 30 38 36 42 43 36 43 41 32 32 37 30 45 27 3b 0a 0a 20 20 20 20 76 61 72 20 64 65 62 75 67 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 Data Ascii: 546<html><head></head><body><script>window.onload = function() { var uid_g = '1040172804192949803086BC6CA2270E'; var uid_s = '10401728041930445C963AE479D4F2BB'; var uid_su = '1040172804192949803086BC6CA2270E'; var debug = {}; v
2024-10-04 11:38:50 UTC	597	IN	Data Raw: 20 20 76 61 72 20 75 69 64 20 3d 20 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 69 66 28 6d 65 74 68 6f 64 20 3d 3d 20 27 67 6f 74 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 70 61 73 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 62 75 67 2e 75 69 64 5f 73 72 63 20 3d 20 27 67 6f 74 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 28 6c 73 5f 75 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6c 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 62 75 67 2e 75 69 64 5f 73 72 63 20 3d 20 27 6c 73 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 70 61 73 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: var uid = false if(method == 'got') { uid = pass_uid; debug.uid_src = 'got'; } else if(ls_uid) { uid = ls_uid; debug.uid_src = 'ls'; } else { uid = pass_uid;
2024-10-04 11:38:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49757	141.101.120.10	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:50 UTC	709	OUT	GET /pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=1ye1&_cb=_dtspv.c HTTP/1.1 Host: t.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1728041929; l=1040172804192949803086BC6CA2270E
2024-10-04 11:38:50 UTC	629	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.143 X-C: 0 Expires: Fri, 04 Oct 2024 11:38:49 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sLVynYBx76J%2FyDxI%2FJ1AoS6J0ndptMPanF6ljrtdJilmEbEzYISGr%2BY6MBEjvQpLmu9jr7xumr5NMN5iZiXA5AovMNNbf%2Fg9N%2BhzrllKVcDRX7PwUcGKRak%2B5GEdJtU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e351194a438a-EWR
2024-10-04 11:38:50 UTC	57	IN	Data Raw: 33 33 0d 0a 74 72 79 7b 5f 64 74 73 70 76 2e 63 28 7b 22 62 22 3a 22 63 68 72 6f 6d 65 40 31 31 37 22 7d 2c 27 31 79 65 31 27 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0d 0a Data Ascii: 33try{_dtspv.c({"b":"chrome@117"},'1ye1');}catch(e){}
2024-10-04 11:38:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49761	141.101.120.11	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:50 UTC	480	OUT	GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&j= HTTP/1.1 Host: e.dtscout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1728041929; l=1040172804192949803086BC6CA2270E
2024-10-04 11:38:50 UTC	1028	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-S: mtl2 Set-Cookie: m=2; Domain=dtscout.com; Expires=Fri, 04-Oct-2024 13:02:10 GMT; Max-Age=5000; Path=/; SameSite=None; Secure Set-Cookie: st=2; Domain=dtscout.com; Expires=Fri, 04-Oct-2024 12:38:50 GMT; Max-Age=3600; Path=/; SameSite=None; Secure Set-Cookie: l=1040172804192949803086BC6CA2270E; Domain=dtscout.com; Expires=Tue, 31-Dec-2024 11:38:50 GMT; Max-Age=7603200; Path=/; SameSite=None; Secure X-T: 0.379 Expires: Fri, 04 Oct 2024 11:38:49 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YOTXKGQNyBPxdli4WK%2FuQth%2FpSFHcbaTkwoxTK4sTA5AtorWjbHkdB0CAQwd5zMiwRvr9MAw4uAeAVkHc4yWN%2FOZns41g%2FO3B02nnitAwwlh%2FYENqrme3fToX4yQc6g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e35159b20f77-EWR
2024-10-04 11:38:50 UTC	341	IN	Data Raw: 31 66 65 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 64 63 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 67 75 20 3d 20 22 31 30 34 30 31 37 32 38 30 34 31 39 32 39 34 39 38 30 33 30 38 36 42 43 36 43 41 32 32 37 30 45 22 3b 0a 20 20 20 20 76 61 72 20 73 75 20 3d 20 22 31 30 34 30 31 37 32 38 30 34 31 39 33 30 34 43 30 36 37 37 36 34 34 32 46 46 43 41 44 37 42 46 22 3b 0a 20 20 20 20 76 61 72 20 67 6d 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 63 6e 20 3d 20 22 5f 5f 64 74 73 75 22 3b 0a 20 20 20 20 76 61 72 20 6c 67 20 3d 20 7b 63 76 3a 22 55 53 22 2c 63 73 3a 22 43 22 2c 72 76 3a 22 4e 59 22 2c 72 73 3a 22 43 22 7d 3b 0a 0a 20 20 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 74 73 5f 68 61 73 68 5f Data Ascii: 1fe5(function() { var dc = {}; var gu = "1040172804192949803086BC6CA2270E"; var su = "104017280419304C06776442FFCAD7BF"; var gm = false; var cn = "__dtsu"; var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"}; String.prototype.dts_hash_
2024-10-04 11:38:50 UTC	1369	IN	Data Raw: 61 72 3d 74 68 69 73 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 68 61 73 68 3d 28 28 68 61 73 68 3c 3c 35 29 2d 68 61 73 68 29 2b 63 68 61 72 3b 68 61 73 68 3d 68 61 73 68 26 68 61 73 68 7d 20 72 65 74 75 72 6e 20 68 61 73 68 3b 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 64 74 73 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 20 61 2e 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 20 5f 64 74 73 2e 68 6f 73 74 20 3d 20 61 2e 68 6f 73 74 6e 61 6d 65 2c 20 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 Data Ascii: ar=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;}; function _dtsi() { a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.ref
2024-10-04 11:38:50 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 74 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 69 64 67 2f 3f 73 75 3d 22 2b 73 75 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 77 69 64 74 68 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 68 65 69 67 68 74 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 28 65 29 20 7b 20 7d 0a 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: i.src = "https://t.dtscout.com/idg/?su="+su; i.width = 0; i.height = 0; i.style.display = 'none'; document.body.appendChild(i); } catch(e) { } setTimeout(function() {
2024-10-04 11:38:50 UTC	1369	IN	Data Raw: 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 64 74 73 5f 70 69 5f 73 74 72 2b 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 5b 69 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 7d 64 74 73 5f 70 69 5f 73 74 72 3d 64 74 73 5f 70 69 5f 73 74 72 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 28 29 3b 76 61 72 20 64 74 73 5f 64 3d 6e 65 77 20 44 61 74 65 28 29 3b 76 61 72 20 64 74 73 5f 74 7a 5f 6f 66 66 73 65 74 3d 64 74 73 5f 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3b 76 61 72 20 64 74 73 5f 72 65 73 3d 73 63 72 65 65 6e 2e 77 69 64 74 68 2b 22 78 22 2b 73 63 72 65 65 6e 2e 68 65 69 67 68 74 2b 22 78 22 2b 73 63 72 65 65 6e 2e 63 6f 6c 6f 72 44 65 70 74 68 3b 76 61 72 20 64 74 73 5f 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 Data Ascii: gins.length;i++){dts_pi_str+=navigator.plugins[i].description}dts_pi_str=dts_pi_str.dts_hash_code();var dts_d=new Date();var dts_tz_offset=dts_d.getTimezoneOffset();var dts_res=screen.width+"x"+screen.height+"x"+screen.colorDepth;var dts_s=document.create
2024-10-04 11:38:50 UTC	1369	IN	Data Raw: 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 73 6c 69 63 65 28 69 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 63 69 28 6e 2c 76 2c 64 2c 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 6e 2b 27 3d 27 2b 76 29 20 21 3d 3d 20 2d 31 29 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 73 63 69 28 6e 2c 76 2c 64 2c 63 68 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 64 61 74 65 2e 73 65 74 54 69 6d 65 28 64 61 74 65 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 28 64 20 2a 20 38 36 34 30 30 30 Data Ascii: splitHostname.slice(i).join('.'); __sci(n,v,d,ch); if (document.cookie.indexOf(n+'='+v) !== -1) break; } } function __sci(n,v,d,ch) { var date = new Date(); date.setTime(date.getTime() + (d * 864000
2024-10-04 11:38:50 UTC	1369	IN	Data Raw: 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 73 2c 77 3d 77 69 6e 64 6f 77 2e 74 6f 70 3b 77 2e 54 79 6e 74 3d 77 2e 54 79 6e 74 7c 7c 5b 5d 3b 77 2e 54 79 6e 74 2e 70 75 73 68 28 22 77 75 21 22 29 3b 73 3d 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 73 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 79 6e 74 2e 63 6f 6d 2f 61 66 77 75 2e 6a 73 22 3b 28 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 7d 63 Data Ascii: Name("body")[0].appendChild(s);}catch(e){}})();(function(){try{var s,w=window.top;w.Tynt=w.Tynt\|\|[];w.Tynt.push("wu!");s=w.document.createElement("script");s.src="https://cdn.tynt.com/afwu.js";(w.document.getElementsByTagName("head")[0]).appendChild(s);}c
2024-10-04 11:38:50 UTC	987	IN	Data Raw: 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 64 74 73 70 76 2e 75 28 29 7d 29 2c 74 2e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 68 28 74 29 2c 21 31 21 3d 3d 65 29 74 72 79 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 74 73 70 76 5f 22 2b 65 29 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 74 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6d 28 29 2c 65 3d 7b 61 3a 22 75 22 2c 68 3a 61 2c 73 73 3a 74 2e 73 73 2c 70 76 3a 74 2e 70 76 7d 2c 6e 3d 6c 28 29 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 2e 6c 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 6e 2d 74 2e 73 74 29 2c 65 2e Data Ascii: oad",function(){window._dtspv.u()}),t.c=function(t,e){if(h(t),!1!==e)try{var n=document.getElementById("dtspv_"+e);n.parentNode.removeChild(n)}catch(t){}},t.u=function(){var t=m(),e={a:"u",h:a,ss:t.ss,pv:t.pv},n=l();for(var o in e.ls=Math.round(n-t.st),e.
