Edit tour

Windows Analysis Report
http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/4nbXVA123415bxwz821wfgqkoqbno9030GRUYZVSMVMDWDTG236348/3210Y21

Overview

General Information

Sample URL:	http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/4nbXVA123415bxwz821wfgqkoqbno9030GRUYZVSMVMDWDTG236348/3210Y21
Analysis ID:	1528884
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5168 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1216 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1904,i,10990484001626199487,9124767384386613452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5836 --field-trial-handle=1904,i,10990484001626199487,9124767384386613452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6216 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/4nbXVA123415bxwz821wfgqkoqbno9030GRUYZVSMVMDWDTG236348/3210Y21" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ingress HTTP/1.1Host: frontdoor.knotch.itConnection: keep-aliveContent-Length: 997sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.foxnews.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.foxnews.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: Iframe src: //static.foxnews.com/static/orion/html/video/iframe/vod.html?v=20241007230407#uid=fnc-embed-1&url=www.foxnews.com%2Fworld%2Fmexican-mayor-murdered-week-taking-office
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: Iframe src: https://my.foxnews.com/xd-channel.html?_x_auth=foxid&
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: Iframe src: //static.foxnews.com/static/orion/scripts/core/templates/app/iframe.html?v=20241007230407
Source: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre	HTTP Parser: Iframe src: //static.foxnews.com/static/orion/html/video/iframe/vod.html?v=20241007150649#uid=fnc-embed-1&url=www.foxnews.com%2Fworld%2Ffour-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre
Source: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre	HTTP Parser: Iframe src: https://my.foxnews.com/xd-channel.html?_x_auth=foxid&
Source: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre	HTTP Parser: Iframe src: //static.foxnews.com/static/orion/scripts/core/templates/app/iframe.html?v=20241007150649

Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/news?q=This%20link%20is%20locked!	HTTP Parser: No favicon
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/news?q=This%20link%20is%20locked!	HTTP Parser: No favicon
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No favicon
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No favicon
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No favicon
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No favicon
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No favicon

Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="author".. found
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="author".. found
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="author".. found
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No <meta name="author".. found
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="author".. found
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="author".. found
Source: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre	HTTP Parser: No <meta name="author".. found
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No <meta name="author".. found
Source: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre	HTTP Parser: No <meta name="author".. found

Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="copyright".. found
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="copyright".. found
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No <meta name="copyright".. found
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="copyright".. found
Source: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre	HTTP Parser: No <meta name="copyright".. found
Source: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	HTTP Parser: No <meta name="copyright".. found
Source: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49720 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.8:49939 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:50274 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	DNS traffic detected: DNS query: nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: feeds.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: moxie.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: www.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: static.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: global.fncstatic.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: amprtc.media.net
Source: global traffic	DNS traffic detected: DNS query: sofia.trustx.org
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: hbopenbid.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: foxnews-d.openx.net
Source: global traffic	DNS traffic detected: DNS query: as-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: bidder.criteo.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: a57.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: cf-images.us-east-1.prod.boltdns.net
Source: global traffic	DNS traffic detected: DNS query: www.datadoghq-browser-agent.com
Source: global traffic	DNS traffic detected: DNS query: www.ap.org
Source: global traffic	DNS traffic detected: DNS query: www.knotch-cdn.com
Source: global traffic	DNS traffic detected: DNS query: frontdoor.knotch.it
Source: global traffic	DNS traffic detected: DNS query: configs.knotch.com
Source: global traffic	DNS traffic detected: DNS query: prod.pyxis.atp.fox
Source: global traffic	DNS traffic detected: DNS query: prod.idgraph.dt.fox
Source: global traffic	DNS traffic detected: DNS query: js.appboycdn.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: sdk.iad-05.braze.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: smetrics.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: prod.fennec.atp.fox
Source: global traffic	DNS traffic detected: DNS query: pix.pub
Source: global traffic	DNS traffic detected: DNS query: my.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: cdn.flipboard.com
Source: global traffic	DNS traffic detected: DNS query: pub-admin-elections.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: api.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: feeds-meta.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: foxnewsplayer-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: sync.springserve.com
Source: global traffic	DNS traffic detected: DNS query: tv.springserve.com
Source: global traffic	DNS traffic detected: DNS query: rtb.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: ssum.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: match.deepintent.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: vid-io-dub.springserve.com
Source: global traffic	DNS traffic detected: DNS query: sync.bfmio.com
Source: global traffic	DNS traffic detected: DNS query: cs.emxdgt.com
Source: global traffic	DNS traffic detected: DNS query: pixel.advertising.com
Source: global traffic	DNS traffic detected: DNS query: rtb.openx.net
Source: global traffic	DNS traffic detected: DNS query: image8.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: pbs.publishers.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: cr.frontend.weborama.fr
Source: global traffic	DNS traffic detected: DNS query: ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: ssbsync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: dsum.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: sync.targeting.unrulymedia.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.sxp.smartclip.net
Source: global traffic	DNS traffic detected: DNS query: match.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: ad.turn.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: ih.adscale.de
Source: global traffic	DNS traffic detected: DNS query: sync.teads.tv
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: uipus.semasio.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: cs.media.net
Source: global traffic	DNS traffic detected: DNS query: sync.richaudience.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: sync.admanmedia.com
Source: global traffic	DNS traffic detected: DNS query: simage4.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: image4.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: match.adsby.bidtheatre.com
Source: global traffic	DNS traffic detected: DNS query: y.one.impact-ad.jp

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8Content-Length: 49Connection: closeAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: GET, HEADAccess-Control-Max-Age: 3000Last-Modified: Mon, 25 Jun 2018 17:54:06 GMTx-amz-version-id: nullAccept-Ranges: bytesServer: AmazonS3Date: Tue, 08 Oct 2024 09:31:50 GMTCache-Control: public, max-age=300ETag: "328257380186d550f96adf638ff85092"Vary: Accept-EncodingX-Cache: Error from cloudfrontVia: 1.1 7fcb41b117930690c299be9cec4a977a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA6-C1X-Amz-Cf-Id: Gmj27cV4V_Gk9xy0lJ3F-UOpf1MY9LSKP67riqQvzbvqYbWSQ2aSfg==Age: 144
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Address: gin_throttle_mw_360000000000_8.46.123.33X-Ratelimit-Limit: 10X-Ratelimit-Remaining: 7X-Ratelimit-Reset: 1728383586Date: Tue, 08 Oct 2024 09:33:07 GMTContent-Length: 0