2024-10-04 11:38:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49760	35.157.251.153	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:50 UTC	537	OUT	GET /pd/dtscout HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:51 UTC	485	IN	HTTP/1.1 200 OK Content-Type: application/javascript Date: Fri, 04 Oct 2024 11:38:50 GMT Set-Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; Path=/; Domain=sharethis.com; Expires=Sat, 04 Oct 2025 11:38:50 GMT; Secure; SameSite=None Set-Cookie: __stidv=2; Path=/; Domain=sharethis.com; Expires=Sat, 04 Oct 2025 11:38:50 GMT; Secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 2444 Connection: Close
2024-10-04 11:38:51 UTC	2444	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 74 72 79 20 7b 0a 0a 20 20 20 20 2f 2f 20 73 65 74 20 75 70 20 6f 75 72 20 70 69 78 65 6c 0a 20 20 20 20 76 61 72 20 66 63 6d 70 20 3d 20 74 79 70 65 6f 66 20 5f 5f 63 6d 70 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 66 63 6d 70 76 32 20 3d 20 74 79 70 65 6f 66 20 5f 5f 74 63 66 61 70 69 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 72 6e 64 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 0a 20 20 20 20 76 61 72 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 20 20 20 20 76 61 72 20 65 78 70 74 69 64 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 27 5a 48 30 41 43 Data Ascii: (function () { try { // set up our pixel var fcmp = typeof __cmp == 'function'; var fcmpv2 = typeof __tcfapi == 'function'; var rnd = Math.random(); var img = document.createElement('img'); var exptid = encodeURIComponent('ZH0AC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49762	188.114.97.3	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:50 UTC	563	OUT	GET /ping/?t=300&d=youruno-chicka.blogspot.com HTTP/1.1 Host: dtsedge.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:51 UTC	583	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.54 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DMQoWqR6Yb6I2%2FwLlvm%2Blc9K7R9N0Jz0DKr70%2BKvKOztMnMyXPlc3nUmfd7QN64JsbZ5dtlk5Jl%2F1pR8z3iV3mAZl8BGdqQ8zDmFN5SmH1xvu32fEDeX1CHPKCVhUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e3546e604282-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 11:38:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49763	141.101.120.11	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	522	OUT	GET /pv/?_a=v&_h=youruno-chicka.blogspot.com&_ss=15llmtwtaw&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=1ye1&_cb=_dtspv.c HTTP/1.1 Host: t.dtscout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: df=1728041929; l=1040172804192949803086BC6CA2270E; m=2; st=2
2024-10-04 11:38:51 UTC	625	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.255 X-C: 0 Expires: Fri, 04 Oct 2024 11:38:50 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53NbG7ZQwLoHoE8O6vQxI2ag9HTmE0M4sNoQk8iFkpmAuo6KZYRUOxsMAgcEmB%2BzG1s26BCbM5Tt0dOdb%2B%2FppRkSWBn%2FJDJdsi2ejatMvXqqk9SO4wkl2nV4LpRPem8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e3569e014414-EWR
2024-10-04 11:38:51 UTC	57	IN	Data Raw: 33 33 0d 0a 74 72 79 7b 5f 64 74 73 70 76 2e 63 28 7b 22 62 22 3a 22 63 68 72 6f 6d 65 40 31 31 37 22 7d 2c 27 31 79 65 31 27 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0d 0a Data Ascii: 33try{_dtspv.c({"b":"chrome@117"},'1ye1');}catch(e){}
2024-10-04 11:38:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49768	104.26.12.60	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	657	OUT	GET /widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&r= HTTP/1.1 Host: t.dtscdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:51 UTC	825	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:51 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: uid=1040172804192949803086BC6CA2270E; Domain=dtscdn.com; Expires=Tue, 01-Apr-2025 11:42:04 GMT; Max-Age=15465600; Path=/; SameSite=None; Secure X-T: 1.17 Expires: Fri, 04 Oct 2024 11:42:03 GMT Cache-Control: no-cache x-server: web4.ny1.dtscdn.com CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wxMbAxZpfga%2FpVYgIQ9UvZHlot0YinY32k466pTHHelOJBd%2BRKazZ8yVCsnknXj5Ug03oxxs5Gx%2FWQ2CQ2ZuI56irmtc%2FEyX9%2BAU9%2FkLb9yu6IIh9F84mrbbNx6wIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e356afd17271-EWR
2024-10-04 11:38:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49765	67.202.105.32	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	922	OUT	GET /b/p?id=wu!&lm=0&ts=1728041929570&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&t=youruno-chicka&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1 Host: ic.tynt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:51 UTC	750	IN	HTTP/1.1 200 OK server: nginx/1.16.1 date: Fri, 04 Oct 2024 11:38:51 GMT content-type: image/gif content-length: 35 last-modified: Fri, 16 Apr 2010 15:38:20 GMT etag: "4bc8846c-23" cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false" accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile expires: "Sat, 26 Jul 1997 05:00:00 GMT" set-cookie: uid=CoIKSmb/08t9YDaWCiSZAg==; expires=Sat, 04-Oct-25 11:38:51 GMT; domain=tynt.com; path=/; Secure; SameSite=None p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" accept-ranges: bytes p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-10-04 11:38:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49769	54.38.113.7	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	649	OUT	GET /?partner=137085098&mapped=1040172804192949803086BC6CA2270E HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:51 UTC	487	IN	HTTP/1.1 302 Found set-cookie: cookie=c00e032a4a7d676e; Max-Age=31536000; Expires=Sat, 04 Oct 2025 11:38:51 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects109=1; Max-Age=86400; Expires=Sat, 05 Oct 2024 11:38:51 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://pixel.onaudience.com/?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49767	65.9.66.68	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	548	OUT	GET /lt/c/3825/lt.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:51 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 63965 Connection: close Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 04 Oct 2024 04:53:27 GMT Cache-Control: public, max-age=86400 ETag: "2afd7a7856345176e1c9c378191ae043" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 547a50460a0cda7ae3dafb1c0b6d0e1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: KodU7lLVZrGXRHo67NqFEREwmSM8IQbM49enXuvQVrJEtOtOuSelog== Age: 24325
2024-10-04 11:38:51 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-10-04 11:38:51 UTC	16384	IN	Data Raw: 6c 74 33 38 32 35 5f 70 3d 5b 22 45 4d 41 49 4c 22 2c 22 45 45 22 2c 22 45 4d 41 49 4c 5f 53 48 41 32 35 36 22 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 71 28 61 29 7b 61 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 3b 74 68 69 73 2e 49 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 73 61 3d 21 31 3b 69 66 28 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 29 7b 76 61 72 20 62 3d 21 31 3b 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 69 64 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 74 79 70 65 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 69 64 20 6f 62 6a 65 63 74 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 62 6f 74 68 20 27 69 64 27 20 61 6e 64 20 27 74 Data Ascii: lt3825_p=["EMAIL","EE","EMAIL_SHA256"]; function lt3825_q(a){a=void 0===a?{}:a;this.Ia=null;this.sa=!1;if(a&&lt3825_r(a)){var b=!1;a&&lt3825_r(a)?"undefined"===typeof a.id\|\|"undefined"===typeof a.type?lt3825_.error("id object must contain both 'id' and 't
2024-10-04 11:38:51 UTC	16384	IN	Data Raw: 7b 76 61 72 20 62 3d 6e 65 77 20 6c 74 33 38 32 35 5f 57 61 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 73 68 6f 75 6c 64 50 65 72 66 6f 72 6d 41 75 64 69 65 6e 63 65 45 78 74 72 61 63 74 69 6f 6e 20 28 22 2b 61 2b 22 29 20 73 68 6f 75 6c 64 20 62 65 20 61 20 62 6f 6f 6c 65 61 6e 22 29 3a 62 2e 6b 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 59 61 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 63 3d 62 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 2d 31 21 3d 3d 63 26 26 28 62 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 29 29 3b 61 2e 6a 62 3d 62 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: {var b=new lt3825_Wa;"boolean"!==typeof a?lt3825_.error("shouldPerformAudienceExtraction ("+a+") should be a boolean"):b.kb=a;return b}function lt3825_Ya(a){var b=window.location.href,c=b.indexOf("?");-1!==c&&(b=b.substring(0,c));a.jb=b;return a}function
2024-10-04 11:38:51 UTC	8412	IN	Data Raw: 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 2f 3f 5b 5e 3e 5d 2b 5c 2f 3f 3e 2f 67 69 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 7c 5c 74 7c 5c 72 2f 67 69 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 7b 32 2c 7d 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 71 75 6f 74 65 5c 5d 5b 5c 73 5c 53 5d 2a 5c 5b 5c 2f 71 75 6f 74 65 5c 5d 2f 67 69 2c 22 22 29 3b 74 72 79 7b 61 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 49 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 4b 62 3f 6c 74 33 38 32 35 5f 4d 62 28 61 2c 62 29 3a 6c 74 33 38 32 35 5f 4e 62 28 61 2c 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 Data Ascii: a=a.replace(/<\/?[^>]+\/?>/gi,"").replace(/\n\|\t\|\r/gi," ").replace(/\s{2,}/g," ").replace(/\[quote\][\s\S]*\[\/quote\]/gi,"");try{a=decodeURIComponent(a)}catch(b){}return a}function lt3825_Ib(a,b){return b.Kb?lt3825_Mb(a,b):lt3825_Nb(a,b)} function lt382
2024-10-04 11:38:51 UTC	6401	IN	Data Raw: 72 61 67 65 2c 67 2c 64 2c 66 29 3a 6c 74 33 38 32 35 5f 41 61 28 61 2e 73 74 6f 72 61 67 65 2c 67 29 7d 6c 74 33 38 32 35 5f 68 63 28 61 2c 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 68 63 28 61 2c 62 29 7b 61 2e 66 2e 61 2e 65 6e 61 62 6c 65 44 65 63 6c 61 72 65 64 49 64 73 26 26 61 2e 66 2e 61 2e 65 6e 61 62 6c 65 44 65 63 6c 61 72 65 64 49 64 73 4f 6e 45 76 65 6e 74 73 26 26 28 62 3d 6c 74 33 38 32 35 5f 54 61 28 62 29 29 26 26 28 62 2e 69 3f 28 61 3d 61 2e 73 74 6f 72 61 67 65 2c 6c 74 33 38 32 35 5f 4d 28 61 2c 61 2e 66 2e 61 2e 64 65 63 6c 61 72 65 64 49 64 4e 61 6d 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 69 64 3a 62 2e 69 2c 74 79 70 65 3a 62 2e 74 7d 29 29 29 3a 28 61 3d 61 2e 73 74 6f 72 61 67 65 2c 6c 74 33 38 32 Data Ascii: rage,g,d,f):lt3825_Aa(a.storage,g)}lt3825_hc(a,b)} function lt3825_hc(a,b){a.f.a.enableDeclaredIds&&a.f.a.enableDeclaredIdsOnEvents&&(b=lt3825_Ta(b))&&(b.i?(a=a.storage,lt3825_M(a,a.f.a.declaredIdName,JSON.stringify({id:b.i,type:b.t}))):(a=a.storage,lt382

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49771	67.202.105.31	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	828	OUT	GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F HTTP/1.1 Host: de.tynt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:51 UTC	834	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=uNE6HWb/08vfxCwlfhG9kw==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure set-cookie: pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1728041931494%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure content-type: application/javascript content-length: 705 date: Fri, 04 Oct 2024 11:38:50 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-10-04 11:38:51 UTC	705	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 69 2e 73 69 6d 70 6c 69 2e 66 69 2f 64 70 78 3f 63 69 64 3d 31 31 34 31 31 26 75 73 5f 70 72 69 76 61 63 79 3d 26 33 33 72 61 6e 64 6f 6d 3d 31 37 32 38 30 34 31 39 33 31 34 39 34 2e 31 26 72 65 66 3d 22 2c 22 31 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 74 63 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 6c 6f 74 61 6d 65 2d 73 79 6e 63 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 69 2e 73 69 6d 70 6c 69 2e 66 69 2f 64 70 78 3f 63 69 64 3d 31 31 34 31 31 26 75 73 5f 70 72 69 76 61 63 79 3d 26 33 33 72 61 6e 64 6f 6d 3d 31 37 32 38 30 34 31 39 33 31 34 39 34 2e 33 26 72 65 66 3d Data Ascii: (function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1728041931494.1&ref=","1https://cdn-tc.33across.com/lotame-sync.html","https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1728041931494.3&ref=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49777	104.26.13.60	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	516	OUT	GET /widget/?d=1040172804192949803086BC6CA2270E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&r= HTTP/1.1 Host: t.dtscdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=1040172804192949803086BC6CA2270E
2024-10-04 11:38:51 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:51 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: uid=1040172804192949803086BC6CA2270E; Domain=dtscdn.com; Expires=Tue, 01-Apr-2025 10:45:00 GMT; Max-Age=15465600; Path=/; SameSite=None; Secure X-T: 1.13 Expires: Fri, 04 Oct 2024 10:44:59 GMT Cache-Control: no-cache x-server: web13.ny1.dtscdn.com CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WMSO0WwqMuZRRJktx1myU9nGcGyEKe1V2cwzfIN8WdkKGM%2BcfIjfSlQUbY4lnpk%2FcAmKLnLJ26nPlvJVkIR6eJd1GjiEaXDYvPJeKPYCERKh5dmW64IzTEUZxrO0BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e35a89561962-EWR
2024-10-04 11:38:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49773	35.157.251.153	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	798	OUT	GET /pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&event_source=dtscout&rnd=0.9027742755099117&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
2024-10-04 11:38:52 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 04 Oct 2024 11:38:52 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-10-04 11:38:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49778	67.202.105.32	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:51 UTC	713	OUT	GET /b/p?id=wu!&lm=0&ts=1728041929570&dn=AFWU&iso=0&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&t=youruno-chicka&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1 Host: ic.tynt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=CoIKSmb/08t9YDaWCiSZAg==
2024-10-04 11:38:52 UTC	562	IN	HTTP/1.1 200 OK server: nginx/1.16.1 date: Fri, 04 Oct 2024 11:38:51 GMT content-type: image/gif content-length: 35 last-modified: Fri, 16 Apr 2010 15:38:20 GMT etag: "4bc8846c-23" cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false" accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile expires: "Sat, 26 Jul 1997 05:00:00 GMT" accept-ranges: bytes p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-10-04 11:38:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49780	67.202.105.31	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	841	OUT	GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F HTTP/1.1 Host: de.tynt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=uNE6HWb/08vfxCwlfhG9kw==; pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1728041931494%7D%5D
2024-10-04 11:38:52 UTC	1245	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728041931494%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728041932190%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1728041931494%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure content-type: application/javascript content-length: 1535 date: Fri, 04 Oct 2024 11:38:51 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-10-04 11:38:52 UTC	1535	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 70 69 78 65 6c 3f 70 69 64 3d 67 64 6f 6d 67 35 31 26 74 3d 67 69 66 26 63 61 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 72 61 6e 64 6f 6d 3d 31 37 32 38 30 34 31 39 33 32 31 39 30 2e 31 22 2c 22 68 74 74 70 73 3a 2f 2f 70 78 2e 61 64 73 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 64 62 5f 73 79 6e 63 3f 70 69 64 3d 31 35 39 32 37 26 70 75 75 69 64 3d 75 4e 45 36 48 57 62 25 32 46 30 38 76 66 78 43 77 6c 66 68 47 39 6b 77 25 33 44 25 33 44 26 75 73 5f 70 72 69 76 61 63 79 3d 26 5f 72 61 6e 64 3d 31 37 32 38 30 34 31 39 33 32 31 39 Data Ascii: (function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728041932190.1","https://px.ads.linkedin.com/db_sync?pid=15927&puuid=uNE6HWb%2F08vfxCwlfhG9kw%3D%3D&us_privacy=&_rand=172804193219

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49779	54.38.113.7	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	740	OUT	GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=c00e032a4a7d676e; done_redirects109=1
2024-10-04 11:38:52 UTC	277	IN	HTTP/1.1 302 Found set-cookie: cookie=c00e032a4a7d676e; Max-Age=31536000; Expires=Sat, 04 Oct 2025 11:38:52 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://tags.bluekai.com/site/33141?&id=018f34e931f03d12 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49776	3.120.162.160	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	402	OUT	GET /pd/dtscout HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
2024-10-04 11:38:52 UTC	233	IN	HTTP/1.1 200 OK Content-Type: application/javascript Date: Fri, 04 Oct 2024 11:38:52 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 2444 Connection: Close
2024-10-04 11:38:52 UTC	2444	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 74 72 79 20 7b 0a 0a 20 20 20 20 2f 2f 20 73 65 74 20 75 70 20 6f 75 72 20 70 69 78 65 6c 0a 20 20 20 20 76 61 72 20 66 63 6d 70 20 3d 20 74 79 70 65 6f 66 20 5f 5f 63 6d 70 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 66 63 6d 70 76 32 20 3d 20 74 79 70 65 6f 66 20 5f 5f 74 63 66 61 70 69 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 72 6e 64 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 0a 20 20 20 20 76 61 72 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 20 20 20 20 76 61 72 20 65 78 70 74 69 64 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 27 5a 48 30 41 43 Data Ascii: (function () { try { // set up our pixel var fcmp = typeof __cmp == 'function'; var fcmpv2 = typeof __tcfapi == 'function'; var rnd = Math.random(); var img = document.createElement('img'); var exptid = encodeURIComponent('ZH0AC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49784	188.114.96.3	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	376	OUT	GET /ping/?t=300&d=youruno-chicka.blogspot.com HTTP/1.1 Host: dtsedge.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:52 UTC	551	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.47 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qbNIFppGRRiwhnVF5VTjNmVFYwJ3YlrQNY9rLWXet1Q4GMfqogQ%2B%2FK3nQtLgNOlwqB4yswUuCLZ%2FUdgaChXttSWCGOG4V1i7zSU28E8ErS0HfBdRJsGcMov1wnONig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e35d1cc5423e-EWR
2024-10-04 11:38:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49781	35.234.162.151	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	637	OUT	GET /dpx?cid=11411&us_privacy=&33random=1728041931494.1&ref= HTTP/1.1 Host: i.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:52 UTC	157	IN	HTTP/1.1 410 Gone Server: openresty Date: Fri, 04 Oct 2024 11:38:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 542 Connection: close
2024-10-04 11:38:52 UTC	542	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 31 30 20 47 6f 6e 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 31 30 20 47 6f 6e 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 Data Ascii: <html><head><title>410 Gone</title></head><body><center><h1>410 Gone</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49782	35.234.162.151	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	637	OUT	GET /dpx?cid=11411&us_privacy=&33random=1728041931494.3&ref= HTTP/1.1 Host: i.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:52 UTC	157	IN	HTTP/1.1 410 Gone Server: openresty Date: Fri, 04 Oct 2024 11:38:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 542 Connection: close
2024-10-04 11:38:52 UTC	542	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 31 30 20 47 6f 6e 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 31 30 20 47 6f 6e 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 Data Ascii: <html><head><title>410 Gone</title></head><body><center><h1>410 Gone</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49785	65.9.66.122	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	361	OUT	GET /lt/c/3825/lt.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:52 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 63965 Connection: close Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 04 Oct 2024 04:53:27 GMT Cache-Control: public, max-age=86400 ETag: "2afd7a7856345176e1c9c378191ae043" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9570c3a1725c20e6faed117bbb74223a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: Ro5o7jmwhFKvqUpB7VCAQHZ3FyMpd9I6voZ-F4hjVH5zW5sDtj_7pA== Age: 24326
2024-10-04 11:38:52 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-10-04 11:38:52 UTC	16384	IN	Data Raw: 6c 74 33 38 32 35 5f 70 3d 5b 22 45 4d 41 49 4c 22 2c 22 45 45 22 2c 22 45 4d 41 49 4c 5f 53 48 41 32 35 36 22 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 71 28 61 29 7b 61 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 3b 74 68 69 73 2e 49 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 73 61 3d 21 31 3b 69 66 28 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 29 7b 76 61 72 20 62 3d 21 31 3b 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 69 64 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 74 79 70 65 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 69 64 20 6f 62 6a 65 63 74 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 62 6f 74 68 20 27 69 64 27 20 61 6e 64 20 27 74 Data Ascii: lt3825_p=["EMAIL","EE","EMAIL_SHA256"]; function lt3825_q(a){a=void 0===a?{}:a;this.Ia=null;this.sa=!1;if(a&&lt3825_r(a)){var b=!1;a&&lt3825_r(a)?"undefined"===typeof a.id\|\|"undefined"===typeof a.type?lt3825_.error("id object must contain both 'id' and 't
2024-10-04 11:38:52 UTC	16384	IN	Data Raw: 7b 76 61 72 20 62 3d 6e 65 77 20 6c 74 33 38 32 35 5f 57 61 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 73 68 6f 75 6c 64 50 65 72 66 6f 72 6d 41 75 64 69 65 6e 63 65 45 78 74 72 61 63 74 69 6f 6e 20 28 22 2b 61 2b 22 29 20 73 68 6f 75 6c 64 20 62 65 20 61 20 62 6f 6f 6c 65 61 6e 22 29 3a 62 2e 6b 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 59 61 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 63 3d 62 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 2d 31 21 3d 3d 63 26 26 28 62 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 29 29 3b 61 2e 6a 62 3d 62 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: {var b=new lt3825_Wa;"boolean"!==typeof a?lt3825_.error("shouldPerformAudienceExtraction ("+a+") should be a boolean"):b.kb=a;return b}function lt3825_Ya(a){var b=window.location.href,c=b.indexOf("?");-1!==c&&(b=b.substring(0,c));a.jb=b;return a}function
2024-10-04 11:38:53 UTC	14813	IN	Data Raw: 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 2f 3f 5b 5e 3e 5d 2b 5c 2f 3f 3e 2f 67 69 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 7c 5c 74 7c 5c 72 2f 67 69 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 7b 32 2c 7d 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 71 75 6f 74 65 5c 5d 5b 5c 73 5c 53 5d 2a 5c 5b 5c 2f 71 75 6f 74 65 5c 5d 2f 67 69 2c 22 22 29 3b 74 72 79 7b 61 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 49 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 4b 62 3f 6c 74 33 38 32 35 5f 4d 62 28 61 2c 62 29 3a 6c 74 33 38 32 35 5f 4e 62 28 61 2c 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 Data Ascii: a=a.replace(/<\/?[^>]+\/?>/gi,"").replace(/\n\|\t\|\r/gi," ").replace(/\s{2,}/g," ").replace(/\[quote\][\s\S]*\[\/quote\]/gi,"");try{a=decodeURIComponent(a)}catch(b){}return a}function lt3825_Ib(a,b){return b.Kb?lt3825_Mb(a,b):lt3825_Nb(a,b)} function lt382

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49787	3.120.162.160	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	551	OUT	GET /pd/dtscout?_t_=px&url=https%3A%2F%2Fyouruno-chicka.blogspot.com%2F&event_source=dtscout&rnd=0.9027742755099117&exptid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&fcmp=false HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
2024-10-04 11:38:53 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 04 Oct 2024 11:38:53 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-10-04 11:38:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49788	65.9.66.104	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:52 UTC	543	OUT	GET /lt/c/16311/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn-tc.33across.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:54 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 43601 Connection: close Last-Modified: Tue, 20 Aug 2024 18:43:24 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 04 Oct 2024 09:20:38 GMT Cache-Control: public, max-age=86400 ETag: "9b991fc4e41448221be02744748ec589" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 673c96d1f19de21216629aa48d90ac92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: dGgYxup4jtio2WjwSkjkjRRnDLtM1hPBbGFLFgTU_oVLr9V3zWc6tA== Age: 8296
2024-10-04 11:38:54 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-10-04 11:38:54 UTC	6002	IN	Data Raw: 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 Data Ascii: (b=!1,sync16311_.error("tagInput.data.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16311_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16311_.error("tagInput.data.thirdParty.value is not defined"));a.namespace
2024-10-04 11:38:54 UTC	16384	IN	Data Raw: 6b 69 65 4e 61 6d 65 73 3b 74 68 69 73 2e 65 61 3d 32 33 33 32 38 45 33 3b 74 68 69 73 2e 4b 3d 22 5f 65 78 70 22 7d 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 48 28 61 29 7b 72 65 74 75 72 6e 20 73 79 6e 63 31 36 33 31 31 5f 49 28 61 2c 61 2e 62 62 29 7d 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 49 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 56 28 62 29 3b 63 7c 7c 28 63 3d 73 79 6e 63 31 36 33 31 31 5f 4a 28 61 2c 62 29 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 4b 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 4f 28 62 2c 63 2c 76 6f 69 64 20 30 3d 3d 3d 64 3f 61 2e 65 61 3a 4d 61 74 68 2e 63 65 69 6c 28 28 64 2d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 29 2f 31 45 33 29 Data Ascii: kieNames;this.ea=23328E3;this.K="_exp"}function sync16311_H(a){return sync16311_I(a,a.bb)}function sync16311_I(a,b){var c=a.V(b);c\|\|(c=sync16311_J(a,b));return c}function sync16311_K(a,b,c,d){a.O(b,c,void 0===d?a.ea:Math.ceil((d-(new Date).getTime())/1E3)