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1904,i,10990484001626199487,9124767384386613452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/4nbXVA123415bxwz821wfgqkoqbno9030GRUYZVSMVMDWDTG236348/3210Y21"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5836 --field-trial-handle=1904,i,10990484001626199487,9124767384386613452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1904,i,10990484001626199487,9124767384386613452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5836 --field-trial-handle=1904,i,10990484001626199487,9124767384386613452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: chromecache_484.2.dr, chromecache_451.2.dr	String found in binary or memory: "https://www.facebook.com/FoxNews", equals www.facebook.com (Facebook)
Source: chromecache_484.2.dr, chromecache_451.2.dr	String found in binary or memory: "https://www.linkedin.com/company/fox-news-channel", equals www.linkedin.com (Linkedin)
Source: chromecache_484.2.dr, chromecache_451.2.dr	String found in binary or memory: "https://www.youtube.com/FoxNewsChannel", equals www.youtube.com (Youtube)
Source: chromecache_484.2.dr, chromecache_451.2.dr	String found in binary or memory: </a></li></ul></nav></div></div></div> <div class="footer-lower"><div class="social-icons"><ul><li class="fb"><a href="https://www.facebook.com/FoxNews">Facebook</a></li> <li class="tw"><a href="https://twitter.com/foxnews">Twitter</a></li> <li class="ig"><a href="https://www.instagram.com/foxnews">Instagram</a></li> <li class="yt"><a href="https://www.youtube.com/FoxNewsChannel">Youtube</a></li> <li class="flipboard"><a href="https://flipboard.com/@FoxNews">Flipboard</a></li> <li class="li"><a href="https://www.linkedin.com/company/fox-news-channel/">LinkedIn</a></li> <li class="slack"><a href="https://foxnews.slack.com/apps/A013AUF6VMG-fox-news">Slack</a></li> <li class="rss"><a href="https://www.foxnews.com/story/foxnews-com-rss-feeds">RSS</a></li> <li class="newsletters"><a href="https://www.foxnews.com/newsletters">Newsletters</a></li> <li class="spotify"><a href="https://open.spotify.com/show/7A4YfyFtNOZhqMV7F3kYVu">Spotify</a></li> <li class="ihr"><a href="https://www.iheart.com/podcast/256-the-fox-news-rundown-31090295/">iHeartRadio</a></li></ul></div> <div class="branding"><a href="https://www.foxnews.com" class="logo">Fox News</a></div> <div class="legal"><ul data-fetch-key="3"><li><a href="//www.foxnews.com/terms-of-use" data-omtr-intcmp="footer_legal_updated_terms_of_use">Updated Terms of Use</a></li><li><a href="//www.foxnews.com/privacy-policy" data-omtr-intcmp="footer_legal_new_privacy_policy">New Privacy Policy</a></li><li><a href="http://privacy.foxnews.com/main/web/main" data-omtr-intcmp="footer_legal_your_privacy_choices">Your Privacy Choices</a></li><li><a href="//www.foxnews.com/closed-captioning" data-omtr-intcmp="footer_legal_closed_caption_policy">Closed Caption Policy</a></li><li><a href="https://help.foxnews.com" data-omtr-intcmp="footer_legal_help">Help</a></li><li><a href="//www.foxnews.com/contact" data-omtr-intcmp="footer_legal_contact_us">Contact Us</a></li><li><a href="//www.foxnews.com/accessibility-statement" data-omtr-intcmp="footer_legal_accessibility_statement">Accessibility Statement</a></li></ul> <p class="copyright"> equals www.facebook.com (Facebook)
Source: chromecache_484.2.dr, chromecache_451.2.dr	String found in binary or memory: </a></li></ul></nav></div></div></div> <div class="footer-lower"><div class="social-icons"><ul><li class="fb"><a href="https://www.facebook.com/FoxNews">Facebook</a></li> <li class="tw"><a href="https://twitter.com/foxnews">Twitter</a></li> <li class="ig"><a href="https://www.instagram.com/foxnews">Instagram</a></li> <li class="yt"><a href="https://www.youtube.com/FoxNewsChannel">Youtube</a></li> <li class="flipboard"><a href="https://flipboard.com/@FoxNews">Flipboard</a></li> <li class="li"><a href="https://www.linkedin.com/company/fox-news-channel/">LinkedIn</a></li> <li class="slack"><a href="https://foxnews.slack.com/apps/A013AUF6VMG-fox-news">Slack</a></li> <li class="rss"><a href="https://www.foxnews.com/story/foxnews-com-rss-feeds">RSS</a></li> <li class="newsletters"><a href="https://www.foxnews.com/newsletters">Newsletters</a></li> <li class="spotify"><a href="https://open.spotify.com/show/7A4YfyFtNOZhqMV7F3kYVu">Spotify</a></li> <li class="ihr"><a href="https://www.iheart.com/podcast/256-the-fox-news-rundown-31090295/">iHeartRadio</a></li></ul></div> <div class="branding"><a href="https://www.foxnews.com" class="logo">Fox News</a></div> <div class="legal"><ul data-fetch-key="3"><li><a href="//www.foxnews.com/terms-of-use" data-omtr-intcmp="footer_legal_updated_terms_of_use">Updated Terms of Use</a></li><li><a href="//www.foxnews.com/privacy-policy" data-omtr-intcmp="footer_legal_new_privacy_policy">New Privacy Policy</a></li><li><a href="http://privacy.foxnews.com/main/web/main" data-omtr-intcmp="footer_legal_your_privacy_choices">Your Privacy Choices</a></li><li><a href="//www.foxnews.com/closed-captioning" data-omtr-intcmp="footer_legal_closed_caption_policy">Closed Caption Policy</a></li><li><a href="https://help.foxnews.com" data-omtr-intcmp="footer_legal_help">Help</a></li><li><a href="//www.foxnews.com/contact" data-omtr-intcmp="footer_legal_contact_us">Contact Us</a></li><li><a href="//www.foxnews.com/accessibility-statement" data-omtr-intcmp="footer_legal_accessibility_statement">Accessibility Statement</a></li></ul> <p class="copyright"> equals www.linkedin.com (Linkedin)
Source: chromecache_484.2.dr, chromecache_451.2.dr	String found in binary or memory: </a></li></ul></nav></div></div></div> <div class="footer-lower"><div class="social-icons"><ul><li class="fb"><a href="https://www.facebook.com/FoxNews">Facebook</a></li> <li class="tw"><a href="https://twitter.com/foxnews">Twitter</a></li> <li class="ig"><a href="https://www.instagram.com/foxnews">Instagram</a></li> <li class="yt"><a href="https://www.youtube.com/FoxNewsChannel">Youtube</a></li> <li class="flipboard"><a href="https://flipboard.com/@FoxNews">Flipboard</a></li> <li class="li"><a href="https://www.linkedin.com/company/fox-news-channel/">LinkedIn</a></li> <li class="slack"><a href="https://foxnews.slack.com/apps/A013AUF6VMG-fox-news">Slack</a></li> <li class="rss"><a href="https://www.foxnews.com/story/foxnews-com-rss-feeds">RSS</a></li> <li class="newsletters"><a href="https://www.foxnews.com/newsletters">Newsletters</a></li> <li class="spotify"><a href="https://open.spotify.com/show/7A4YfyFtNOZhqMV7F3kYVu">Spotify</a></li> <li class="ihr"><a href="https://www.iheart.com/podcast/256-the-fox-news-rundown-31090295/">iHeartRadio</a></li></ul></div> <div class="branding"><a href="https://www.foxnews.com" class="logo">Fox News</a></div> <div class="legal"><ul data-fetch-key="3"><li><a href="//www.foxnews.com/terms-of-use" data-omtr-intcmp="footer_legal_updated_terms_of_use">Updated Terms of Use</a></li><li><a href="//www.foxnews.com/privacy-policy" data-omtr-intcmp="footer_legal_new_privacy_policy">New Privacy Policy</a></li><li><a href="http://privacy.foxnews.com/main/web/main" data-omtr-intcmp="footer_legal_your_privacy_choices">Your Privacy Choices</a></li><li><a href="//www.foxnews.com/closed-captioning" data-omtr-intcmp="footer_legal_closed_caption_policy">Closed Caption Policy</a></li><li><a href="https://help.foxnews.com" data-omtr-intcmp="footer_legal_help">Help</a></li><li><a href="//www.foxnews.com/contact" data-omtr-intcmp="footer_legal_contact_us">Contact Us</a></li><li><a href="//www.foxnews.com/accessibility-statement" data-omtr-intcmp="footer_legal_accessibility_statement">Accessibility Statement</a></li></ul> <p class="copyright"> equals www.twitter.com (Twitter)
Source: chromecache_484.2.dr, chromecache_451.2.dr	String found in binary or memory: </a></li></ul></nav></div></div></div> <div class="footer-lower"><div class="social-icons"><ul><li class="fb"><a href="https://www.facebook.com/FoxNews">Facebook</a></li> <li class="tw"><a href="https://twitter.com/foxnews">Twitter</a></li> <li class="ig"><a href="https://www.instagram.com/foxnews">Instagram</a></li> <li class="yt"><a href="https://www.youtube.com/FoxNewsChannel">Youtube</a></li> <li class="flipboard"><a href="https://flipboard.com/@FoxNews">Flipboard</a></li> <li class="li"><a href="https://www.linkedin.com/company/fox-news-channel/">LinkedIn</a></li> <li class="slack"><a href="https://foxnews.slack.com/apps/A013AUF6VMG-fox-news">Slack</a></li> <li class="rss"><a href="https://www.foxnews.com/story/foxnews-com-rss-feeds">RSS</a></li> <li class="newsletters"><a href="https://www.foxnews.com/newsletters">Newsletters</a></li> <li class="spotify"><a href="https://open.spotify.com/show/7A4YfyFtNOZhqMV7F3kYVu">Spotify</a></li> <li class="ihr"><a href="https://www.iheart.com/podcast/256-the-fox-news-rundown-31090295/">iHeartRadio</a></li></ul></div> <div class="branding"><a href="https://www.foxnews.com" class="logo">Fox News</a></div> <div class="legal"><ul data-fetch-key="3"><li><a href="//www.foxnews.com/terms-of-use" data-omtr-intcmp="footer_legal_updated_terms_of_use">Updated Terms of Use</a></li><li><a href="//www.foxnews.com/privacy-policy" data-omtr-intcmp="footer_legal_new_privacy_policy">New Privacy Policy</a></li><li><a href="http://privacy.foxnews.com/main/web/main" data-omtr-intcmp="footer_legal_your_privacy_choices">Your Privacy Choices</a></li><li><a href="//www.foxnews.com/closed-captioning" data-omtr-intcmp="footer_legal_closed_caption_policy">Closed Caption Policy</a></li><li><a href="https://help.foxnews.com" data-omtr-intcmp="footer_legal_help">Help</a></li><li><a href="//www.foxnews.com/contact" data-omtr-intcmp="footer_legal_contact_us">Contact Us</a></li><li><a href="//www.foxnews.com/accessibility-statement" data-omtr-intcmp="footer_legal_accessibility_statement">Accessibility Statement</a></li></ul> <p class="copyright"> equals www.youtube.com (Youtube)
Source: chromecache_484.2.dr	String found in binary or memory: </p></div> <div class="social-icons"><ul><li class="fb"><a href="https://www.facebook.com/FoxNews">Facebook</a></li> <li class="tw"><a href="https://twitter.com/foxnews">Twitter</a></li> <li class="ig"><a href="https://www.instagram.com/foxnews">Instagram</a></li> <li class="rss"><a href="https://www.foxnews.com/story/foxnews-com-rss-feeds">RSS</a></li> <li class="email"><a href="https://www.foxnews.com/newsletters">Email</a></li></ul></div></div></div></div></header> <div class="page"><div class="pre-content"><div class="ad-container desktop ad-h-66 ad-w-728"><div data-iu="lb1" id="desktop-desk-ad-lb1" data-ad-size="" class="ad gam"></div> <!----> <!----></div><div class="ad-container tablet ad-h-50 ad-w-300"><div data-iu="lb1" id="tablet-tw-ad-lb1" data-ad-size="" class="ad gam"></div> <!----> <!----></div></div></div> <div class="page-content"><div class="row full"><main class="main-content"><article class="article-wrap has-video"><!----> <!----> <header organizationUrl="http://www.ap.org/" class="article-header"><div class="article-meta article-meta-upper"><span class="eyebrow"><a href="https://www.foxnews.com/category/world/world-regions/location-mexico">Mexico</a></span> <h1 class="headline speakable">Mexican mayor murdered less than a week after taking office</h1> <h2 class="sub-headline speakable">Alejandro Arcos was sworn in as Chilpancingo, Mexico's mayor last Monday</h2></div> <!----> <div class="author-byline"><!----> <!----> <span class="article-source article-source-non-fn"><a href="https://www.ap.org/" target="_blank">Associated Press</a></span> <!----></div> <div><span class="article-date"> equals www.facebook.com (Facebook)
Source: chromecache_484.2.dr	String found in binary or memory: </p></div> <div class="social-icons"><ul><li class="fb"><a href="https://www.facebook.com/FoxNews">Facebook</a></li> <li class="tw"><a href="https://twitter.com/foxnews">Twitter</a></li> <li class="ig"><a href="https://www.instagram.com/foxnews">Instagram</a></li> <li class="rss"><a href="https://www.foxnews.com/story/foxnews-com-rss-feeds">RSS</a></li> <li class="email"><a href="https://www.foxnews.com/newsletters">Email</a></li></ul></div></div></div></div></header> <div class="page"><div class="pre-content"><div class="ad-container desktop ad-h-66 ad-w-728"><div data-iu="lb1" id="desktop-desk-ad-lb1" data-ad-size="" class="ad gam"></div> <!----> <!----></div><div class="ad-container tablet ad-h-50 ad-w-300"><div data-iu="lb1" id="tablet-tw-ad-lb1" data-ad-size="" class="ad gam"></div> <!----> <!----></div></div></div> <div class="page-content"><div class="row full"><main class="main-content"><article class="article-wrap has-video"><!----> <!----> <header organizationUrl="http://www.ap.org/" class="article-header"><div class="article-meta article-meta-upper"><span class="eyebrow"><a href="https://www.foxnews.com/category/world/world-regions/location-mexico">Mexico</a></span> <h1 class="headline speakable">Mexican mayor murdered less than a week after taking office</h1> <h2 class="sub-headline speakable">Alejandro Arcos was sworn in as Chilpancingo, Mexico's mayor last Monday</h2></div> <!----> <div class="author-byline"><!----> <!----> <span class="article-source article-source-non-fn"><a href="https://www.ap.org/" target="_blank">Associated Press</a></span> <!----></div> <div><span class="article-date"> equals www.twitter.com (Twitter)
Source: chromecache_451.2.dr	String found in binary or memory: </p></div> <div class="social-icons"><ul><li class="fb"><a href="https://www.facebook.com/FoxNews">Facebook</a></li> <li class="tw"><a href="https://twitter.com/foxnews">Twitter</a></li> <li class="ig"><a href="https://www.instagram.com/foxnews">Instagram</a></li> <li class="rss"><a href="https://www.foxnews.com/story/foxnews-com-rss-feeds">RSS</a></li> <li class="email"><a href="https://www.foxnews.com/newsletters">Email</a></li></ul></div></div></div></div></header> <div class="page"><div class="pre-content"><div class="ad-container desktop ad-h-66 ad-w-728"><div data-iu="lb1" id="desktop-desk-ad-lb1" data-ad-size="" class="ad gam"></div> <!----> <!----></div><div class="ad-container tablet ad-h-50 ad-w-300"><div data-iu="lb1" id="tablet-tw-ad-lb1" data-ad-size="" class="ad gam"></div> <!----> <!----></div></div></div> <div class="page-content"><div class="row full"><main class="main-content"><article class="article-wrap has-video"><!----> <!----> <header organizationUrl="https://www.foxnews.com" class="article-header"><div class="article-meta article-meta-upper"><span class="eyebrow"><a href="https://www.foxnews.com/category/world/world-regions/israel">Israel</a></span> <h1 class="headline speakable">Four American hostages remain in Hamas captivity a year after Oct. 7 massacre</h1> <h2 class="sub-headline speakable">Hamas is also holding the bodies of three Americans in Gaza</h2></div> <!----> <div class="author-byline"><span class="author-headshot"><img src="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2022/11/340/340/Greg-Norman-Headshot.png?ve=1&tl=1" alt="Greg Norman"></span> <span> equals www.facebook.com (Facebook)
Source: chromecache_451.2.dr	String found in binary or memory: </p></div> <div class="social-icons"><ul><li class="fb"><a href="https://www.facebook.com/FoxNews">Facebook</a></li> <li class="tw"><a href="https://twitter.com/foxnews">Twitter</a></li> <li class="ig"><a href="https://www.instagram.com/foxnews">Instagram</a></li> <li class="rss"><a href="https://www.foxnews.com/story/foxnews-com-rss-feeds">RSS</a></li> <li class="email"><a href="https://www.foxnews.com/newsletters">Email</a></li></ul></div></div></div></div></header> <div class="page"><div class="pre-content"><div class="ad-container desktop ad-h-66 ad-w-728"><div data-iu="lb1" id="desktop-desk-ad-lb1" data-ad-size="" class="ad gam"></div> <!----> <!----></div><div class="ad-container tablet ad-h-50 ad-w-300"><div data-iu="lb1" id="tablet-tw-ad-lb1" data-ad-size="" class="ad gam"></div> <!----> <!----></div></div></div> <div class="page-content"><div class="row full"><main class="main-content"><article class="article-wrap has-video"><!----> <!----> <header organizationUrl="https://www.foxnews.com" class="article-header"><div class="article-meta article-meta-upper"><span class="eyebrow"><a href="https://www.foxnews.com/category/world/world-regions/israel">Israel</a></span> <h1 class="headline speakable">Four American hostages remain in Hamas captivity a year after Oct. 7 massacre</h1> <h2 class="sub-headline speakable">Hamas is also holding the bodies of three Americans in Gaza</h2></div> <!----> <div class="author-byline"><span class="author-headshot"><img src="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2022/11/340/340/Greg-Norman-Headshot.png?ve=1&tl=1" alt="Greg Norman"></span> <span> equals www.twitter.com (Twitter)
Source: chromecache_499.2.dr, chromecache_440.2.dr	String found in binary or memory: <rss xmlns:media="http://search.yahoo.com/mrss/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"> equals www.yahoo.com (Yahoo)
Source: chromecache_419.2.dr	String found in binary or memory: Modulr.define("core.pages.articles:sites/fnc/social.sharing.buttons",["require","jquery","ISA"],function(require,$,ISA){var krux=ISA.provider("krux");return new function(){var loc,res,container=$(".article-social"),url=(loc=window.location,res=0===(res=($("link[rel=shorturl]").attr("href")\|\|"").replace(/^\s+\|\s+$/g,"")).length?$('meta[property="og:url"]').attr("content")\|\|[loc.protocol+"//",loc.hostname,loc.pathname].join(""):res);function track(type){var meta=ISA.meta();switch(type){case"facebook":ISA.track("fb-share");break;case"twitter":ISA.track("twttr-tweet");break;case"email":ISA.track("email-share-start")}ISA.provider("leapmetrics",function(Provider){Provider.get(function(Leap){Leap.track("share",{page_content_shared:meta.raw.title\|\|$("title").text(),page_share_method:type})})}),krux&&krux.callTracking()}this.init=function(){var print,commenting,icons;0!==container.length&&(icons=container.find(".social-icons"),0!==icons.find(".fb > a").length&&container.find(".fb > a").on("click",function(evt){evt.preventDefault();evt="//www.facebook.com/sharer/sharer.php?u="+encodeURIComponent(url)+"&hashtag="+encodeURIComponent("#FoxNews"),evt=window.open(evt,"Fox News : Share via Facebook","height=420, width=550");window.focus&&evt.focus(),track("facebook")}),0!==icons.find(".tw > a").length&&container.find(".tw > a").on("click",function(evt){evt.preventDefault();evt="//twitter.com/intent/tweet?text="+encodeURIComponent($('meta[name="twitter:title"]').attr("content"))+"&url="+encodeURIComponent(url)+"&hashtags=FoxNews",evt=window.open(evt,"Fox News : Share via Twitter","height=420, width=550");window.focus&&evt.focus(),track("twitter")}),0!==(commenting=icons.find(".comments > a")).length&&commenting.on("click",function(evt){evt.preventDefault();evt=$("#commenting");if(0<evt.length)try{$("html, body").animate({scrollTop:evt.position().top},"slow")}catch(err){console.log(err)}track("comment")}),0!==(commenting=icons.find(".email > a")).length&&commenting.on("click",function(evt){evt.preventDefault(),window.location.href="mailto:?subject="+encodeURIComponent($('meta[property="og:title"]').attr("content").trim()+" \| Fox News")+"&body="+encodeURIComponent($('meta[property="og:description"]').attr("content").trim()+" \| Fox News")+"%0D%0A%0D%0A"+encodeURIComponent(url),track("email")}),0!==(print=icons.find(".print > a")).length&&print.on("click",function(evt){evt.preventDefault(),track("print"),window.location.href=print.attr("href")}),0!==(commenting=icons.find(".flipboard")).length&&(commenting.find("> a").attr({"data-flip-widget":"shareflip",href:"https://flipboard.com"}),commenting.find("> a").on("click",function(evt){track("flipboard")}),(icons=document.createElement("script")).async=1,icons.src="https://cdn.flipboard.com/web/buttons/js/flbuttons.min.js",commenting.get(0).appendChild(icons)))}}}); equals www.facebook.com (Facebook)
Source: chromecache_419.2.dr	String found in binary or memory: Modulr.define("core.pages.articles:sites/fnc/social.sharing.buttons",["require","jquery","ISA"],function(require,$,ISA){var krux=ISA.provider("krux");return new function(){var loc,res,container=$(".article-social"),url=(loc=window.location,res=0===(res=($("link[rel=shorturl]").attr("href")\|\|"").replace(/^\s+\|\s+$/g,"")).length?$('meta[property="og:url"]').attr("content")\|\|[loc.protocol+"//",loc.hostname,loc.pathname].join(""):res);function track(type){var meta=ISA.meta();switch(type){case"facebook":ISA.track("fb-share");break;case"twitter":ISA.track("twttr-tweet");break;case"email":ISA.track("email-share-start")}ISA.provider("leapmetrics",function(Provider){Provider.get(function(Leap){Leap.track("share",{page_content_shared:meta.raw.title\|\|$("title").text(),page_share_method:type})})}),krux&&krux.callTracking()}this.init=function(){var print,commenting,icons;0!==container.length&&(icons=container.find(".social-icons"),0!==icons.find(".fb > a").length&&container.find(".fb > a").on("click",function(evt){evt.preventDefault();evt="//www.facebook.com/sharer/sharer.php?u="+encodeURIComponent(url)+"&hashtag="+encodeURIComponent("#FoxNews"),evt=window.open(evt,"Fox News : Share via Facebook","height=420, width=550");window.focus&&evt.focus(),track("facebook")}),0!==icons.find(".tw > a").length&&container.find(".tw > a").on("click",function(evt){evt.preventDefault();evt="//twitter.com/intent/tweet?text="+encodeURIComponent($('meta[name="twitter:title"]').attr("content"))+"&url="+encodeURIComponent(url)+"&hashtags=FoxNews",evt=window.open(evt,"Fox News : Share via Twitter","height=420, width=550");window.focus&&evt.focus(),track("twitter")}),0!==(commenting=icons.find(".comments > a")).length&&commenting.on("click",function(evt){evt.preventDefault();evt=$("#commenting");if(0<evt.length)try{$("html, body").animate({scrollTop:evt.position().top},"slow")}catch(err){console.log(err)}track("comment")}),0!==(commenting=icons.find(".email > a")).length&&commenting.on("click",function(evt){evt.preventDefault(),window.location.href="mailto:?subject="+encodeURIComponent($('meta[property="og:title"]').attr("content").trim()+" \| Fox News")+"&body="+encodeURIComponent($('meta[property="og:description"]').attr("content").trim()+" \| Fox News")+"%0D%0A%0D%0A"+encodeURIComponent(url),track("email")}),0!==(print=icons.find(".print > a")).length&&print.on("click",function(evt){evt.preventDefault(),track("print"),window.location.href=print.attr("href")}),0!==(commenting=icons.find(".flipboard")).length&&(commenting.find("> a").attr({"data-flip-widget":"shareflip",href:"https://flipboard.com"}),commenting.find("> a").on("click",function(evt){track("flipboard")}),(icons=document.createElement("script")).async=1,icons.src="https://cdn.flipboard.com/web/buttons/js/flbuttons.min.js",commenting.get(0).appendChild(icons)))}}}); equals www.twitter.com (Twitter)
Source: chromecache_301.2.dr	String found in binary or memory: Modulr.define("core.plugins:Sharing",["jquery"],function($){function App(){this._FB_SDK_LOADED=!1,this._FB_SDK_INIT=!1}var FB_STACK=[];function enc(str){return encodeURIComponent(str)}return App.prototype.facebook=function(url,appId,sdk){var done,share,s,id,fjs,self=this;url&&(done=function(){},sdk?appId&&(share={method:"share",mobile_iframe:"true",href:url},this._FB_SDK_INIT?this._FB_SDK_LOADED?window.FB.ui(share,done):FB_STACK=[{info:share,done:done}]:(this._FB_SDK_INIT=!0,window.fbAsyncInit=function(){var tmp;window.FB.init({appId:appId,xfbml:!0,version:"v2.8"}),self._FB_SDK_LOADED=!0,0<FB_STACK.length?(tmp=FB_STACK.shift(),window.FB.ui(tmp.info,tmp.done)):window.FB.ui(share,done)},sdk=document,s="script",id="facebook-jssdk",fjs=sdk.getElementsByTagName(s)[0],sdk.getElementById(id)\|\|((sdk=sdk.createElement(s)).id=id,sdk.src="//connect.facebook.net/en_US/sdk.js",fjs.parentNode.insertBefore(sdk,fjs)))):window.open("//www.facebook.com/sharer/sharer.php?u="+enc(url),"facebook","status=1,width=660,height=334"))},App.prototype.twitter=function(data){var url=enc(data.url),params=["text="+enc((data.title\|\|"")+" \| ")],url=(params.push("url="+url),data.via&&params.push("via="+data.via),data.related&&params.push("related="+data.related),"//twitter.com/intent/tweet?"+params.join("&"));window.open(url,"twitter","status=1,width=660,height=334")},new App}); equals www.facebook.com (Facebook)
Source: chromecache_249.2.dr, chromecache_525.2.dr, chromecache_301.2.dr	String found in binary or memory: Modulr.define("core.plugins:Sharing",["jquery"],function($){function App(){this._FB_SDK_LOADED=!1,this._FB_SDK_INIT=!1}var FB_STACK=[];function enc(str){return encodeURIComponent(str)}return App.prototype.facebook=function(url,appId,sdk){var done,share,s,id,fjs,self=this;url&&(done=function(){},sdk?appId&&(share={method:"share",mobile_iframe:"true",href:url},this._FB_SDK_INIT?this._FB_SDK_LOADED?window.FB.ui(share,done):FB_STACK=[{info:share,done:done}]:(this._FB_SDK_INIT=!0,window.fbAsyncInit=function(){var tmp;window.FB.init({appId:appId,xfbml:!0,version:"v2.8"}),self._FB_SDK_LOADED=!0,0<FB_STACK.length?(tmp=FB_STACK.shift(),window.FB.ui(tmp.info,tmp.done)):window.FB.ui(share,done)},sdk=document,s="script",id="facebook-jssdk",fjs=sdk.getElementsByTagName(s)[0],sdk.getElementById(id)\|\|((sdk=sdk.createElement(s)).id=id,sdk.src="//connect.facebook.net/en_US/sdk.js",fjs.parentNode.insertBefore(sdk,fjs)))):window.open("//www.facebook.com/sharer/sharer.php?u="+enc(url),"facebook","status=1,width=660,height=334"))},App.prototype.twitter=function(data){var url=enc(data.url),params=["text="+enc((data.title\|\|"")+" \| ")],url=(params.push("url="+url),data.via&&params.push("via="+data.via),data.related&&params.push("related="+data.related),"//twitter.com/intent/tweet?"+params.join("&"));window.open(url,"twitter","status=1,width=660,height=334")},new App}); equals www.twitter.com (Twitter)
Source: chromecache_617.2.dr	String found in binary or memory: Modulr.define("core.video:views/youtube/main",["require","jquery","helper","config","ISA","models/embeds","@fnc/listener","core.plugins:OnWindowResize"],function(require,$,Helper,config,ISA){function App(target,opts){this._target=target,this._opts=opts\|\|{},this._videoId=target.find(".video-youtube").attr("video-id"),this._INITIALIZED=!1,this._UID=PageEmbed.generateUID(),PageEmbed.initialize(this._UID,"youtube")}var PageEmbed=require("models/embeds"),ARTICLE_BODY=Helper.getArticleBody(),OnWindowResize=require("core.plugins:OnWindowResize");return App.prototype.set=function(id,target){this.setLegacy(this._target,this._videoId)},App.prototype.setLegacy=function(target,videoId){target.each(function(){var elm=$(this),id=videoId\|\|!1;if(!id)return!1;var iframe,body=ARTICLE_BODY,width=body.width(),height=Helper.getHeight(width);elm.html('<iframe src="//www.youtube.com/embed/'+id+'?version=3&enablejsapi=1" frameborder="0" style="width:'+width+"px; height:"+height+'px;"></iframe>'),iframe=elm.find("iframe:first"),OnWindowResize(function(){var w=body.width(),h=Helper.getHeight(w);iframe.css({width:w,height:h})},50)})},App}); equals www.youtube.com (Youtube)
Source: chromecache_451.2.dr	String found in binary or memory: \u003C\u002Fp\u003E"},content_type:U},{content:{alignment:S,format:T,text:"\u003Cp\u003EYou can follow Greg on \u003Ca href=\"https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Fgnorman10\u002F\" target=\"_blank\" rel=\"noreferrer noopener\"\u003E\u003Cu\u003ELinkedIn\u003C\u002Fu\u003E\u003C\u002Fa\u003E. equals www.linkedin.com (Linkedin)

Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/default/american-built.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/default/american-gold-the-legend-of-bear-gulch.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/default/americas-newsroom.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/default/special-program.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/default/the-pursuit-with-john-rich.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/talent/american-built.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/talent/american-gold-the-legend-of-bear-gulch.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/talent/jesse-watters-primetime.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/talent/special-program.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/talent/the-pursuit-with-john-rich.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.americans-newsroom.feature.1593623202.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.americas-news-hq-weekend.feature.1614974336.jp
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.americas-news-hq-weekend.main.1614974336.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.americas-news-hq.feature.1614978312.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.americas-news-hq.main.1614974268.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.countdown-to-the-closing-bell.feature.15626096
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.countdown-to-the-closing-bell.main.1562609620.
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.fox-business-tonight.feature.1612818301.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.fox-business-tonight.main.1612818301.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.fox-friends-first.feature.1610377839.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.fox-friends-first.main.1610377839.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.fox-friends.feature.1509052294.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.fox-friends.main.1509052294.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.fox-news-sunday-with-chris-wallace.feature.163
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.fox-news-sunday-with-chris-wallace.main.163952
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.gutfeld.main.1617125368.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.hannity.feature.1520969541.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.hannity.main.1520969541.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.kudlow.feature.1613424217.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.kudlow.main.1613424217.jpg
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.making-money-with-charles-payne.feature.150974
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.making-money-with-charles-payne.main.150974410
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.mediabuzz.feature.1591998085.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.mediabuzz.main.1591998110.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.outnumbered.main.1509052552.png
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.sunday-morning-futures-with-maria-bartiromo-1.
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.sunday-morning-futures-with-maria-bartiromo.fe
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.sunday-morning-futures-with-maria-bartiromo.ma
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.sunday-night-in-america-with-trey-gowdy.main.1
Source: chromecache_315.2.dr, chromecache_503.2.dr	String found in binary or memory: http://apps.foxnews.com/schedule_new/img/uploads/show.the-evening-edit.feature.1527103430.png

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source	Detection	Scanner	Label	Link
https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID	0%	URL Reputation	safe
https://dsp-ap.eskimi.com/pixelGet?ex=50&gdpr={gdpr}&gdpr_consent={gdpr_consent}&dest=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCookie={dmp_id}&gdpr={gdpr}&gdpr_consent={gdpr_consent}	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://dsp.360yield.com/ul_cb/dsp_match/275?ssp=76&gdpr=0&gdpr_consent=&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MzUmdGw9MTI5NjAw&piggybackCookie=%7BDSP_USER_ID%7D	0%	Virustotal		Browse
https://js.appboycdn.com/web-sdk/5.2/braze.min.js	0%	Virustotal		Browse
https://www.outkick.com	0%	Virustotal		Browse
https://help.coccoc.com/en/search-engine/coccoc-robots	0%	Virustotal		Browse
https://www.foxnews.com/shows/fox-and-friends	0%	Virustotal		Browse
https://pbs.publishers.tremorhub.com/pubsync?gdpr=&gdpr_consent=&us_privacy=1---&redir=https%3A%2F%2	0%	Virustotal		Browse
https://www.foxnews.com/apps-products?pid=AppArticleLink	0%	Virustotal		Browse
https://www.foxbusiness.com/shows/the-evening-edit	0%	Virustotal		Browse