2024-10-04 11:38:54 UTC	4831	IN	Data Raw: 74 72 6f 70 79 56 61 6c 75 65 73 28 5b 22 6d 6f 64 65 6c 22 2c 22 70 6c 61 74 66 6f 72 6d 56 65 72 73 69 6f 6e 22 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 5d 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 63 2c 31 30 2c 62 29 7d 29 5d 29 3b 61 2e 46 3d 62 7d 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 2e 46 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 59 61 28 61 2c 62 29 7b 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 21 30 3d 3d 3d 61 2e 61 2e 67 6f 6f 67 6c 65 45 73 70 45 6e 61 62 6c 65 64 26 26 21 30 3d 3d 3d 61 2e 61 2e 70 61 6e 6f 72 61 6d 61 49 64 45 6e 61 62 6c 65 64 26 26 21 30 3b 74 68 69 73 2e 73 74 6f 72 Data Ascii: tropyValues(["model","platformVersion","fullVersionList"]),new Promise(function(c){return setTimeout(c,10,b)})]);a.F=b}return Promise.resolve(a.F)};function sync16311_Ya(a,b){this.enabled=!0===a.a.googleEspEnabled&&!0===a.a.panoramaIdEnabled&&!0;this.stor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49795	65.9.66.122	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:55 UTC	364	OUT	GET /lt/c/16311/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:55 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 43601 Connection: close Last-Modified: Tue, 20 Aug 2024 18:43:24 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 04 Oct 2024 09:20:38 GMT Cache-Control: public, max-age=86400 ETag: "9b991fc4e41448221be02744748ec589" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 547a50460a0cda7ae3dafb1c0b6d0e1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: 64CtRpKMYkWp7fy4J71pXrFQc7PhzHTf_gqodoqlirDdFuqWn5FadQ== Age: 8298
2024-10-04 11:38:55 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-10-04 11:38:55 UTC	16384	IN	Data Raw: 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 Data Ascii: (b=!1,sync16311_.error("tagInput.data.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16311_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16311_.error("tagInput.data.thirdParty.value is not defined"));a.namespace
2024-10-04 11:38:55 UTC	10833	IN	Data Raw: 2b 63 29 7d 72 65 74 75 72 6e 21 31 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 4d 61 28 61 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 6c 6f 74 61 6d 65 49 66 72 61 6d 65 54 63 66 41 70 69 26 26 28 73 79 6e 63 31 36 33 31 31 5f 2e 64 65 62 75 67 28 22 49 6e 69 74 69 61 6c 69 7a 69 6e 67 20 54 43 46 20 73 75 70 70 6f 72 74 20 69 6e 20 61 6e 20 69 66 72 61 6d 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 6c 6f 74 61 6d 65 49 66 72 61 6d 65 54 63 66 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 66 29 7b 76 61 72 20 68 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 3b 62 3d 7b 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 62 2c 70 61 72 61 6d 65 74 65 72 3a 66 Data Ascii: +c)}return!1} function sync16311_Ma(a){"undefined"===typeof window.__lotameIframeTcfApi&&(sync16311_.debug("Initializing TCF support in an iframe"),window.__lotameIframeTcfApi=function(b,c,d,f){var h=Math.random()+"";b={__tcfapiCall:{command:b,parameter:f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49797	65.9.66.68	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:55 UTC	638	OUT	GET /lt/c/3825/optimus_rules.json HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://youruno-chicka.blogspot.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:56 UTC	688	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 3605 Connection: close Date: Fri, 04 Oct 2024 11:38:56 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT ETag: "f16e89fd08a708a6bd2e69be50fd30ab" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 afcdbc9d4d397c4a65e6b312552ff7ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: AmapVEuHfFJPj8AkCVxl4mMx4vCzotQvUDrI-fZWrD9Cbn1M7dmjbA==
2024-10-04 11:38:56 UTC	3605	IN	Data Raw: 5b 7b 22 69 64 22 3a 31 36 34 37 32 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 74 77 69 74 74 65 72 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 68 61 76 69 6f 72 54 79 70 65 22 3a 22 61 63 74 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 43 6c 69 63 6b 20 4f 6e 20 54 77 69 74 74 65 72 20 4c 69 6e 6b 22 7d 2c 7b 22 69 64 22 3a 31 36 34 37 33 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 79 6f 75 74 75 62 65 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 Data Ascii: [{"id":16472,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"twitter\"]}}","event":"click","behaviorType":"act","template":"Click On Twitter Link"},{"id":16473,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"youtube\"]}}","event":"click","be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49799	142.250.185.161	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:55 UTC	812	OUT	GET /favicon.ico HTTP/1.1 Host: youruno-chicka.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E
2024-10-04 11:38:56 UTC	436	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Expires: Fri, 04 Oct 2024 11:38:56 GMT Date: Fri, 04 Oct 2024 11:38:56 GMT Cache-Control: private, max-age=86400 Last-Modified: Fri, 30 Aug 2024 07:20:22 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:38:56 UTC	954	IN	Data Raw: 65 33 36 0d 0a 00 00 01 00 02 00 20 20 00 00 01 00 08 00 a8 08 00 00 26 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ce 08 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 02 66 fe 00 82 b2 fe 00 ce e2 fe 00 5a 9e fe 00 be da fe 00 ee f6 fe 0e 22 7a fe 0e 9e c6 fe 00 12 72 fe 00 8e be fe 00 de ee fe 00 72 aa fe 00 fe fe fe 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: e36 &h( @fZ"zrr
2024-10-04 11:38:56 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-04 11:38:56 UTC	1301	IN	Data Raw: 00 00 72 00 00 00 fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: r
2024-10-04 11:38:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49796	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:55 UTC	620	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://cdn-tc.33across.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cdn-tc.33across.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:55 UTC	439	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 33 31 31 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 5d 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16311,"src":"SYNCJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"117"}],"fullVersionList":[{"brand":"Google Chrome","version":"117.0.5938.132"}
2024-10-04 11:38:56 UTC	651	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:56 GMT Content-Type: application/json;charset=utf-8 Content-Length: 156 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.8.168 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cdn-tc.33across.com Server: Jetty(9.4.38.v20210224)
2024-10-04 11:38:56 UTC	156	IN	Data Raw: 7b 22 70 69 64 22 3a 22 63 32 35 61 65 35 62 37 32 64 38 64 33 32 37 34 61 30 30 33 62 36 37 62 66 63 32 64 63 34 65 64 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 63 32 35 61 65 35 62 37 32 64 38 64 33 32 37 34 61 30 30 33 62 36 37 62 66 63 32 64 63 34 65 64 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 32 38 31 32 38 33 33 36 31 33 36 22 7d 5d 7d Data Ascii: {"pid":"c25ae5b72d8d3274a003b67bfc2dc4ed","c":[{"k":"_cc_id","v":"c25ae5b72d8d3274a003b67bfc2dc4ed","e":23328000}],"ids":[{"c":"core","e":"1728128336136"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49803	142.250.185.161	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	613	OUT	GET /favicon.ico HTTP/1.1 Host: youruno-chicka.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4706781=1728041926449; HstCla4706781=1728041926449; HstCmu4706781=1728041926449; HstPn4706781=1; HstPt4706781=1; HstCnv4706781=1; HstCns4706781=1; __dtsu=1040172804192949803086BC6CA2270E; lotame_domain_check=youruno-chicka.blogspot.com
2024-10-04 11:38:57 UTC	514	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Expires: Fri, 04 Oct 2024 11:38:57 GMT Date: Fri, 04 Oct 2024 11:38:57 GMT Cache-Control: private, max-age=86400 Last-Modified: Fri, 30 Aug 2024 07:20:22 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:38:57 UTC	876	IN	Data Raw: 65 33 36 0d 0a 00 00 01 00 02 00 20 20 00 00 01 00 08 00 a8 08 00 00 26 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ce 08 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 02 66 fe 00 82 b2 fe 00 ce e2 fe 00 5a 9e fe 00 be da fe 00 ee f6 fe 0e 22 7a fe 0e 9e c6 fe 00 12 72 fe 00 8e be fe 00 de ee fe 00 72 aa fe 00 fe fe fe 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: e36 &h( @fZ"zrr
2024-10-04 11:38:57 UTC	1390	IN	Data Raw: 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 00 0e 00 00 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-04 11:38:57 UTC	1379	IN	Data Raw: 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 02 66 fe 02 82 b2 fe 82 ee f6 fe ce 5e 9e fe 5a ae ce fe be 32 82 fe ee 12 72 fe 22 8e be fe 9e fe fe fe 12 6e aa fe 8e be da fe de 00 00 00 72 00 00 00 fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: f^Z2r"nr
2024-10-04 11:38:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49802	65.9.66.122	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	429	OUT	GET /lt/c/3825/optimus_rules.json HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed
2024-10-04 11:38:57 UTC	564	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 3605 Connection: close Date: Thu, 03 Oct 2024 21:12:09 GMT Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT ETag: "f16e89fd08a708a6bd2e69be50fd30ab" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7e513424eee237ee26467e8fd5656ec0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: PTf5qRCW58rVwPKbx0B1aZw6awVI0BN-ZXxYIN08uz3luYAe6u0PmQ== Age: 52009
2024-10-04 11:38:57 UTC	3605	IN	Data Raw: 5b 7b 22 69 64 22 3a 31 36 34 37 32 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 74 77 69 74 74 65 72 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 68 61 76 69 6f 72 54 79 70 65 22 3a 22 61 63 74 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 43 6c 69 63 6b 20 4f 6e 20 54 77 69 74 74 65 72 20 4c 69 6e 6b 22 7d 2c 7b 22 69 64 22 3a 31 36 34 37 33 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 79 6f 75 74 75 62 65 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 Data Ascii: [{"id":16472,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"twitter\"]}}","event":"click","behaviorType":"act","template":"Click On Twitter Link"},{"id":16473,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"youtube\"]}}","event":"click","be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49800	54.76.113.237	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	637	OUT	POST /6/data HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 573 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://youruno-chicka.blogspot.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:57 UTC	573	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 70 72 22 3a 66 61 6c 73 65 2c 22 72 70 78 22 3a 74 72 75 65 2c 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 79 6f 75 72 75 6e 6f 2d 63 68 69 63 6b 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 22 2c 22 70 76 22 3a 74 72 75 65 2c 22 64 63 63 22 3a 33 38 32 35 2c 22 63 6f 22 3a 66 61 6c 73 65 2c 22 73 72 63 22 3a 22 4c 54 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 Data Ascii: {"r":{"rpr":false,"rpx":true,"rid":true},"m":{"ref":"https://youruno-chicka.blogspot.com/","pv":true,"dcc":3825,"co":false,"src":"LTJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","ve
2024-10-04 11:38:57 UTC	1197	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:57 GMT Content-Type: application/json;charset=utf-8 Content-Length: 648 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.21.241 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://youruno-chicka.blogspot.com Server: Jetty(9.4.38.v20210224)
2024-10-04 11:38:57 UTC	648	IN	Data Raw: 7b 22 70 69 64 22 3a 22 63 32 35 61 65 35 62 37 32 64 38 64 33 32 37 34 61 30 30 33 62 36 37 62 66 63 32 64 63 34 65 64 22 2c 22 73 70 78 22 3a 5b 33 31 2c 39 32 2c 34 39 2c 31 33 36 2c 31 33 35 2c 31 34 38 2c 37 2c 33 33 2c 37 38 2c 31 32 31 2c 32 36 2c 32 32 2c 36 37 2c 31 31 36 2c 36 31 2c 31 30 36 2c 31 30 34 2c 38 2c 35 34 2c 34 31 2c 33 2c 32 2c 39 34 5d 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 63 32 35 61 65 35 62 37 32 64 38 64 33 32 37 34 61 30 30 33 62 36 37 62 66 63 32 64 63 34 65 64 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 2c 7b 22 6b 22 3a 22 5f 63 63 5f 63 63 22 2c 22 76 22 3a 22 41 43 5a 34 6e 47 4e 51 53 44 59 79 54 55 77 31 54 54 49 33 53 72 46 49 4d 54 59 79 4e 30 6b 30 4d 44 42 4f 4d 6a 4e 50 53 6b Data Ascii: {"pid":"c25ae5b72d8d3274a003b67bfc2dc4ed","spx":[31,92,49,136,135,148,7,33,78,121,26,22,67,116,61,106,104,8,54,41,3,2,94],"c":[{"k":"_cc_id","v":"c25ae5b72d8d3274a003b67bfc2dc4ed","e":23328000},{"k":"_cc_cc","v":"ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49807	35.244.174.68	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	649	OUT	GET /386076.gif?partner_uid=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:57 UTC	252	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:38:57 GMT Content-Length: 21 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:38:57 UTC	21	IN	Data Raw: 69 6e 76 61 6c 69 64 20 63 6f 6e 73 65 6e 74 20 74 79 70 65 0a Data Ascii: invalid consent type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49805	34.117.77.79	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	739	OUT	GET /utsync.ashx?eid=50131&et=13&cid=lr&fp=ZH0ACGb%2F08oAAAAIVAOoAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:57 UTC	666	IN	HTTP/1.1 302 Found content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Sat, 05 Oct 2024 11:38:57 GMT location: https://idsync.rlcdn.com/395886.gif?partner_uid=3647467566085439504 pragma: no-cache set-cookie: pi=3647467566085439504; expires=Sat, 04 Oct 2025 11:38:57 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" x-cloud-trace-context: 8653b2cfe5502db19ef9ad47d2766846 date: Fri, 04 Oct 2024 11:38:57 GMT server: Google Frontend Content-Length: 43 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:38:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49808	3.33.220.150	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	639	OUT	GET /track/cmf/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:57 UTC	500	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:38:57 GMT Content-Length: 209 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; expires=Sat, 04 Oct 2025 11:38:57 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI4MW60fucsj0QBTgB; expires=Sat, 04 Oct 2025 11:38:57 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-04 11:38:57 UTC	209	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 31 68 31 79 31 61 37 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 31 68 31 79 31 61 37 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49809	3.127.178.105	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	616	OUT	GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:57 UTC	720	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=192575369c2-15090000010f580a; Domain=eyeota.net; Path=/; Expires=Sat, 04 Oct 2025 11:38:57 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=22538~DM; Domain=eyeota.net; Path=/; Expires=Fri, 04 Oct 2024 11:48:57 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= Content-Length: 0 Date: Fri, 04 Oct 2024 11:38:57 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49804	52.48.114.218	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	405	OUT	GET /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed
2024-10-04 11:38:57 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 04 Oct 2024 11:38:57 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 484 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2024-10-04 11:38:57 UTC	484	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 6d 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 30 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/map</td></tr><tr><th>STATUS:</th><td>40

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49810	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:57 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1728041902920&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-10-04 11:38:57 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-04 11:38:57 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-04 11:38:58 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C9F290B038564FC181CEA36751409801 Ref B: LAX311000110029 Ref C: 2024-10-04T11:38:58Z Date: Fri, 04 Oct 2024 11:38:58 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.15ed0117.1728041937.58beb6a0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49813	35.244.174.68	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:58 UTC	617	OUT	GET /395886.gif?partner_uid=3647467566085439504 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:58 UTC	711	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NzQ2NzU2NjA4NTQzOTUwNBAAGg0I0qf_twYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=KasqauwbnuYXD9TafsTuK2rKnTNTHxB3mURO3O2e0VQ=; Path=/; Domain=rlcdn.com; Expires=Sat, 04 Oct 2025 11:38:58 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 03 Dec 2024 11:38:58 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 04 Oct 2024 11:38:58 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49814	3.33.220.150	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:58 UTC	726	OUT	GET /track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; TDCPM=CAEYBSgCMgsI4MW60fucsj0QBTgB
2024-10-04 11:38:58 UTC	507	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:38:58 GMT Content-Length: 215 Connection: close server: Kestrel location: https://sync.sharethis.com/ttd?uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&gdpr=0&gdpr_consent= set-cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; expires=Sat, 04 Oct 2025 11:38:58 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwjgxbrR-5yyPRAFOAE.; expires=Sat, 04 Oct 2025 11:38:58 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-04 11:38:58 UTC	215	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 74 74 64 3f 75 69 64 3d 36 63 31 61 62 35 64 37 2d 34 64 61 37 2d 34 30 31 39 2d 39 63 62 65 2d 64 30 36 63 63 36 36 31 37 62 32 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 74 74 64 3f 75 69 64 3d 36 63 31 61 62 35 64 37 2d 34 64 61 37 2d 34 30 31 39 2d 39 63 62 65 2d 64 30 36 63 63 36 36 31 37 62 32 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.sharethis.com/ttd?uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&gdpr=0&gdpr_consent=">https://sync.sharethis.com/ttd?uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49812	65.9.66.104	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:58 UTC	1069	OUT	GET /lt/shared/2/lt.iframe.html?c=3825 HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:38:58 UTC	557	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2302 Connection: close Last-Modified: Tue, 05 Sep 2023 17:36:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 17:51:33 GMT Cache-Control: public, max-age=86400 ETag: "43b17c7b81b6281ca01991a2e5cae3a7" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7e513424eee237ee26467e8fd5656ec0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: kj9KdKrCTl93bdYz-34lGFcqmvwtQff6y_DYiUHsQRCBMnuceSYugg== Age: 69778
2024-10-04 11:38:58 UTC	2302	IN	Data Raw: 3c 64 69 76 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 22 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 76 61 72 20 6c 74 49 66 72 61 6d 65 3b 66 75 6e 63 74 69 6f 6e 20 6c 74 49 66 72 61 6d 65 61 28 61 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 49 66 72 61 6d 65 62 28 61 2c 64 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 64 29 7b 76 Data Ascii: <div style="background-color:transparent; width: 100%; text-align: center;"> <script type="text/javascript"> var ltIframe;function ltIframea(a){return"[object Array]"===Object.prototype.toString.call(a)}function ltIframeb(a,d){if("undefined"!==typeof d){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49816	52.48.114.218	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:58 UTC	691	OUT	GET /6/data HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:38:58 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 04 Oct 2024 11:38:58 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 482 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2024-10-04 11:38:58 UTC	482	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 64 61 74 61 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/data</td></tr><tr><th>STATUS:</th><td>4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49815	3.127.178.105	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:58 UTC	690	OUT	GET /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
2024-10-04 11:38:58 UTC	481	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=22538~DM; Domain=eyeota.net; Path=/; Expires=Fri, 04 Oct 2024 11:48:58 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://sync.sharethis.com/eyeota?uid=2fgfA_immdQT6-MSLB7lohTxvZ32H4qV2sk4Yb8xLDKU&gdpr=0&gdpr_consent= Content-Length: 0 Date: Fri, 04 Oct 2024 11:38:58 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49817	172.67.163.146	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:58 UTC	700	OUT	POST /a?i=1040172804192949803086BC6CA2270E&k=lotpano&v=f8734de56f79413e76ea33e5e957185ca02ce642bf24ba952ba8e94a509c3b27 HTTP/1.1 Host: a.dtssrv.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://youruno-chicka.blogspot.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://youruno-chicka.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:59 UTC	542	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sg7MytzcDdfKzvOqnhpjijHOZ6KEGrghDCk%2F4qrxjUGH%2BtGBi8i4e1Cuid%2B1cYpUUhELvdoC76qXkt90Ethn1uejLVabIYQh57xOMOwd%2BTfByukpWxzG7TKVbzoyJU0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4e386ae9b8cc8-EWR
2024-10-04 11:38:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49819	35.244.174.68	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:59 UTC	734	OUT	GET /1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NzQ2NzU2NjA4NTQzOTUwNBAAGg0I0qf_twYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=KasqauwbnuYXD9TafsTuK2rKnTNTHxB3mURO3O2e0VQ=; pxrc=CAA=
2024-10-04 11:38:59 UTC	774	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://ml314.com/csync.ashx?fp=d6a8e62c02b39434340fe0385cfb38dfdd73cda2c50b4b3ca2af8dd13273d13ff4cb09cee1a4f8eb&person_id=3647467566085439504&eid=50082 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=ouWyVe71W/kXD9TafsTuK2rKnTNTHxB3mURO3O2e0VQ=; Path=/; Domain=rlcdn.com; Expires=Sat, 04 Oct 2025 11:38:59 GMT; Secure; SameSite=None Set-Cookie: pxrc=CNOn/7cGEgUI6AcQABIFCNtOEAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 03 Dec 2024 11:38:59 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 04 Oct 2024 11:38:59 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:59 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:38:59 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:59 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 2890d908-101e-0034-6d10-1596ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113859Z-r154656d9bcjpgqtzd4z33r5yn00000009z0000000008pk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 11:38:59 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-04 11:38:59 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49820	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:59 UTC	1783	OUT	GET /pixels?src=LTJS&s=31%2C92%2C49%2C136%2C135%2C148%2C7%2C33%2C78%2C121%2C26%2C22%2C67%2C116%2C61%2C106%2C104%2C8%2C54%2C41%2C3%2C2%2C94&c=3825&ch=%7B%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tags.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:38:59 UTC	284	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:59 GMT Content-Type: text/html Content-Length: 4338 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.19.12 Server: Jetty(9.4.38.v20210224)
2024-10-04 11:38:59 UTC	4338	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 64 69 76 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 6f 6b 65 6e 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 6f 6b 65 6e 3f 70 69 64 3d 37 26 70 75 69 64 3d 63 32 35 61 65 35 62 37 32 64 38 64 33 32 37 34 61 30 30 33 62 36 37 62 66 63 32 64 63 34 65 64 26 67 64 70 72 3d 30 22 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 69 6e 74 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 69 64 65 6e 74 69 74 79 3f 61 3d 35 34 36 31 26 67 64 70 72 3d 30 26 69 64 3d 4c 6f 74 61 6d 65 3a 63 32 35 61 65 35 62 37 32 64 38 64 33 32 37 34 61 30 30 33 62 36 37 62 66 63 32 64 63 34 65 64 22 20 77 69 64 74 68 3d 22 31 22 20 Data Ascii: <html><body><div><img src="https://token.rubiconproject.com/token?pid=7&puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0" height="1" width="1" /><img src="https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:c25ae5b72d8d3274a003b67bfc2dc4ed" width="1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49821	35.156.126.175	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:59 UTC	694	OUT	GET /ttd?uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
2024-10-04 11:39:00 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 04 Oct 2024 11:39:00 GMT Stid: ZH0ACGb/08oAAAAIVAOoAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-10-04 11:39:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49822	35.156.126.175	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:59 UTC	705	OUT	GET /eyeota?uid=2fgfA_immdQT6-MSLB7lohTxvZ32H4qV2sk4Yb8xLDKU&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
2024-10-04 11:39:00 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 04 Oct 2024 11:39:00 GMT Stid: ZH0ACGb/08oAAAAIVAOoAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-10-04 11:39:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49824	34.117.77.79	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	734	OUT	GET /csync.ashx?fp=d6a8e62c02b39434340fe0385cfb38dfdd73cda2c50b4b3ca2af8dd13273d13ff4cb09cee1a4f8eb&person_id=3647467566085439504&eid=50082 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3647467566085439504