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	142.250.185.98	true	false	unknown
um.simpli.fi	35.204.74.118	true	false	unknown
global.px.quantserve.com	91.228.74.244	true	false	unknown
ssum.casalemedia.com	104.18.36.155	true	false	unknown
dt-idgraph-api-986515573.us-west-2.elb.amazonaws.com	54.244.29.178	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
rtb.openx.net	35.227.252.103	true	false	unknown
tv.springserve.com	54.171.152.201	true	false	unknown
ih.adscale.de	35.158.222.255	true	false	unknown
hbopenbid-ams.pubmnet.com	185.64.189.112	true	false	unknown
d3aqntjehoyiyc.cloudfront.net	3.161.82.95	true	false	unknown
configs.knotch.com	18.244.140.93	true	false	unknown
mwzeom.zeotap.com	172.67.40.173	true	false	unknown
sync.crwdcntrl.net	54.74.215.235	true	false	unknown
dsum.casalemedia.com	104.18.36.155	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
rtb-csync-euw1.smartadserver.com	89.149.193.120	true	false	unknown
frontdoor.knotch.it	35.171.206.145	true	false	unknown
cm.g.doubleclick.net	172.217.16.194	true	false	unknown
idaas-ext.cph.liveintent.com	34.192.210.156	true	false	unknown
sync.1rx.io	46.228.174.117	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
d1twhgh32r3q6q.cloudfront.net	18.66.122.26	true	false	unknown
d2jsycj2ly2vqh.cloudfront.net	13.32.121.128	true	false	unknown
imagsync-lhrpairbc.pubmatic.com	185.64.191.214	true	false	unknown
spug-amsfpairbc.pubmnet.com	198.47.127.20	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	unknown
match.prod.bidr.io	46.137.57.71	true	false	unknown
nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site	138.68.144.46	true	false	unknown
pugm-lhrc.pubmnet.com	185.64.190.78	true	false	unknown
uip.semasio.net	77.243.51.121	true	false	unknown
m.deepintent.com	169.197.150.8	true	false	unknown
in-ftd-65.nl3.vip.prod.criteo.com	178.250.1.56	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	unknown
dh29jf0q5erm3.cloudfront.net	3.160.150.74	true	false	unknown
euw-ice.360yield.com	52.212.152.21	true	false	unknown
d1ykf07e75w7ss.cloudfront.net	108.138.190.150	true	false	unknown
foxnews.com.ssl.d1.sc.omtrdc.net	63.140.62.222	true	false	unknown
wp.wpenginepowered.com	141.193.213.10	true	false	unknown
cs.media.net	23.212.88.20	true	false	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	unknown
cs.emxdgt.com	18.192.157.52	true	false	unknown
presentation-ams1.turn.com	46.228.164.11	true	false	unknown
a.tribalfusion.com	172.64.150.63	true	false	unknown
js.appboycdn.com	104.16.119.9	true	false	unknown
pix.pub	108.138.7.86	true	false	unknown
sync.sxp.smartclip.net	35.186.194.101	true	false	unknown
amprtc.media.net	34.107.148.139	true	false	unknown
dsp-ap.eskimi.com	188.42.63.48	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	44.206.161.232	true	false	unknown
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	unknown
dac-yieldone-stable-asia-northeast1.pumpkin.uverse.iponweb.net	35.213.17.49	true	false	unknown
s.tribalfusion.com	104.18.37.193	true	false	unknown
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	unknown
iad-2-sync.go.sonobi.com	69.166.1.34	true	false	unknown
nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com	13.53.196.230	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com	52.210.114.164	true	false	unknown
foxnews-d.openx.net	35.244.159.8	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
rtb.gumgum.com	54.194.165.207	true	false	unknown
core.iprom.net	195.5.165.20	true	false	unknown
d296je7bbdd650.cloudfront.net	99.86.8.175	true	false	unknown
sync.admanmedia.com	8.2.110.26	true	false	unknown
bid-iad-static.yeahtargeter.com	47.253.61.56	true	false	unknown
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	unknown
spug-lhrc.pubmnet.com	185.64.190.81	true	false	unknown
sync.richaudience.com	162.55.233.29	true	false	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	unknown
ad-tech-pyxis-2124195674.us-west-2.elb.amazonaws.com	35.155.234.164	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	3.254.33.149	true	false	unknown
thrtle.com	44.223.158.28	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.204.65.61	true	false	unknown
as-sec.casalemedia.com	172.64.151.101	true	false	unknown
s.amazon-adsystem.com	98.82.154.76	true	false	unknown
aax-eu.amazon-adsystem.com	52.95.125.22	true	false	unknown
cr.frontend.weborama.fr	34.111.129.221	true	false	unknown
imgsync-amsfpairbc.pubmnet.com	198.47.127.18	true	false	unknown
sync.springserve.com	34.255.246.161	true	false	unknown
vid-io-dub.springserve.com	52.17.23.134	true	false	unknown
ipac.ctnsnet.com	35.186.193.173	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	unknown
www.datadoghq-browser-agent.com	108.138.181.106	true	false	unknown
match.adsby.bidtheatre.com	64.227.64.62	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
ib.anycast.adnxs.com	185.89.210.180	true	false	unknown
envoy-hl.envoy-csync.core-002-ew4.ov1o.com	35.214.204.186	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	unknown
match-eu-central-1-ecs.sharethrough.com	18.195.234.25	true	false	unknown
uipus.semasio.net	50.57.31.206	true	false	unknown
sync.go.sonobi.com	unknown	unknown	false	unknown
y.one.impact-ad.jp	unknown	unknown	false	unknown
ads.stickyadstv.com	unknown	unknown	false	unknown
fastlane.rubiconproject.com	unknown	unknown	false	unknown
use.fontawesome.com	unknown	unknown	false	unknown
api.foxnews.com	unknown	unknown	false	unknown
sync.targeting.unrulymedia.com	unknown	unknown	false	unknown
my.foxnews.com	unknown	unknown	false	unknown
www.ap.org	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:83c7b4f4-8487-4579-a622-cb3d86975b68&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw	false		unknown
https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=248ED6CA-D135-490B-BAC2-9969D07AEC9A&redir=true&gdpr=0&gdpr_consent=&dcc=t	false		unknown
https://uipus.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=248ED6CA-D135-490B-BAC2-9969D07AEC9A&sInitiator=external&gdpr=0&gdpr_consent=	false		unknown
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=17FC406C5357BA6E0A490D4D%40AdobeOrg&d_nsid=0&ts=1728380018412	false		unknown
https://dsp.360yield.com/ul_cb/dsp_match/275?ssp=76&gdpr=0&gdpr_consent=&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MzUmdGw9MTI5NjAw&piggybackCookie=%7BDSP_USER_ID%7D	false	0%, Virustotal, Browse	unknown
https://js.appboycdn.com/web-sdk/5.2/braze.min.js	false	0%, Virustotal, Browse	unknown
https://match.adsrvr.org/track/cmf/casale?us_privacy=1---	false		unknown
https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID	false	URL Reputation: safe	unknown
https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fvid-io-dub.springserve.com%2Fusersync%3Faid%3D1000017%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D1---%26uuid%3D%24UID	false		unknown
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=17FC406C5357BA6E0A490D4D%40AdobeOrg&d_nsid=0&d_mid=36396423295196379292336723827515560142&ts=1728380054162	false		unknown
https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=248ED6CA-D135-490B-BAC2-9969D07AEC9A	false		unknown
https://vid-io-dub.springserve.com/usersync?aid=1000015&gdpr=&gdpr_consent=&us_privacy=1---&uuid=2b9c319d8415416e8932b720035c2d61	false		unknown
https://rtb.openx.net/sync/prebid?gdpr=&gdpr_consent=&r=https%3A%2F%2Fvid-io-dub.springserve.com%2Fusersync%3Faid%3D1000008%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D1---%26uuid%3D%24%7BUID%7D&us_privacy=1---&ox_sc=1	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm=&google_hm=ZwT8otHM6McAAEo9AGoauAAADXcAAAIB&gdpr_consent=&us_privacy=1---&gdpr=&gpp=&gpp_sid=&google_tc=	false		unknown
https://dsp-ap.eskimi.com/pixelGet?ex=50&gdpr={gdpr}&gdpr_consent={gdpr_consent}&dest=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCookie={dmp_id}&gdpr={gdpr}&gdpr_consent={gdpr_consent}	false	URL Reputation: safe	unknown
https://pbs.publishers.tremorhub.com/pubsync/verify?gdpr=&gdpr_consent=&us_privacy=1---&redir=https%3A%2F%2Fvid-io-dub.springserve.com%2Fusersync%3Faid%3D1000015%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D1---%26uuid%3D%5Btvid%5D	false		unknown
http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/favicon.ico	false		unknown
https://x.bidswitch.net/ul_cb/sync?ssp=themediagrid&gdpr=&gdpr_consent=&us_privacy=1---	false		unknown
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=17FC406C5357BA6E0A490D4D%40AdobeOrg&d_nsid=0&d_mid=36396423295196379292336723827515560142&ts=1728380043187	false		unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7043208536114888392&gdpr=0&gdpr_consent=	false		unknown
https://pix.pub/t.png?l=foxnews-pix-fox-news-reach-and-frequency-062d298b-c587-4c31-a1b7-81d0d182403b&t=94587.38197295432	false		unknown
https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=248ED6CA-D135-490B-BAC2-9969D07AEC9A&gdpr=0&gdpr_consent=&ct=y	false		unknown
https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0&us_privacy=1---	false		unknown
https://vid-io-dub.springserve.com/usersync?aid=1000001&gdpr=&gdpr_consent=&us_privacy=1---&uuid=7043208536114888392	false		unknown
https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://match.adsrvr.org/track/cmb/casale?us_privacy=1---	false		unknown
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEHxzU1Aak9dUsTiwhzekFXY&google_cver=1	false		unknown
https://cdn.flipboard.com/dev_O/clear.gif?utm_source=https%3A%2F%2Fwww.foxnews.com%2Fworld%2Fmexican-mayor-murdered-week-taking-office	false		unknown
https://rtb.openx.net/sync/prebid?gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fvid-io-dub.springserve.com%2Fusersync%3Faid%3D1000008%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D1---%26uuid%3D%24%7BUID%7D	false		unknown
https://thrtle.com/sync?vxii_pid=5026&vxii_pdid=f695921a-3116-467b-a114-dbfd25c572d2-6704fca7-5553&vxii_ts=1&_t=1728380071&_reach=1	false		unknown
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69712652&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---	false		unknown
https://bh.contextweb.com/rtset?gdpr=&gdpr_consent=&us_privacy=1---&pid=561910&ev=1&rurl=https%3A%2F%2Fvid-io-dub.springserve.com%2Fusersync%3Faid%3D1000011%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D1---%26uuid%3D%25%25VGUID%25%25	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.foxnews.com/e-rest/messaging/v1/messageDefinitionSends/key:60860/send	chromecache_556.2.dr, chromecache_593.2.dr	false		unknown
https://help.coccoc.com/en/search-engine/coccoc-robots	chromecache_443.2.dr, chromecache_492.2.dr	false	0%, Virustotal, Browse	unknown
https://foxnewsplayer-a.akamaihd.net/player/9.0.23//akamai/amp/errormanagement/Errormanagement.css	chromecache_638.2.dr, chromecache_660.2.dr	false		unknown
https://puzzles.kingdigital.com/jscripts/drawportal.php?clientID=test_fox&contentType=puzzle&content	chromecache_249.2.dr, chromecache_525.2.dr, chromecache_301.2.dr	false		unknown
https://www.foxnews.com/opinion/parents-kidnapped-hamas-they-footnote-gaza-war-they-essence"	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/video/6339992395112">"Axis	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/world/israeli-kibbutz-beeri-confirms-death-2-hostages-hamas-terror-group-vid	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/world/us-interests-in-israel-iron-dome-funding">support	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/category/world/world-regions/israel">current	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.outkick.com	chromecache_484.2.dr, chromecache_451.2.dr	false	0%, Virustotal, Browse	unknown
https://www.foxnews.com/us/pentagon-merchant-death-viktor-bout-arms-trafficking-brittney-griner-exch	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/shows/fox-and-friends	chromecache_315.2.dr, chromecache_503.2.dr	false	0%, Virustotal, Browse	unknown
https://www.foxbusiness.com/shows/the-evening-edit	chromecache_315.2.dr, chromecache_503.2.dr	false	0%, Virustotal, Browse	unknown
https://pbs.publishers.tremorhub.com/pubsync?gdpr=&gdpr_consent=&us_privacy=1---&redir=https%3A%2F%2	chromecache_631.2.dr, chromecache_637.2.dr	false	0%, Virustotal, Browse	unknown
https://www.foxnews.com/world/suicide-advocates-boast-over-apparent-use-sarco-suicide-capsule-us-cit	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/apps-products?pid=AppArticleLink	chromecache_484.2.dr, chromecache_451.2.dr	false	0%, Virustotal, Browse	unknown
https://www.nytimes.com/2024/06/24/nyregion/hamas-gaza-aid-unrwa-lawsuit.html"	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/opinion/danny-danon-un-abdicates-role-middle-east-peacemaker-backing-terrori	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/lifestyle/franklin-grahams-samaritans-purse-sponsors-21-ambulances-israel-re	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
http://apps.foxnews.com/schedule_new/img/uploads/show.mediabuzz.main.1591998110.png	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://noticias.foxnews.com/politica-de-subtitulos	chromecache_432.2.dr, chromecache_344.2.dr, chromecache_571.2.dr, chromecache_559.2.dr	false		unknown
https://pixel.rubiconproject.com/token?pid=52948&gdpr=&gdpr_consent=&us_privacy=1---&rk=dub	chromecache_631.2.dr, chromecache_637.2.dr	false		unknown
https://ssum.casalemedia.com/usermatch?s=191709&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2	chromecache_631.2.dr, chromecache_637.2.dr	false		unknown
https://www.foxnews.com/world/israels-military-force-war-hamas-idf-hits-back-terror-targets"	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://github.com/prerender/prerender	chromecache_248.2.dr, chromecache_233.2.dr	false		unknown
https://www.wikidata.org/wiki/Q186068	chromecache_484.2.dr, chromecache_451.2.dr	false		unknown
https://www.foxnews.com/shows/fox-friends-first	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://www.foxnews.com/world/28-confirmed-dead-pakistan-bus-plunges-rocky-ravine"	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://image8.pubmatic.com/AdServer/ImgSync?p=157310&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pu	chromecache_631.2.dr, chromecache_637.2.dr	false		unknown
https://www.foxnews.com/politics/father-american-israeli-hostage-pleads-deal-with-satan-before-biden	chromecache_499.2.dr, chromecache_440.2.dr, chromecache_451.2.dr	false		unknown
https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=&gdpr_consent=&us_privacy=1---&predirect=ht	chromecache_631.2.dr, chromecache_637.2.dr	false		unknown
https://static.foxnews.com/static/strike/ver/foxnews/app/global.v180.js	chromecache_654.2.dr, chromecache_305.2.dr	false		unknown
http://apps.foxnews.com/schedule_new/img/uploads/show.sunday-night-in-america-with-trey-gowdy.main.1	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://www.foxnews.com/world/iran-warns-decisive-response-israel-crosses-red-lines"	chromecache_440.2.dr	false		unknown
http://apps.foxnews.com/schedule_new/img/default/american-gold-the-legend-of-bear-gulch.jpg	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://www.foxnews.com/category/world/world-regions/sweden"	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/world/ex-israeli-defense-minister-says-iran-planning-nuclear-holocaust-regim	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://modernizr.com/download/?-cookies-cssanimations-csstransitions-fullscreen-geolocation-hashcha	chromecache_602.2.dr, chromecache_490.2.dr	false		unknown
https://www.foxnews.com/category/world/world-regions/europe"	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://sync.1rx.io/usersync2/rmphb?gdpr=&gdpr_consent=&us_privacy=1---&redir=https%3A%2F%2Fvid-io-d	chromecache_631.2.dr, chromecache_637.2.dr	false		unknown
https://sync.richaudience.com/74889303289e27f327ad0c6de7be7264/?consentString=&r=https%3A%2F%2Fvid-i	chromecache_631.2.dr, chromecache_637.2.dr	false		unknown
https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=248ED6CA-D135-490B-BAC2-9969D07A	chromecache_397.2.dr	false		unknown
https://www.foxbusiness.com/shows/american-built	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://www.foxnews.com/category/us/military/marines"	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
http://braze.com	chromecache_248.2.dr, chromecache_233.2.dr	false		unknown
https://static.foxnews.com/static/strike/ver/foxnews/app/amp.v180.js	chromecache_313.2.dr, chromecache_374.2.dr	false		unknown
https://npms.io/search?q=ponyfill.	chromecache_249.2.dr, chromecache_525.2.dr, chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/stephen-hubba	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
http://www.foxnews.com/americasnewsroom	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://www.foxnews.com/world/israeli-war-cabinet-minister-benny-gantz-quits-netanyahus-emergency-go	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/world/biden-says-he-talk-netanyahu-israel-pummels-sunni-terror-targets-beiru	chromecache_440.2.dr	false		unknown
https://radio.foxnews.com/podcast	chromecache_484.2.dr, chromecache_451.2.dr	false		unknown
https://www.foxnews.com/world/israel-war-see-photos-video-attack-aftermath">As	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://github.com/blueimp/JavaScript-MD5	chromecache_603.2.dr, chromecache_447.2.dr	false		unknown
https://nypost.com/2024/10/06/world-news/american-hostage-keith-samuel-siegels-wife-says-he-is-suffe	chromecache_499.2.dr, chromecache_440.2.dr, chromecache_451.2.dr	false		unknown
http://apps.foxnews.com/schedule_new/img/uploads/show.fox-news-sunday-with-chris-wallace.feature.163	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://www.foxnews.com/politics/biden-warns-netanyahu-rafah-invasion-israel-prepares-action"&g	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/us/israel-attacked-by-iran-american-jewish-leaders-say-islamist-regime-will-	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
http://apps.foxnews.com/schedule_new/img/uploads/show.the-next-revolution-with-steve-hilton.feature.	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/ap24281617622	chromecache_484.2.dr, chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/sports/viktor-bout-merchant-death-discusses-exchange-brittney-griner-wished-	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
http://apps.foxnews.com/schedule_new/img/talent/american-gold-the-legend-of-bear-gulch.png	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/iran-airways.	chromecache_499.2.dr, chromecache_440.2.dr	false		unknown
https://www.foxnews.com/shows/americas-news-hq	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
https://www.foxbusiness.com/shows/fox-business-tonight	chromecache_315.2.dr, chromecache_503.2.dr	false		unknown
http://pajhome.org.uk/crypt/md5	chromecache_603.2.dr, chromecache_447.2.dr	false		unknown
https://www.foxnews.com/world/benjamin-netanyahus-churchill-moment-comes-amid-multi-front-war-agains	chromecache_440.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
13.32.121.128	d2jsycj2ly2vqh.cloudfront.net	United States	16509	AMAZON-02US	false
8.2.110.26	sync.admanmedia.com	United States	46636	NATCOWEBUS	false
185.64.190.81	spug-lhrc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
77.243.51.121	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
46.137.57.71	match.prod.bidr.io	Ireland	16509	AMAZON-02US	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
52.21.165.234	unknown	United States	14618	AMAZON-AESUS	false
18.192.157.52	cs.emxdgt.com	United States	16509	AMAZON-02US	false
108.138.6.136	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
44.223.158.28	thrtle.com	United States	14618	AMAZON-AESUS	false
23.212.88.20	cs.media.net	United States	16625	AKAMAI-ASUS	false
35.214.204.186	envoy-hl.envoy-csync.core-002-ew4.ov1o.com	United States	19527	GOOGLE-2US	false
47.253.61.56	bid-iad-static.yeahtargeter.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
99.86.8.175	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
34.107.148.139	amprtc.media.net	United States	15169	GOOGLEUS	false
172.67.40.173	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
54.229.139.118	unknown	United States	16509	AMAZON-02US	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
87.248.119.252	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
185.89.210.180	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
46.228.164.11	presentation-ams1.turn.com	United Kingdom	56396	TURNGB	false
169.197.150.8	m.deepintent.com	United States	19381	SIMPLY-BITS-LLCUS	false
185.64.189.112	hbopenbid-ams.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
3.251.20.39	unknown	United States	16509	AMAZON-02US	false
52.212.152.21	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
108.138.7.86	pix.pub	United States	16509	AMAZON-02US	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
138.68.144.46	nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site	United States	14061	DIGITALOCEAN-ASNUS	false
185.64.190.78	pugm-lhrc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
89.149.192.197	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
13.53.196.230	nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com	United States	16509	AMAZON-02US	false
18.244.140.93	configs.knotch.com	United States	16509	AMAZON-02US	false
52.17.23.134	vid-io-dub.springserve.com	United States	16509	AMAZON-02US	false
52.95.125.22	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
69.166.1.34	iad-2-sync.go.sonobi.com	United States	27630	AS-XFERNETUS	false
13.33.219.205	unknown	United States	16509	AMAZON-02US	false
35.165.130.189	unknown	United States	16509	AMAZON-02US	false
162.55.233.29	sync.richaudience.com	United States	35893	ACPCA	false
64.227.64.62	match.adsby.bidtheatre.com	United States	14061	DIGITALOCEAN-ASNUS	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
142.250.185.98	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.119.9	js.appboycdn.com	United States	13335	CLOUDFLARENETUS	false
35.164.192.245	unknown	United States	16509	AMAZON-02US	false
91.228.74.244	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
3.160.150.127	unknown	United States	16509	AMAZON-02US	false
54.171.152.201	tv.springserve.com	United States	16509	AMAZON-02US	false
104.18.37.193	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
108.138.190.150	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
3.160.150.74	dh29jf0q5erm3.cloudfront.net	United States	16509	AMAZON-02US	false
52.204.65.61	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
108.138.181.106	www.datadoghq-browser-agent.com	United States	16509	AMAZON-02US	false
63.140.62.222	foxnews.com.ssl.d1.sc.omtrdc.net	United States	15224	OMNITUREUS	false
52.222.236.63	unknown	United States	16509	AMAZON-02US	false
198.47.127.20	spug-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
54.74.215.235	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
18.66.122.50	unknown	United States	3	MIT-GATEWAYSUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
98.82.158.241	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
35.155.234.164	ad-tech-pyxis-2124195674.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.16.128.67	unknown	United States	16509	AMAZON-02US	false
54.244.29.178	dt-idgraph-api-986515573.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.89.210.244	unknown	Germany	29990	ASN-APPNEXUS	false
35.213.17.49	dac-yieldone-stable-asia-northeast1.pumpkin.uverse.iponweb.net	United States	19527	GOOGLE-2US	false
172.64.150.63	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
18.195.234.25	match-eu-central-1-ecs.sharethrough.com	United States	16509	AMAZON-02US	false
104.18.36.155	ssum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
34.255.246.161	sync.springserve.com	United States	16509	AMAZON-02US	false
35.158.222.255	ih.adscale.de	United States	16509	AMAZON-02US	false
198.47.127.18	imgsync-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
178.250.1.56	in-ftd-65.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
54.72.222.63	unknown	United States	16509	AMAZON-02US	false
172.217.16.194	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.186.194.101	sync.sxp.smartclip.net	United States	15169	GOOGLEUS	false
52.223.40.198	unknown	United States	8987	AMAZONEXPANSIONGB	false
44.206.161.232	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
3.161.82.95	d3aqntjehoyiyc.cloudfront.net	United States	16509	AMAZON-02US	false
35.204.74.118	um.simpli.fi	United States	15169	GOOGLEUS	false
3.254.33.149	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
172.64.151.101	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
35.171.206.145	frontdoor.knotch.it	United States	14618	AMAZON-AESUS	false
195.5.165.20	core.iprom.net	Slovenia	44968	IPROM-ASSI	false
35.244.159.8	foxnews-d.openx.net	United States	15169	GOOGLEUS	false
104.22.51.98	unknown	United States	13335	CLOUDFLARENETUS	false
54.228.118.70	unknown	United States	16509	AMAZON-02US	false
98.82.154.76	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
54.194.165.207	rtb.gumgum.com	United States	16509	AMAZON-02US	false
74.119.117.16	widget.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
34.111.129.221	cr.frontend.weborama.fr	United States	15169	GOOGLEUS	false
3.161.82.28	unknown	United States	16509	AMAZON-02US	false
188.42.63.48	dsp-ap.eskimi.com	Luxembourg	7979	SERVERS-COMUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528884
Start date and time:	2024-10-08 11:32:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/4nbXVA123415bxwz821wfgqkoqbno9030GRUYZVSMVMDWDTG236348/3210Y21
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@37/676@351/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/ Browse: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office Browse: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre

Input	Output
URL: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/news?q=This%20link%20is%20locked! Model: jbxai	{ "brand":["Fox News World"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Back to the main page", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Fox News World RSS Feed", "has_visible_qrcode":false}

URL: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Subscribe", "text_input_field_labels":["Enter your email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Our Website is Coming Soon! We are working hard to give you the best experience. Stay tuned! -527 Days -6 Hours -34 Minutes -17 Seconds Enter your email Subscribe Fox News Learn more about our email marketing agency Unsubscribe from our newsletter Privacy Policy", "has_visible_qrcode":false}