2024-10-04 11:39:00 UTC	267	IN	HTTP/1.1 200 OK content-type: image/gif expires: Sat, 05 Oct 2024 11:39:00 GMT date: Fri, 04 Oct 2024 11:39:00 GMT server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-04 11:39:00 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-04 11:39:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49833	34.36.216.150	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	714	OUT	GET /connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:00 UTC	527	IN	HTTP/1.1 302 Found set-cookie: ssi=66ea7e9d-8204-47a8-85d5-80a3ea995cbb#1728041940510; Domain=.sitescout.com; Expires=Sat, 04 Oct 2025 11:39:00 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 Content-Length: 0 date: Fri, 04 Oct 2024 11:39:00 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49831	142.250.186.162	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	765	OUT	GET /pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:00 UTC	846	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0&google_tc= Date: Fri, 04 Oct 2024 11:39:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 336 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 04-Oct-2024 11:54:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:00 UTC	336	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6c 6f 74 61 6d 65 64 64 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 59 7a 49 31 59 57 55 31 59 6a 63 79 5a 44 68 6b 4d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49830	162.19.138.83	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	628	OUT	GET /s/19/9.gif?puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:00 UTC	1425	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#1; Max-Age=300; Expires=Fri, 04-Oct-2024 11:44:00 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/19/19/9/1.gif?puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Fri, 04 Oct 2024 11:38:59 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-10-04 11:39:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49832	164.132.25.184	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	693	OUT	GET /getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0 HTTP/1.1 Host: sync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:00 UTC	739	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 04 Oct 2024 11:39:00 GMT cache-control: no-cache,no-store location: https://sync.smartadserver.com:443/getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 pragma: no-cache set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Sat, 04 Oct 2025 11:39:00 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Sat, 04 Oct 2025 11:39:00 GMT; domain=.smartadserver.com; path=/; secure; samesite=none p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49828	198.47.127.19	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	708	OUT	GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0 HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:00 UTC	506	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Fri, 04 Oct 2024 11:38:59 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49825	3.127.178.105	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	701	OUT	GET /match?bid=51mdg9u&uid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
2024-10-04 11:39:00 UTC	599	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=22538~DM; Domain=eyeota.net; Path=/; Expires=Fri, 04 Oct 2024 11:49:00 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&google_hm=MnFWN1JueXdyME9FWmM2R0lvRUd5amNXZGYyOUMwZDBDUnRuSU9hUU9ud0k&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u& Content-Length: 0 Date: Fri, 04 Oct 2024 11:39:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49834	46.228.164.13	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	730	OUT	GET /r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/c25ae5b72d8d3274a003b67bfc2dc4ed/url/https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=$!%7BTURN_UUID%7D/gdpr=0 HTTP/1.1 Host: d.turn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:00 UTC	501	IN	HTTP/1.1 302 p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV" cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 pragma: no-cache set-cookie: uid=4278757405457797050; Domain=.turn.com; Expires=Wed, 02-Apr-2025 11:39:00 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=4278757405457797050/gdpr=0 content-length: 0 date: Fri, 04 Oct 2024 11:39:00 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49829	18.197.252.142	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	542	OUT	GET /adscores/g.json?sid=9202507693 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:00 UTC	645	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:00 GMT Content-Type: application/json Content-Length: 103 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A9968aqrePwCnLlTHyVWsDpy6JiT4pmib; Path=/; Domain=.agkn.com; Expires=Sat, 04-Oct-2025 11:39:00 GMT; Max-Age=31536000; Secure; SameSite=None
2024-10-04 11:39:00 UTC	103	IN	Data Raw: 70 72 6f 63 65 73 73 54 61 72 67 75 73 44 61 74 61 28 7b 22 74 61 72 67 75 73 22 3a 20 7b 20 22 73 65 67 6d 65 6e 74 22 20 3a 20 22 30 30 30 22 2c 20 22 7a 69 70 22 20 3a 20 22 22 2c 20 22 61 67 65 22 20 3a 20 22 22 2c 20 22 67 65 6e 64 65 72 22 20 3a 20 22 22 2c 20 22 73 6b 22 20 3a 20 22 22 20 7d 7d 29 3b Data Ascii: processTargusData({"targus": { "segment" : "000", "zip" : "", "age" : "", "gender" : "", "sk" : "" }});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49835	64.58.232.179	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	643	OUT	GET /image.sbxx?go=262106&pid=420&xid=c25ae5b72d8d3274a003b67bfc2dc4ed HTTP/1.1 Host: global.ib-ibi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:00 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: eb718e1d-001e-000b-2c22-1615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113900Z-r154656d9bcc4snr2sy7ntt13c00000006z00000000044r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113900Z-r154656d9bc94jg685tuhe75qw0000000a1g000000004hk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113900Z-1767f7688dcp6rq9vksdbz5r100000000mh0000000002aek x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1cc2ff82-e01e-0071-478c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113901Z-1767f7688dcxjm7c0w73xyx8vs0000000mtg000000000w7z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: ec1acd5e-601e-00ab-3736-1666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113901Z-r154656d9bckpfgl7fe14swubc00000009zg00000000ad5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49843	34.117.77.79	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	499	OUT	GET /csync.ashx?fp=d6a8e62c02b39434340fe0385cfb38dfdd73cda2c50b4b3ca2af8dd13273d13ff4cb09cee1a4f8eb&person_id=3647467566085439504&eid=50082 HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3647467566085439504
2024-10-04 11:39:01 UTC	267	IN	HTTP/1.1 200 OK content-type: image/gif expires: Sat, 05 Oct 2024 11:39:01 GMT date: Fri, 04 Oct 2024 11:39:01 GMT server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-04 11:39:01 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-04 11:39:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49844	34.36.216.150	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	788	OUT	GET /connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=66ea7e9d-8204-47a8-85d5-80a3ea995cbb#1728041940510
2024-10-04 11:39:01 UTC	772	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=66ea7e9d-8204-47a8-85d5-80a3ea995cbb#1728041940510; Domain=.sitescout.com; Expires=Sat, 04 Oct 2025 11:39:01 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI3IjoxNzI4MDQxOTQxMTE5fQ; Domain=.sitescout.com; Expires=Sun, 03 Nov 2024 11:39:01 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=1389/tp=STSC/tpid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553/gdpr=0 Content-Length: 0 date: Fri, 04 Oct 2024 11:39:01 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49841	3.66.133.160	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	459	OUT	GET /ttd?uid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
2024-10-04 11:39:01 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 04 Oct 2024 11:39:01 GMT Stid: ZH0ACGb/08oAAAAIVAOoAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-10-04 11:39:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49845	198.47.127.19	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	739	OUT	GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1 HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES
2024-10-04 11:39:01 UTC	503	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=5B34632B-EDA1-4BCE-8599-0FED55A84249&gdpr=0 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=5B34632B-EDA1-4BCE-8599-0FED55A84249; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Date: Fri, 04 Oct 2024 11:39:00 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49842	3.66.133.160	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	470	OUT	GET /eyeota?uid=2fgfA_immdQT6-MSLB7lohTxvZ32H4qV2sk4Yb8xLDKU&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZH0ACGb/08oAAAAIVAOoAw==; __stidv=2
2024-10-04 11:39:01 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 04 Oct 2024 11:39:01 GMT Stid: ZH0ACGb/08oAAAAIVAOoAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-10-04 11:39:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49846	164.132.25.184	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	735	OUT	GET /getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1 Host: sync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
2024-10-04 11:39:01 UTC	335	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 04 Oct 2024 11:39:01 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: pid=7659047516959341367; expires=Sat, 04 Oct 2025 11:39:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49847	162.19.138.83	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	725	OUT	GET /c/19/19/9/1.gif?puid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#1
2024-10-04 11:39:01 UTC	1615	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#2; Max-Age=7776000; Expires=Thu, 02-Jan-2025 11:39:01 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=19#1728041941626#-48783062#c25ae5b72d8d3274a003b67bfc2dc4ed; Max-Age=7776000; Expires=Thu, 02-Jan-2025 11:39:01 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Fri, 04-Oct-2024 11:44:01 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=19; Max-Age=300; Expires=Fri, 04-Oct-2024 11:44:01 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=8; Max-Age=300; Expires=Fri, 04-Oct-2024 11:44:01 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=2; Max-Age=300; Expires=Fri, 04-Oct-2024 11:44:01 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Fri, 04-Oct-2024 11:44:01 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 04 Oct 2024 11:39:01 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-10-04 11:39:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49848	142.250.186.162	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	816	OUT	GET /pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-04 11:39:01 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 04 Oct 2024 11:39:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:01 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49850	142.250.186.162	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	813	OUT	GET /pixel?google_nid=eye&google_cm&google_sc&google_hm=MnFWN1JueXdyME9FWmM2R0lvRUd5amNXZGYyOUMwZDBDUnRuSU9hUU9ud0k&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-04 11:39:01 UTC	1052	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&google_gid=CAESEObxwrCaOzker5SuoLKFgUo&google_cver=1 Date: Fri, 04 Oct 2024 11:39:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 394 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmCvpx8rMTzl57wx-GYSdjj43qcfUDjXGHyz6V1rRW5ayPQf09fx5dmq9JYCyQ; expires=Sun, 04-Oct-2026 11:39:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:01 UTC	338	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 69 64 3d 31 26 61 6d 70 3b 62 69 64 3d 67 64 6f 39 6f 35 31 26 61 6d 70 3b 6e 65 77 75 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newu
2024-10-04 11:39:01 UTC	56	IN	Data Raw: 53 75 6f 4c 4b 46 67 55 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: SuoLKFgUo&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49854	142.250.186.162	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	806	OUT	GET /pixel?google_nid=lotame_dmp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-04 11:39:01 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 04 Oct 2024 11:39:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:01 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49852	52.209.249.174	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	417	OUT	GET /adscores/g.json?sid=9202507693 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A9968aqrePwCnLlTHyVWsDpy6JiT4pmib