URL: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/news?q=This%20link%20is%20locked! Model: jbxai	"{ \"brand\": [\"Fox News World\"], \"contains_trigger_text\": false, \"trigger_text\": \"\", \"prominent_button_name\": \"unknown\", \"text_input_field_labels\": \"unknown\", \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false, \"text\": \"Fox News World RSS Feed Back to the main page This link is locked! Reporter's Notebook: Iran's missiles strike Israel, and a deadly terror attack in Tel Aviv On the same day Iran attacked Israel with some 181 missiles last week, a terrorist attack saw 7 innocent Israelis murdered in cold blood by two Palestinians in the Tel Aviv area. No content available. Mexican mayor murdered less than a week after taking office Mayor Alejandro Arcos of Chilpancingo, Mexico, has been confirmed dead less than a week after being sworn into the notoriously dangerous city's highest office. No content available. Four American hostages remain in Hamas captivity a year after Oct. 7 massacre Secretary of State Antony Blinken is vowing that the U.S. \"will continue to work tirelessly\" to bring home Americans being held hostage by Hamas in Gaza. No content available. New report finds nearly 200% increase in antisemitic incidents in US since Oct. 7 Hamas terror massacre The Anti-Defamation League recorded around 10, 000 antisemitic incidents since Oct. 7, marking the largest year-to-year increase since the group started recording such incidents in 1970.\" } "

URL: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Subscribe", "text_input_field_labels":["Enter your email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Our Website is Coming Soon! We are working hard to give you the best experience. Stay tuned! -527 Days -6 Hours -34 Minutes -21 Seconds Enter your email Subscribe Fox News Learn more about our email marketing agency Unsubscribe from our newsletter Privacy Policy", "has_visible_qrcode":false}

URL: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/ Model: jbxai	{ "phishing_score":8, "brands":"unknown", "legit_domain":"unknown", "classification":"unknown", "reasons":["The brand is marked as 'unknown', and no specific brand can be identified from the URL.", "The domain 'feedbackfusion.site' does not correspond to any well-known brand.", "The URL contains a subdomain 'nbxvavlbbnks0ockyfxgnbxva' which appears random and suspicious.", "The domain extension '.site' is less common for legitimate brand websites and can be used in phishing attempts.", "The presence of an input field asking for an email without clear brand association is suspicious."], "brand_matches":[], "url_match":false, "brand_input":"unknown", "input_fields":"Enter your email"}

URL: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/ Model: jbxai	{ "phishing_score":8, "brands":"unknown", "legit_domain":"unknown", "classification":"unknown", "reasons":["The brand is marked as 'unknown', and no specific brand can be identified from the URL.", "The domain 'feedbackfusion.site' does not correspond to any well-known or known brand.", "The URL contains a subdomain 'nbxvavlbbnks0ockyfxgnbxva' which appears random and suspicious.", "The domain extension '.site' is less common for legitimate brand websites and can be used in phishing attempts.", "The presence of a generic input field asking for an email without clear brand association is suspicious."], "brand_matches":[], "url_match":false, "brand_input":"unknown", "input_fields":"Enter your email"}

URL: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Subscribe", "text_input_field_labels":["Enter your email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Our Website is Coming Soon! We are working hard to give you the best experience. Stay tuned! -527 Days -6 Hours -34 Minutes -26 Seconds Enter your email Subscribe Fox News Learn more about our email marketing agency Unsubscribe from our newsletter Privacy Policy", "has_visible_qrcode":false}

URL: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/ Model: jbxai	{ "phishing_score":8, "brands":"unknown", "legit_domain":"feedbackfusion.site", "classification":"unknown", "reasons":["The brand is marked as 'unknown', and no specific brand can be identified from the URL.", "The domain 'feedbackfusion.site' does not directly associate with any well-known brand.", "The URL contains a subdomain 'nbxvavlbbnks0ockyfxgnbxva', which appears random and suspicious.", "The presence of a generic input field asking for an email without clear brand association is a common phishing tactic.", "The domain extension '.site' is less common for well-known brands and can be used in phishing attempts."], "brand_matches":[], "url_match":false, "brand_input":"unknown", "input_fields":"Enter your email"}

URL: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office Model: jbxai	{ "brand":["FOX NEWS"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Watch TV", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Mexican mayor murdered less than a week after taking office Alejandro Arcos was sworn in as Chilpancingo, Mexico's mayor last Monday Associated Press Published October 7, 2024 4:56pm EDT", "has_visible_qrcode":false}

URL: https://www.foxnews.com/world/mexican-mayor-murdered-week-taking-office Model: jbxai	{ "brand":["FOX NEWS"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Watch TV", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Mexican mayor murdered less than a week after taking office Alejandro Arcos was sworn in as Chilpancingo, Mexico's mayor last Monday Associated Press Published October 7, 2024 4:56pm EDT", "has_visible_qrcode":false}

URL: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre Model: jbxai	{ "brand":["FOX NEWS"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Watch TV", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Four American hostages remain in Hamas captivity a year after Oct. 7 massacre Hamas is also holding the bodies of three Americans in Gaza Published October 7, 2024 3:37pm EDT", "has_visible_qrcode":false}

URL: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre Model: jbxai	{ "brand":["FOX NEWS"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Watch TV", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Four American hostages remain in Hamas captivity a year after Oct. 7 massacre Hamas is also holding the bodies of three Americans in Gaza Published October 7, 2024 3:37pm EDT", "has_visible_qrcode":false}

URL: https://www.foxnews.com/world/four-american-hostages-remain-hamas-captivity-year-after-oct-7-massacre Model: jbxai	"{ \"brand\": [\"FOX NEWS\"], \"contains_trigger_text\": false, \"trigger_text\": \"\", \"prominent_button_name\": \"Subscribe\", \"text_input_field_labels\": [\"Weekly\"], \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false, \"text\": \"Four American hostages remain in Hamas captivity a year after Oct. 7 massacre Hamas is also holding the bodies of three Americans in Gaza Published October 7, 2024 3:37pm EDT Antisemitism Exposed Fox News' Antisemitism Exposed\" newsletter brings you stories on the rising anti-Jewish prejudice across the U.S. and the world.\"\" } "

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 08:33:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.976373341852058
Encrypted:	false
SSDEEP:	48:8V0dyTeOKHxeidAKZdA1oehwiZUklqehuy+3:8Vt3m9Zy
MD5:	43A3F86CEB7FB797327046F1AFE0A305
SHA1:	245937D255E8ABEBD2AB731E8A37229DF5608471
SHA-256:	1F12040DF56C7ECE9839DE23CD9B72A62E317CE963F3D8014D4D526B1AD4B7D8
SHA-512:	8FB997A2A53E5E005903A474145431AB8F81AB024F7F0A7D97E2111860CA8DF496749746CC2ED96A2CB684A6F767FA95581C7FF6F4A8521C6AFE67321CF00E5F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........e...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IHY L....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VHY L....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VHY L....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VHY L..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VHY"L...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............].#.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 8, 2024 11:33:29.151936054 CEST	192.168.2.8	1.1.1.1	c24a	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:33:30.111046076 CEST	192.168.2.8	1.1.1.1	c27d	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:33:33.059179068 CEST	192.168.2.8	1.1.1.1	c2a5	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:33:34.256869078 CEST	192.168.2.8	1.1.1.1	c265	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:33:38.914468050 CEST	192.168.2.8	1.1.1.1	c27d	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:33:40.944724083 CEST	192.168.2.8	1.1.1.1	c26f	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:33:43.218704939 CEST	192.168.2.8	1.1.1.1	c25d	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:33:50.046832085 CEST	192.168.2.8	1.1.1.1	c27d	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:34:00.125199080 CEST	192.168.2.8	1.1.1.1	c23a	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:34:15.313137054 CEST	192.168.2.8	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:34:16.985838890 CEST	192.168.2.8	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Oct 8, 2024 11:34:34.154381037 CEST	192.168.2.8	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/4nbXVA123415bxwz821wfgqkoqbno9030GRUYZVSMVMDWDTG236348/3210Y21

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Windows Analysis Report
http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/4nbXVA123415bxwz821wfgqkoqbno9030GRUYZVSMVMDWDTG236348/3210Y21

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 11:33:06.632215023 CEST	522	OUT	GET /4nbXVA123415bxwz821wfgqkoqbno9030GRUYZVSMVMDWDTG236348/3210Y21 HTTP/1.1 Host: nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 8, 2024 11:33:06.867218018 CEST	369	IN	HTTP/1.1 308 Permanent Redirect Content-Type: text/html; charset=utf-8 Location: /news?q=This link is locked! X-Address: gin_throttle_mw_360000000000_8.46.123.33 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 9 X-Ratelimit-Reset: 1728383586 Date: Tue, 08 Oct 2024 09:33:06 GMT Content-Length: 64 Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 6e 65 77 73 3f 71 3d 54 68 69 73 20 6c 69 6e 6b 20 69 73 20 6c 6f 63 6b 65 64 21 22 3e 50 65 72 6d 61 6e 65 6e 74 20 52 65 64 69 72 65 63 74 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/news?q=This link is locked!">Permanent Redirect</a>.
Oct 8, 2024 11:33:07.010976076 CEST	493	OUT	GET /news?q=This%20link%20is%20locked! HTTP/1.1 Host: nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 8, 2024 11:33:07.177586079 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.33 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 8 X-Ratelimit-Reset: 1728383586 Date: Tue, 08 Oct 2024 09:33:07 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 6f 78 20 4e 65 77 73 20 57 6f 72 6c 64 20 52 53 53 20 46 65 65 64 20 20 2d 20 64 65 61 6c 73 6e 6f 77 2e 73 69 74 65 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 36 66 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Fox News World RSS Feed - dealsnow.site </title> <style> body { font-family: Arial, sans-serif; background-color: #f4f6f9; color: #333; margin: 0; padding: 0; } .container { width: 80%; margin: 0 auto; } h1 { font-size: 2rem; margin: 2rem 0; } .news-item { background-color: white; padding: 1.5rem; margin-bottom: 1rem; box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24); } .news-item h2 { font-size: 1.5rem; margin-bottom: 1rem; } .news-item a { color: #1a73e8; text-decoration: none; }
Oct 8, 2024 11:33:07.177604914 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 2e 6e 65 77 73 2d 69 74 65 6d 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 Data Ascii: .news-item a:hover { text-decoration: underline; } .news-item p { font-size: 1rem; margin-bottom: 0; } </style></head><body><div class="container"> <h1>Fox News W
Oct 8, 2024 11:33:07.177617073 CEST	996	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 75 69 64 20 3d 20 67 75 69 64 45 6c 65 6d 65 6e 74 20 3f 20 67 75 69 64 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3a 20 22 23 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: const guid = guidElement ? guidElement.textContent : "#"; const description = descriptionElement ? descriptionElement.textContent : "No description available."; const content = contentElement ? contentElemen
Oct 8, 2024 11:33:07.460506916 CEST	467	OUT	GET /favicon.ico HTTP/1.1 Host: nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/news?q=This%20link%20is%20locked! Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 8, 2024 11:33:07.626521111 CEST	256	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.33 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 7 X-Ratelimit-Reset: 1728383586 Date: Tue, 08 Oct 2024 09:33:07 GMT Content-Length: 0
Oct 8, 2024 11:33:16.583416939 CEST	460	OUT	GET / HTTP/1.1 Host: nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 8, 2024 11:33:16.749486923 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.33 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 6 X-Ratelimit-Reset: 1728383586 Date: Tue, 08 Oct 2024 09:33:16 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6d 69 6e 67 20 53 6f 6f 6e 20 2d 20 64 65 61 6c 73 6e 6f 77 2e 73 69 74 65 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0d 0a 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 3c 68 31 3e 4f 75 72 [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Coming Soon - dealsnow.site</title> <link rel="stylesheet" href="/assets/styles.css"></head><body><div class="container"> <h1>Our Website is Coming Soon!</h1> <p>We are working hard to give you the best experience. Stay tuned!</p> <div class="countdown"> <div class="countdown-item"> <span id="days">00</span> <label>Days</label> </div> <div class="countdown-item"> <span id="hours">00</span> <label>Hours</label> </div> <div class="countdown-item"> <span id="minutes">00</span> <label>Minutes</label> </div> <div class="countdown-item"> <span id="seconds">00</span> <label>Seconds</label>
Oct 8, 2024 11:33:16.749507904 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 69 64 3d 22 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 66 6f 72 6d 22 20 6f 6e 73 75 62 6d 69 74 3d 22 73 75 62 6d 69 74 46 6f 72 6d 28 Data Ascii: </div> </div> <form id="subscription-form" onsubmit="submitForm(event)"> <input type="email" id="email" placeholder="Enter your email" required> <button type="submit">Subscribe</button> <p id="subsc
Oct 8, 2024 11:33:16.749521017 CEST	778	IN	Data Raw: 30 20 2a 20 36 30 29 29 20 2f 20 28 31 30 30 30 20 2a 20 36 30 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 73 65 63 6f 6e 64 73 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 74 69 6d 65 52 65 6d 61 69 6e 69 6e 67 20 25 20 28 31 30 30 Data Ascii: 0 * 60)) / (1000 * 60)); const seconds = Math.floor((timeRemaining % (1000 * 60)) / 1000); daysElement.textContent = days.toString().padStart(2, '0'); hoursElement.textContent = hours.toString().padSta
Oct 8, 2024 11:33:16.866508961 CEST	394	OUT	GET /assets/styles.css HTTP/1.1 Host: nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://nbxvavlbbnks0ockyfxgnbxva.feedbackfusion.site/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 8, 2024 11:33:17.036288023 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1435 Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 18 Dec 2023 09:15:38 GMT Date: Tue, 08 Oct 2024 09:33:16 GMT Data Raw: 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 30 66 30 66 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 34 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 20 20 20 20 [TRUNCATED] Data Ascii: body { font-family: Arial, sans-serif; background-color: #f0f0f0; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; padding: 0;}.container { background-color: #ffffff; padding: 30px; border-radius: 10px; box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1); text-align: center;}h1 { font-size: 36px; margin-bottom: 20px; color: #333;}p { font-size: 18px; color: #777; margin-bottom: 40px;}.countdown { display: flex; justify-content: center; margin-bottom: 40px;}.countdown-item { display: inline-block; margin: 0 10px;}.countdown-item span { font-size: 24px; color: #444;}.countdown-item label { display: block; font-size: 14px; color: #999;}form { display: flex; justify-content: center; align-items: center; flex-direction: column;}input[type="email"] { font-size: 16px; padding: 10px; border: 1px solid #ccc; [TRUNCATED]
Oct 8, 2024 11:33:17.036309958 CEST	384	IN	Data Raw: 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 Data Ascii: max-width: 300px; margin-bottom: 20px;}button { font-size: 16px; padding: 10px 20px; background-color: #333; color: #fff; border: none; border-radius: 5px; cursor: pointer; transition: background-color
Oct 8, 2024 11:34:02.036356926 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 09:33:08 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=112354 Date: Tue, 08 Oct 2024 09:33:08 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 09:33:09 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=112289 Date: Tue, 08 Oct 2024 09:33:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-08 09:33:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:29 UTC	641	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.foxnews.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 09:33:30 UTC	642	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 331650 Connection: close Date: Tue, 08 Oct 2024 09:33:31 GMT Last-Modified: Wed, 28 Aug 2024 22:46:41 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 490f651effcacfa7d80143d3047d794e.cloudfront.net (CloudFront), 1.1 645f43b8717568c0a4b2c8f32ab504dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 ETag: "907cbdd883935369790d45cc9bd9e8b7" Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: MXP64-P1 X-Amz-Cf-Id: wjGgpKw0o8N4miaVh1x_6EmQQhaMQcLEYrt9xyI5_LaoKsa4680evQ==
2024-10-08 09:33:30 UTC	15835	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 38 32 37 2e 31 35 35 32 20 2d 20 32 30 32 34 2d 30 38 2d 32 37 20 31 35 3a 35 32 3a 34 34 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.827.1552 - 2024-08-27 15:52:44 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-10-08 09:33:30 UTC	16384	IN	Data Raw: 70 61 70 69 5f 73 79 6e 63 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6f 3d 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 3b 72 65 74 75 72 6e 20 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 2c 61 2c 75 2c 73 2c 64 2c 6c 2c 76 2c 66 2c 70 2c 67 2c 68 2c 6d 2c 79 2c 62 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 28 6e 75 6c 6c 21 3d 3d 28 67 3d 6e 75 6c 6c 3d 3d 3d 28 70 3d 6e 75 6c 6c 3d 3d 3d 28 66 3d 6e 75 6c 6c 3d 3d 3d 28 76 3d 6f 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 76 3f 76 6f 69 64 20 30 3a 76 2e 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7c 7c Data Ascii: papi_syncData,function(t){var e=t.account,o=t.customEvent;return r(void 0,void 0,void 0,(function(){var t,r,a,u,s,d,l,v,f,p,g,h,m,y,b;return i(this,(function(i){return(null!==(g=null===(p=null===(f=null===(v=o.detail)\|\|void 0===v?void 0:v.eventListener)\|\|
2024-10-08 09:33:30 UTC	16384	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 74 29 7d 29 2c 21 31 7d 72 65 74 75 72 6e 21 31 7d 28 65 2c 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 6f 2c 72 2c 69 2c 61 2c 63 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 72 65 73 74 72 69 63 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 61 6c 6c 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6c 69 62 72 61 72 79 56 65 72 73 69 6f 6e 73 2c 75 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 6e 75 6c 6c 3d Data Ascii: ew Error(t)}),!1}return!1}(e,t)\|\|function(t){var e,n,o,r,i,a,c=null===(o=null===(n=null===(e=null==t?void 0:t.detail)\|\|void 0===e?void 0:e.restrictions)\|\|void 0===n?void 0:n.allow)\|\|void 0===o?void 0:o.libraryVersions,u=null===(a=null===(i=null===(r=null=
2024-10-08 09:33:30 UTC	2048	IN	Data Raw: 7b 7d 74 72 79 7b 69 66 28 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 74 6f 70 21 3d 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 73 65 6c 66 29 72 65 74 75 72 6e 20 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 7d 28 74 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4d 74 28 74 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 2c 6f 2c 72 2c 61 3b 72 65 74 75 72 6e 20 69 28 74 Data Ascii: {}try{if(t.globalContext.top!==t.globalContext.self)return t.globalContext.document.referrer}catch(t){}return}(t);if(void 0!==n)return encodeURIComponent(n)}catch(t){}return""}function Mt(t){return r(this,void 0,void 0,(function(){var e,n,o,r,a;return i(t
2024-10-08 09:33:30 UTC	16384	IN	Data Raw: 73 65 6e 74 28 29 2c 5b 32 2c 77 2e 63 6f 6d 70 6c 65 74 65 64 5d 7d 7d 29 29 7d 29 29 7d 5d 2c 5b 42 74 2e 63 75 73 74 6f 6d 50 6c 61 63 65 6d 65 6e 74 5f 70 6c 61 63 65 6d 65 6e 74 5f 65 6e 61 62 6c 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 73 77 69 74 63 68 28 6f 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e Data Ascii: sent(),[2,w.completed]}}))}))}],[Bt.customPlacement_placement_enable,function(t){var e=t.account;return r(void 0,void 0,void 0,(function(){var t,n;return i(this,(function(o){switch(o.label){case 0:return function(t){var e,n;null===(n=null===(e=t.globalCon
2024-10-08 09:33:30 UTC	1514	IN	Data Raw: 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 63 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 65 76 65 6e 74 4e 61 6d 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 65 76 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 21 3d 3d 28 75 3d 65 2e 72 65 61 64 28 57 2c 7b 70 65 72 73 69 73 74 3a 21 30 7d 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 75 3f 75 3a 22 5b 5d 22 2c 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 2c 72 3d 6e 2e 64 65 74 61 69 6c 2e 65 76 65 6e 74 4e 61 6d 65 2c 61 3d 6f 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 76 65 6e 74 4e 61 6d 65 21 3d 3d 72 7d 29 29 2c 65 2e 77 72 69 74 Data Ascii: ==(null===(c=n.detail)\|\|void 0===c?void 0:c.eventName))throw new Error("Missing event information");return t=null!==(u=e.read(W,{persist:!0}))&&void 0!==u?u:"[]",o=JSON.parse(t),r=n.detail.eventName,a=o.filter((function(t){return t.eventName!==r})),e.writ
2024-10-08 09:33:30 UTC	16384	IN	Data Raw: 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 79 70 65 3d 3d 3d 71 65 2e 61 64 5f 64 65 62 75 67 53 65 73 73 69 6f 6e 5f 73 74 61 72 74 7d 29 29 2e 6c 65 6e 67 74 68 3e 31 7d 28 65 29 29 3f 5b 32 2c 77 2e 63 6f 6d 70 6c 65 74 65 64 5d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 72 65 61 64 28 48 2c 7b 70 65 72 73 69 73 74 3a 21 30 7d 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 26 26 6e 65 77 20 44 61 74 65 3e 3d 6e 65 77 20 44 61 74 65 28 4e 75 6d 62 65 72 28 65 29 29 7d 28 65 29 3f 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 64 65 6c 65 74 65 28 48 2c 7b 70 65 72 73 69 73 74 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 67 6c Data Ascii: ter((function(t){return t.type===qe.ad_debugSession_start})).length>1}(e))?[2,w.completed]:function(t){var e=t.read(H,{persist:!0});return void 0!==e&&new Date>=new Date(Number(e))}(e)?(function(t){t.delete(H,{persist:!0}),function(t){var e;null===(e=t.gl
2024-10-08 09:33:30 UTC	16384	IN	Data Raw: 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 76 3f 76 6f 69 64 20 30 3a 76 2e 5f 65 6e 64 70 6f 69 6e 74 44 6f 6d 61 69 6e 2c 69 6e 69 74 43 6f 6e 66 69 67 3a 7b 70 75 62 49 44 3a 65 2e 69 64 2c 69 73 53 65 6c 66 53 65 72 76 65 50 75 62 3a 33 36 3d 3d 3d 65 2e 69 64 2e 6c 65 6e 67 74 68 2c 64 65 61 6c 73 3a 21 30 7d 7d 29 5d 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 75 3d 69 2e 73 65 6e 74 28 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 75 70 64 61 74 65 28 66 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 28 65 2e 73 6c 6f 74 49 44 2c 6e 65 77 20 4d 61 70 29 7d 29 29 7d 28 74 2c 65 29 Data Ascii: .detail)\|\|void 0===v?void 0:v._endpointDomain,initConfig:{pubID:e.id,isSelfServePub:36===e.id.length,deals:!0}})]);case 1:return u=i.sent(),function(t,e){t.update(fn,(function(t){return function(t,e){e.forEach((function(e){t.set(e.slotID,new Map)}))}(t,e)
2024-10-08 09:33:30 UTC	16384	IN	Data Raw: 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 63 72 79 70 74 6f 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 55 55 49 44 3f 5b 32 2c 77 2e 63 61 6e 63 65 6c 6c 65 64 5d 3a 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 74 2e 75 73 65 28 6d 6f 2c 7b 70 65 72 73 69 73 74 3a 21 30 7d 29 3b 69 66 28 30 3d 3d 3d 28 6e 75 6c 6c 21 3d 6e 3f 6e 3a 22 22 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6f 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 73 70 6c 69 74 28 22 5f 22 29 5b 31 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 22 3b 69 Data Ascii: ject"!=typeof e.globalContext.crypto\|\|"function"!=typeof e.globalContext.crypto.randomUUID?[2,w.cancelled]:(function(t){var e,n=t.use(mo,{persist:!0});if(0===(null!=n?n:"").length)return!1;var o=null!==(e=null==n?void 0:n.split("_")[1])&&void 0!==e?e:"";i
2024-10-08 09:33:30 UTC	16384	IN	Data Raw: 74 2c 65 2c 6e 29 7b 74 72 79 7b 28 6e 75 6c 6c 21 3d 6e 26 26 6e 2e 6d 61 6b 65 56 69 73 69 62 6c 65 54 6f 41 6c 6c 55 73 65 72 73 7c 7c 4f 62 6a 65 63 74 28 69 2e 64 29 28 22 65 72 72 6f 72 73 22 29 29 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 74 29 3b 76 61 72 20 73 2c 66 2c 62 3d 7b 74 73 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 75 72 6c 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4f 62 6a 65 63 74 28 61 2e 67 29 28 77 69 6e 64 6f 77 29 29 2c 72 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4f 62 6a 65 63 74 28 61 2e 68 29 28 77 69 6e 64 6f 77 29 29 2c 5f 74 79 70 65 3a 22 61 70 73 4c 69 62 72 61 72 79 45 72 72 6f 72 22 2c 65 3a 7b 65 74 3a 74 2e 6e 61 6d 65 2c 65 6c 3a 65 2c 6d 73 67 3a 74 2e 6d 65 73 73 61 67 65 7d 7d Data Ascii: t,e,n){try{(null!=n&&n.makeVisibleToAllUsers\|\|Object(i.d)("errors"))&&console.error(t);var s,f,b={ts:Date.now(),url:encodeURIComponent(Object(a.g)(window)),r:encodeURIComponent(Object(a.h)(window)),_type:"apsLibraryError",e:{et:t.name,el:e,msg:t.message}}

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:31 UTC	359	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 09:33:32 UTC	649	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 331650 Connection: close Date: Tue, 08 Oct 2024 09:33:31 GMT Last-Modified: Wed, 28 Aug 2024 22:46:41 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 490f651effcacfa7d80143d3047d794e.cloudfront.net (CloudFront), 1.1 6c2674fb15c38f5458794dd680986b8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 ETag: "907cbdd883935369790d45cc9bd9e8b7" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: XClk8gVRNYx9f1h-E9Ad6mN3qQa-WC_BrqTflrZSvW6dg7J2YNDvqQ== Age: 1
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 38 32 37 2e 31 35 35 32 20 2d 20 32 30 32 34 2d 30 38 2d 32 37 20 31 35 3a 35 32 3a 34 34 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.827.1552 - 2024-08-27 15:52:44 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 29 7d 29 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 67 70 70 53 74 72 69 6e 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6e 3d 72 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 22 45 3a 70 69 6e 67 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 7d 72 65 74 75 72 6e 5b 6e 2c 6f 5d 7d 28 65 29 2c 32 29 2c 74 3d 64 5b 30 5d 2c 61 3d 64 5b 31 5d 2c 75 3d 22 70 69 6e 67 22 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6c 3d 63 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6f 3b 74 72 79 7b 76 61 72 20 72 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 Data Ascii: "object"==typeof t&&(n=t)}));void 0===n&&(null!==(e=null==r?void 0:r.gppString)&&void 0!==e?e:"").length>0&&(n=r)}catch(t){o="E:ping: ".concat(t)}return[n,o]}(e),2),t=d[0],a=d[1],u="ping","object"!=typeof t&&(l=c(function(t){var e,o;try{var r=t.globalCont
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 72 65 73 74 72 69 63 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 61 6c 6c 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 61 63 63 6f 75 6e 74 73 2c 73 3d 6e 75 6c 6c 3d 3d 3d 28 63 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 72 65 73 74 72 69 63 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 62 6c 6f 63 6b 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 61 63 63 6f 75 6e 74 73 3b 72 65 74 75 72 6e 21 28 21 41 72 72 61 79 Data Ascii: oid 0===n?void 0:n.restrictions)\|\|void 0===o?void 0:o.allow)\|\|void 0===r?void 0:r.accounts,s=null===(c=null===(a=null===(i=null==t?void 0:t.detail)\|\|void 0===i?void 0:i.restrictions)\|\|void 0===a?void 0:a.block)\|\|void 0===c?void 0:c.accounts;return!(!Array
2024-10-08 09:33:32 UTC	4542	IN	Data Raw: 65 79 3a 22 63 75 73 74 6f 6d 50 6c 61 63 65 6d 65 6e 74 2f 64 65 66 61 75 6c 74 4c 6f 63 61 74 69 6f 6e 48 69 6e 74 73 22 2c 64 65 66 61 75 6c 74 3a 6e 65 77 20 53 65 74 7d 2c 71 74 3d 7b 6b 65 79 3a 22 63 75 73 74 6f 6d 50 6c 61 63 65 6d 65 6e 74 2f 73 65 63 6f 6e 64 61 72 79 4c 6f 63 61 74 69 6f 6e 48 69 6e 74 73 22 2c 64 65 66 61 75 6c 74 3a 6e 65 77 20 53 65 74 7d 2c 7a 74 3d 7b 6b 65 79 3a 22 63 75 73 74 6f 6d 50 6c 61 63 65 6d 65 6e 74 2f 72 65 71 75 65 73 74 65 64 47 41 4d 53 6c 6f 74 73 22 2c 64 65 66 61 75 6c 74 3a 6e 65 77 20 53 65 74 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 74 28 74 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 2c 6f 3b 72 65 74 75 Data Ascii: ey:"customPlacement/defaultLocationHints",default:new Set},qt={key:"customPlacement/secondaryLocationHints",default:new Set},zt={key:"customPlacement/requestedGAMSlots",default:new Set};function Ft(t){return r(this,void 0,void 0,(function(){var e,n,o;retu
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 2c 6f 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 70 75 62 61 64 73 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 67 65 74 53 6c 6f 74 73 28 29 3b 6e 75 6c 6c 3d 3d 65 7c 7c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 53 6c 6f 74 45 6c 65 6d 65 6e 74 49 64 28 29 3d 3d 3d 74 2e 64 69 76 7d 29 29 3b 76 6f 69 64 20 30 21 3d 3d 65 26 26 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 2e 74 61 72 67 65 74 69 6e 67 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 Data Ascii: {var n,o=null===(n=null==t?void 0:t.pubads())\|\|void 0===n?void 0:n.getSlots();null==e\|\|e.forEach((function(t){var e=null==o?void 0:o.find((function(e){return e.getSlotElementId()===t.div}));void 0!==e&&Object.entries(t.targeting).forEach((function(t){var
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 29 72 65 74 75 72 6e 20 55 65 2e 68 69 67 68 45 6e 74 72 6f 70 79 3b 69 66 28 42 65 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 29 72 65 74 75 72 6e 20 55 65 2e 6c 6f 77 45 6e 74 72 6f 70 79 3b 72 65 74 75 72 6e 20 55 65 2e 75 6e 73 70 65 63 69 66 69 65 64 55 6e 6b 6e 6f 77 6e 7d 28 74 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 70 6c 61 74 66 6f 72 6d 26 26 28 6f 2e 70 6c 61 74 66 6f 72 6d 3d 7b 62 72 61 6e 64 3a 74 2e 70 6c 61 74 66 6f 72 6d 2c 76 65 72 73 69 6f 6e 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 70 6c 61 74 66 6f 72 6d 56 65 72 73 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f Data Ascii: ome((function(e){return t[e]})))return Ue.highEntropy;if(Be.some((function(e){return t[e]})))return Ue.lowEntropy;return Ue.unspecifiedUnknown}(t),"string"==typeof t.platform&&(o.platform={brand:t.platform,version:null===(e=t.platformVersion)\|\|void 0===e?
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 61 6c 75 65 20 70 72 6f 76 69 64 65 64 20 69 73 6e 27 74 20 63 75 72 72 65 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 22 29 7d 29 29 7d 29 29 7d 5d 2c 5b 55 6e 2e 61 64 5f 73 63 68 61 69 6e 5f 64 65 66 69 6e 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6e 3d 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 3b 72 65 74 75 72 6e 20 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 63 68 61 69 6e 29 29 74 68 72 Data Ascii: alue provided isn't currently supported")}))}))}],[Un.ad_schain_define,function(t){var e=t.account,n=t.customEvent;return r(void 0,void 0,void 0,(function(){var t;return i(this,(function(o){if(void 0===(null===(t=n.detail)\|\|void 0===t?void 0:t.schain))thr
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 6c 6c 3d 3d 3d 28 6f 3d 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 61 70 73 74 61 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 64 65 62 75 67 29 3f 5b 32 2c 7b 73 74 61 74 75 73 3a 77 2e 77 61 69 74 69 6e 67 7d 5d 3a 28 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 61 70 73 74 61 67 2e 64 70 61 28 6e 2e 63 61 6c 6c 62 61 63 6b 29 2c 5b 32 2c 7b 73 74 61 74 75 73 3a 77 2e 63 6f 6d 70 6c 65 74 65 64 7d 5d 29 7d 29 29 7d 29 29 7d 7d 29 2c 45 6f 3d 6e 65 77 20 56 28 7b 73 63 6f 70 65 3a 22 6c 65 67 61 63 79 22 2c 6f 62 6a 65 63 74 3a 22 75 70 61 22 2c 61 63 74 69 6f 6e 3a 22 65 6e 71 75 65 75 65 22 2c 76 61 6c 69 64 61 74 6f 72 73 3a 7b 64 65 74 61 69 6c 3a 7b 73 65 74 43 6f 6f 6b 69 65 3a 42 28 7a 29 7d 7d 2c 68 61 6e 64 6c Data Ascii: ll===(o=e.globalContext.apstag)\|\|void 0===o?void 0:o.debug)?[2,{status:w.waiting}]:(e.globalContext.apstag.dpa(n.callback),[2,{status:w.completed}])}))}))}}),Eo=new V({scope:"legacy",object:"upa",action:"enqueue",validators:{detail:{setCookie:B(z)}},handl
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 63 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 65 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 2c 6e 29 7b 72 Data Ascii: h((function(e){u(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):c(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function u(t,e,n){r
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 72 28 6e 3d 6e 2e 63 61 6c 6c 28 74 2c 65 29 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 28 74 2c 22 73 74 72 69 6e 67 22 29 2c 22 73 79 6d 62 6f 6c 22 3d 3d 3d 72 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 65 3d 65 2e Data Ascii: e];if(void 0===n)return String(t);if("object"!==r(n=n.call(t,e)))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string"),"symbol"===r(t)?t:String(t)}n.d(e,"a",(function(){return l}));var s=function(){function t(e){if(e=e.