2024-10-04 11:39:01 UTC	645	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: application/json Content-Length: 124 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A9968aqrePwCnLlTHyVWsDpy6JiT4pmib; Path=/; Domain=.agkn.com; Expires=Sat, 04-Oct-2025 11:39:01 GMT; Max-Age=31536000; Secure; SameSite=None
2024-10-04 11:39:01 UTC	124	IN	Data Raw: 70 72 6f 63 65 73 73 54 61 72 67 75 73 44 61 74 61 28 7b 22 74 61 72 67 75 73 22 3a 20 7b 20 22 73 65 67 6d 65 6e 74 22 20 3a 20 22 30 30 30 22 2c 20 22 7a 69 70 22 20 3a 20 22 22 2c 20 22 61 67 65 22 20 3a 20 22 22 2c 20 22 67 65 6e 64 65 72 22 20 3a 20 22 22 2c 20 22 73 6b 22 20 3a 20 22 32 31 37 35 30 33 31 30 35 30 32 35 30 30 31 37 36 36 34 30 33 22 20 7d 7d 29 3b Data Ascii: processTargusData({"targus": { "segment" : "000", "zip" : "", "age" : "", "gender" : "", "sk" : "217503105025001766403" }});

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113901Z-1767f7688dcwt84hd6d7u4c7700000000mng000000004zv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113901Z-r154656d9bcq72z5pzdegcf4nn000000033g0000000032w8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113901Z-1767f7688dc9hz5543dfnckp1w0000000bpg00000000cmaa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49849	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	974	OUT	GET /map/c=10915/tp=TRNN/tpid=4278757405457797050/gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:02 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.18.255 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:02 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49851	46.137.57.71	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	604	OUT	GET /cookie-sync/lotame?gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:01 UTC	378	IN	HTTP/1.1 303 See Other Date: Fri, 04 Oct 2024 11:39:01 GMT location: https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 04 Oct 2024 11:49:01 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113901Z-1767f7688dc5plpppuk35q59aw0000000mf0000000006bzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:01 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3a0dc1eb-601e-0032-608c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113901Z-r154656d9bc7mtk716cm75thbs0000000md0000000000tre x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:01 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49861	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	1004	OUT	GET /map/c=1389/tp=STSC/tpid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553/gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:02 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.11.175 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:02 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49864	172.64.151.101	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	644	OUT	GET /ium?sourceid=11&uid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:02 UTC	623	IN	HTTP/1.1 400 Bad Request Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Length: 0 Connection: close CF-Ray: 8cd4e39b2e6443c1-EWR CF-Cache-Status: DYNAMIC Cache-Control: max-age=0, no-cache, no-store Expires: Fri, 04 Oct 2024 11:39:02 GMT Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iDZe4ATeF7idrHm%2BkEZ6fsZCgGhXoync9Bcv3Obqtvjt1IvH0P6PJ0ZWhrnyvgbKXIUhwDq9bvLT6ITA5sgEmgTMTRycP34zqpc9wspCygH%2B24G9VAtQA9qVSB3xEWvF5l0cSnPqYVYMkg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49866	3.33.220.150	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	732	OUT	GET /track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; TDCPM=CAEYBSABKAIyCwjgxbrR-5yyPRAFOAE.
2024-10-04 11:39:02 UTC	515	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Length: 199 Connection: close server: Kestrel location: https://id5-sync.com/k/264.gif?puid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&ttl=%%TTL%% set-cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; expires=Sat, 04 Oct 2025 11:39:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjCo5GD_JyyPRAFOAFaBzhoOXUxMWhgAg..; expires=Sat, 04 Oct 2025 11:39:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-04 11:39:02 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6b 2f 32 36 34 2e 67 69 66 3f 70 75 69 64 3d 36 63 31 61 62 35 64 37 2d 34 64 61 37 2d 34 30 31 39 2d 39 63 62 65 2d 64 30 36 63 63 36 36 31 37 62 32 64 26 74 74 6c 3d 25 25 54 54 4c 25 25 22 3e 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6b 2f 32 36 34 2e 67 69 66 3f 70 75 69 64 3d 36 63 31 61 62 35 64 37 2d 34 64 61 37 2d 34 30 31 39 2d 39 63 62 65 2d 64 30 36 63 63 36 36 31 37 62 32 64 26 74 74 6c 3d 25 25 54 54 4c 25 25 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://id5-sync.com/k/264.gif?puid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&ttl=%%TTL%%">https://id5-sync.com/k/264.gif?puid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&ttl=%%TTL%%</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49874	34.117.77.79	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	671	OUT	GET /utsync.ashx?eid=50146&et=0&fp=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3647467566085439504
2024-10-04 11:39:02 UTC	535	IN	HTTP/1.1 200 OK content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Sat, 05 Oct 2024 11:39:02 GMT pragma: no-cache set-cookie: pi=3647467566085439504; expires=Sat, 04 Oct 2025 11:39:02 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Fri, 04 Oct 2024 11:39:02 GMT server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-04 11:39:02 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-04 11:39:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49865	81.17.55.173	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	523	OUT	GET /getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1 Host: sync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100; pid=7659047516959341367
2024-10-04 11:39:02 UTC	94	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 04 Oct 2024 11:39:02 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49867	3.33.220.150	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	717	OUT	GET /track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; TDCPM=CAEYBSABKAIyCwjgxbrR-5yyPRAFOAE.
2024-10-04 11:39:02 UTC	536	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Length: 249 Connection: close server: Kestrel location: https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d/gdpr=0/gdpr_consent= set-cookie: TDID=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; expires=Sat, 04 Oct 2025 11:39:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjO4MmD_JyyPRAFOAFaBmxvdGFtZWAC; expires=Sat, 04 Oct 2025 11:39:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-04 11:39:02 UTC	249	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 6d 61 70 2f 63 3d 31 30 36 32 30 2f 74 70 3d 54 52 41 44 2f 74 70 69 64 3d 36 63 31 61 62 35 64 37 2d 34 64 61 37 2d 34 30 31 39 2d 39 63 62 65 2d 64 30 36 63 63 36 36 31 37 62 32 64 2f 67 64 70 72 3d 30 2f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 6d 61 70 2f 63 3d 31 30 36 32 30 2f 74 70 3d 54 52 41 44 2f 74 70 69 64 3d 36 63 31 61 62 35 64 37 2d 34 64 61 37 2d 34 30 31 39 2d 39 63 62 65 2d 64 30 36 63 63 36 36 31 37 62 32 64 2f 67 64 70 72 3d 30 2f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d/gdpr=0/gdpr_consent=">https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d/gdpr=0/gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49862	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	990	OUT	GET /qmap?c=240&tp=PUBM&tpid=5B34632B-EDA1-4BCE-8599-0FED55A84249&gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:02 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.17.47 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:02 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113902Z-1767f7688dcg8z9lsdchk59ycs00000001x000000000arkm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49868	3.127.178.105	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	779	OUT	GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&google_gid=CAESEObxwrCaOzker5SuoLKFgUo&google_cver=1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=192575369c2-15090000010f580a; SERVERID=22538~DM
2024-10-04 11:39:02 UTC	546	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=22538~DM; Domain=eyeota.net; Path=/; Expires=Fri, 04 Oct 2024 11:49:02 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=51mdg9u& Content-Length: 0 Date: Fri, 04 Oct 2024 11:39:02 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49876	46.137.57.71	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	646	OUT	GET /cookie-sync/lotame?gdpr=0&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-10-04 11:39:02 UTC	638	IN	HTTP/1.1 303 See Other Date: Fri, 04 Oct 2024 11:39:02 GMT location: https://sync.crwdcntrl.net/qmap?c=9130&tp=BEES&tpid=AABA0k7N_6gAABW8jSU1uA&gdpr=0 Server: gunicorn set-cookie: bito=AABA0k7N_6gAABW8jSU1uA; Domain=bidr.io; expires=Mon, 03 Nov 2025 07:39:02 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Mon, 03 Nov 2025 07:39:02 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49878	34.111.113.62	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	1170	OUT	GET /idsync/ex/receive?partner_id=LOTAME&partner_device_id=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:02 UTC	1593	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:39:02 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1728041942667;Expires=Tue, 03 Dec 2024 11:39:02 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=de1e418f-8e30-402a-a231-d67b35cef2ca;Expires=Tue, 03 Dec 2024 11:39:02 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49873	142.250.186.34	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	620	OUT	GET /pixel?google_nid=lotameddp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmCvpx8rMTzl57wx-GYSdjj43qcfUDjXGHyz6V1rRW5ayPQf09fx5dmq9JYCyQ
2024-10-04 11:39:02 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 04 Oct 2024 11:39:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:02 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 023e3708-a01e-003d-568c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113902Z-r154656d9bcqqgssyv95384a1c0000000mdg00000000ddwn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113902Z-r154656d9bctbqfcgmyvqx3k1000000009x000000000asen x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e0871f45-901e-00a0-0d8c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113902Z-1767f7688dck2l7961u6s0hrtn0000000mn000000000a799 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49875	142.250.186.34	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	610	OUT	GET /pixel?google_nid=lotame_dmp&google_hm=YzI1YWU1YjcyZDhkMzI3NGEwMDNiNjdiZmMyZGM0ZWQ&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmCvpx8rMTzl57wx-GYSdjj43qcfUDjXGHyz6V1rRW5ayPQf09fx5dmq9JYCyQ
2024-10-04 11:39:02 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 04 Oct 2024 11:39:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:02 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 023e3944-a01e-003d-708c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113902Z-1767f7688dck728xdf98zxv0d000000007c0000000006228 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49880	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	993	OUT	GET /map/c=1811/tp=TBMG/tpid=Zv-T1QAG_BWYbwAF/gdpr=0&_test=Zv-T1QAG_BWYbwAF HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:03 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.11.175 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49882	104.18.80.52	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	678	OUT	GET /f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP HTTP/1.1 Host: dmp.truoptik.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:03 UTC	934	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: to_master_s=458588359a002125fac7aedfa09a88e3; Expires=Sat, 04-Oct-25 11:39:03 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None Set-Cookie: to_version_s=b2; Expires=Sat, 04-Oct-25 11:39:03 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None Location: https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=458588359a002125fac7aedfa09a88e3 TO-DMP-Sync: s2b-dmp-use1-aws.truoptik.com User-Agent: Tru Optik DMP 1.3.1 Cache-Control: no-store Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cd4e39fbb744350-EWR
2024-10-04 11:39:03 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49881	35.190.80.1	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	557	OUT	OPTIONS /report/v4?s=iDZe4ATeF7idrHm%2BkEZ6fsZCgGhXoync9Bcv3Obqtvjt1IvH0P6PJ0ZWhrnyvgbKXIUhwDq9bvLT6ITA5sgEmgTMTRycP34zqpc9wspCygH%2B24G9VAtQA9qVSB3xEWvF5l0cSnPqYVYMkg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ssum-sec.casalemedia.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:03 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 04 Oct 2024 11:39:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49879	54.76.166.236	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	737	OUT	GET /map/c=10915/tp=TRNN/tpid=4278757405457797050/gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:03 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.26.118 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49888	34.117.77.79	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	434	OUT	GET /utsync.ashx?eid=50146&et=0&fp=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0 HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3647467566085439504