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:32 UTC	823	OUT	GET /v1/static/694940094001/75b1a5d2-95d9-45f1-96d2-39cca69892fa/62912293-f0fc-48a0-8933-963937084ce2/1280x720/match/image.jpg HTTP/1.1 Host: cf-images.us-east-1.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.foxnews.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 09:33:32 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Date: Tue, 08 Oct 2024 02:19:01 GMT Expires: Wed, 08 Oct 2025 02:19:01 GMT Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT X-Powered-By: BC X-Powered-From: gantry X-Cache: Hit from cloudfront Via: 1.1 cce339e34372cea758a4181fcf4e7c14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: iW9LafHpkuZO16tWv3bOCYHq7bTmZwGMayOllMfBb8Enh4MqPFLfVQ== Age: 26071
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 02 00 03 01 04 07 08 09 06 05 ff c4 00 75 10 00 01 01 05 03 07 06 08 07 07 0d 0a 09 0a 04 07 02 00 03 12 22 32 42 01 04 52 05 06 11 13 62 72 92 07 23 33 Data Ascii: 3ffaJFIFCC"u"2BRbr#3
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 0d 0a 34 62 63 35 0d 0a 7a 77 8a a4 c4 07 c7 d9 fa 0a 08 2b a9 70 b3 2b 00 a3 dd c4 a8 9e fb 49 34 af 75 50 6b 17 6a 59 96 88 26 a4 95 60 49 ed 2d 59 04 d2 d6 8d 21 d8 59 ac 1c 3e f6 24 1c 87 b3 89 6d 07 79 07 c5 de ca 0a ca fb 15 2a d0 92 1e f2 89 c7 ce 2c 2a 78 50 01 0f ab 52 9d f5 d5 89 4f aa 0e f2 95 0b 9e ab 38 d4 e4 61 ed 24 aa d2 b9 19 68 2f 73 43 41 e1 b3 89 6c cc 3c a8 5b 44 4a 00 d1 ee f2 2e 43 d9 c4 b5 29 26 42 17 7b 28 2b 02 7e c5 48 b9 10 45 de 5a 93 9c e4 b4 7f f1 42 b5 15 c2 d9 0f 59 12 bd ac 69 d9 5c 8a f3 f6 92 b8 18 88 17 39 ed 27 13 c9 88 74 92 f0 a9 94 c3 22 91 c3 85 b4 a7 0b 69 2f 69 70 3d 64 2a 87 0e 16 d2 d1 9b cf db 34 e8 58 11 8a 56 04 61 bc 80 c4 e8 4c b5 d2 58 09 01 f3 27 67 58 81 b2 b0 b0 9c b8 50 73 7a 54 d9 79 3b 28 41 dd 57 Data Ascii: 4bc5zw+p+I4uPkjY&`I-Y!Y>$my,xPRO8a$h/sCAl<[DJ.C)&B{(+~HEZBYi\9't"i/ip=d*4XVaLX'gXPszTy;(AW
2024-10-08 09:33:32 UTC	3023	IN	Data Raw: de ed 91 da b2 fb a9 79 bc 51 7c 6a f9 80 32 fe 89 c2 33 1d a0 c2 bd 15 5f 6b d0 38 78 86 bf 11 2f 54 9e 8b a8 6e bc bb af ca 97 d6 1f 83 e3 fc 59 73 77 f9 7b e7 f6 83 5f 27 97 d6 5f 83 fc 5c f0 63 cd a2 c4 de f9 fd ad aa df da 1c 7f f1 a3 fa b9 d3 3d 6f 63 6c f1 e9 5e 98 7c 20 3c 81 1e 7c e6 7b 2c ff 00 c9 0c 1e ca f9 b4 c8 be 38 03 fe 51 70 98 fe 68 9e 3d d2 6b b2 bd 86 e5 0f 94 fb 87 26 76 e6 db 5c b3 66 ae e7 96 32 c3 2c 91 af 23 81 83 56 8c 9a 98 19 ec be c8 07 b6 f2 f2 0b 66 01 79 64 6c 9a 88 9b 22 17 48 4a a5 f0 7c 7d d3 e3 4e 3b 22 fa 0d 91 8e d8 cb 5b d3 ff 00 83 3a df ef 33 9c bf f4 80 ff 00 b3 dd d7 ee 7c 3e ff 00 c5 6b 3a ff 00 97 b8 7f 6b 64 bf b9 e0 ff 00 c8 a0 72 1a cb 3d 32 45 cd df b8 b7 fc ba 79 4b 26 07 a2 60 6c 99 73 5d 82 03 0d d1 02 Data Ascii: yQ\|j23_k8x/TnYsw{_'_\c=ocl^\| <\|{,8Qph=k&v\f2,#Vfydl"HJ\|}N;"[:3\|>k:kdr=2EyK&`ls]
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a c2 be b7 8b 65 17 ed c4 d6 6c 4b 53 09 e1 1e 2d 84 75 7e be f1 2c 6a 31 37 8c 0e 26 b2 e2 4c c2 33 89 a4 d8 95 45 32 e2 51 ce 7b f8 92 ab 8c 83 41 62 6b 2e 24 0d e7 86 26 92 85 49 88 45 64 34 9d 48 05 b0 53 28 54 b3 5d 94 4f 4c d6 62 a9 13 97 ad 97 12 d4 66 b6 59 8e a3 59 18 43 28 cb 89 1c 0b 26 b6 26 b3 0d 4a b0 e4 89 af 12 6e 46 70 84 c3 56 c2 03 e7 96 ba 94 2d 53 57 12 a1 d6 d5 31 54 a7 20 94 78 95 e7 a7 a5 c4 8d 40 24 08 9a 71 6d a3 6f 9a 6a 2a 49 c8 42 01 e2 db 55 61 2d 35 28 05 95 13 57 52 0c de 72 d8 9a f1 26 ca 89 6b a9 06 55 4b c4 8b 0a e7 6b 36 2d 85 1f 44 73 cb 89 33 0d 90 e2 d9 40 dd 76 99 71 28 90 9a 01 f3 93 71 23 57 5b c6 91 80 be 72 a9 d1 7e 9e 25 d1 97 15 15 2e 3f da 73 62 5c d8 ec 72 d1 5a b4 ec 0c ca 16 ca 9e b7 8d 21 Data Ascii: 3ffaelKS-u~,j17&L3E2Q{Abk.$&IEd4HS(T]OLbfYYC(&&JnFpV-SW1T x@$qmoj*IBUa-5(WRr&kUKk6-Ds3@vq(q#W[r~%.?sb\rZ!
2024-10-08 09:33:32 UTC	16384	IN	Data Raw: 0d 0a 36 63 31 63 0d 0a 69 69 1b e3 aa 60 c0 4c 1d ed 5e 1a f7 17 a8 ea 5c 89 71 f4 e7 31 7b 3e 16 88 ed d9 8c 49 fd eb d6 4d e4 3b c0 33 35 ee ad ef 6c ed ca 39 dc 4c 9e 65 78 f8 b8 de b2 c5 f2 92 30 a5 83 29 f0 0c 35 1c de 16 ce 6f 85 1b 3c af 2d ec 2c 85 9a 59 03 25 dd 65 26 59 4d a3 7b e1 11 ef 0e ab e8 2f 5b 79 74 e5 17 29 f2 85 cb 16 79 67 0d f9 bd e5 b5 b7 8b e5 e1 95 d4 1a 93 ba 8b a8 9b ac 99 43 80 5c fa 53 af 1e 99 b5 7e 66 93 62 d9 5e b3 8b c0 86 d8 77 9b be 29 65 ec 36 ee 94 25 5d 7f 0c 5e e2 64 cf 85 07 94 d6 17 c6 45 7e cd ac d5 bd 5d 40 b9 d6 57 76 17 a6 46 63 b2 64 d4 9d e0 25 e6 dc c7 f0 92 e4 67 c3 15 8b 1c cc cf cc dc 63 92 b2 eb 73 76 eb 93 b2 b1 6b 01 a1 99 7f 92 de 85 c2 16 90 07 a3 28 dd 17 97 cc b7 cf 1b 4e 25 0b 66 ac 4c cc 49 b8 Data Ascii: 6c1cii`L^\q1{>IM;35l9Lex0)5o<-,Y%e&YM{/[yt)ygC\S~fb^w)e6%]^dE~]@WvFcd%gcsvk(N%fLI
2024-10-08 09:33:32 UTC	11302	IN	Data Raw: 70 ad 99 3c f5 bb d8 57 5f 47 af bc b5 65 d2 f6 b1 2a b0 81 e7 42 6e 11 5b 3e 5b 54 75 40 ba ec a4 0f 69 2b 2b ec 54 2a c6 cc cc bc 7e c8 29 91 c1 6c dd 17 a2 04 19 55 ed 28 0e 0f e8 b1 22 1a be 4f 3d a4 e6 c0 a8 a3 9a 52 ea 85 1d 1f e9 e2 4b 1c 78 aa 56 1d a6 5c e4 df 34 2a 03 27 c2 6e 14 0b ad f6 94 c9 ef 1f b6 81 83 da 6a 97 d1 0a 71 3d 54 d8 45 63 a0 bd cd 3b 28 de c4 8c 89 91 90 39 34 be 8b 61 3d 1b f4 75 4b 2b 24 08 fb db 09 d1 ff 00 da ac 6b 16 d5 54 82 56 19 38 73 7c d0 2c 06 cf 2f 6e a4 ac f1 f6 91 ca b6 7c 8d ad 73 0f 54 0a 65 44 d2 fa 21 c6 84 40 5d a1 a9 06 71 80 6e e2 db 54 ce 4d 85 f0 1b 46 2a 3a a0 49 99 93 d6 cf 3f a2 1c 2b 21 7b c7 d9 a8 13 64 f5 a5 6e f6 2d 85 a5 90 4f 93 b5 4b e8 85 6d 63 d1 cd 37 a2 d8 5d 78 9c 1d dc 4b 53 af 7b 10 61 Data Ascii: p<W_GeBn[>[Tu@i++T~)lU("O=RKxV\4'njq=TEc;(94a=uK+$kTV8s\|,/n\|sTeD!@]qnTMF:I?+!{dn-OKmc7]xKS{a
2024-10-08 09:33:32 UTC	10413	IN	Data Raw: 32 38 61 35 0d 0a 38 7b 38 f6 d3 eb 7b 58 97 43 1b 0a d3 08 89 0b 5e 76 aa 14 ce 8f 69 56 59 e5 ec d4 a0 03 38 0e 22 e0 4c ce 78 89 03 93 ed 28 ba df 69 1d aa 13 27 ce 22 99 53 84 c5 2a 27 d2 db bd 89 0f 67 1a e5 8a b6 7f 7a 64 22 7e 62 9d 0d 1e be f2 e7 4c 1d ac 4a 2c d2 a5 13 b3 12 a2 7a 62 40 65 f5 ba 15 20 27 1d 9b d8 97 44 fc 33 14 a9 be 4f cc 54 20 cb cf bb 89 11 b3 cb d9 a9 67 65 d4 a2 76 62 5c bb b6 52 a1 a6 1f b4 85 92 b4 dd c6 a6 c3 5b 3c 46 d2 22 99 4c cf cb 32 16 f4 b6 ef a2 ca 8d dc 49 65 9b f6 e3 25 58 f4 11 1c c8 32 92 de ca 76 79 42 69 94 81 4c c6 aa a6 35 50 85 6a 43 03 84 62 29 10 b0 e4 88 95 67 90 37 51 d1 fe 9e 24 08 cf 68 d1 7e 0a a5 56 8f f4 f1 21 4f 65 06 a4 71 b4 88 a9 44 7c 4e 44 48 34 9c b7 85 01 f3 25 b2 a6 c3 64 13 60 42 c6 91 Data Ascii: 28a58{8{XC^viVY8"Lx(i'"S*'gzd"~bLJ,zb@e 'D3OT gevb\R[<F"L2Ie%X2vyBiL5PjCb)g7Q$h~V!OeqD\|NDH4%d`B
2024-10-08 09:33:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:33 UTC	654	OUT	GET /datadog-rum-v4.js HTTP/1.1 Host: www.datadoghq-browser-agent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.foxnews.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 09:33:33 UTC	597	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 153156 Connection: close Last-Modified: Mon, 09 Oct 2023 11:26:13 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 08 Oct 2024 09:33:31 GMT Cache-Control: max-age=14400, s-maxage=60 ETag: "2630b3d7ad4a41fac67742216e506d83" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2c6b43ece241a6b4a6a59e19ffb626fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP64-P1 X-Amz-Cf-Id: myGBPPZXkV0N44JdjJE0E2Al2guLGXczWjW6gEZzWdbXPef04fkLOQ== Age: 3 Timing-Allow-Origin: *
2024-10-08 09:33:33 UTC	15787	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 65 3d 63 6f 6e 73 6f 6c 65 2c 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 3b 76 61 72 20 72 3d 22 44 61 74 61 64 6f 67 20 42 72 6f 77 73 65 72 20 53 44 4b 3a 22 2c 69 3d 7b 64 65 62 75 67 3a 6e 2e 64 65 62 75 67 2e 62 69 6e 64 28 65 2c 72 29 2c 6c 6f 67 3a 6e 2e 6c 6f 67 2e 62 69 6e 64 28 65 2c 72 29 2c 69 6e 66 6f 3a 6e 2e 69 6e 66 6f 2e 62 69 6e 64 28 65 2c 72 Data Ascii: !function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r
2024-10-08 09:33:33 UTC	203	IN	Data Raw: 74 2e 75 73 65 43 72 6f 73 73 53 69 74 65 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 2c 74 2e 74 72 61 63 6b 53 65 73 73 69 6f 6e 41 63 72 6f 73 73 53 75 62 64 6f 6d 61 69 6e 73 26 26 28 65 2e 64 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 74 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 64 64 5f 73 69 74 65 5f 74 65 73 74 5f 22 2e 63 6f 6e 63 61 74 28 53 74 28 29 29 2c 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 3d 65 2e 70 6f 70 28 29 3b 65 2e 6c 65 6e 67 74 68 26 26 21 78 74 28 74 29 3b 29 6e Data Ascii: t.useCrossSiteSessionCookie,t.trackSessionAcrossSubdomains&&(e.domain=function(){if(void 0===ot){for(var t="dd_site_test_".concat(St()),e=window.location.hostname.split("."),n=e.pop();e.length&&!xt(t);)n
2024-10-08 09:33:33 UTC	1908	IN	Data Raw: 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2e 70 6f 70 28 29 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 6e 29 2c 6b 74 28 74 2c 22 74 65 73 74 22 2c 61 74 2c 7b 64 6f 6d 61 69 6e 3a 6e 7d 29 3b 43 74 28 74 2c 7b 64 6f 6d 61 69 6e 3a 6e 7d 29 2c 6f 74 3d 6e 7d 72 65 74 75 72 6e 20 6f 74 7d 28 29 29 3b 72 65 74 75 72 6e 20 65 7d 28 74 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7c 7c 6e 75 6c 6c 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 65 3d 22 64 64 5f 63 6f 6f 6b 69 65 5f 74 65 73 74 5f 22 2e 63 6f 6e 63 61 74 28 53 74 28 29 29 2c 6e 3d 22 74 65 73 74 22 3b 6b 74 28 65 2c 6e 2c 73 74 2c 74 29 3b 76 61 Data Ascii: ="".concat(e.pop(),".").concat(n),kt(t,"test",at,{domain:n});Ct(t,{domain:n}),ot=n}return ot}());return e}(t);return function(t){if(void 0===document.cookie\|\|null===document.cookie)return!1;try{var e="dd_cookie_test_".concat(St()),n="test";kt(e,n,st,t);va
2024-10-08 09:33:33 UTC	16384	IN	Data Raw: 7d 7d 28 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 65 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 5a 2c 69 3d 6e 65 77 20 5a 2c 6f 3d 22 43 6f 6f 6b 69 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 41 65 28 74 2e 63 6f 6f 6b 69 65 4f 70 74 69 6f 6e 73 29 3a 7b 69 73 4c 6f 63 6b 45 6e 61 62 6c 65 64 3a 21 31 2c 70 65 72 73 69 73 74 53 65 73 73 69 6f 6e 3a 4e 65 2c 72 65 74 72 69 65 76 65 53 65 73 73 69 6f 6e 3a 4c 65 2c 63 6c 65 61 72 53 65 73 73 69 6f 6e 3a 4d 65 7d 2c 61 3d 6f 2e 63 6c 65 61 72 53 65 73 73 69 6f 6e 2c 73 3d 6f 2e 72 65 74 72 69 65 76 65 53 65 73 73 69 6f 6e 2c 75 3d 52 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 46 65 28 7b 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 28 74 29 3f 76 6f 69 64 20 30 3a Data Ascii: }}()),e}function je(t,e,n){var r=new Z,i=new Z,o="Cookie"===t.type?Ae(t.cookieOptions):{isLockEnabled:!1,persistSession:Ne,retrieveSession:Le,clearSession:Me},a=o.clearSession,s=o.retrieveSession,u=R((function(){Fe({process:function(t){return f(t)?void 0:
2024-10-08 09:33:33 UTC	16384	IN	Data Raw: 29 7b 76 61 72 20 65 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 64 64 2d 74 72 61 63 65 2d 69 64 5d 22 29 2c 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 64 64 2d 74 72 61 63 65 2d 74 69 6d 65 5d 22 29 3b 72 65 74 75 72 6e 20 74 72 28 65 26 26 65 2e 63 6f 6e 74 65 6e 74 2c 6e 26 26 6e 2e 63 6f 6e 74 65 6e 74 29 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 7b 69 66 28 6e 3d 65 72 28 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 65 5d 29 29 72 65 74 75 72 6e 20 6e 7d 69 66 28 74 2e 62 6f 64 79 29 66 6f 72 Data Ascii: ){var e=t.querySelector("meta[name=dd-trace-id]"),n=t.querySelector("meta[name=dd-trace-time]");return tr(e&&e.content,n&&n.content)}(t)\|\|function(t){var e=function(t){for(var e=0;e<t.childNodes.length;e+=1){if(n=er(t.childNodes[e]))return n}if(t.body)for
2024-10-08 09:33:33 UTC	3028	IN	Data Raw: 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 69 2b 3d 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 51 72 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2b 2f 67 2c 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 74 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3e 31 30 30 3f 22 22 2e 63 6f 6e 63 61 74 28 45 74 28 74 2c 31 30 30 29 2c 22 20 5b 2e 2e 2e 5d 22 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 65 69 28 74 2c 65 29 7b 69 66 28 21 74 2e 69 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 29 7b 69 66 28 22 69 6e 6e 65 72 54 65 78 74 22 69 6e 20 74 29 7b 76 61 72 20 6e 3d 74 2e 69 6e 6e 65 72 54 65 78 74 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 Data Ascii: arentElement,i+=1}}function Qr(t){return t.replace(/\s+/g," ")}function ti(t){return t.length>100?"".concat(Et(t,100)," [...]"):t}function ei(t,e){if(!t.isContentEditable){if("innerText"in t){var n=t.innerText,r=function(e){for(var r=t.querySelectorAll(e)
2024-10-08 09:33:33 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 74 2e 67 65 74 55 73 65 72 41 63 74 69 76 69 74 79 28 29 2e 73 65 6c 65 63 74 69 6f 6e 7d 29 29 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 68 61 73 45 72 72 6f 72 26 26 74 2e 61 64 64 46 72 75 73 74 72 61 74 69 6f 6e 28 22 65 72 72 6f 72 5f 63 6c 69 63 6b 22 29 2c 53 69 28 74 29 26 26 21 6e 26 26 74 2e 61 64 64 46 72 75 73 74 72 61 74 69 6f 6e 28 22 64 65 61 64 5f 63 6c 69 63 6b 22 29 7d 29 29 2c 7b 69 73 52 61 67 65 3a 21 31 7d 7d 76 61 72 20 77 69 3d 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 29 3a 6e 6f 74 28 5b 74 79 Data Ascii: eturn t.getUserActivity().selection}));return t.forEach((function(t){t.hasError&&t.addFrustration("error_click"),Si(t)&&!n&&t.addFrustration("dead_click")})),{isRage:!1}}var wi='input:not([type="checkbox"]):not([type="radio"]):not([type="button"]):not([ty
2024-10-08 09:33:33 UTC	16384	IN	Data Raw: 2c 65 3d 77 69 6e 64 6f 77 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 3b 72 65 74 75 72 6e 20 74 3d 65 3f 65 2e 70 61 67 65 4c 65 66 74 2d 65 2e 6f 66 66 73 65 74 4c 65 66 74 3a 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 58 3f 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 58 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 7c 7c 30 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 6f 28 29 7b 76 61 72 20 74 2c 65 3d 77 69 6e 64 6f 77 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 3b 72 65 74 75 72 6e 20 74 3d 65 3f 65 2e 70 61 67 65 54 6f 70 2d 65 2e 6f 66 66 73 65 74 54 6f 70 3a 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 59 3f 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 59 3a 77 69 6e 64 Data Ascii: ,e=window.visualViewport;return t=e?e.pageLeft-e.offsetLeft:void 0!==window.scrollX?window.scrollX:window.pageXOffset\|\|0,Math.round(t)}function oo(){var t,e=window.visualViewport;return t=e?e.pageTop-e.offsetTop:void 0!==window.scrollY?window.scrollY:wind
2024-10-08 09:33:33 UTC	11977	IN	Data Raw: 7d 72 65 74 75 72 6e 20 72 7d 76 61 72 20 6a 6f 3d 70 65 2c 47 6f 3d 32 30 30 3b 76 61 72 20 5a 6f 2c 4b 6f 2c 57 6f 2c 58 6f 3d 31 30 2a 61 74 3b 66 75 6e 63 74 69 6f 6e 20 59 6f 28 29 7b 30 21 3d 3d 5a 6f 2e 62 61 74 63 68 43 6f 75 6e 74 26 26 28 43 6e 28 22 43 75 73 74 6f 6d 65 72 20 64 61 74 61 20 6d 65 61 73 75 72 65 73 22 2c 5a 6f 29 2c 51 6f 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 6f 28 74 2c 65 29 7b 74 2e 73 75 6d 2b 3d 65 2c 74 2e 6d 69 6e 3d 4d 61 74 68 2e 6d 69 6e 28 74 2e 6d 69 6e 2c 65 29 2c 74 2e 6d 61 78 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 6d 61 78 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 24 6f 28 74 2c 65 29 7b 74 2e 73 75 6d 2b 3d 65 2e 73 75 6d 2c 74 2e 6d 69 6e 3d 4d 61 74 68 2e 6d 69 6e 28 74 2e 6d 69 6e 2c 65 2e 6d 69 6e 29 2c 74 2e Data Ascii: }return r}var jo=pe,Go=200;var Zo,Ko,Wo,Xo=10*at;function Yo(){0!==Zo.batchCount&&(Cn("Customer data measures",Zo),Qo())}function Jo(t,e){t.sum+=e,t.min=Math.min(t.min,e),t.max=Math.max(t.max,e)}function $o(t,e){t.sum+=e.sum,t.min=Math.min(t.min,e.min),t.
2024-10-08 09:33:33 UTC	16384	IN	Data Raw: 75 65 22 2c 63 29 2c 78 72 28 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 22 2c 63 29 2c 78 72 28 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 49 6e 64 65 78 22 2c 63 29 5d 3b 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 73 74 6f 70 28 29 7d 29 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 29 2c 73 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 65 3d 43 61 28 74 2c 69 29 3b 69 66 28 65 21 3d 3d 70 61 2e 48 49 44 44 45 4e 29 7b 76 61 72 20 6e 2c 72 3d 74 2e 74 79 70 65 3b 69 66 28 22 72 61 64 69 6f Data Ascii: ue",c),xr(HTMLTextAreaElement.prototype,"value",c),xr(HTMLSelectElement.prototype,"selectedIndex",c)];r=function(){u.forEach((function(t){return t.stop()}))}}return function(){r(),s()};function c(t){var e=Ca(t,i);if(e!==pa.HIDDEN){var n,r=t.type;if("radio

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:33 UTC	694	OUT	GET /ktag/latest/ktag.min.js?accountId=0c1098d4-e85c-41fd-be56-6189d39234c9 HTTP/1.1 Host: www.knotch-cdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.foxnews.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 09:33:34 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 48034 Connection: close Last-Modified: Fri, 04 Oct 2024 16:48:19 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 07 Oct 2024 16:52:48 GMT Cache-Control: max-age=86400 ETag: "47bd034af9afd0b406f197f252642e6b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 004e894746bfb0d8f9e19ef0400dda24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: Ccb7IRc9sj1c9fk4rQwr7x6KEaZhZwuQmOxCtzvu6JHZ38OM4ta1Mw== Age: 60046 X-XSS-Protection: 1 Referrer-Policy: same-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-10-08 09:33:34 UTC	15698	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function
2024-10-08 09:33:34 UTC	16384	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 3d 71 3b 48 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 5b 6e 5d 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 7d 29 29 2c 77 69 6e 64 6f 77 2e 6b 74 61 67 2e 62 6c 61 63 6b 4c 69 73 74 43 6f 6e 66 69 67 3d 74 3b 76 61 72 20 72 3d 65 2e 6d 6f 64 75 6c 65 73 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 5b 5d 3a 72 2c 6f 3d 65 2e 62 6f 6f 6c 65 61 6e 5f 66 6c 61 67 73 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 5b 5d 3a 6f 2c 63 3d 65 2e 70 61 67 65 5f 76 69 65 77 5f 63 6f 6e 76 65 72 73 69 6f 6e 73 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 5b 5d 3a 63 3b 28 62 28 7b 6e 61 6d 65 3a 22 5b 62 6c 61 63 6b 20 6c 69 73 74 5d 20 63 6f 6e 66 69 67 20 72 65 74 72 69 65 76 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 22 Data Ascii: on(e){var t=q;H.forEach((function(n){e[n]&&(t[n]=e[n])})),window.ktag.blackListConfig=t;var r=e.modules,i=void 0===r?[]:r,o=e.boolean_flags,a=void 0===o?[]:o,c=e.page_view_conversions,s=void 0===c?[]:c;(b({name:"[black list] config retrieved successfully"
2024-10-08 09:33:34 UTC	15952	IN	Data Raw: 74 2e 66 65 65 64 62 61 63 6b 3f 6e 75 6c 6c 21 3d 3d 28 6e 3d 77 69 6e 64 6f 77 2e 6b 74 61 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 2e 4d 6f 64 75 6c 65 48 61 6e 64 6c 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 2e 6d 6f 64 75 6c 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 2e 66 65 65 64 62 61 63 6b 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 2e 6c 6f 61 64 65 64 3f 21 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 2e 6b 74 61 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 3d 28 72 3d 72 2e 4d 6f 64 75 6c 65 48 61 6e 64 6c 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 3d 28 72 3d 72 2e Data Ascii: t.feedback?null!==(n=window.ktag)&&void 0!==n&&null!==(n=n.ModuleHandler)&&void 0!==n&&null!==(n=n.modules)&&void 0!==n&&null!==(n=n.feedback)&&void 0!==n&&n.loaded?!(null===(r=window.ktag)\|\|void 0===r\|\|null===(r=r.ModuleHandler)\|\|void 0===r\|\|null===(r=r.

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:35 UTC	726	OUT	POST /ingress HTTP/1.1 Host: frontdoor.knotch.it Connection: keep-alive Content-Length: 997 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.foxnews.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.foxnews.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 09:33:35 UTC	997	OUT	Data Raw: 7b 22 62 72 6f 77 73 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 66 6f 78 6e 65 77 73 2e 63 6f 6d 25 32 46 77 6f 72 6c 64 25 32 46 6d 65 78 69 63 61 6e 2d 6d 61 79 6f 72 2d 6d 75 72 64 65 72 65 64 2d 77 65 65 6b 2d 74 61 6b 69 6e 67 2d 6f 66 66 69 63 65 22 2c 22 72 6f 6f 74 5f 62 72 6f 77 73 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 66 6f 78 6e 65 77 73 2e 63 6f 6d 25 32 46 77 6f 72 6c 64 25 32 46 6d 65 78 69 63 61 6e 2d 6d 61 79 6f 72 2d 6d 75 72 64 65 72 65 64 2d 77 65 65 6b 2d 74 61 6b 69 6e 67 2d 6f 66 66 69 63 65 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 66 6f 78 6e 65 77 73 2e 63 6f 6d 25 32 46 77 6f 72 6c Data Ascii: {"browser_url":"https%3A%2F%2Fwww.foxnews.com%2Fworld%2Fmexican-mayor-murdered-week-taking-office","root_browser_url":"https%3A%2F%2Fwww.foxnews.com%2Fworld%2Fmexican-mayor-murdered-week-taking-office","canonical_url":"https%3A%2F%2Fwww.foxnews.com%2Fworl
2024-10-08 09:33:35 UTC	137	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 09:33:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 170 Connection: close
2024-10-08 09:33:35 UTC	170	IN	Data Raw: 7b 22 62 6f 64 79 22 3a 22 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 50 41 41 41 41 41 41 41 41 41 41 41 43 48 35 42 41 45 41 41 41 41 41 4c 41 41 41 41 41 41 42 41 41 45 41 41 41 49 43 52 41 45 41 4f 77 3d 3d 22 2c 22 68 65 61 64 65 72 73 22 3a 22 7b 5c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 5c 22 3a 5c 22 5b 5c 5c 5c 22 69 6d 61 67 65 2f 67 69 66 5c 5c 5c 22 5d 5c 22 7d 22 2c 22 69 73 42 61 73 65 36 34 45 6e 63 6f 64 65 64 22 3a 22 54 72 75 65 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 22 32 30 30 22 7d Data Ascii: {"body":"R0lGODlhAQABAPAAAAAAAAAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==","headers":"{\"Content-Type\":\"[\\\"image/gif\\\"]\"}","isBase64Encoded":"True","statusCode":"200"}

Timestamp	Bytes transferred	Direction	Data
2024-10-08 09:33:35 UTC	692	OUT	GET /v2/0c1098d4-e85c-41fd-be56-6189d39234c9 HTTP/1.1 Host: configs.knotch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.foxnews.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.foxnews.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 09:33:35 UTC	591	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 2135 Connection: close Date: Mon, 07 Oct 2024 19:46:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Tue, 17 Sep 2024 20:13:27 GMT ETag: "0efe94b5e0cadcfea0d1eacff005cf18" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 b20633a9437e2ab684227e985efa4e56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P7 X-Amz-Cf-Id: gJiX_r0BkCw8lPQfQOxUhJ4PndkTB0Vz3cf9dpL-uzyV4X8OTm56KA== Age: 49645
2024-10-08 09:33:35 UTC	2135	IN	Data Raw: 7b 22 61 63 63 65 70 74 22 3a 5b 22 6e 61 74 69 6f 6e 2e 66 6f 78 6e 65 77 73 2e 63 6f 6d 22 2c 22 66 6f 78 73 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 74 75 62 69 74 76 2e 63 6f 6d 22 2c 22 66 6f 78 6e 65 77 73 2e 63 6f 6d 22 2c 22 63 72 65 64 69 62 6c 65 2e 63 6f 6d 22 2c 22 66 6f 78 62 75 73 69 6e 65 73 73 2e 63 6f 6d 22 5d 2c 22 62 6f 6f 6c 65 61 6e 5f 66 6c 61 67 73 22 3a 5b 22 66 72 6f 6e 74 5f 64 6f 6f 72 5f 65 6e 61 62 6c 65 64 22 5d 2c 22 68 74 6d 6c 5f 62 6c 61 63 6b 6c 69 73 74 22 3a 5b 5d 2c 22 68 74 6d 6c 5f 70 72 69 76 61 74 65 5f 77 68 69 74 65 6c 69 73 74 22 3a 5b 5d 2c 22 6d 6f 64 75 6c 65 73 22 3a 5b 5d 2c 22 70 61 67 65 5f 76 69 65 77 5f 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 5b 5d 2c 22 70 72 69 76 61 74 65 22 3a 5b 22 2f 69 6e 73 75 72 61 Data Ascii: {"accept":["nation.foxnews.com","foxsports.com","tubitv.com","foxnews.com","credible.com","foxbusiness.com"],"boolean_flags":["front_door_enabled"],"html_blacklist":[],"html_private_whitelist":[],"modules":[],"page_view_conversions":[],"private":["/insura