2024-10-04 11:39:03 UTC	535	IN	HTTP/1.1 200 OK content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Sat, 05 Oct 2024 11:39:03 GMT pragma: no-cache set-cookie: pi=3647467566085439504; expires=Sat, 04 Oct 2025 11:39:03 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Fri, 04 Oct 2024 11:39:03 GMT server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-04 11:39:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49884	54.147.101.158	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	606	OUT	GET /sync?nid=lotame&gdpr=0 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:03 UTC	1352	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 04 Oct 2024 11:39:03 GMT Location: https://sync.crwdcntrl.net/qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCDXp_-3BjABOgT87-jmQgQdqB60.%2F6tLdu5EsFRzBePzG05UC8AiUUUJKSWdHEW1EbbZfbw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCDXp_-3BjABOgT87-jmQgQdqB60.%2F6tLdu5EsFRzBePzG05UC8AiUUUJKSWdHEW1EbbZfbw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 165 Connection: Close
2024-10-04 11:39:03 UTC	165	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 71 6d 61 70 3f 63 3d 36 35 36 39 26 61 6d 70 3b 74 70 3d 53 54 4b 41 26 61 6d 70 3b 74 70 69 64 3d 30 2d 34 34 65 66 36 31 62 32 2d 66 65 33 37 2d 35 36 33 62 2d 34 39 37 61 2d 30 38 61 61 63 37 37 35 64 39 39 36 24 69 70 24 38 2e 34 36 2e 31 32 33 2e 33 33 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.crwdcntrl.net/qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49893	34.111.113.62	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	1256	OUT	GET /idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1728041942667; TapAd_DID=de1e418f-8e30-402a-a231-d67b35cef2ca
2024-10-04 11:39:03 UTC	2058	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:39:03 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1728041942667;Expires=Tue, 03 Dec 2024 11:39:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=de1e418f-8e30-402a-a231-d67b35cef2ca;Expires=Tue, 03 Dec 2024 11:39:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 03 Dec 2024 11:39:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=de1e418f-8e30-402a-a231-d67b35cef2ca%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253Dde1e418f-8e30-402a-a231-d67b35cef2ca%252C%25257B%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252520Chrome%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25255Cu003dBrand%252522%25252C%252522version%252522%25253A%2525228.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%25252210.0.0%252522%25257D&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49886	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	1005	OUT	GET /map/c=10620/tp=TRAD/tpid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d/gdpr=0/gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:03 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.13.86 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49887	3.71.149.231	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	621	OUT	GET /ups/58736/cms?partner_id=LOTME&gdpr=0 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:03 UTC	564	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0&verify=true Age: 0 Connection: close Server: ATS/9.1.10.137 Set-Cookie: A3=d=AQABBNfT_2YCEHSr_pg0u5TD7uGn4Vg8CgQFEgEBAQElAWcJZ9xA0iMA_eMAAA&S=AQAAAqQgVqITPiYZy9376V71gps; Expires=Sat, 4 Oct 2025 17:39:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 24b39fc0-301e-0096-298c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113903Z-r154656d9bcpkd87yvea8r1dfg00000009hg0000000074qk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49883	54.76.166.236	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	767	OUT	GET /map/c=1389/tp=STSC/tpid=66ea7e9d-8204-47a8-85d5-80a3ea995cbb-66ffd3d4-5553/gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:03 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.20.52 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: a68dfe67-f01e-0052-588c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113903Z-1767f7688dcwt84hd6d7u4c7700000000mpg000000002z8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:03 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: dae66c3e-d01e-0066-08a4-15ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113903Z-1767f7688dcxs7gvbd5dcgxeys0000000ma00000000055y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49892	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: dc68ccfc-201e-006e-438c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113903Z-r154656d9bc5gm9nqxzv5c87e800000000wg00000000e9yz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:03 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49897	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	977	OUT	GET /qmap?c=9130&tp=BEES&tpid=AABA0k7N_6gAABW8jSU1uA&gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:03 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.0.208 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 79ade187-001e-0065-788c-150b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113903Z-1767f7688dc5std64kd3n8sca400000003x000000000b05v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49899	35.190.80.1	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	490	OUT	POST /report/v4?s=iDZe4ATeF7idrHm%2BkEZ6fsZCgGhXoync9Bcv3Obqtvjt1IvH0P6PJ0ZWhrnyvgbKXIUhwDq9bvLT6ITA5sgEmgTMTRycP34zqpc9wspCygH%2B24G9VAtQA9qVSB3xEWvF5l0cSnPqYVYMkg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 480 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:03 UTC	480	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 31 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 70 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 34 2e 31 35 31 2e 31 30 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c Data Ascii: [{"age":1,"body":{"elapsed_time":718,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://bcp.crwdcntrl.net/","sampling_fraction":1.0,"server_ip":"172.64.151.101","status_code":400,"type":"http.error"},"type":"network-error","url
2024-10-04 11:39:03 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 04 Oct 2024 11:39:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49898	46.228.164.13	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	753	OUT	GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1 Host: d.turn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=4278757405457797050
2024-10-04 11:39:03 UTC	533	IN	HTTP/1.1 302 p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV" cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 pragma: no-cache set-cookie: uid=4278757405457797050; Domain=.turn.com; Expires=Wed, 02-Apr-2025 11:39:03 GMT; Path=/; Secure; SameSite=None location: https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=4278757405457797050&newuser=1&dc_rc=2&dc_mr=5&dc_orig=51mdg9u& content-length: 0 date: Fri, 04 Oct 2024 11:39:02 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49896	37.252.171.52	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	688	OUT	GET /getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=297708294 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:03 UTC	1547	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D281%252Ftp%253DANXS%252Ftpid%253D%2524UID%252Fgdpr%253D0%252Frand%3D297708294 AN-X-Request-Uuid: db82288a-19bf-4886-b7ab-86c7012ae17a Set-Cookie: XANDR_PANID=cSAi24oG3d-WtdNjbvldK2to7xl5GCLQ5sK8Kxb4wDJQjN1BsfbWiV0GRLC5Bgv2G89d-tmeaYZet-teJ3KwCaAIRNWxfeVJSwrXaMWry0w.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 02-Jan-2025 11:39:03 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 22-Sep-2034 11:39:03 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=772338300018818479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 02-Jan-2025 11:39:03 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49895	54.76.166.236	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	753	OUT	GET /qmap?c=240&tp=PUBM&tpid=5B34632B-EDA1-4BCE-8599-0FED55A84249&gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:03 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.19.180 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49885	162.19.138.83	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	807	OUT	GET /k/264.gif?puid=6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d&ttl=%%TTL%% HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=34be8d5b-6bdf-797f-92a3-946a3f17f5c6#1728041940703#2; 3pi=19#1728041941626#-48783062#c25ae5b72d8d3274a003b67bfc2dc4ed; cf=gif; cip=19; cnac=8; car=2; gdpr=0\|
2024-10-04 11:39:04 UTC	1490	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=19#1728041941626#-48783062#c25ae5b72d8d3274a003b67bfc2dc4ed\|264#1728041944419#-1145940648#6c1ab5d7-4da7-4019-9cbe-d06cc6617b2d; Max-Age=7776000; Expires=Thu, 02-Jan-2025 11:39:04 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ib.adnxs.com/getuid?https://id5-sync.com/c/19/2/7/3.gif?puid=$UID&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 04 Oct 2024 11:39:04 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-10-04 11:39:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49900	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	980	OUT	GET /map/c=10832/tp=TRUP/tpid=458588359a002125fac7aedfa09a88e3 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:03 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.28.36 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49901	54.76.166.236	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	756	OUT	GET /map/c=1811/tp=TBMG/tpid=Zv-T1QAG_BWYbwAF/gdpr=0&_test=Zv-T1QAG_BWYbwAF HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:03 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.21.241 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49902	54.72.22.163	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	740	OUT	GET /ibs:dpid=121998&dpuuid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D9828%2Ftp%3DADBE%2Ftpid%3D%24%7BDD_UUID%7D%2Fgdpr=0 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:39:03 UTC	889	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Length: 0 Connection: close X-TID: 9iZorhg8RE8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=121998&dpuuid=c25ae5b72d8d3274a003b67bfc2dc4ed&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D9828%2Ftp%3DADBE%2Ftpid%3D%24%7BDD_UUID%7D%2Fgdpr=0 DCS: dcs-prod-irl1-2-v065-0fbcb9133.edge-irl1.demdex.com 0 ms set-cookie: demdex=73112750750020587081523322233517150305; Max-Age=15552000; Expires=Wed, 02 Apr 2025 11:39:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49904	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	1027	OUT	GET /5/c=5436/tp=SVRN/tpid=na/pv=y?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D5001%263pid%3D%24%7Bprofile_id%7D HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:04 UTC	1067	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:39:04 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.28.36 Set-Cookie: _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5ev%2F%2Fz%2F%2Fz8%2FAwzw3vtgyfoniOE%2FI%2BMHRhC5RwtEfpQFkdvrQSTDj41TWAipWf6nkJCSc0cPMRNSs3vfZQFCag4vnkPQOe3rnnITUtPwX5OQkiePbxoSUnOvS4uQkkunHrERUvNuCWFfvZl5gImQGgBkCbSg";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4nGNgYGBI%2B3%2F5BgMMsDMwcM0Asxa1gkhGrdkQahaI4nN3APMe1oMofp39QBIAU54JXA%3D%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Jul-2025 11:07:00 GMT;Max-Age=23328000;SameSite=None;Secure Location: https://ce.lijit.com/merge?pid=5001&3pid=c25ae5b72d8d3274a003b67bfc2dc4ed Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49911	54.78.53.108	443	3712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	1022	OUT	GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=c25ae5b72d8d3274a003b67bfc2dc4ed; _cc_cc="ACZ4nGNQSDYyTUw1TTI3SrFIMTYyN0k0MDBOMjNPSks2Skk2SU1hAIK0%2F5cv%2FgcCfgYY4L33wZLpoyzDf0bG7fUgkuHHxiksqCLL%2FxSiCpw7eogZVWT3vssCqCKHF89BM6Z93VNuVJGG%2F5qoAk8e3zREFbnXpYUqcOnUIzZUkXdL0G16M%2FMAE6oIAD%2F%2FZHE%3D"; _cc_aud="ABR4nGNgYGBI%2B3%2F5IgMMMDMwcM0Asxa1gkjGh%2FVAEgCEsAY3"
2024-10-04 11:39:04 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:04 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.13.97 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-10-04 11:39:04 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Target ID:	0
Start time:	07:38:34
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:38:39
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1692 --field-trial-handle=2056,i,17654489147244666863,5989065647779282370,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:38:42
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://youruno-chicka.blogspot.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://youruno-chicka.blogspot.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Windows Analysis Report
https://youruno-chicka.blogspot.com/